Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4sw8T8GkhLTN7Ia6Jd-Q8SIvepo.roa
File: 4sw8T8GkhLTN7Ia6Jd-Q8SIvepo.roa (raw, json)
Hash identifier: 7AFiOES233+VDRXXddEhtiX4wkJPndi4h5ygXYnFr7o=
Subject key identifier: E2:CC:3C:4F:C1:A4:84:B4:CD:EC:86:BA:25:DF:90:F1:22:2F:7A:9A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0246FE6A85A642E2703635267AA9C2963
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4sw8T8GkhLTN7Ia6Jd-Q8SIvepo.roa
Signing time: Fri 21 Aug 2026 13:08:28 +0000
ROA not before: Fri 21 Aug 2026 13:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63099
IP address blocks: 82.109.4.0/22 maxlen: 24
87.83.31.0/24 maxlen: 24
87.83.49.0/24 maxlen: 24
87.83.51.0/24 maxlen: 24
87.83.72.0/24 maxlen: 24
87.83.75.0/24 maxlen: 24
87.83.91.0/24 maxlen: 24
87.83.118.0/24 maxlen: 24
87.83.169.0/24 maxlen: 24
87.83.200.0/24 maxlen: 24
87.83.212.0/24 maxlen: 24
87.83.215.0/24 maxlen: 24
87.83.229.0/24 maxlen: 24
87.83.236.0/24 maxlen: 24
87.84.49.0/24 maxlen: 24
87.84.150.0/24 maxlen: 24
87.84.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:6f:e6:a8:5a:64:2e:27:03:63:52:67:aa:9c:29:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 21 13:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2cc3c4fc1a484b4cdec86ba25df90f1222f7a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:cf:ab:91:88:6d:4d:c7:fd:d9:f1:43:81:
f2:df:cf:7c:c3:64:a2:20:21:40:af:02:df:8c:7c:
de:2a:9b:5f:5e:a3:dc:89:e4:28:85:95:33:34:72:
7a:e6:55:11:af:35:d0:64:70:41:1a:be:dd:c4:b3:
cf:f2:da:db:ef:03:35:33:1f:9c:9a:66:82:4f:4f:
1e:18:99:f7:a4:41:26:f0:3e:df:99:85:79:79:85:
d0:0c:05:d4:7d:4a:0c:a0:8d:0c:a8:64:b2:71:9f:
ab:f9:61:c4:06:09:73:d3:08:5b:3f:2f:49:66:52:
56:7c:70:05:08:e3:8b:d6:a9:10:51:ba:73:8f:00:
c2:cc:45:b5:1a:d8:44:e3:e7:e1:0e:f2:c6:a0:72:
4a:bc:67:cb:d7:db:cd:67:e1:f1:5f:03:4d:f0:9a:
d7:b4:38:7c:54:80:8a:75:6f:27:86:b0:41:cb:b9:
01:9a:fe:b6:8c:b5:a3:e7:55:09:89:4c:45:5f:8a:
5c:76:e6:cc:bb:5b:dc:f2:2f:d2:d4:5d:e8:ff:de:
08:f5:df:7c:da:6a:64:84:f3:a9:ad:74:fa:8f:4f:
40:7f:85:6a:60:f5:22:83:df:35:7d:4c:ad:61:40:
5d:ec:3a:92:51:f9:0f:07:eb:21:a1:a2:54:5d:04:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:3C:4F:C1:A4:84:B4:CD:EC:86:BA:25:DF:90:F1:22:2F:7A:9A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4sw8T8GkhLTN7Ia6Jd-Q8SIvepo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.4.0/22
87.83.31.0/24
87.83.49.0/24
87.83.51.0/24
87.83.72.0/24
87.83.75.0/24
87.83.91.0/24
87.83.118.0/24
87.83.169.0/24
87.83.200.0/24
87.83.212.0/24
87.83.215.0/24
87.83.229.0/24
87.83.236.0/24
87.84.49.0/24
87.84.150.0/24
87.84.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f8:8c:03:df:e5:a1:62:f5:ad:23:33:40:97:8a:97:24:68:
9d:a3:5a:de:fd:05:16:df:c9:be:97:00:92:56:f9:15:a3:e9:
f6:17:7e:59:cd:6e:5f:30:66:61:17:1b:63:83:f4:07:ca:c0:
78:6a:ed:23:dd:f9:a4:d0:87:04:bd:78:f7:5a:89:cb:73:a2:
20:f1:ed:65:d5:f7:3c:79:e2:4d:30:2d:78:3a:57:52:f4:68:
b8:fb:4d:4d:6c:26:22:b8:57:47:9c:28:87:c4:17:ee:fe:71:
d9:f5:70:43:0d:7c:15:11:23:73:d1:78:2e:4e:f8:dd:3b:4f:
93:9d:1b:17:87:c3:fa:57:83:5f:fd:d3:b6:8f:32:3b:16:8e:
e7:77:0d:78:a9:9f:5a:24:7b:a0:b6:77:02:19:04:f7:38:55:
19:82:6a:48:b8:c6:8c:80:e4:11:50:60:d7:5d:ce:12:8b:b9:
dd:66:89:9c:02:b6:20:b5:01:5b:5d:d7:e7:6c:37:9e:99:f9:
72:3e:5e:1a:4e:9b:30:b1:ef:9d:80:60:a6:b3:2a:d8:3f:5a:
51:5e:5e:00:ae:25:67:b0:13:43:b0:de:e4:98:d7:a8:26:a3:
57:ec:fd:25:4a:56:44:0e:7e:81:03:7c:63:ed:cc:5c:65:fc:
44:7f:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:18 2026 by rpki-client