Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5jogniOCTGWNxX_ba0nJ2sRk-b8.roa
File: 5jogniOCTGWNxX_ba0nJ2sRk-b8.roa (raw, json)
Hash identifier: cJGqPAmFl+/cUcSO4TK4qKxYu6MVNwCreuMjzt3PRJI=
Subject key identifier: E6:3A:20:9E:23:82:4C:65:8D:C5:7F:DB:6B:49:C9:DA:C4:64:F9:BF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FF8742FF7B3B69EEA696DBC04857BA2E5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5jogniOCTGWNxX_ba0nJ2sRk-b8.roa
Signing time: Thu 13 Aug 2026 00:09:51 +0000
ROA not before: Thu 13 Aug 2026 00:09:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 82.108.120.0/24 maxlen: 24
82.109.157.0/24 maxlen: 24
82.110.53.0/24 maxlen: 24
87.83.66.0/24 maxlen: 24
87.83.205.0/24 maxlen: 24
87.83.219.0/24 maxlen: 24
87.84.62.0/24 maxlen: 24
87.85.71.0/24 maxlen: 24
87.85.131.0/24 maxlen: 24
87.85.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:74:2f:f7:b3:b6:9e:ea:69:6d:bc:04:85:7b:a2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 13 00:09:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e63a209e23824c658dc57fdb6b49c9dac464f9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:05:36:f4:9a:ec:c1:75:58:21:c9:6f:ae:ae:
d5:51:e5:f2:b8:66:af:86:7b:64:17:1e:90:7d:c0:
a1:4d:85:64:64:5b:2c:fa:79:fc:4c:fe:df:72:65:
99:2b:66:11:92:c4:aa:76:b4:0a:c2:a9:43:d3:af:
5e:44:0c:a2:c0:37:22:d6:1f:27:07:4a:ea:df:70:
ad:f4:f2:bd:21:43:43:c0:8e:4a:26:39:98:79:b5:
fb:68:5e:7c:27:57:c7:9e:3d:dd:03:e1:18:5b:00:
67:49:d5:6f:16:d9:5a:fe:87:4e:41:a0:22:ae:03:
75:f6:f8:6d:06:3d:d7:e3:23:51:d7:15:49:7e:99:
e9:7e:ec:1c:ac:62:e8:c9:f3:31:80:3b:83:46:76:
b0:72:8b:29:e6:c6:e4:51:9d:e7:be:fc:d5:e6:fa:
12:ef:67:79:5c:5f:ad:45:1b:f7:e0:ed:0c:15:7b:
95:45:e6:0f:b4:7a:37:93:bc:0f:59:6b:fc:99:a0:
9d:3b:8a:31:31:a2:b2:04:65:e2:51:0f:43:f5:aa:
1e:8d:be:87:a4:c3:6a:ad:52:8e:58:79:8b:b8:f4:
38:fd:d9:86:33:58:4f:73:c9:3e:69:1b:31:6b:5f:
4f:bb:33:13:5a:e1:5d:aa:91:01:a8:63:71:ba:b6:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3A:20:9E:23:82:4C:65:8D:C5:7F:DB:6B:49:C9:DA:C4:64:F9:BF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5jogniOCTGWNxX_ba0nJ2sRk-b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.120.0/24
82.109.157.0/24
82.110.53.0/24
87.83.66.0/24
87.83.205.0/24
87.83.219.0/24
87.84.62.0/24
87.85.71.0/24
87.85.131.0/24
87.85.174.0/24
Signature Algorithm: sha256WithRSAEncryption
69:fb:cc:7c:fc:d4:9a:64:9c:c3:67:7b:f5:34:b6:c5:d8:b1:
01:03:00:74:17:b6:5b:3f:86:75:f8:70:3c:db:de:3b:00:1a:
1b:2e:1a:15:b4:b1:b6:f7:19:02:21:7b:07:00:1c:ba:21:5d:
fd:3a:8b:75:a0:51:e7:0d:21:a5:9b:66:6a:66:47:13:e5:df:
6c:51:6c:70:c8:fd:20:83:fd:97:be:63:68:ec:e5:5b:e8:97:
3d:6e:fa:01:f6:73:e2:2c:9c:ef:09:3c:52:47:73:8d:77:62:
f4:cb:33:18:21:0f:f4:e3:4f:27:40:c3:76:0d:9b:56:89:56:
66:04:da:d4:df:aa:07:89:2e:3a:ce:ce:f4:ee:dd:46:f4:96:
86:7b:f2:a1:28:df:83:ea:6b:8d:42:8f:ef:65:39:ac:43:e2:
e8:93:91:0d:58:32:b4:63:9a:c6:a0:f3:02:20:d3:39:13:a5:
16:ee:9c:4e:a9:65:a1:61:84:a6:e9:2e:58:6f:23:08:92:50:
5e:23:a2:82:bc:a1:4f:0f:a0:78:95:1f:c0:cf:07:08:8f:c9:
8a:0f:51:60:94:b4:79:47:ad:e2:29:d1:b8:66:e3:54:a5:0f:
56:c7:6f:53:02:43:72:e4:08:5a:65:49:bd:ac:14:3e:b1:12:
7d:21:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:55:31 2026 by rpki-client