Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7VRsJet556qyb3Rf25tAiL6-gLc.roa
File: 7VRsJet556qyb3Rf25tAiL6-gLc.roa (raw, json)
Hash identifier: ZzKWSp+CyvYxKv+DFzQZEIYxQ/igzpk/qzo7JTNal9s=
Subject key identifier: ED:54:6C:25:EB:79:E7:AA:B2:6F:74:5F:DB:9B:40:88:BE:BE:80:B7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D48FB0FDE85018C1F4C8077956D3CB1FD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7VRsJet556qyb3Rf25tAiL6-gLc.roa
Signing time: Wed 01 Apr 2026 12:18:26 +0000
ROA not before: Wed 01 Apr 2026 12:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 82.108.4.0/22 maxlen: 22
82.108.32.0/21 maxlen: 21
82.108.44.0/22 maxlen: 22
82.108.52.0/22 maxlen: 22
82.108.68.0/22 maxlen: 22
82.108.88.0/23 maxlen: 23
82.108.92.0/22 maxlen: 22
82.108.102.0/23 maxlen: 23
82.108.116.0/22 maxlen: 22
82.108.140.0/22 maxlen: 22
82.108.152.0/23 maxlen: 23
87.86.24.0/23 maxlen: 23
212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.212.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 01:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:fb:0f:de:85:01:8c:1f:4c:80:77:95:6d:3c:b1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 1 12:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed546c25eb79e7aab26f745fdb9b4088bebe80b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:15:10:61:a6:f7:9a:d6:ea:60:d4:22:88:
db:fc:d5:64:ec:12:14:f6:94:5b:e1:79:d3:ea:6c:
d5:97:68:46:a8:7a:20:6f:b9:de:5d:96:29:dc:05:
bf:b9:bb:54:a8:e9:60:e8:52:b6:35:8b:9b:7d:45:
1c:c8:56:a6:b5:33:59:17:65:f7:eb:7b:14:a7:61:
bd:b1:8c:c3:49:50:48:2c:1f:93:c3:6e:64:fd:02:
6c:e1:bd:ee:e9:d7:55:3d:f8:9f:2f:91:2d:54:ca:
91:fb:96:46:71:a1:a9:0e:80:76:93:6b:a3:c4:d5:
43:f6:1f:57:36:e8:f4:ab:39:68:64:0d:16:c5:2a:
e3:29:4b:13:d8:d8:88:c9:e9:6c:8a:80:7b:06:4c:
b5:4f:50:71:0c:ed:23:fa:c4:5c:a6:32:04:1a:6d:
0f:bf:60:f6:3e:4b:67:e4:fc:85:d1:f2:38:dd:1d:
a4:88:eb:a1:fb:fd:32:38:23:6b:e5:be:56:d1:66:
11:16:e3:1d:25:af:06:ef:20:a6:5d:2a:a7:2c:ba:
28:6c:78:61:ab:49:99:d4:d1:39:58:2f:82:a7:7d:
7a:4f:3c:6f:f4:07:c9:29:5b:42:ea:5a:10:78:c5:
52:64:4e:32:98:fa:fe:59:9b:47:55:c4:cb:38:45:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:6C:25:EB:79:E7:AA:B2:6F:74:5F:DB:9B:40:88:BE:BE:80:B7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7VRsJet556qyb3Rf25tAiL6-gLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.4.0/22
82.108.32.0/21
82.108.44.0/22
82.108.52.0/22
82.108.68.0/22
82.108.88.0/23
82.108.92.0/22
82.108.102.0/23
82.108.116.0/22
82.108.140.0/22
82.108.152.0/23
87.86.24.0/23
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.124.0/22
212.134.164.0/22
212.134.208.0/22
212.134.224.0/22
212.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
99:38:5e:7d:86:4a:48:bd:30:27:8a:b5:64:80:89:ca:c7:8e:
c2:d4:89:5b:6d:1b:d5:b8:73:69:7b:44:ed:2d:43:d9:5a:e1:
8d:d5:77:67:b3:c9:f2:c4:5c:16:a3:7a:df:e2:a9:87:23:cb:
7b:b9:a0:ca:8e:2d:bb:3c:21:3f:fe:15:08:cb:cd:9e:67:16:
9c:7a:50:5d:c8:b6:f3:47:b4:b1:c2:1b:f4:9b:8f:51:ec:29:
92:c7:d4:7e:e7:f0:e3:13:05:f4:b4:8d:29:2d:7e:e2:4a:9d:
7d:e0:dd:c6:3f:97:a9:27:d2:c7:2a:32:fe:0e:a3:11:d8:d7:
51:cb:fe:5e:2c:72:b5:a5:91:9f:88:77:ad:60:5d:d6:11:f9:
6f:3e:58:83:11:a2:7d:4c:d4:f5:f4:7d:e0:44:74:6a:4a:eb:
9f:e8:52:00:f5:95:c7:eb:de:b0:38:ea:71:cd:03:79:9e:73:
00:e9:95:e3:21:80:35:f6:60:59:5b:e6:48:dc:8c:48:77:7e:
67:fd:20:72:04:9e:6a:16:dd:b5:51:b5:66:b0:53:47:79:ad:
79:8b:e9:54:fd:0a:86:95:de:82:16:00:33:a1:66:5b:e9:36:
ee:90:76:5b:7f:81:ad:8d:11:0d:cc:41:89:5c:d2:7b:54:4f:
31:f3:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 08:52:08 2026 by rpki-client