Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9aXMVK2sIU-ey7h5XtTcdFkfI0M.roa
File: 9aXMVK2sIU-ey7h5XtTcdFkfI0M.roa (raw, json)
Hash identifier: qKnW9e8JE7DUBdJS/Khp6YAdTWB/HrfsYHpNTg7d7sE=
Subject key identifier: F5:A5:CC:54:AD:AC:21:4F:9E:CB:B8:79:5E:D4:DC:74:59:1F:23:43
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F4541C0E1701B5AD41866ED007BD0BC80
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9aXMVK2sIU-ey7h5XtTcdFkfI0M.roa
Signing time: Thu 09 Jul 2026 05:02:44 +0000
ROA not before: Thu 09 Jul 2026 05:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 82.108.40.0/23 maxlen: 24
87.83.46.0/23 maxlen: 24
87.83.172.0/23 maxlen: 24
87.83.234.0/24 maxlen: 24
87.84.222.0/23 maxlen: 24
87.84.233.0/24 maxlen: 24
87.85.141.0/24 maxlen: 24
109.204.104.0/21 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.158.0/24 maxlen: 24
212.134.160.0/23 maxlen: 24
212.135.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:41:c0:e1:70:1b:5a:d4:18:66:ed:00:7b:d0:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 9 05:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5a5cc54adac214f9ecbb8795ed4dc74591f2343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:04:e7:dc:14:b4:fa:5a:0c:0e:ab:83:bc:
b3:05:ba:a6:c7:e6:2c:3b:21:5f:d2:be:a2:7e:35:
c5:1a:38:2f:cb:a9:a4:32:98:d3:77:72:28:b9:88:
6f:80:f1:95:9e:0a:06:49:03:4a:de:4d:3a:82:32:
28:40:2c:b1:0f:ba:5e:21:bd:a7:8a:ce:a4:9d:60:
32:9a:46:20:25:71:96:21:28:28:e5:48:36:b7:46:
97:01:65:e6:b7:85:8e:81:da:5f:d5:58:46:96:aa:
cc:f3:45:a3:5e:9f:9d:9b:85:2a:32:7c:b2:1a:85:
93:ed:11:0f:88:29:b0:01:d2:ed:51:96:32:70:27:
57:10:25:d2:db:61:25:d5:81:07:e4:6d:80:0e:d4:
b0:21:15:15:45:6a:2c:ad:e7:9c:78:b7:7e:42:09:
1a:2e:67:20:14:4e:cf:5a:52:9f:d6:aa:5d:34:6c:
b3:40:e8:b9:b7:d0:19:0d:ff:47:92:6e:e8:55:39:
0a:a2:10:c6:3c:44:62:e6:67:65:8a:c4:83:ca:57:
92:05:66:d6:25:7d:5e:4d:76:d1:2f:11:65:e2:28:
8d:9f:8b:d1:da:43:cc:d4:2e:83:e9:b8:31:5b:f7:
1a:f8:e2:70:08:87:43:4b:cc:88:fd:aa:a9:73:e4:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A5:CC:54:AD:AC:21:4F:9E:CB:B8:79:5E:D4:DC:74:59:1F:23:43
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9aXMVK2sIU-ey7h5XtTcdFkfI0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.40.0/23
87.83.46.0/23
87.83.172.0/23
87.83.234.0/24
87.84.222.0/23
87.84.233.0/24
87.85.141.0/24
109.204.104.0/21
212.134.38.0/24
212.134.59.0/24
212.134.116.0/22
212.134.158.0/24
212.134.160.0/23
212.135.159.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:66:29:5d:43:18:05:80:65:41:e1:7d:36:77:78:03:91:4a:
17:06:0a:1c:b7:67:b6:b8:40:63:d1:a7:e1:89:a2:a3:79:25:
e0:5b:ea:11:c9:53:31:1d:d3:af:80:7c:db:de:7a:5c:aa:fd:
bf:06:24:a4:23:ab:c3:63:6d:ac:ad:e9:48:5e:9c:d4:fb:c8:
91:e8:18:81:a4:ae:57:32:32:b0:26:78:73:0c:16:38:d3:f7:
b4:a0:85:ec:6e:25:96:d4:67:61:a2:e3:59:78:d6:eb:df:84:
16:3f:34:9e:18:e6:bf:8b:63:de:a2:8a:3d:69:91:41:8f:0e:
f5:03:37:75:a9:b4:40:b6:3b:93:43:c8:f1:cc:55:79:e1:66:
8e:93:db:59:8b:ed:6a:7e:d3:a8:72:2c:4a:f7:6c:45:61:34:
32:d4:4d:1f:37:08:14:09:40:3a:d8:02:30:92:31:6e:8f:71:
2b:a7:44:41:8a:ee:e2:06:bb:d7:31:35:44:89:8f:f0:43:aa:
6a:60:3d:ec:8c:32:b0:c6:7e:74:f6:24:a7:ce:9b:ae:db:78:
9f:4b:25:bc:f1:d9:7e:8a:ab:f5:c5:32:bc:36:3c:cb:ad:b6:
0d:f1:f3:7d:9c:99:37:46:ab:44:6b:47:80:51:9e:69:67:33:
fb:29:a3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:53 2026 by rpki-client