Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AF4sps-wW6QjIXAzIlrorUD0Xqg.roa
File: AF4sps-wW6QjIXAzIlrorUD0Xqg.roa (raw, json)
Hash identifier: rLBwwJOOuLdzbsUKvG58BH0yTLHU7ED7n0u0IWzfWco=
Subject key identifier: 00:5E:2C:A6:CF:B0:5B:A4:23:21:70:33:22:5A:E8:AD:40:F4:5E:A8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A075A8A49BBC21BCE2EF63316B40C40B4F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AF4sps-wW6QjIXAzIlrorUD0Xqg.roa
Signing time: Sun 06 Sep 2026 07:39:41 +0000
ROA not before: Sun 06 Sep 2026 07:39:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 82.108.4.0/22 maxlen: 22
82.108.32.0/21 maxlen: 21
82.108.44.0/22 maxlen: 22
82.108.52.0/22 maxlen: 22
82.108.68.0/22 maxlen: 22
82.108.88.0/23 maxlen: 23
82.108.92.0/22 maxlen: 22
82.108.102.0/23 maxlen: 23
82.108.116.0/22 maxlen: 22
82.108.140.0/22 maxlen: 22
82.108.152.0/23 maxlen: 23
85.189.23.0/24 maxlen: 24
85.189.72.0/23 maxlen: 23
85.189.74.0/23 maxlen: 23
85.189.76.0/23 maxlen: 23
85.189.78.0/23 maxlen: 23
85.189.132.0/23 maxlen: 23
85.189.153.0/24 maxlen: 24
85.189.154.0/23 maxlen: 23
85.189.156.0/24 maxlen: 24
85.189.159.0/24 maxlen: 24
85.189.160.0/24 maxlen: 24
85.189.162.0/24 maxlen: 24
85.189.164.0/23 maxlen: 23
85.189.167.0/24 maxlen: 24
85.189.174.0/23 maxlen: 23
85.189.178.0/24 maxlen: 24
85.189.181.0/24 maxlen: 24
85.189.183.0/24 maxlen: 24
85.189.189.0/24 maxlen: 24
85.189.190.0/23 maxlen: 23
87.83.192.0/24 maxlen: 24
87.86.24.0/23 maxlen: 23
212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.212.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:a8:a4:9b:bc:21:bc:e2:ef:63:31:6b:40:c4:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 6 07:39:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=005e2ca6cfb05ba423217033225ae8ad40f45ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:98:22:6d:6f:33:7f:4f:fe:12:ea:4c:05:
e2:30:cf:44:57:1c:c1:fe:e2:a3:7d:3b:2d:9d:8d:
3a:66:5c:b3:12:ca:ab:d3:36:55:c0:bc:f8:f1:d0:
81:90:cb:ef:8e:73:6a:c7:01:c0:80:55:eb:34:bc:
ec:54:c5:56:ac:af:b8:07:28:87:2c:ab:f3:4c:2c:
c0:8a:54:2e:02:02:87:66:06:20:89:6a:88:e8:c7:
3d:71:b9:99:be:d4:4e:e7:ef:cc:25:43:19:9d:f4:
2e:71:72:4d:07:ae:11:f9:c6:99:83:21:ce:95:9c:
a4:7c:94:47:d2:ea:b9:d5:47:46:5b:67:eb:74:ea:
09:fb:fa:c5:f0:e9:54:48:08:bc:ab:6b:56:be:d4:
30:b4:50:85:92:df:a4:5a:b6:b7:ce:61:4b:dd:d6:
9e:11:6a:2c:d4:91:f6:fc:c7:0c:07:0b:23:f0:91:
22:75:6a:36:29:8f:35:56:e0:3b:22:af:6d:b4:ce:
07:83:4e:cf:44:d0:ec:8f:d9:fe:d8:47:04:c8:a5:
36:d1:5a:69:c6:f9:5f:4c:c2:98:7c:e3:54:6d:80:
c3:e2:60:06:59:04:f5:6f:30:b2:99:62:b7:5e:e2:
24:66:33:40:88:9e:47:d7:84:f8:9d:64:f4:d8:92:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:2C:A6:CF:B0:5B:A4:23:21:70:33:22:5A:E8:AD:40:F4:5E:A8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AF4sps-wW6QjIXAzIlrorUD0Xqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.4.0/22
82.108.32.0/21
82.108.44.0/22
82.108.52.0/22
82.108.68.0/22
82.108.88.0/23
82.108.92.0/22
82.108.102.0/23
82.108.116.0/22
82.108.140.0/22
82.108.152.0/23
85.189.23.0/24
85.189.72.0/21
85.189.132.0/23
85.189.153.0-85.189.156.255
85.189.159.0-85.189.160.255
85.189.162.0/24
85.189.164.0/23
85.189.167.0/24
85.189.174.0/23
85.189.178.0/24
85.189.181.0/24
85.189.183.0/24
85.189.189.0-85.189.191.255
87.83.192.0/24
87.86.24.0/23
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.124.0/22
212.134.164.0/22
212.134.208.0/22
212.134.224.0/22
212.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:93:ee:68:cd:5e:36:fc:aa:86:fc:fc:8d:83:3e:f1:89:ab:
c3:de:0a:8f:ae:99:ff:98:a3:e9:92:ca:24:1e:ee:74:c1:06:
25:19:96:65:f2:ec:80:cf:e9:b8:49:4a:45:cb:28:ac:d0:0b:
29:0c:b3:c8:5d:b8:d1:ef:b0:08:d9:d3:7e:fc:e7:fe:3a:db:
a8:4d:77:54:3a:25:ee:42:ed:ff:0d:33:9b:5f:49:5e:87:99:
59:e6:54:b2:39:54:00:d7:62:1b:35:de:28:20:36:17:3d:64:
87:9b:ea:65:1a:26:18:44:16:d9:e9:ee:de:e1:ef:6a:42:ab:
2b:5a:ee:bb:35:70:94:36:e3:d0:0d:58:9e:b9:66:f7:ff:de:
57:86:a2:7f:43:d7:2e:60:88:06:1b:55:05:d3:57:be:f3:19:
56:55:ee:8c:15:05:2b:e9:fb:65:10:8e:9c:c2:88:6a:c1:9a:
e8:49:4d:ce:6d:e7:72:b1:3d:f9:e7:0d:90:6e:7e:ee:32:c1:
26:71:43:97:63:a3:ac:dd:4d:04:e7:82:45:43:cf:7c:97:d9:
5c:6e:d4:c6:b5:9c:f9:02:4a:1b:40:fa:4e:ff:39:69:b0:ba:
db:f8:35:21:1b:97:9f:0c:31:44:f5:c9:65:85:a4:d0:46:e0:
ea:eb:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:03 2026 by rpki-client