Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BIg_QrgmhprupZi2adup4lAK68M.roa
File: BIg_QrgmhprupZi2adup4lAK68M.roa (raw, json)
Hash identifier: CREchiH6ayL8UKd7whO9RX10C1ihl5Mhtg0pQxcLdH4=
Subject key identifier: 04:88:3F:42:B8:26:86:9A:EE:A5:98:B6:69:DB:A9:E2:50:0A:EB:C3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0F68D223CB8C976C8B39CE6930E599453
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BIg_QrgmhprupZi2adup4lAK68M.roa
Signing time: Thu 01 Oct 2026 08:20:39 +0000
ROA not before: Thu 01 Oct 2026 08:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 20:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:8d:22:3c:b8:c9:76:c8:b3:9c:e6:93:0e:59:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 1 08:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04883f42b826869aeea598b669dba9e2500aebc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:6f:e9:61:6e:dd:4f:72:1c:68:aa:ad:0e:
8f:ff:03:9e:c8:45:b7:78:7c:09:cc:e3:a4:ba:2f:
63:45:46:50:7f:40:04:d0:61:08:bd:ed:60:8b:a8:
23:3a:7b:df:5c:18:f9:02:43:7e:ba:f9:66:64:96:
e5:38:93:89:4a:9e:58:09:65:bd:ea:4a:f0:43:3a:
c8:f3:96:e6:5a:18:72:e0:0b:77:a4:94:bb:dc:af:
26:09:f0:1b:35:53:3c:12:bf:39:40:ee:29:a9:44:
8d:8a:aa:61:7f:69:72:ac:e8:4b:f2:c0:7b:b7:84:
c6:10:1e:1c:7c:5c:40:f4:17:1f:da:d7:c3:da:93:
6d:c8:c6:4f:be:98:a8:40:c0:1c:9e:46:2d:f4:1a:
6a:1a:40:c5:48:30:2b:bd:45:92:9a:b9:e6:45:61:
c3:eb:27:fe:5b:7c:9b:97:da:4a:33:b7:14:51:46:
54:2d:bf:d9:44:37:28:18:e0:66:07:88:4d:2b:b0:
6e:3c:a0:32:46:b2:d1:12:6c:33:06:60:dd:59:42:
36:c9:35:c7:38:20:1e:6b:ea:80:0b:f7:6d:4e:22:
c3:6b:93:35:7f:c8:58:5e:97:01:be:2b:50:84:d0:
86:a9:29:2d:fd:0d:b2:07:eb:f4:bc:6c:02:49:9a:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:88:3F:42:B8:26:86:9A:EE:A5:98:B6:69:DB:A9:E2:50:0A:EB:C3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BIg_QrgmhprupZi2adup4lAK68M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:41:3c:88:9c:f7:21:92:28:10:f5:85:bf:f7:dc:d5:9f:cd:
c0:93:e2:cc:84:a7:f8:84:4c:48:b0:1e:b3:31:3e:6e:7f:ad:
ea:8b:70:f7:66:b3:b9:a1:f5:c3:7b:88:78:b0:7e:5c:e5:2e:
70:4e:aa:7a:cb:46:5a:60:82:2f:25:d0:4b:32:a4:d8:53:d6:
da:a3:5c:f1:52:4d:88:2f:65:e7:2b:15:a6:de:f6:e3:d5:56:
01:28:69:9c:7f:74:b8:cc:a4:48:26:65:21:01:0b:e1:b9:90:
36:d2:04:f9:38:b9:be:a2:8c:68:7c:f9:c9:6b:bd:7f:a0:8d:
27:be:67:55:1d:75:c0:e3:14:9f:55:71:87:86:34:64:0c:48:
ac:f9:bb:18:88:45:f7:cb:ee:45:cc:99:0c:83:73:4f:d7:34:
60:e6:fb:05:2f:1f:85:f1:58:79:de:3f:8e:fa:b5:85:fc:95:
32:9b:e4:b5:1e:6d:23:c5:f9:26:c1:0b:10:fc:03:42:0f:aa:
fe:27:ea:a6:80:6b:97:81:6d:c0:25:33:5f:31:0b:fa:12:a7:
03:c5:37:70:42:46:9c:8e:1f:60:5e:9b:4c:26:27:46:88:49:
54:83:4e:c4:9e:d9:df:09:be:d8:1d:84:5d:96:f6:91:d7:1f:
35:1d:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:51:31 2026 by rpki-client