Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/C1xizA5Q7eBGRWbfT2GFKvFqTOc.roa
File: C1xizA5Q7eBGRWbfT2GFKvFqTOc.roa (raw, json)
Hash identifier: kW8aisyHywdJGH7R9szhpMnQK1H5qiQ5JxvneNRHGPw=
Subject key identifier: 0B:5C:62:CC:0E:50:ED:E0:46:45:66:DF:4F:61:85:2A:F1:6A:4C:E7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E830ADC4AC718F06B991B453B6E1A136B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/C1xizA5Q7eBGRWbfT2GFKvFqTOc.roa
Signing time: Mon 01 Jun 2026 11:56:27 +0000
ROA not before: Mon 01 Jun 2026 11:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205987
IP address blocks: 82.108.162.0/24 maxlen: 24
82.108.173.0/24 maxlen: 24
82.108.202.0/24 maxlen: 24
82.108.220.0/24 maxlen: 24
82.109.11.0/24 maxlen: 24
82.109.60.0/24 maxlen: 24
82.109.69.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
82.109.102.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
82.109.166.0/24 maxlen: 24
82.109.172.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.82.235.0/24 maxlen: 24
87.83.170.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.83.235.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
87.84.78.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
87.84.235.0/24 maxlen: 24
87.85.140.0/24 maxlen: 24
87.85.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:0a:dc:4a:c7:18:f0:6b:99:1b:45:3b:6e:1a:13:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 1 11:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b5c62cc0e50ede0464566df4f61852af16a4ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:69:09:57:5f:6e:47:fd:46:45:d5:25:9a:
c8:42:a3:56:86:5b:da:8a:26:e2:2e:95:8f:ec:58:
c9:7c:df:b2:60:9a:14:e7:f2:2c:c8:55:81:c3:de:
4a:d8:77:23:e6:37:95:e4:de:eb:c2:dc:98:59:41:
95:14:26:cc:26:da:b5:e0:c9:1b:a6:96:18:39:d2:
7b:db:e4:16:0e:a6:89:f3:61:21:28:97:cc:5c:50:
fb:80:fa:b7:ab:4e:a5:95:be:86:8a:25:b6:c6:c1:
c1:77:5c:62:16:60:5c:33:b8:39:ba:2b:e7:a3:41:
48:63:b8:6d:8f:1b:12:fc:f5:2e:4c:3f:5a:f0:54:
bc:b9:33:63:6a:5b:a4:71:1e:38:68:1e:aa:23:0d:
3b:ca:5a:cd:93:13:58:f9:7f:4a:46:61:0c:de:4b:
66:7d:3c:c8:66:8e:46:d3:47:3f:01:8d:22:91:b4:
2a:53:f1:a9:cf:57:ee:1c:bf:87:79:1f:8a:7d:00:
70:0f:e8:e8:9f:89:39:8c:95:ef:b8:0b:27:43:0f:
ae:45:54:65:5b:4b:78:91:9e:e5:4b:b5:81:99:83:
a1:34:fa:25:f8:95:1a:98:c0:a7:6f:cd:96:4b:34:
20:99:9f:4a:13:68:c2:28:01:f8:7e:c7:f6:5e:42:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5C:62:CC:0E:50:ED:E0:46:45:66:DF:4F:61:85:2A:F1:6A:4C:E7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/C1xizA5Q7eBGRWbfT2GFKvFqTOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.162.0/24
82.108.173.0/24
82.108.202.0/24
82.108.220.0/24
82.109.11.0/24
82.109.60.0/24
82.109.69.0/24
82.109.98.0/24
82.109.102.0/24
82.109.151.0/24
82.109.166.0/24
82.109.172.0/24
87.82.232.0/24
87.82.235.0/24
87.83.170.0/24
87.83.174.0/24
87.83.232.0/24
87.83.235.0/24
87.84.76.0/24
87.84.78.0/24
87.84.220.0/24
87.84.232.0/24
87.84.235.0/24
87.85.140.0/24
87.85.143.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c5:16:d4:3a:c9:16:98:e9:db:4d:2f:f4:a1:ca:79:3a:1c:
8b:cb:da:5c:ff:51:92:63:ed:2a:e7:f7:57:ae:dd:90:cd:88:
bd:22:e2:4c:94:7a:7a:18:23:c1:71:8b:1f:7c:86:d6:9d:42:
1b:3b:ee:3f:35:df:81:1b:29:af:a6:fc:ff:a2:37:34:75:b4:
42:2f:01:c8:28:7f:92:d1:3d:4c:81:eb:36:23:96:f0:03:ac:
42:92:5c:1b:f3:2e:d8:98:bf:b9:d9:2c:a5:c5:97:04:34:48:
05:18:29:ed:42:54:27:19:f8:7b:bd:ca:a6:95:ef:cb:dc:85:
e4:46:a2:22:ec:58:49:c2:37:b1:29:ba:79:93:1c:62:ed:94:
7b:89:ab:1f:b0:6d:f8:9e:8d:78:33:47:db:d9:de:dd:1f:a6:
bd:18:15:b8:2d:7c:8a:72:f2:d1:50:54:69:05:cf:77:c9:7f:
61:e9:1a:98:c1:68:27:85:2d:73:c8:88:fe:5b:3b:4a:62:1e:
a5:9f:c5:0d:57:39:5c:7a:46:3e:4a:ca:b5:88:b2:91:0a:3e:
b6:32:ce:a2:6e:b2:1f:58:1d:62:e1:d4:dc:a9:79:15:cb:05:
b2:1c:0f:c2:07:70:4b:8d:d7:cb:21:6f:fd:82:0b:ae:f2:68:
cd:74:ea:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:16:17 2026 by rpki-client