Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CKmxD2SZLwG7GHpTzHCIY6kGnEo.roa
File: CKmxD2SZLwG7GHpTzHCIY6kGnEo.roa (raw, json)
Hash identifier: pEfe0SjGFIobVMJKLeAu/41pinbsVc30Dx9zm5ZdPFA=
Subject key identifier: 08:A9:B1:0F:64:99:2F:01:BB:18:7A:53:CC:70:88:63:A9:06:9C:4A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A01635EFBFB4365AA5363207AA251B84F5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CKmxD2SZLwG7GHpTzHCIY6kGnEo.roa
Signing time: Tue 18 Aug 2026 18:50:28 +0000
ROA not before: Tue 18 Aug 2026 18:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 82.108.61.0/24 maxlen: 24
82.108.73.0/24 maxlen: 24
195.72.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:35:ef:bf:b4:36:5a:a5:36:32:07:aa:25:1b:84:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 18 18:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08a9b10f64992f01bb187a53cc708863a9069c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:37:94:8f:17:ef:92:75:7b:34:a0:f9:5b:
3c:d4:de:e8:0a:97:e8:9f:e6:02:e2:16:5c:81:67:
6d:a6:b7:57:e5:23:2a:39:3c:c3:54:a3:57:4b:55:
ff:a9:c4:e7:d2:b4:b2:99:27:9e:7a:d0:23:8c:34:
91:97:f9:43:1e:7c:34:08:a7:01:b1:3c:a4:cb:25:
03:36:57:70:1c:c6:4d:c2:59:e6:e2:fd:cb:bb:5a:
06:37:36:ef:04:ea:97:c5:1f:89:82:d6:13:c6:76:
ea:d2:73:71:24:15:76:5c:24:0e:c3:67:1a:9f:c8:
e2:21:f6:d6:97:d6:ea:e9:8e:66:18:7a:fa:73:f7:
2f:e6:7b:1e:30:21:2e:db:76:e2:40:2f:ff:48:14:
25:9b:1b:9d:e9:df:3b:01:de:3c:94:b6:5f:3c:5f:
f8:66:18:51:f3:e6:bf:57:e1:2a:c7:bc:c6:a1:40:
b6:5c:66:6e:bd:fc:3a:f9:7b:4d:30:43:81:8c:ff:
76:12:de:f7:be:7b:0a:84:b9:2c:31:47:05:bd:75:
03:7b:16:c2:50:f7:29:1a:e6:d9:82:9e:2e:47:4a:
ed:d6:36:79:79:20:fa:24:ee:21:1a:35:4d:a6:64:
5a:3b:fa:f2:7f:13:36:13:de:ec:23:27:fd:ad:20:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A9:B1:0F:64:99:2F:01:BB:18:7A:53:CC:70:88:63:A9:06:9C:4A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CKmxD2SZLwG7GHpTzHCIY6kGnEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.61.0/24
82.108.73.0/24
195.72.169.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:1a:d9:c7:bf:91:ca:0c:ca:12:2f:8e:d2:04:0e:38:3e:5d:
3b:da:53:a5:b8:a6:0e:01:50:57:69:d3:fc:c0:a5:de:57:eb:
ed:40:22:57:b7:b8:65:bf:2c:fd:42:a0:17:55:f9:95:cc:ff:
6e:28:bc:72:de:f1:f6:1b:93:6a:84:26:86:5a:3b:0a:a0:c4:
5a:1d:b5:6a:a1:8d:5d:80:1a:cb:ef:cd:29:48:4c:4d:e6:f2:
f8:43:2c:0d:19:88:54:bf:b3:7c:eb:40:e1:6d:67:ae:a7:60:
c2:31:5d:91:be:c8:d0:8e:27:6d:ed:bc:59:e3:9d:5b:cd:df:
17:bf:35:6e:63:ba:40:b5:0c:cf:96:15:96:8f:77:49:d7:33:
06:7c:37:3d:a9:f1:84:fc:57:be:5c:85:fa:11:2d:90:77:c0:
f3:a1:b9:90:90:f0:a3:99:09:90:e5:3c:b4:fb:5b:f6:b9:c6:
ca:21:14:2a:3b:b7:bc:e7:33:71:69:34:62:a1:4a:a4:af:44:
ca:ad:c1:dc:a9:2b:b0:f7:3d:ad:1a:eb:45:a3:7c:ff:b2:51:
91:5c:a1:a7:f3:b8:19:8c:84:69:a4:a6:7d:0a:79:2c:8a:7b:
38:b1:f6:f2:1a:7b:10:66:bf:91:c6:b3:91:76:61:b4:c8:8c:
74:71:8e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:02 2026 by rpki-client