Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CMoYkHwmsqc3RrsfJ-dVo0r3NPE.roa
File: CMoYkHwmsqc3RrsfJ-dVo0r3NPE.roa (raw, json)
Hash identifier: jil7TMn4PoXgOlfQi+hwE8qyLU5w4eGob73Tg3qgWus=
Subject key identifier: 08:CA:18:90:7C:26:B2:A7:37:46:BB:1F:27:E7:55:A3:4A:F7:34:F1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A014D3A244D51320A16E896FE40F63F361
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CMoYkHwmsqc3RrsfJ-dVo0r3NPE.roa
Signing time: Tue 18 Aug 2026 12:23:28 +0000
ROA not before: Tue 18 Aug 2026 12:23:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 82.108.126.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
85.189.4.0/24 maxlen: 24
85.189.26.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
87.82.206.0/24 maxlen: 24
87.83.1.0/24 maxlen: 24
87.83.68.0/24 maxlen: 24
87.83.170.0/24 maxlen: 24
87.83.175.0/24 maxlen: 24
87.84.152.0/24 maxlen: 24
87.84.221.0/24 maxlen: 24
87.84.235.0/24 maxlen: 24
87.85.233.0/24 maxlen: 24
87.85.246.0/24 maxlen: 24
87.85.252.0/24 maxlen: 24
87.86.242.0/24 maxlen: 24
195.40.156.0/24 maxlen: 24
195.40.157.0/24 maxlen: 24
195.72.167.0/24 maxlen: 24
195.72.168.0/24 maxlen: 24
217.79.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:d3:a2:44:d5:13:20:a1:6e:89:6f:e4:0f:63:f3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 18 12:23:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08ca18907c26b2a73746bb1f27e755a34af734f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:d3:d3:09:18:57:0b:b4:48:77:4b:90:be:
44:3b:fc:5b:77:41:96:e5:8a:ea:2e:c0:31:42:2c:
c5:e5:e7:9d:11:a5:8a:51:8a:05:2b:ba:02:bc:84:
24:9f:25:32:73:a3:2d:5b:7b:80:22:d5:89:a0:a5:
00:ac:3e:15:8e:01:0e:ad:f6:a2:71:6b:1a:17:c9:
35:83:6e:39:d2:08:09:33:03:dc:4e:4a:42:e8:10:
08:7b:9c:d9:0b:68:0d:29:47:45:ad:03:4f:cb:26:
a8:fa:91:15:8d:b9:f9:48:87:e4:47:9b:c5:6d:d6:
a0:d8:20:3b:3e:51:3e:8c:83:ed:9e:fa:64:72:1c:
cd:dd:7c:75:b1:00:90:b2:92:86:a0:a8:ce:9c:80:
ab:fa:8a:47:c6:76:50:fc:16:77:2f:19:e6:88:6c:
eb:e5:dd:3d:2b:17:92:ce:59:8b:5a:39:80:59:f9:
0c:61:17:fa:96:dc:2b:0b:78:c0:cf:ce:11:f3:11:
8d:30:21:80:be:f2:9d:ab:67:5c:5f:ae:40:f0:04:
cc:d8:94:5f:44:4a:13:b0:31:2f:82:ac:ad:4c:f7:
4f:08:e9:c4:bc:1c:db:97:1e:a9:5e:d2:00:06:87:
c3:41:44:66:fa:74:6a:63:af:a9:6b:39:78:11:aa:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CA:18:90:7C:26:B2:A7:37:46:BB:1F:27:E7:55:A3:4A:F7:34:F1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CMoYkHwmsqc3RrsfJ-dVo0r3NPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.126.0/24
82.109.98.0/24
85.189.4.0/24
85.189.26.0/24
85.189.36.0/24
87.82.206.0/24
87.83.1.0/24
87.83.68.0/24
87.83.170.0/24
87.83.175.0/24
87.84.152.0/24
87.84.221.0/24
87.84.235.0/24
87.85.233.0/24
87.85.246.0/24
87.85.252.0/24
87.86.242.0/24
195.40.156.0/23
195.72.167.0-195.72.168.255
217.79.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4f:99:9a:f7:78:b3:46:25:b0:1c:98:f3:dc:d4:5b:5c:73:
a1:35:24:84:cb:0d:f4:73:e9:23:a0:44:77:7c:6e:fa:cf:a3:
65:4c:a9:f1:46:ec:4d:1a:b5:a7:c2:7e:de:26:61:34:f3:16:
7a:c2:95:1e:f9:b0:52:d3:18:70:8d:e3:0e:9a:65:7d:26:ad:
74:d7:24:2c:ce:47:b1:d4:94:86:94:56:b5:13:cc:4a:33:d7:
e4:8d:a3:6d:9c:e2:63:e5:da:bd:f5:f2:50:94:73:13:d8:cf:
70:c4:f6:e3:8c:5a:8d:f5:d6:90:70:f8:9f:1f:00:72:83:84:
82:e3:97:9d:d4:2b:cf:b9:56:92:49:e6:64:df:d5:29:fc:8c:
1a:8a:f8:2e:c3:db:01:47:3a:5a:fe:7f:fc:0f:1e:3d:17:82:
62:4d:51:a1:38:95:08:70:fb:d7:62:c5:0c:2a:47:7c:25:9a:
d7:c9:f8:6d:32:68:fb:ce:99:06:93:cc:31:67:c4:1f:a8:9b:
53:05:78:aa:83:8d:79:fb:a2:d2:0c:03:4b:c8:26:56:bf:53:
f1:ff:9c:69:4a:b9:8a:ce:81:f3:c9:fa:fe:a9:4c:2a:1e:fb:
40:45:84:36:59:08:6c:d8:fb:46:da:2a:e1:fe:2f:98:ec:72:
2d:8e:48:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:27 2026 by rpki-client