Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/D1wXP0hu1By1ky03y3B1CWCdAYQ.roa
File: D1wXP0hu1By1ky03y3B1CWCdAYQ.roa (raw, json)
Hash identifier: Um6C1K/R69FKjbjokBDj0ZF1rA2VFbM5kbucHBWm68M=
Subject key identifier: 0F:5C:17:3F:48:6E:D4:1C:B5:93:2D:37:CB:70:75:09:60:9D:01:84
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FB48050E78A98FCC3CB0E047C6FBF1F9A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/D1wXP0hu1By1ky03y3B1CWCdAYQ.roa
Signing time: Thu 30 Jul 2026 19:28:55 +0000
ROA not before: Thu 30 Jul 2026 19:28:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 82.109.0.0/22 maxlen: 24
82.109.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b4:80:50:e7:8a:98:fc:c3:cb:0e:04:7c:6f:bf:1f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 30 19:28:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f5c173f486ed41cb5932d37cb707509609d0184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:00:0f:a1:00:10:f8:bf:79:1e:cf:80:f4:
04:81:1c:93:23:11:17:fd:64:cd:37:5d:d4:a4:23:
2d:00:6f:85:64:b2:99:f8:86:39:15:65:f7:10:3a:
f1:91:75:92:44:45:a8:43:70:5b:14:22:76:3e:ff:
07:b4:d6:27:48:9c:21:a3:b8:84:e6:87:09:01:ac:
46:99:91:29:07:16:10:12:75:09:81:9c:05:d3:70:
06:01:1f:24:f0:96:79:5b:3c:4b:f3:82:fd:4a:7c:
23:a7:12:df:45:e6:dd:8e:6d:98:ec:4a:32:e0:cf:
a7:54:7d:8b:59:52:71:0a:3d:c9:30:66:ff:8b:98:
61:df:45:6d:41:c1:05:e4:f0:cf:fa:01:45:ff:4c:
2b:05:c4:88:49:ea:55:0d:be:1b:37:e8:4c:85:5b:
76:07:42:f5:52:f6:12:9a:77:b8:36:98:66:ad:f0:
27:3c:d2:3b:0a:aa:b1:3e:fe:dd:39:b5:aa:20:82:
05:87:2c:ec:28:6b:b0:7f:ea:bd:9f:5c:1b:91:54:
1e:b5:da:b9:a3:4f:66:fb:4c:3f:0a:7f:90:bb:0f:
84:43:86:4c:31:90:d4:3c:1d:24:54:c2:c8:98:73:
1a:5a:6a:14:5e:d4:4d:3c:96:cd:f3:ba:7f:0d:40:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:17:3F:48:6E:D4:1C:B5:93:2D:37:CB:70:75:09:60:9D:01:84
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/D1wXP0hu1By1ky03y3B1CWCdAYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.0.0/22
82.109.232.0/22
Signature Algorithm: sha256WithRSAEncryption
94:31:d2:f6:6e:48:cf:d1:08:fc:a0:26:9e:8c:02:97:00:10:
d1:ba:2a:20:d2:a9:ec:93:22:07:73:a6:e9:90:4b:29:7f:fd:
4b:f5:7f:50:2d:e7:39:08:13:0d:3b:a6:16:b2:a2:b9:8b:10:
1f:46:26:9c:4c:9d:9f:e3:f6:a2:61:88:6d:78:96:59:f6:19:
ca:72:1c:6d:28:ca:f7:42:45:3b:3e:32:f4:07:07:10:76:08:
98:4f:11:91:55:f2:04:3e:67:3b:7f:21:32:81:14:e4:5d:56:
d7:d4:79:66:30:ba:7f:15:92:40:23:b1:58:3c:80:30:b5:61:
b7:10:e2:59:e2:10:3e:80:6b:28:03:7f:ae:be:04:76:d1:70:
20:11:75:58:ed:47:7a:a4:92:f3:9d:d0:05:f6:e9:7e:2d:11:
3a:f4:2a:3f:bb:40:03:39:06:8d:42:f1:a4:57:a0:0e:58:03:
00:41:6d:3d:f4:50:19:00:58:13:91:97:69:f6:20:9f:7c:53:
bc:9d:29:3b:58:2c:b6:ce:a8:bb:51:ba:77:3b:56:f4:c4:a7:
f8:06:7a:cf:61:7d:ad:51:3b:56:ed:1c:24:fb:3d:7c:fe:db:
b4:d9:dc:a0:94:2f:d9:54:a0:0c:63:8b:b7:74:d1:07:54:d4:
64:c3:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 03:02:42 2026 by rpki-client