Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FcjcSJt8JjmVjmIQjr8-Lo_j_-w.roa
File: FcjcSJt8JjmVjmIQjr8-Lo_j_-w.roa (raw, json)
Hash identifier: +tVQ6kgtajWpEcIwcTTy11i+70+D5LYBVIUBUNVLbPg=
Subject key identifier: 15:C8:DC:48:9B:7C:26:39:95:8E:62:10:8E:BF:3E:2E:8F:E3:FF:EC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A047BC27846B2D1C2E9FE9EEF12BBC51DF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FcjcSJt8JjmVjmIQjr8-Lo_j_-w.roa
Signing time: Fri 28 Aug 2026 09:38:28 +0000
ROA not before: Fri 28 Aug 2026 09:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 82.109.180.0/22 maxlen: 24
82.109.236.0/22 maxlen: 24
87.82.235.0/24 maxlen: 24
212.212.27.0/24 maxlen: 24
217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:bc:27:84:6b:2d:1c:2e:9f:e9:ee:f1:2b:bc:51:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 28 09:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15c8dc489b7c2639958e62108ebf3e2e8fe3ffec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:d6:40:68:c8:e7:12:4d:48:a1:33:65:c7:
30:76:df:90:2e:b3:85:e9:e8:ce:ae:e9:45:d8:c8:
22:09:73:a4:25:d0:71:4e:61:7c:4b:c3:fd:b3:f9:
61:2c:eb:62:76:6a:6d:d0:29:de:9f:fc:28:59:d2:
99:97:64:02:9c:6d:f7:8b:7c:87:51:41:a3:dc:2c:
b4:36:ad:a5:1e:d1:8b:e5:2c:54:90:ea:c8:18:e0:
90:89:23:68:7a:2e:fd:f8:a7:0a:b8:64:9f:0f:a7:
7f:3c:11:37:4d:9b:a6:f8:0b:c2:f2:9c:57:21:d6:
40:ca:9b:ed:87:37:46:6f:f0:64:63:fa:75:06:47:
66:fe:5f:22:2d:6c:96:d7:34:70:e2:e9:68:de:f6:
e7:8f:76:18:ba:9a:37:ec:f6:48:55:4e:53:ac:b3:
1b:98:0f:45:e6:ae:ea:4f:39:e7:47:4b:67:4f:e1:
fa:e9:79:92:75:0c:f6:08:d6:06:64:78:3d:5e:ed:
5a:5c:fa:f5:22:c9:20:3f:c3:23:d2:22:a8:51:fd:
e6:03:47:d1:f1:66:15:52:12:f5:6a:8e:f2:90:07:
6a:2e:8d:e7:a3:67:8e:74:e1:57:32:d0:2f:02:03:
58:8f:83:2b:81:43:e7:39:4d:88:cb:f0:ea:ec:a3:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C8:DC:48:9B:7C:26:39:95:8E:62:10:8E:BF:3E:2E:8F:E3:FF:EC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FcjcSJt8JjmVjmIQjr8-Lo_j_-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.180.0/22
82.109.236.0/22
87.82.235.0/24
212.212.27.0/24
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0b:48:4a:fc:c5:a4:75:6f:54:d9:8a:ea:71:f3:a3:5d:d0:
2d:7e:9f:f6:10:cb:ce:6b:04:f6:46:a4:03:60:ba:8b:03:2b:
80:e8:6d:ed:0c:20:18:a1:3a:05:24:f0:c2:22:32:26:4c:2b:
cc:9a:55:9d:31:a8:fe:7e:b2:be:c7:59:0b:02:3c:c3:35:f2:
3d:bf:d9:06:76:7d:50:3e:6a:70:fa:1b:d1:ba:6a:5f:6e:f6:
0e:50:3c:49:ec:6b:44:d0:b8:c7:15:d4:4f:21:88:87:48:66:
03:68:ee:94:42:d8:1f:04:57:bb:9b:b2:e5:54:03:f8:66:ee:
06:10:ee:de:cd:8d:0c:4f:6c:e3:e6:7a:6f:cc:48:45:d6:2b:
17:f3:85:d4:ea:cf:5d:95:ac:db:94:44:ab:b3:53:8c:9a:95:
49:ed:36:09:db:41:ca:1a:b1:bc:97:f7:c1:1e:e4:30:e6:ae:
69:9c:24:46:d3:91:e5:74:e5:40:34:3c:47:fd:05:8d:a8:c5:
6c:66:4c:3c:b4:0f:51:1a:e6:94:a4:4f:df:f2:6b:53:5a:13:
9a:23:91:4d:9f:e3:9d:ac:e6:82:f6:a4:4e:5d:d2:70:d7:bc:
9a:fe:1e:e4:a4:18:80:95:ff:6a:a6:45:21:94:ad:d1:6e:74:
19:e5:74:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:15 2026 by rpki-client