Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JQKJp9ey4OrnpBNM0Y7Zm2fruZE.roa
File: JQKJp9ey4OrnpBNM0Y7Zm2fruZE.roa (raw, json)
Hash identifier: hVnkjnNChTrFx4JXGOphU6j3Wl+dH76/u++graCaEv4=
Subject key identifier: 25:02:89:A7:D7:B2:E0:EA:E7:A4:13:4C:D1:8E:D9:9B:67:EB:B9:91
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FD5ABD02592DBA0102A0B494DD75A1B33
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JQKJp9ey4OrnpBNM0Y7Zm2fruZE.roa
Signing time: Thu 06 Aug 2026 06:03:54 +0000
ROA not before: Thu 06 Aug 2026 06:03:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142532
IP address blocks: 82.110.48.0/24 maxlen: 24
87.82.253.0/24 maxlen: 24
87.83.12.0/24 maxlen: 24
87.84.208.0/24 maxlen: 24
87.85.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:ab:d0:25:92:db:a0:10:2a:0b:49:4d:d7:5a:1b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 6 06:03:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=250289a7d7b2e0eae7a4134cd18ed99b67ebb991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:60:8d:af:d5:ab:b4:a7:98:c4:3f:10:4d:
4d:de:89:ec:26:3c:59:40:4e:6a:af:b9:fa:8f:5e:
f7:1d:cb:d4:06:cb:df:58:2b:bd:bb:ce:89:be:17:
cc:b6:2f:ef:ed:58:60:7c:92:82:45:3a:65:e3:92:
3e:97:9c:8e:6e:48:54:b7:d5:71:2f:e9:99:c6:25:
2d:e6:33:cb:49:4d:ed:f3:05:45:33:e8:f2:4d:9d:
b4:c3:6c:5f:ff:76:39:f3:cf:81:7b:50:b0:66:f2:
41:06:87:f9:fd:b5:70:c8:ab:7b:fe:70:1d:ce:d2:
8a:a8:4e:c9:b8:c1:7e:88:2f:2c:19:30:5a:b9:4b:
17:4f:56:f4:5a:32:3d:ff:b7:f2:bf:11:bb:a6:b2:
b5:4d:34:02:ac:a1:c0:4b:1a:ec:f6:f0:08:a3:8b:
63:cf:90:64:cc:b7:60:79:d5:4d:3f:98:6d:78:7a:
44:fa:46:fa:81:93:9a:57:0e:cf:b7:70:af:f0:16:
25:fb:c3:56:11:9b:2f:ec:87:49:05:c7:b0:e5:e1:
b6:0b:2e:d6:9f:b4:eb:6e:f2:df:0e:45:6c:6c:08:
92:1a:a2:dc:7e:c5:ab:63:5c:ba:eb:18:0d:91:06:
46:7e:95:37:7b:4a:2b:f7:2f:47:21:3f:2c:7c:da:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:89:A7:D7:B2:E0:EA:E7:A4:13:4C:D1:8E:D9:9B:67:EB:B9:91
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JQKJp9ey4OrnpBNM0Y7Zm2fruZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.48.0/24
87.82.253.0/24
87.83.12.0/24
87.84.208.0/24
87.85.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:4e:ed:3c:76:bb:ce:74:66:a4:36:9b:85:7e:24:08:0b:b4:
e0:3c:d0:23:e9:cc:c8:8f:8b:1b:e0:88:5e:10:e0:8d:0c:bd:
ba:62:f0:5b:97:54:2f:ac:fb:61:45:16:04:b4:8a:36:ec:c3:
2a:51:ce:4c:2c:82:4f:f4:a2:56:58:e2:24:f9:b2:9d:b9:dd:
a0:bc:56:f6:d3:cd:e1:37:96:00:89:e5:98:e4:c4:c7:3e:c9:
8a:3c:7b:f2:cb:2d:e2:5a:66:3e:3a:4d:8f:14:b1:0d:f7:66:
4d:5f:1a:49:9d:6f:02:f3:0a:06:08:a3:ce:b0:99:b5:f4:29:
bc:45:e8:d3:ca:43:c0:a0:33:49:9c:a9:4b:fd:fc:0e:c5:28:
3c:0f:58:b7:ab:3f:6f:11:cb:5b:64:74:94:c9:37:4e:14:56:
94:8e:2b:5c:52:e9:62:8c:1a:eb:4d:78:ab:87:f5:9a:a1:98:
de:0b:8b:80:1c:79:3b:2e:33:93:20:98:81:96:21:c1:c5:4f:
08:1e:d3:e4:06:01:95:9e:6c:ee:1d:a4:ea:41:ca:ce:86:2a:
0c:66:2a:f5:f3:72:85:fa:85:71:ed:9b:69:1b:e7:d7:24:53:
39:e0:9e:fd:88:bc:90:20:97:c8:1c:f0:34:9d:31:e7:35:4a:
19:bd:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:55:20 2026 by rpki-client