Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KYHjmKuSxGQ_U-gYnl3UyuPGJvw.roa
File: KYHjmKuSxGQ_U-gYnl3UyuPGJvw.roa (raw, json)
Hash identifier: mwodXHIR3vsMYAtoYAe8SWz1GV6UPNPMSpoH9XjOFvk=
Subject key identifier: 29:81:E3:98:AB:92:C4:64:3F:53:E8:18:9E:5D:D4:CA:E3:C6:26:FC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0EDBE86ABFBC1DAD69304412A2E650FF0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KYHjmKuSxGQ_U-gYnl3UyuPGJvw.roa
Signing time: Tue 29 Sep 2026 15:18:01 +0000
ROA not before: Tue 29 Sep 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:be:86:ab:fb:c1:da:d6:93:04:41:2a:2e:65:0f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 29 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2981e398ab92c4643f53e8189e5dd4cae3c626fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:3f:b7:ad:3b:f9:84:f1:3c:d2:3e:ae:bd:
7b:fb:e2:90:29:43:6a:f3:55:d9:cb:9e:75:36:97:
e5:f1:69:72:a4:16:9d:15:ed:3f:ea:ed:90:0f:b6:
d4:27:dc:67:d6:6a:00:b6:c2:f7:2d:f3:2c:54:b1:
a1:e9:25:66:59:42:0a:8c:49:92:e4:36:22:48:e7:
29:d1:90:ab:4f:9f:4f:eb:47:14:c6:c2:e1:af:15:
ab:e2:26:18:8d:15:65:17:3e:a5:c9:4b:06:46:8e:
21:43:87:d3:b5:8c:bb:91:64:91:aa:6e:0c:80:c5:
7d:ef:1f:39:58:87:8f:f7:12:48:93:b5:f2:fd:17:
8f:9e:3d:f7:e1:98:44:c1:fc:fd:1a:98:58:f8:33:
53:36:d4:86:32:f1:e8:14:ad:5f:cd:c7:8a:2e:69:
ff:0b:a1:6c:4f:b7:9c:29:ea:17:91:63:85:8c:6e:
37:a3:fe:e8:ab:41:7a:b2:90:29:52:c1:40:ab:86:
96:d6:db:b4:de:6b:35:50:0e:d8:20:aa:98:ab:8e:
3a:95:46:01:ce:1a:08:06:1c:ca:b8:ae:d9:19:5c:
41:93:47:2e:33:47:08:b9:f0:c3:f8:58:b9:cf:a3:
fd:8b:d3:8b:90:33:ad:df:19:6f:ad:f5:e6:6a:81:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:81:E3:98:AB:92:C4:64:3F:53:E8:18:9E:5D:D4:CA:E3:C6:26:FC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KYHjmKuSxGQ_U-gYnl3UyuPGJvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8a:b9:f2:7b:34:31:d9:1c:60:2c:39:e6:07:d4:ca:4e:6e:
cb:d1:08:84:d0:de:93:c3:86:8e:ed:2a:bf:f8:68:68:0e:cb:
87:a2:69:84:da:f6:a2:03:0e:f7:70:6f:d4:3c:32:d5:9b:9c:
00:ba:37:b8:77:5b:eb:f2:da:a9:cb:67:e1:8f:21:b0:ce:b5:
c1:57:81:c8:e9:01:c3:ee:e5:c8:61:2d:f1:26:5d:5a:0f:08:
d5:26:47:bf:f3:63:6d:da:b5:9a:f6:df:13:13:ac:dc:ab:f1:
ad:bf:7b:05:08:11:59:40:d8:aa:5c:28:fe:b5:65:9e:aa:cd:
77:32:f7:78:01:88:64:c1:f3:31:53:f0:2e:f4:61:b8:da:0f:
33:a8:da:96:c6:95:7f:f4:5a:04:dd:26:b1:a2:60:6f:2f:e7:
ea:a3:4c:d1:26:3b:a3:24:7f:e8:8f:a7:6f:f5:d7:76:ad:ff:
9e:16:9b:41:b0:93:c5:01:57:d2:8c:8c:74:9a:f5:08:15:6c:
ae:57:03:09:c6:f2:f3:d2:4b:c3:3b:6f:e0:db:d4:8d:97:6b:
e3:10:e3:a8:b7:1c:55:bb:ed:f2:f9:20:19:46:77:18:80:97:
40:c5:4c:83:39:34:12:db:a0:dd:9d:a7:7d:d7:2d:2c:ee:89:
c4:cb:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:17 2026 by rpki-client