Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/L2n_yn3MRkHCaqwOu4NTdgUu8xM.roa
File: L2n_yn3MRkHCaqwOu4NTdgUu8xM.roa (raw, json)
Hash identifier: Awh9QVl7uSWKcWlfeTyNKtS8efUPqeA5cBecSVnbiQA=
Subject key identifier: 2F:69:FF:CA:7D:CC:46:41:C2:6A:AC:0E:BB:83:53:76:05:2E:F3:13
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A08E5100AEA7DC19722205AABB76DC3D12
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/L2n_yn3MRkHCaqwOu4NTdgUu8xM.roa
Signing time: Fri 11 Sep 2026 02:34:28 +0000
ROA not before: Fri 11 Sep 2026 02:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198805
IP address blocks: 82.110.224.0/24 maxlen: 24
82.110.227.0/24 maxlen: 24
82.110.229.0/24 maxlen: 24
87.85.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:51:00:ae:a7:dc:19:72:22:05:aa:bb:76:dc:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 11 02:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f69ffca7dcc4641c26aac0ebb835376052ef313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:a2:1c:a0:f5:07:4f:14:24:23:af:f9:4e:
2b:1a:6d:6a:98:b6:38:e6:0c:5b:6d:af:8e:10:cd:
36:d9:1d:9e:db:48:48:99:c5:da:14:53:ff:40:1a:
2b:3c:61:94:20:ec:33:7a:d9:fc:eb:03:11:b9:a4:
53:85:66:a9:5d:36:53:39:50:ba:c4:66:a4:dc:aa:
9e:8a:a7:a5:d7:8e:e0:61:36:be:cb:5d:cc:af:b2:
45:50:47:19:85:0a:97:73:df:b1:e5:a5:07:29:83:
d9:f2:0f:49:2f:02:49:e3:26:46:ca:8c:db:7b:44:
88:a8:a9:bf:81:f3:8d:6a:70:cd:70:f6:3c:57:0c:
ba:85:c7:0e:01:28:9a:b8:f6:d3:b1:81:84:86:b0:
e1:36:16:be:40:91:5e:3f:18:25:6e:52:db:f4:bd:
98:7e:d6:e0:ea:c3:80:02:31:2c:16:51:e3:94:77:
26:70:07:ff:be:b3:6f:59:d0:2e:d0:9d:79:b3:88:
3c:e9:96:1f:fe:99:20:4a:72:64:d4:6d:d9:a0:89:
bc:76:b1:ea:d3:7e:2c:d9:50:bb:b7:2c:8b:7f:46:
6c:b4:66:f6:22:0e:11:ba:02:6f:a0:65:d0:cf:f1:
14:04:cd:f0:2d:8d:6c:d5:00:9c:7d:a8:59:7e:c1:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:FF:CA:7D:CC:46:41:C2:6A:AC:0E:BB:83:53:76:05:2E:F3:13
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/L2n_yn3MRkHCaqwOu4NTdgUu8xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.224.0/24
82.110.227.0/24
82.110.229.0/24
87.85.64.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f2:99:90:62:8d:f0:15:7d:64:53:b6:c7:7a:69:19:db:54:
2a:36:7a:f7:82:25:9c:85:59:f9:8d:55:ee:be:e6:d3:5e:d3:
e3:74:a0:02:b8:eb:1b:ea:b1:a8:42:5d:83:20:3e:ac:02:ec:
54:55:ee:3c:9c:38:e7:ad:d7:98:30:e9:50:de:59:73:fb:46:
c0:9a:e8:4f:b2:75:65:07:57:d6:0c:85:5c:ae:0a:c4:4f:7b:
c2:17:3d:50:76:a6:34:fd:77:34:1b:30:53:67:c6:aa:e0:04:
07:42:a9:cd:83:37:d6:a2:1e:94:92:15:37:06:ce:73:01:ae:
c9:d7:f3:20:93:31:a8:7a:eb:d3:6a:81:d9:df:9b:16:cb:04:
39:df:dc:22:7d:7c:f5:d4:1b:3c:25:6b:c3:fd:be:2e:cd:3c:
33:5c:02:0e:fd:d6:29:7c:6b:1f:ab:fd:2c:77:e6:ab:47:26:
d1:75:0a:6b:90:8f:f8:1b:99:bb:8a:36:ab:ce:5c:4a:49:41:
b2:5d:a2:5a:df:1e:9b:7a:7a:68:b9:b2:76:ea:f0:30:7b:f1:
61:06:cc:21:c7:12:75:c4:e8:a5:7c:fc:1f:7d:f1:c2:68:4d:
7d:0e:06:e3:31:5e:d2:99:4f:3c:c6:52:e0:27:09:0b:51:bb:
67:1e:5d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:31:00 2026 by rpki-client