Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ld2GtrbUf8MhBWnq7WYGmXnPA98.roa
File: Ld2GtrbUf8MhBWnq7WYGmXnPA98.roa (raw, json)
Hash identifier: ntKcNTRDF2zDBRS+IwPQ3vHmThxbIJCbj3Zp4py9aB0=
Subject key identifier: 2D:DD:86:B6:B6:D4:7F:C3:21:05:69:EA:ED:66:06:99:79:CF:03:DF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0664951251014A62A0FF6562B96C054B6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ld2GtrbUf8MhBWnq7WYGmXnPA98.roa
Signing time: Thu 03 Sep 2026 08:01:15 +0000
ROA not before: Thu 03 Sep 2026 08:01:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 83.148.150.0/24 maxlen: 24
83.148.153.0/24 maxlen: 24
83.148.154.0/23 maxlen: 23
85.189.216.0/22 maxlen: 22
109.204.102.0/24 maxlen: 24
109.204.104.0/21 maxlen: 21
109.204.114.0/24 maxlen: 24
109.204.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:49:51:25:10:14:a6:2a:0f:f6:56:2b:96:c0:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 3 08:01:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ddd86b6b6d47fc3210569eaed66069979cf03df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:40:23:2c:5f:38:09:54:b3:ea:fb:f2:91:
bc:aa:71:6c:c2:08:90:0b:18:bc:8c:87:1c:f6:fe:
d8:97:f4:57:c2:36:6e:56:54:82:8f:e0:dd:a4:9a:
74:fd:82:15:4a:10:f2:10:91:00:a5:fd:1b:03:3c:
08:c5:75:1c:34:b1:ad:a7:e5:81:e1:b0:c5:80:24:
6e:56:41:47:14:54:50:43:4f:f8:8b:57:f5:ab:fd:
84:41:b7:23:3c:46:c3:71:f9:92:79:a8:50:5d:3b:
7e:a6:2a:b7:46:f7:a4:5f:27:04:be:4e:0c:2f:30:
ac:72:8f:bd:9e:48:47:78:f4:fe:18:d5:48:bc:35:
17:36:dc:56:4f:71:89:a1:94:c6:44:d8:35:f1:15:
d4:1d:25:e1:90:7a:37:a1:08:22:de:8f:5e:f4:07:
10:2d:4f:97:6a:41:61:9a:17:87:3d:12:18:45:7d:
82:3a:a2:a8:67:61:9c:13:ee:39:77:f2:e7:0d:f6:
91:a9:2d:2c:6d:49:0f:27:36:d5:5b:a8:62:00:12:
e8:e2:fb:fe:35:fe:d3:a9:35:01:9f:73:d9:ea:a2:
72:95:bc:d1:0c:30:29:48:ed:76:9d:d7:8f:ca:0c:
a6:a0:16:1e:c4:a7:5e:fe:fe:45:85:be:ad:04:43:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DD:86:B6:B6:D4:7F:C3:21:05:69:EA:ED:66:06:99:79:CF:03:DF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ld2GtrbUf8MhBWnq7WYGmXnPA98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.148.150.0/24
83.148.153.0-83.148.155.255
85.189.216.0/22
109.204.102.0/24
109.204.104.0/21
109.204.114.0/24
109.204.127.0/24
Signature Algorithm: sha256WithRSAEncryption
db:98:56:95:df:41:a2:4a:2f:a6:66:7c:ab:2f:55:b9:bd:07:
83:c9:02:a5:9b:70:cc:5e:72:bb:50:1d:64:50:2f:7f:c5:c1:
14:78:67:6b:7f:cb:e9:97:de:af:1c:de:06:ae:51:8f:f6:d5:
0e:d6:97:ae:cb:ab:ed:0e:59:90:5d:bf:10:fa:0e:b1:a3:89:
27:7e:12:fa:9b:0f:f0:b4:36:3f:8e:f2:c5:68:55:33:6a:ee:
0e:ef:41:5c:32:06:8a:af:49:5e:4f:83:e1:8d:17:c9:b2:5a:
af:98:0f:b1:5c:f8:b6:62:de:b4:4a:f8:ea:4e:92:7a:ce:93:
83:a4:68:35:87:1b:a3:73:d2:a0:99:07:9d:1f:37:95:41:bd:
fa:0f:ba:d2:b2:e7:a3:b5:d1:26:08:b2:6f:4d:d5:7c:46:e9:
87:18:ad:35:d7:26:72:98:34:8f:be:f7:73:45:46:df:69:49:
43:79:e5:a4:24:53:61:79:16:c1:7a:5c:03:ee:ba:e6:f8:a1:
ea:0f:ea:1a:fa:c6:03:d9:3b:f5:cc:a2:ed:23:5d:c6:80:dc:
70:1d:67:8f:13:f7:9d:15:43:1c:8e:13:41:4f:d3:ce:60:8c:
4e:62:20:71:8e:f0:b7:d2:a1:75:6e:41:97:19:63:57:de:c3:
48:6f:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:40:19 2026 by rpki-client