Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OW1I3NZAUljPDWrJUqNOQt-S42k.roa
File: OW1I3NZAUljPDWrJUqNOQt-S42k.roa (raw, json)
Hash identifier: o6VAYDBZc3HZXti9QinlwyF2tjkmXKZCcydJ+SigVEE=
Subject key identifier: 39:6D:48:DC:D6:40:52:58:CF:0D:6A:C9:52:A3:4E:42:DF:92:E3:69
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0669C1B7EE9846D629839A02EDA32FC7B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OW1I3NZAUljPDWrJUqNOQt-S42k.roa
Signing time: Thu 03 Sep 2026 09:31:41 +0000
ROA not before: Thu 03 Sep 2026 09:31:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198805
IP address blocks: 82.110.224.0/24 maxlen: 24
82.110.227.0/24 maxlen: 24
82.110.229.0/24 maxlen: 24
87.83.67.0/24 maxlen: 24
87.83.69.0/24 maxlen: 24
87.83.218.0/24 maxlen: 24
87.85.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:9c:1b:7e:e9:84:6d:62:98:39:a0:2e:da:32:fc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 3 09:31:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=396d48dcd6405258cf0d6ac952a34e42df92e369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:e1:89:19:9a:ef:8b:97:c6:73:9f:66:cb:
59:83:27:2c:3d:8b:10:2c:be:4a:cc:28:f5:fb:3e:
28:77:8c:8e:ad:62:0b:de:43:ab:38:d2:c9:43:8a:
d4:8b:99:4f:2c:a8:fe:ce:18:a5:da:11:99:b1:bd:
ce:a7:a8:ca:17:0a:43:a1:51:89:7f:e9:dc:bb:0b:
e5:f5:a0:14:fc:6a:10:11:74:f9:96:30:12:c0:01:
33:8e:9d:70:4f:c8:9f:e3:e1:f6:ad:61:45:fa:50:
16:90:a1:32:c5:78:3d:0e:55:5b:22:f8:f7:bf:a5:
62:9f:0e:32:69:31:62:c7:72:9c:38:06:5a:e8:21:
e4:fa:8d:d4:56:b5:d9:b9:ab:b8:70:1f:f5:ee:fa:
bf:f6:8a:a6:e4:22:15:c4:59:66:1e:18:3e:10:c4:
c9:82:ac:64:03:16:85:ab:12:02:de:e6:a9:6b:cf:
a1:53:ca:e9:d1:77:8f:0c:17:0b:de:60:16:63:d7:
0e:39:51:7d:5f:5d:db:0d:63:96:44:3d:c5:97:33:
23:25:ea:7f:9a:07:86:d7:c0:9e:92:1c:4e:5a:44:
9b:7f:1b:dc:0b:ba:f5:7f:c5:72:21:93:cd:ed:ef:
c5:c1:0a:89:7a:bb:75:e8:92:68:76:4f:44:de:9e:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6D:48:DC:D6:40:52:58:CF:0D:6A:C9:52:A3:4E:42:DF:92:E3:69
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OW1I3NZAUljPDWrJUqNOQt-S42k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.224.0/24
82.110.227.0/24
82.110.229.0/24
87.83.67.0/24
87.83.69.0/24
87.83.218.0/24
87.85.64.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c1:f0:33:03:9b:c7:a9:a5:c0:17:84:54:80:30:80:d1:a8:
26:2b:9d:22:67:6a:cd:e1:54:cf:c9:98:05:10:ed:df:37:00:
ae:30:68:e1:ab:d7:54:ee:a0:08:eb:81:51:41:e0:f1:a9:a5:
51:55:54:fc:43:ba:e9:94:53:e9:2f:25:cc:bb:e9:94:86:87:
48:e0:ac:16:4e:1c:a4:15:97:0c:04:36:d7:11:49:83:50:55:
6e:82:ef:58:0c:d6:c9:ed:a4:ea:bb:b8:b4:e8:d8:f1:e7:1a:
67:0d:a1:21:29:b4:d7:79:68:82:a7:21:de:c4:d2:22:b1:da:
7b:d4:f1:5b:85:f7:68:9f:8a:9b:8f:7a:3b:63:12:17:85:9c:
68:89:b3:f5:d8:1f:b0:a4:7b:d4:e2:d8:d4:a4:9a:ac:7d:79:
42:d1:eb:51:22:ac:62:79:f8:f2:19:b6:3c:19:6f:af:46:fa:
87:38:23:6f:0a:28:b0:d0:2c:8b:cd:65:fe:a3:68:2f:07:4a:
c8:e5:db:6e:f6:45:64:46:35:b6:5d:42:bb:b5:0e:e0:62:80:
b1:28:56:62:c3:af:4d:fb:c7:94:cf:e2:ae:37:93:9e:79:f6:
e4:78:20:79:d8:17:c6:f2:37:e0:fd:e4:de:ed:df:24:91:1e:
ba:b8:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:41:25 2026 by rpki-client