Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PWj18aSiSXrZhhsclQ7SQCGUmhk.roa
File: PWj18aSiSXrZhhsclQ7SQCGUmhk.roa (raw, json)
Hash identifier: U87JMATLYYmMeX0Bp4IZp83KXR1IgsPwvqMqfGBD4mg=
Subject key identifier: 3D:68:F5:F1:A4:A2:49:7A:D9:86:1B:1C:95:0E:D2:40:21:94:9A:19
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F6ECE624437C8961ABB7E9FD87EB0718B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PWj18aSiSXrZhhsclQ7SQCGUmhk.roa
Signing time: Fri 17 Jul 2026 06:40:47 +0000
ROA not before: Fri 17 Jul 2026 06:40:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 82.108.173.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
87.82.233.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.84.188.0/24 maxlen: 24
87.84.206.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
87.85.97.0/24 maxlen: 24
87.85.129.0/24 maxlen: 24
87.85.133.0/24 maxlen: 24
212.135.19.0/24 maxlen: 24
212.212.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:ce:62:44:37:c8:96:1a:bb:7e:9f:d8:7e:b0:71:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 17 06:40:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d68f5f1a4a2497ad9861b1c950ed24021949a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:e6:af:85:d3:05:db:e9:0d:b5:8c:d9:5b:
7c:21:cc:d8:44:a9:0b:e4:d1:15:67:f8:13:6e:ac:
8b:01:83:8e:cf:94:a5:1d:07:09:8c:4d:c3:ab:e0:
70:f9:c6:97:83:2e:44:ce:c5:88:03:f8:de:b8:5a:
9b:25:a3:d7:01:77:6d:29:e5:3f:6b:1c:a0:e7:87:
10:05:14:82:d5:5f:27:19:16:55:17:cf:e4:40:97:
66:ae:5a:34:18:bb:63:7a:2d:f8:8b:4c:7f:bb:d4:
d4:6c:2d:31:8a:56:47:e3:af:22:ab:fc:97:d9:6e:
b7:2e:24:4a:de:b5:2e:d4:f8:ac:39:95:95:5c:eb:
af:95:5a:e2:e8:5b:4c:82:20:cb:cc:b9:8a:77:54:
ef:b5:f8:c0:39:80:42:3b:9a:89:a7:27:66:b0:53:
5a:58:da:d2:8a:d0:7e:30:75:bf:06:30:0f:cb:9f:
75:e0:14:2a:7f:60:a5:7e:45:63:1e:08:c0:43:77:
db:cd:bb:b0:8b:60:77:5e:d7:e2:10:18:93:b2:db:
05:12:d6:60:71:b6:a3:5c:a4:ac:d1:20:71:91:89:
6f:a4:8b:83:8c:ab:64:65:86:0d:dc:6c:0d:cf:4f:
ed:6d:18:4d:87:cf:fb:6e:9e:b5:50:14:5d:61:20:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:68:F5:F1:A4:A2:49:7A:D9:86:1B:1C:95:0E:D2:40:21:94:9A:19
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PWj18aSiSXrZhhsclQ7SQCGUmhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.173.0/24
82.109.98.0/24
82.109.151.0/24
87.82.233.0/24
87.83.232.0/24
87.84.188.0/24
87.84.206.0/24
87.84.232.0/24
87.85.97.0/24
87.85.129.0/24
87.85.133.0/24
212.135.19.0/24
212.212.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f9:bb:f7:c2:87:25:ae:15:32:69:08:55:2d:a4:b7:c2:7b:
d6:b6:12:67:1c:c9:ee:b5:f6:7e:4a:d9:89:8c:d6:69:2f:df:
0b:85:0c:fa:87:49:a2:22:26:74:7c:b1:3b:50:e9:03:8f:61:
a8:18:03:a7:bc:79:15:4b:fc:71:c0:41:b7:fc:1d:16:4e:45:
6d:93:84:27:19:c1:de:72:57:36:99:83:3f:1c:25:0e:83:81:
7a:a6:14:e5:ff:8b:d1:98:1f:d2:52:2c:84:ce:f6:b3:8a:9e:
b4:b5:b3:f7:42:1e:b7:43:a7:85:3f:59:d8:ac:b4:f8:50:48:
1d:ba:84:68:cd:f9:03:1b:66:fc:89:50:0f:ea:58:f3:8e:d4:
b8:01:7c:9c:a0:9e:c0:34:b1:3d:82:f7:3f:53:a3:e2:43:ef:
34:19:ff:10:86:c8:2b:a4:bf:eb:38:d8:64:b9:f9:97:7b:d8:
cf:81:77:97:45:84:0d:69:1b:8f:17:5a:56:7e:ec:7f:a6:82:
76:39:56:5c:05:c4:a8:c2:f4:07:9b:18:de:3f:fa:01:90:83:
a4:9f:1c:6c:9d:4a:9c:e5:b6:94:a1:af:12:38:1b:0d:6f:4e:
32:e1:df:e9:e2:12:85:b6:ef:26:04:c2:50:b8:f3:74:b8:51:
87:5e:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:33 2026 by rpki-client