Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/R_4tucMZUfRx4T-jIrCHd0K_6VY.roa
File: R_4tucMZUfRx4T-jIrCHd0K_6VY.roa (raw, json)
Hash identifier: P17gfbYcZ1ikiCFqHMokZiYtNwfaEDE2Gvm0WWpWOBg=
Subject key identifier: 47:FE:2D:B9:C3:19:51:F4:71:E1:3F:A3:22:B0:87:77:42:BF:E9:56
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A08A1D41B823F3FA1027E783D80224F963
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/R_4tucMZUfRx4T-jIrCHd0K_6VY.roa
Signing time: Thu 10 Sep 2026 06:59:28 +0000
ROA not before: Thu 10 Sep 2026 06:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 979
IP address blocks: 82.108.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1d:41:b8:23:f3:fa:10:27:e7:83:d8:02:24:f9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 10 06:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47fe2db9c31951f471e13fa322b0877742bfe956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:df:af:1f:e1:ec:67:31:55:43:5c:1c:d9:
26:71:ca:b4:8f:8f:20:a8:51:08:f2:5b:f5:37:04:
89:f6:1f:07:03:ef:cf:32:45:63:98:f3:5f:96:11:
33:40:4e:b0:bf:55:06:df:5b:1f:6e:b2:17:85:48:
bd:02:aa:2a:7c:d8:11:68:57:3a:65:f2:ed:31:fa:
2d:12:a4:1d:81:29:1c:e8:8a:0e:fe:72:be:8a:dc:
69:d3:ce:03:b0:6d:7a:2c:84:ad:3d:1d:a4:76:48:
e1:7a:6b:5d:0a:23:b2:2d:8c:9c:11:76:7a:d2:d6:
92:91:c7:47:b2:8a:cd:01:56:30:e3:8b:5b:03:d9:
cb:93:42:b5:c2:63:91:a9:dd:36:60:66:02:27:5f:
fe:67:0e:21:40:4f:fa:ec:5a:91:05:45:e3:b6:4b:
50:31:d3:78:4c:dd:60:f0:d5:a7:00:9b:f6:80:6e:
5f:7f:85:23:64:06:1d:2b:fd:bd:4c:06:70:9c:18:
58:0a:58:9d:b4:2e:4a:8d:a8:66:db:54:29:76:d4:
9b:e4:78:3f:1e:25:2d:10:ee:74:48:21:cc:73:24:
5d:af:5f:76:d7:c3:bb:8a:1c:44:ce:02:6e:eb:38:
af:c3:1b:83:64:66:73:08:99:bc:b5:a4:20:ea:9e:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:2D:B9:C3:19:51:F4:71:E1:3F:A3:22:B0:87:77:42:BF:E9:56
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/R_4tucMZUfRx4T-jIrCHd0K_6VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.196.0/23
Signature Algorithm: sha256WithRSAEncryption
85:e0:cb:b6:f1:2e:dd:16:7f:f1:a3:c2:75:1c:a4:1c:d4:67:
19:ea:f8:4f:93:04:be:9a:41:1a:93:0a:db:80:6a:b6:4f:fd:
38:92:bc:b7:0c:45:7e:83:51:e9:a6:6c:32:d3:28:c5:85:20:
80:46:0a:f5:ec:ec:8c:81:32:4b:bf:a6:f7:a4:34:69:a2:15:
0a:6f:1c:a9:9d:71:77:35:22:dd:46:4f:8c:be:41:f1:40:c7:
b9:a5:06:bd:b9:bb:76:88:3d:f0:c9:4b:ed:e5:db:11:4e:e9:
d4:4b:e7:a5:3a:49:e4:96:86:c3:e0:a0:b2:7b:d0:2e:ce:55:
34:af:9d:fb:bc:92:1c:54:48:7e:38:0e:79:fb:31:50:9b:4b:
25:8b:48:10:8f:a3:3c:a2:d8:45:b1:24:3c:b2:2a:4c:8e:ab:
22:33:4a:17:a9:a2:3e:b7:2d:b6:18:80:80:54:d5:c4:ca:8b:
9c:bf:ff:4a:4d:c8:d7:24:ba:bb:45:cb:b9:b0:40:1f:dd:64:
79:06:5c:34:72:2e:d0:59:0a:29:ea:38:51:ce:59:51:7a:be:
a9:73:cf:08:c5:6c:49:cb:41:18:7c:ad:62:e5:2d:0c:a7:ff:
03:29:88:ca:a5:4f:81:1a:ed:e8:0d:80:9f:7f:62:da:50:f5:
ce:23:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:01:10 2026 by rpki-client