Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S-yB20CBCykVXQ9FH25U2aAkUbo.roa
File: S-yB20CBCykVXQ9FH25U2aAkUbo.roa (raw, json)
Hash identifier: ETqURSmA1kBLlIATu1tutDi+D3gUn8ODEgRtJ0+VpH0=
Subject key identifier: 4B:EC:81:DB:40:81:0B:29:15:5D:0F:45:1F:6E:54:D9:A0:24:51:BA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FCBB9C1475AE4D4F71F8546A236A3B806
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S-yB20CBCykVXQ9FH25U2aAkUbo.roa
Signing time: Tue 04 Aug 2026 07:42:56 +0000
ROA not before: Tue 04 Aug 2026 07:42:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154603
IP address blocks: 82.110.49.0/24 maxlen: 24
87.82.254.0/24 maxlen: 24
87.83.13.0/24 maxlen: 24
87.84.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:b9:c1:47:5a:e4:d4:f7:1f:85:46:a2:36:a3:b8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 4 07:42:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bec81db40810b29155d0f451f6e54d9a02451ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:4e:58:f1:64:6a:68:5a:d6:e9:3b:5e:85:
f3:6e:b8:2f:2d:2d:1c:98:a2:02:b3:69:03:8e:17:
e0:c6:94:aa:64:4b:cd:03:6f:dd:ce:39:a6:d1:e6:
d9:7f:14:b4:e1:23:fc:c4:4a:3f:81:4d:7e:49:0b:
e2:e6:a5:cc:bd:e5:e4:34:23:f7:fc:55:04:48:c3:
75:f4:73:e2:91:7e:11:7e:e9:3e:22:1f:2c:73:71:
e2:01:95:ff:0a:ef:63:33:c1:6c:26:81:4a:4d:b1:
a6:e7:fd:f1:4a:0d:52:50:e1:c2:19:1e:ad:95:c4:
b7:62:df:69:cb:cf:f2:81:53:ed:00:fa:59:25:66:
51:e3:1b:8c:21:c1:43:73:26:09:d0:f2:11:3e:c9:
52:13:bc:16:e4:0c:cf:9e:64:8a:0d:76:a0:6a:26:
7d:16:7a:70:a9:64:41:ea:8e:ce:96:11:4b:0c:ec:
09:a4:32:7a:d5:4b:9f:33:25:39:d0:92:6d:53:8b:
8f:9c:f0:bb:90:ad:f2:91:8e:a3:0d:8b:f6:4b:da:
27:d3:00:a1:99:6f:e6:33:19:41:30:97:b3:1f:b5:
55:d4:a9:a7:65:79:ca:1c:31:66:9c:19:ad:56:ea:
0c:05:45:89:7d:ac:46:ae:71:ab:c2:16:cc:a7:ce:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:81:DB:40:81:0B:29:15:5D:0F:45:1F:6E:54:D9:A0:24:51:BA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S-yB20CBCykVXQ9FH25U2aAkUbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.49.0/24
87.82.254.0/24
87.83.13.0/24
87.84.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:95:8f:1d:06:7e:94:c1:e6:37:86:bb:c6:95:4d:fe:f5:7c:
9e:12:96:40:fb:8f:85:a7:ed:b4:34:75:3c:fa:e7:df:88:d8:
83:a4:d6:36:88:cb:b0:ba:7c:1f:b7:46:75:91:51:53:20:ec:
74:57:28:67:63:d0:87:84:02:bd:6f:ca:b0:f0:8b:9e:a5:58:
47:32:4c:52:6f:11:73:4b:32:48:12:d6:bd:95:67:3d:01:70:
d5:7b:26:f6:b8:9c:ba:48:df:84:8d:b4:49:06:32:95:44:90:
90:24:a1:16:b0:8a:3b:b2:51:f8:ed:cf:fc:cd:c2:09:e1:6d:
2e:b9:21:47:b8:d1:8c:05:c0:f1:e9:b2:05:f4:7c:17:d2:b8:
e9:62:ec:43:28:34:d4:f9:b3:d1:0e:38:42:1c:85:69:52:9b:
20:95:75:ef:9a:ac:82:ac:07:b7:e1:af:08:6a:f3:ad:ad:0f:
8f:0c:b9:cb:96:e9:20:83:9f:e1:07:52:85:67:2b:0e:b7:9f:
89:2b:e7:fc:f1:2d:62:cd:3f:9d:2a:df:72:45:45:79:a0:ca:
c1:52:98:4d:8b:20:8b:ad:4f:aa:2d:e6:7c:16:c8:6e:d6:9b:
88:32:72:c4:ca:59:ff:e7:39:92:07:4b:2a:2a:77:48:f6:eb:
3f:df:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:34 2026 by rpki-client