Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S3wQhCf2DUHyAaQuja1JavNccRA.roa
File: S3wQhCf2DUHyAaQuja1JavNccRA.roa (raw, json)
Hash identifier: 3mOjl4oOl8FBhUf/ZfmEBVO3d6EIX1q/9LAQyOb8Un8=
Subject key identifier: 4B:7C:10:84:27:F6:0D:41:F2:01:A4:2E:8D:AD:49:6A:F3:5C:71:10
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F1D43675940390C0475F6EBCEC01D8DEB
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S3wQhCf2DUHyAaQuja1JavNccRA.roa
Signing time: Wed 01 Jul 2026 10:39:44 +0000
ROA not before: Wed 01 Jul 2026 10:39:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 82.108.166.0/24 maxlen: 24
82.108.194.0/24 maxlen: 24
82.108.201.0/24 maxlen: 24
87.84.65.0/24 maxlen: 24
87.84.66.0/24 maxlen: 24
87.84.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:43:67:59:40:39:0c:04:75:f6:eb:ce:c0:1d:8d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 1 10:39:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b7c108427f60d41f201a42e8dad496af35c7110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:82:1e:7d:aa:c5:e7:bb:4a:27:19:ca:73:
7f:ad:5f:fb:92:2d:ad:a3:f2:06:63:49:84:7d:6b:
e5:56:74:84:b6:76:8a:31:07:56:6f:e1:8d:a5:85:
21:df:65:40:09:3c:93:f2:4e:27:33:47:15:66:c0:
b1:f0:ab:24:a6:3e:00:48:c8:b4:c5:1d:76:47:f6:
84:cf:27:56:e4:1a:80:02:85:d1:61:7f:17:89:2e:
5a:e7:31:06:de:38:7b:fe:3f:c5:d6:de:af:86:52:
8e:ce:a3:41:fe:6a:a1:69:8d:33:f1:c7:3a:47:5b:
0b:c7:67:cd:fa:25:2f:12:95:08:48:37:57:7d:cc:
51:09:24:dd:c1:cc:6d:75:24:e5:30:77:14:44:8e:
08:52:f1:74:1b:95:af:05:4a:d1:3b:ea:06:7e:2e:
e1:8a:b8:67:6f:36:19:c5:a1:2f:25:d6:9a:e4:8e:
89:9a:64:95:80:52:dc:87:c4:39:48:e3:98:f2:19:
f5:b3:17:b1:b0:17:a4:55:fe:49:53:4e:d4:3e:76:
7f:84:4d:fa:18:be:d3:a3:33:51:0f:68:0a:66:41:
1d:5c:95:08:4d:46:45:4e:a8:c0:28:7f:f6:83:4f:
4b:9d:1b:50:ba:52:f7:d1:e5:50:5b:96:bb:86:6e:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7C:10:84:27:F6:0D:41:F2:01:A4:2E:8D:AD:49:6A:F3:5C:71:10
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S3wQhCf2DUHyAaQuja1JavNccRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.166.0/24
82.108.194.0/24
82.108.201.0/24
87.84.65.0-87.84.66.255
87.84.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:be:54:fa:f3:bc:7e:67:c0:4e:6a:b3:35:ff:db:80:3a:7b:
8a:00:15:7d:a8:15:2a:2f:ed:3d:88:7c:2c:08:9d:d3:d6:e0:
0f:de:c3:4b:dc:71:7f:0a:02:b7:9a:40:11:18:74:8e:87:13:
23:29:29:96:08:1a:9f:18:e7:91:98:66:14:19:28:b9:06:60:
ba:d4:d3:76:91:7a:a8:d9:18:8a:05:29:67:5a:f4:e8:57:3d:
db:34:4a:02:2e:e3:cf:07:d9:a2:0b:fb:79:5a:ce:54:aa:a6:
45:f0:4f:8d:86:e1:2c:2b:d0:9d:63:16:7d:37:b9:d8:41:7b:
c3:49:01:be:fa:04:61:82:e7:05:ea:8a:3d:4a:f6:27:b9:ba:
b2:7b:4b:0f:d9:dc:7f:ad:5c:97:13:51:6e:36:1c:80:3b:83:
9e:07:a9:6a:5d:63:85:71:a8:a2:61:d4:04:27:84:d8:38:23:
9b:62:a3:69:19:7b:a0:18:93:6e:d8:9c:aa:fa:e4:51:c4:70:
77:ad:7b:81:e8:ba:f2:82:ff:d3:50:1c:b3:80:c2:b1:db:3a:
68:cf:bd:0a:ce:07:df:8a:88:a2:9a:22:5b:8d:b9:e8:ed:e0:
de:d1:8a:d8:4f:bd:c6:9b:f7:3b:53:72:fc:f1:5c:12:33:91:
20:6c:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:00 2026 by rpki-client