Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T6_QnjgNCVscatyPnEjahjzuno0.roa
File: T6_QnjgNCVscatyPnEjahjzuno0.roa (raw, json)
Hash identifier: UmVK8BtVReOJ2MvV/NQcp8HGA46qzha/zT7BCBRw+gE=
Subject key identifier: 4F:AF:D0:9E:38:0D:09:5B:1C:6A:DC:8F:9C:48:DA:86:3C:EE:9E:8D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F1CF102792264A5201B1EF5A2F65CF4A3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T6_QnjgNCVscatyPnEjahjzuno0.roa
Signing time: Wed 01 Jul 2026 09:09:44 +0000
ROA not before: Wed 01 Jul 2026 09:09:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197328
IP address blocks: 82.108.125.0/24 maxlen: 24
82.108.126.0/24 maxlen: 24
82.108.127.0/24 maxlen: 24
87.82.198.0/24 maxlen: 24
87.82.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:f1:02:79:22:64:a5:20:1b:1e:f5:a2:f6:5c:f4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 1 09:09:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fafd09e380d095b1c6adc8f9c48da863cee9e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:9a:8b:ca:23:0e:e5:08:53:2e:f2:b7:81:
e4:9c:4f:0b:a9:3a:36:d9:12:ff:b3:92:e0:1d:4f:
0a:a5:18:ab:57:90:01:b8:1f:51:a7:cf:2d:c7:60:
59:cd:0d:32:94:50:c3:ef:b3:fc:10:a6:50:72:7d:
cc:8f:8e:b0:64:ab:15:bd:eb:6b:cf:9d:19:a3:b6:
a3:ca:02:86:52:77:b2:f2:c8:64:55:83:1a:78:92:
5b:8c:e3:23:9b:1b:91:6f:4c:b4:3e:32:be:07:8a:
c3:35:17:83:3d:e0:c1:55:80:cb:7c:44:f2:c4:ab:
4a:e6:ee:81:9a:5d:1f:83:30:8a:fd:2b:fd:61:89:
54:b7:1a:9d:c1:dc:a4:78:0c:d1:24:f2:13:e3:bb:
c3:e7:8c:7d:4c:4f:66:b1:fe:7a:4b:8a:e7:fb:8d:
49:56:68:80:e5:5e:52:8d:3d:d7:85:12:f3:8e:3a:
80:22:83:02:dc:cd:9f:06:5b:52:96:35:5f:64:94:
e2:2e:06:a1:bf:a9:53:32:91:dd:e8:ec:a0:dd:a9:
13:4b:75:a8:31:56:a2:7f:a0:a0:4f:89:17:b3:9d:
59:cf:25:27:bf:aa:4f:78:19:98:ff:f8:66:1f:e8:
77:da:25:75:02:53:82:0a:de:36:d4:b8:58:1c:8f:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:D0:9E:38:0D:09:5B:1C:6A:DC:8F:9C:48:DA:86:3C:EE:9E:8D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T6_QnjgNCVscatyPnEjahjzuno0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.125.0-82.108.127.255
87.82.198.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:0a:28:c1:9e:f7:1b:e2:3d:18:b2:7c:34:33:e9:5f:47:0e:
cb:f2:1c:56:63:28:04:65:37:e1:1b:42:e0:47:e4:59:b8:f8:
42:f6:db:3e:5e:7a:fd:12:49:1b:00:52:01:2a:3d:a7:86:80:
a8:50:79:f3:56:16:59:dc:5a:ca:40:12:96:ab:9e:01:35:7f:
cf:ba:d7:52:49:f5:e6:8e:f3:fe:f2:6e:7e:61:63:15:14:ea:
c5:16:90:db:4b:5a:5a:9b:8c:0e:be:5e:df:06:34:e8:1c:2c:
5b:fb:eb:57:08:e5:dc:82:ca:2f:73:f7:04:8f:e8:36:6f:07:
09:bc:80:b1:18:d4:79:d3:f3:6d:22:1d:f6:88:29:53:b4:bd:
db:cf:40:51:ec:4e:e0:5f:81:b0:28:9a:29:66:ce:09:f2:58:
34:b7:80:75:19:27:24:ba:08:53:b3:41:e9:ec:dd:f4:0a:2a:
17:d3:2f:8c:c2:c5:f1:c6:a0:fd:b1:1d:b1:ce:df:7b:16:ef:
2d:70:91:a4:c4:6b:ff:9b:62:ad:3f:01:9a:82:7a:20:98:b1:
2a:fc:96:10:99:f7:07:4b:f7:22:30:0e:86:3a:e4:d6:40:91:
53:13:db:0c:fa:93:d2:39:d3:9d:c3:ac:cb:68:56:f4:0c:82:
22:b8:a5:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:59:00 2026 by rpki-client