Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UnQCvWfr3Pl6fJ6vLFMDGt9D8KE.roa
File: UnQCvWfr3Pl6fJ6vLFMDGt9D8KE.roa (raw, json)
Hash identifier: UiVNMrAutRmNG+q2b2Fz5QFJa3cyVE8m9tDx13ncjn4=
Subject key identifier: 52:74:02:BD:67:EB:DC:F9:7A:7C:9E:AF:2C:53:03:1A:DF:43:F0:A1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FE1746E8B3BBCB59B36BC12B1CF7A7302
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UnQCvWfr3Pl6fJ6vLFMDGt9D8KE.roa
Signing time: Sat 08 Aug 2026 12:58:51 +0000
ROA not before: Sat 08 Aug 2026 12:58:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 82.108.130.0/24 maxlen: 24
82.110.120.0/22 maxlen: 24
87.86.18.0/24 maxlen: 24
87.86.160.0/22 maxlen: 24
212.134.168.0/23 maxlen: 24
212.135.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:74:6e:8b:3b:bc:b5:9b:36:bc:12:b1:cf:7a:73:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 8 12:58:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=527402bd67ebdcf97a7c9eaf2c53031adf43f0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:ab:61:42:4f:2b:7e:86:c6:da:65:48:93:
d7:c3:aa:42:4f:30:36:29:bb:32:b5:5e:d6:b0:24:
52:3e:f5:2e:a2:ba:2f:65:fd:68:f1:1f:25:f2:d0:
84:a5:45:25:f1:34:75:bb:f7:30:89:90:49:d9:aa:
f1:b2:e5:43:00:19:2d:1b:2d:36:ef:a4:43:f0:6f:
2f:bb:d0:5a:8d:e1:5e:27:7c:6c:fd:95:19:48:58:
46:42:7b:6e:68:c2:54:c6:1d:16:6d:d8:a6:75:54:
9a:3f:a7:f0:2a:37:8d:52:bd:c2:df:17:4d:08:e6:
a2:0d:3b:c5:ad:39:2e:6d:3e:b7:25:c9:2e:cb:3c:
f4:61:50:f0:70:a5:9c:5a:a0:bb:85:ff:0a:44:5f:
8c:4b:d6:4b:c4:a1:a6:b7:8d:0f:8c:16:2a:1c:39:
eb:a8:ad:87:4b:93:04:ec:42:73:9c:fe:a2:f5:a8:
69:11:38:3c:aa:32:ec:9b:be:ad:49:c6:a8:59:bb:
68:6f:b4:85:81:8f:a7:43:60:71:bb:94:99:01:ae:
08:08:aa:c6:0e:cf:9e:c2:c5:a0:ec:4f:9f:13:46:
52:a0:37:43:26:cc:e7:76:18:4f:a6:06:71:64:e6:
08:42:b9:02:76:08:ce:ec:45:b9:64:9e:62:23:f0:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:74:02:BD:67:EB:DC:F9:7A:7C:9E:AF:2C:53:03:1A:DF:43:F0:A1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UnQCvWfr3Pl6fJ6vLFMDGt9D8KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.130.0/24
82.110.120.0/22
87.86.18.0/24
87.86.160.0/22
212.134.168.0/23
212.135.192.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:2d:a2:a7:64:67:3e:bd:26:57:14:83:7e:5f:7a:61:ba:b0:
27:fa:0b:a8:91:15:16:5c:bd:7c:92:d8:8a:5c:0f:0f:4e:45:
42:e5:e1:5c:8b:b0:82:ad:0a:61:71:ed:75:39:35:3f:67:fa:
0c:b8:56:24:d6:f4:7e:68:15:30:45:dc:a9:fc:72:54:0d:25:
1a:4d:63:fb:80:d9:13:4c:56:ef:f7:ad:72:33:1f:ca:9a:90:
40:09:2a:4c:79:56:29:32:43:6f:0c:4e:ca:54:5e:4b:2e:58:
16:34:11:8b:6a:ab:3b:6b:9b:28:84:ac:b6:16:9d:44:99:6f:
b8:0a:06:cc:a4:17:c1:fa:69:f2:c6:e3:45:6b:cf:73:8c:69:
3e:49:eb:81:17:c9:96:98:a3:7d:21:89:c5:02:da:f0:08:c4:
78:88:a5:d4:64:a6:0c:52:ba:e3:a8:11:4f:c4:2b:57:7e:d3:
09:24:e7:b7:84:79:d8:d2:96:60:fb:50:fa:fa:b9:61:aa:ce:
2d:66:3b:59:b8:e6:a3:d3:fa:75:7e:bb:7c:b3:57:b6:d1:7c:
c1:be:24:82:52:66:b1:b0:46:01:59:75:d6:80:82:5c:31:21:
eb:36:7e:0f:d3:f2:fc:3f:a1:9d:65:1d:79:e8:e3:53:92:de:
fa:9c:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:56:37 2026 by rpki-client