Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VxdhtV7rFu8I3HMMzxQBMS6zvIg.roa
File: VxdhtV7rFu8I3HMMzxQBMS6zvIg.roa (raw, json)
Hash identifier: Z4VAIymTtRMUS9H+w/zf4ZpXd2MUW1oNHRKMFuNn/1c=
Subject key identifier: 57:17:61:B5:5E:EB:16:EF:08:DC:73:0C:CF:14:01:31:2E:B3:BC:88
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A07BB5B6EB2BECD1D15E3EBCD4A02357CA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VxdhtV7rFu8I3HMMzxQBMS6zvIg.roa
Signing time: Mon 07 Sep 2026 11:51:41 +0000
ROA not before: Mon 07 Sep 2026 11:51:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 82.109.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:b5:b6:eb:2b:ec:d1:d1:5e:3e:bc:d4:a0:23:57:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 7 11:51:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=571761b55eeb16ef08dc730ccf1401312eb3bc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:e0:bc:24:47:ec:f5:36:87:05:58:0b:cb:
06:97:86:8a:f2:c7:f0:d5:04:7a:cb:ec:bd:ee:9f:
92:90:e9:9c:71:73:5c:4e:1a:b1:17:a8:ae:62:a6:
17:cf:28:04:8c:b1:0c:a1:f8:13:b5:8e:06:b4:ba:
c1:57:05:b3:9f:0d:93:df:53:ea:c5:30:2c:20:5c:
a1:ab:26:b6:91:21:61:ba:3c:c7:a3:a7:e5:7a:87:
83:7a:60:b4:3f:b4:12:0f:1a:21:a6:13:fa:b8:c1:
27:94:b7:e6:b8:29:43:5a:82:48:64:b7:bd:5c:36:
79:d8:44:5d:de:c6:37:bb:f2:53:ec:83:2d:93:c8:
4a:6f:e4:fb:ce:ae:9c:a4:5b:eb:a7:7e:4d:e6:02:
2b:20:35:c2:4f:e6:31:62:72:d3:a8:a9:ae:c9:85:
b7:fa:9f:d9:21:6d:f7:b0:7e:ac:2b:69:46:0b:e4:
e1:d4:80:a9:53:b4:c2:71:36:c3:85:3d:c4:45:49:
74:0d:88:0d:bc:ec:0d:57:f5:42:37:29:ad:bc:65:
39:40:d6:e6:56:d7:b9:24:de:20:f3:5c:c9:4b:1d:
85:27:63:df:87:b6:db:83:8e:99:d2:f4:61:4f:8f:
79:78:c0:8b:3f:93:58:1d:63:1e:f5:ad:fd:08:8d:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:61:B5:5E:EB:16:EF:08:DC:73:0C:CF:14:01:31:2E:B3:BC:88
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VxdhtV7rFu8I3HMMzxQBMS6zvIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.152.0/24
Signature Algorithm: sha256WithRSAEncryption
82:68:41:b3:65:d7:e8:59:33:e9:0a:8a:2b:a6:09:c3:32:e6:
44:66:e8:d8:07:c8:9b:a7:37:2a:fc:05:68:81:b9:42:e0:37:
14:08:ae:55:85:d7:ca:93:6a:21:1c:d4:c2:33:80:0c:d8:50:
c4:a6:c1:2e:61:7f:3b:75:f7:22:a0:1c:2f:bd:a9:e5:c8:9b:
67:29:80:0f:07:52:10:2a:da:f6:df:81:36:27:69:02:41:8b:
3f:19:0b:1a:a6:96:28:da:68:36:8d:5a:28:4b:15:17:bf:d3:
22:c3:c9:25:58:4a:0a:37:a3:45:bb:dd:ef:ea:64:e5:1f:33:
f6:a5:8a:86:6a:88:7e:a5:e4:a1:6c:21:7f:d2:5c:89:57:a5:
3b:79:4a:38:44:42:1b:de:ac:e8:8c:22:fc:68:f2:e5:1a:04:
81:4c:3c:c8:46:64:84:8c:d6:02:a1:9b:a6:ff:2d:b5:d5:ad:
62:8b:73:77:8a:9e:15:95:d6:27:c9:62:cf:01:b5:3a:d5:1e:
3d:d1:b6:f4:6f:a3:79:52:c5:17:5d:8c:7a:93:99:68:86:8d:
a6:5c:de:c1:fb:2b:ae:74:ed:25:5d:57:8b:6c:22:2a:8b:01:
2f:56:dc:ae:28:37:47:49:8c:fc:67:ba:58:f5:69:05:d4:d3:
84:74:21:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 00:03:32 2026 by rpki-client