Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/W8gwsjYV7YS_QzUJXSRniVvPYVg.roa
File: W8gwsjYV7YS_QzUJXSRniVvPYVg.roa (raw, json)
Hash identifier: rzkn4tnuXSAy19ccLC2j8/MrlsFg20Vqmjd/sQRHyoM=
Subject key identifier: 5B:C8:30:B2:36:15:ED:84:BF:43:35:09:5D:24:67:89:5B:CF:61:58
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A05C4C3511EC5285F3E7CCA3A0F8F35713
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/W8gwsjYV7YS_QzUJXSRniVvPYVg.roa
Signing time: Tue 01 Sep 2026 09:28:13 +0000
ROA not before: Tue 01 Sep 2026 09:28:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 82.108.3.0/24 maxlen: 24
82.108.43.0/24 maxlen: 24
82.108.51.0/24 maxlen: 24
82.108.57.0/24 maxlen: 24
86.53.144.0/24 maxlen: 24
86.53.145.0/24 maxlen: 24
87.84.197.0/24 maxlen: 24
87.84.199.0/24 maxlen: 24
195.40.153.0/24 maxlen: 24
195.40.154.0/24 maxlen: 24
195.40.155.0/24 maxlen: 24
195.72.165.0/24 maxlen: 24
195.72.170.0/24 maxlen: 24
195.72.175.0/24 maxlen: 24
195.172.120.0/24 maxlen: 24
195.172.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 20:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:4c:35:11:ec:52:85:f3:e7:cc:a3:a0:f8:f3:57:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 1 09:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bc830b23615ed84bf4335095d2467895bcf6158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:4f:f1:ba:a7:f8:38:71:d6:6f:e9:53:ba:
52:bb:ad:01:13:e9:6a:e8:ca:08:52:c4:46:f0:10:
27:ff:9e:4f:43:b7:19:b8:fd:25:34:e9:48:2f:82:
b9:bd:61:83:38:2c:6d:7b:58:69:59:ab:29:95:31:
00:5e:43:9a:4c:1c:0b:74:b7:69:f4:c6:39:60:d4:
08:80:43:14:92:6b:8d:2a:fb:9f:4c:39:a0:f6:89:
64:0d:77:44:ea:d8:cb:7e:54:89:22:79:7e:c4:ae:
41:f4:15:44:66:62:11:7f:b3:b2:e9:7d:73:a6:12:
39:ce:8b:77:fa:1f:05:c7:52:08:ab:60:aa:ba:19:
6b:ee:d1:cb:ed:44:37:da:5f:2b:92:e7:34:03:a4:
94:3d:b6:11:46:62:63:2e:f7:65:9c:f7:bc:9b:5f:
f8:83:88:22:6a:f4:37:23:8f:c1:56:5f:fb:90:26:
f7:03:99:8e:3b:2a:da:df:c1:49:0a:2e:94:77:03:
dc:6e:ae:e6:8c:b8:c3:16:d8:05:11:e8:03:1b:24:
43:47:bc:e4:e5:86:f0:e8:c0:c6:30:a4:f9:95:de:
ef:08:76:cf:b8:ab:f4:7a:49:54:6c:e4:87:e6:b1:
88:79:a3:ca:5b:e8:30:d0:e3:42:a0:55:dd:02:5e:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C8:30:B2:36:15:ED:84:BF:43:35:09:5D:24:67:89:5B:CF:61:58
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/W8gwsjYV7YS_QzUJXSRniVvPYVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.3.0/24
82.108.43.0/24
82.108.51.0/24
82.108.57.0/24
86.53.144.0/23
87.84.197.0/24
87.84.199.0/24
195.40.153.0-195.40.155.255
195.72.165.0/24
195.72.170.0/24
195.72.175.0/24
195.172.120.0/24
195.172.145.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ff:8e:a0:b2:fe:7c:7c:46:af:0b:39:db:15:0b:9e:68:24:
dc:81:9b:dc:53:67:07:aa:90:00:8e:da:dd:a4:67:c7:ea:a8:
1d:8d:01:0f:8d:a0:d0:37:8e:df:f2:31:04:dd:50:3c:cc:9b:
98:63:00:f4:2c:35:76:6b:04:d9:c5:cf:dc:8b:51:50:09:07:
86:be:66:5a:c5:14:5a:65:33:72:e2:b3:52:51:34:7d:ff:5f:
95:7c:d5:33:90:c2:59:4d:d6:9b:41:ac:68:0c:62:fa:6b:08:
fc:7b:d7:3e:96:cc:36:83:22:db:c4:01:71:fa:b0:69:0a:43:
68:52:54:98:d7:ee:12:29:72:5d:13:4d:5a:c7:7e:62:e8:50:
b9:c5:69:73:75:a3:2b:9b:65:e8:ef:0d:81:fe:63:86:44:a3:
52:92:e5:3d:9e:d7:f9:13:3b:2f:d3:43:3c:91:8b:d1:6c:ec:
14:20:f1:7c:c4:ec:cc:c5:7e:6e:6c:1a:9d:82:4c:bc:0e:c8:
7a:a2:66:5a:43:1b:0d:63:27:b9:02:d7:dd:c1:a4:ee:f7:8f:
e2:4f:5d:64:4d:40:f6:05:8b:46:57:82:b5:ac:94:d0:c6:1d:
8a:f5:e9:91:d5:45:a1:0c:e9:bb:2c:4c:4e:4c:2e:f0:b3:83:
b0:c6:8f:8d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAaBcTDUR7FKF8+fMo6D481cTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTAxMDkyODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmM4MzBiMjM2MTVlZDg0YmY0MzM1MDk1ZDI0Njc4OTViY2Y2MTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSNP8bqn+Dhx1m/pU7pSu60BE+lq
6MoIUsRG8BAn/55PQ7cZuP0lNOlIL4K5vWGDOCxte1hpWasplTEAXkOaTBwLdLdp
9MY5YNQIgEMUkmuNKvufTDmg9olkDXdE6tjLflSJInl+xK5B9BVEZmIRf7Oy6X1z
phI5zot3+h8Fx1IIq2Cquhlr7tHL7UQ32l8rkuc0A6SUPbYRRmJjLvdlnPe8m1/4
g4giavQ3I4/BVl/7kCb3A5mOOyra38FJCi6UdwPcbq7mjLjDFtgFEegDGyRDR7zk
5Ybw6MDGMKT5ld7vCHbPuKv0eklUbOSH5rGIeaPKW+gw0ONCoFXdAl5x0QIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFFvIMLI2Fe2Ev0M1CV0kZ4lbz2FYMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvVzhnd3NqWVY3WVNfUXpVSlhTUm5pVnZQWVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAUmwDAwQA
UmwrAwQAUmwzAwQAUmw5AwQBVjWQAwQAV1TFAwQAV1THMAwDBADDKJkDBALDKJgD
BADDSKUDBADDSKoDBADDSK8DBADDrHgDBADDrJEwDQYJKoZIhvcNAQELBQADggEB
AAn/jqCy/nx8Rq8LOdsVC55oJNyBm9xTZweqkACO2t2kZ8fqqB2NAQ+NoNA3jt/y
MQTdUDzMm5hjAPQsNXZrBNnFz9yLUVAJB4a+ZlrFFFplM3Lis1JRNH3/X5V81TOQ
wllN1ptBrGgMYvprCPx71z6WzDaDItvEAXH6sGkKQ2hSVJjX7hIpcl0TTVrHfmLo
ULnFaXN1oyubZejvDYH+Y4ZEo1KS5T2e1/kTOy/TQzyRi9Fs7BQg8XzE7MzFfm5s
Gp2CTLwOyHqiZlpDGw1jJ7kC193BpO73j+JPXWRNQPYFi0ZXgrWslNDGHYr16ZHV
RaEM6bssTE5MLvCzg7DGj40=
-----END CERTIFICATE-----
Generated at Thu Sep 3 02:28:19 2026 by rpki-client