Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WIDntRHDrXV12scxsLYDNE42HWc.roa
File: WIDntRHDrXV12scxsLYDNE42HWc.roa (raw, json)
Hash identifier: Ftn26na7++gWa3+VdFF7nZR8RiFl3IRYpNNyClOQjpc=
Subject key identifier: 58:80:E7:B5:11:C3:AD:75:75:DA:C7:31:B0:B6:03:34:4E:36:1D:67
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A153FB96CBF321F2C1EE4E1F87F4964ADC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WIDntRHDrXV12scxsLYDNE42HWc.roa
Signing time: Mon 19 Oct 2026 11:45:59 +0000
ROA not before: Mon 19 Oct 2026 11:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218862
IP address blocks: 82.108.220.0/24 maxlen: 24
87.82.197.0/24 maxlen: 24
87.83.218.0/24 maxlen: 24
87.84.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:fb:96:cb:f3:21:f2:c1:ee:4e:1f:87:f4:96:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 19 11:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5880e7b511c3ad7575dac731b0b603344e361d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:b5:cb:92:4d:c9:cf:a2:e1:ad:b4:04:6e:
63:5d:bc:e7:ed:56:15:3a:af:1a:ea:9f:de:1d:9c:
0a:88:a3:ac:e5:24:17:70:40:90:cd:9a:49:91:bc:
b8:bb:dc:14:97:31:ad:8e:64:b0:fc:e1:0d:2b:aa:
76:06:e1:c2:4f:13:83:36:2b:7c:9e:54:80:42:85:
51:dd:a5:a8:c0:88:7e:dc:b2:a1:98:bb:2e:a3:60:
93:52:69:30:8d:5c:e6:c5:4d:2a:ea:d6:3b:80:79:
1d:06:8d:5d:d0:0b:aa:40:08:b2:24:71:d0:cb:51:
77:7e:b7:08:e4:de:e5:29:60:7b:76:08:45:19:46:
2b:e8:e7:b0:f0:a4:fc:10:ed:bb:b6:3d:36:18:56:
da:6c:ff:9f:8d:38:ab:c1:12:d2:8d:a6:73:7d:58:
21:26:fb:c4:91:13:d2:33:a0:6b:53:a7:0e:2f:8c:
d8:9a:b2:26:24:32:34:b4:12:ce:98:11:59:ef:8e:
cb:51:d2:30:59:ef:a7:78:a5:15:ad:7d:05:fa:e7:
44:71:90:9f:d5:8d:fb:04:70:9d:fe:be:59:b1:32:
1b:2d:be:80:d8:c9:b8:02:2a:e1:c7:e6:64:b2:ae:
26:68:15:7d:99:1b:7b:b2:3d:a8:62:1c:13:32:fb:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:E7:B5:11:C3:AD:75:75:DA:C7:31:B0:B6:03:34:4E:36:1D:67
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WIDntRHDrXV12scxsLYDNE42HWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.220.0/24
87.82.197.0/24
87.83.218.0/24
87.84.59.0/24
Signature Algorithm: sha256WithRSAEncryption
99:17:01:52:d3:0d:5e:96:54:96:0d:df:f8:44:db:16:9f:91:
5c:9f:94:d3:86:72:03:4b:85:c6:e5:14:b4:77:eb:30:11:4a:
e0:ee:d9:7a:b4:10:89:a0:c1:af:62:23:cf:cd:8e:0e:1b:50:
5a:74:3b:d0:f1:c8:5f:e5:b0:f4:2e:3c:53:87:f3:51:61:7a:
26:c6:6c:eb:a8:4b:25:0a:01:c7:eb:bd:37:86:3e:c0:d1:6e:
23:8a:32:27:5a:9b:6f:31:2b:05:10:7d:db:67:5a:98:16:d0:
40:96:4b:37:8b:f8:04:b4:b8:21:ee:7d:0e:c1:02:45:7b:a5:
5c:47:69:cf:67:dc:aa:5c:57:df:2d:85:b5:8f:2f:74:63:f7:
15:d2:04:03:59:e7:63:cf:7d:9f:02:de:42:72:4b:7e:2a:57:
56:39:21:25:41:ea:8b:5b:5e:6d:12:96:d9:1c:ec:d6:e9:20:
bc:64:49:f8:30:73:35:59:1f:52:4e:ad:3c:d9:c1:2e:f0:06:
1b:fc:5d:17:f4:9d:7d:b6:db:c0:e1:f4:ca:90:a5:84:7b:36:
9a:ea:98:23:20:0f:1b:63:ee:22:e9:61:95:ae:32:24:f7:84:
b8:f2:62:8d:10:13:4a:19:25:df:2d:89:c3:8c:97:9c:87:30:
2d:bd:99:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:33 2026 by rpki-client