Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Zhpm8I8uVkbnGau6_C8dxX3Bs8U.roa
File: Zhpm8I8uVkbnGau6_C8dxX3Bs8U.roa (raw, json)
Hash identifier: hyMWMUB+TMGWOyEM9DV4TBh+266BYB/EYSZPb++FpsA=
Subject key identifier: 66:1A:66:F0:8F:2E:56:46:E7:19:AB:BA:FC:2F:1D:C5:7D:C1:B3:C5
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0611FF8E63F324500F9A3EE6284CCCAE1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Zhpm8I8uVkbnGau6_C8dxX3Bs8U.roa
Signing time: Wed 02 Sep 2026 07:58:00 +0000
ROA not before: Wed 02 Sep 2026 07:58:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 82.108.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:1f:f8:e6:3f:32:45:00:f9:a3:ee:62:84:cc:ca:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 2 07:58:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=661a66f08f2e5646e719abbafc2f1dc57dc1b3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:1b:45:52:8e:2a:55:73:7d:de:9e:9f:a6:
03:0d:67:2e:a4:ae:d4:48:e4:37:f2:d8:38:4d:b3:
f3:28:df:7a:98:f1:8d:20:05:59:f5:b4:d8:07:a1:
ed:87:49:b2:a2:ec:e0:16:1b:da:3e:7c:8c:84:6f:
c1:ad:8d:29:49:0e:a3:fe:c2:99:3f:22:1d:2e:2b:
b6:39:01:3f:8f:21:8f:ac:4a:de:ea:98:06:36:f6:
5d:0a:34:7b:ed:d7:73:21:3d:bf:11:8b:64:14:41:
aa:ed:fa:b4:76:b0:0d:0a:e3:83:67:7a:08:d2:ca:
9a:db:de:3e:ac:0b:8e:ed:c5:c5:bf:db:cf:8e:bc:
81:25:48:15:37:76:1b:49:2a:5d:3b:ee:a3:51:35:
4d:3e:3b:b6:3d:c7:7f:7e:58:dc:84:62:01:5a:6c:
96:d1:eb:70:25:7e:25:7a:e5:bc:d0:45:3b:07:94:
59:4a:c0:5f:1c:b7:4c:ac:fd:94:2c:f0:42:a3:8c:
05:0e:ba:83:75:38:d6:95:92:2d:41:3a:b0:9b:45:
65:12:68:3f:06:89:7e:8a:8f:65:8c:13:61:a2:c8:
e1:98:15:8f:c7:e0:d6:fb:17:45:b1:11:4d:c9:8f:
a8:f9:51:eb:1e:74:e1:e0:bf:f6:6c:e1:45:40:ae:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1A:66:F0:8F:2E:56:46:E7:19:AB:BA:FC:2F:1D:C5:7D:C1:B3:C5
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Zhpm8I8uVkbnGau6_C8dxX3Bs8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.220.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8e:c1:fc:58:c7:9e:a7:44:c7:38:e8:2d:00:e1:ef:2d:ca:
60:7e:04:1a:de:42:e8:b4:92:53:4e:59:72:b3:3e:91:6e:d7:
de:25:01:9b:67:6b:18:31:5a:cb:b2:6a:5b:87:0c:20:e3:a4:
a7:97:31:2e:48:ec:2d:61:21:42:8a:f1:e0:37:f3:43:05:a1:
80:36:f7:b8:57:e4:93:66:4a:a1:cd:b4:fa:86:77:ec:e3:34:
1d:54:67:44:76:8c:62:22:35:1b:ac:5c:3a:ce:d6:a9:e0:e5:
e3:d7:3c:2e:54:99:f0:78:ce:73:f4:5a:58:ff:af:c1:f7:2e:
96:87:33:42:a5:52:06:9e:d3:39:1d:f3:6d:06:d3:c5:33:2b:
3b:c4:34:a3:39:ed:49:fb:51:d3:34:89:8d:c1:08:5f:37:3d:
93:df:ed:55:de:1a:73:76:12:b0:ab:f9:6a:46:ba:b5:3c:a5:
9d:cd:51:b1:b2:cf:c2:29:9c:e5:7e:b4:4d:b9:68:c7:8b:44:
5a:9a:d6:29:eb:13:06:93:1a:0e:19:36:d0:e5:b6:07:9b:fd:
f5:91:7c:03:03:a1:a0:43:4a:92:d1:17:d6:ae:43:d4:a0:c7:
8d:2f:d1:50:da:46:ca:70:9f:08:16:ca:5a:ba:37:23:2c:3a:
06:f1:65:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBhH/jmPzJFAPmj7mKEzMrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTAyMDc1ODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjFhNjZmMDhmMmU1NjQ2ZTcxOWFiYmFmYzJmMWRjNTdkYzFiM2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4kbRVKOKlVzfd6en6YDDWcupK7U
SOQ38tg4TbPzKN96mPGNIAVZ9bTYB6Hth0myouzgFhvaPnyMhG/BrY0pSQ6j/sKZ
PyIdLiu2OQE/jyGPrEre6pgGNvZdCjR77ddzIT2/EYtkFEGq7fq0drANCuODZ3oI
0sqa294+rAuO7cXFv9vPjryBJUgVN3YbSSpdO+6jUTVNPju2Pcd/fljchGIBWmyW
0etwJX4leuW80EU7B5RZSsBfHLdMrP2ULPBCo4wFDrqDdTjWlZItQTqwm0VlEmg/
Bol+io9ljBNhosjhmBWPx+DW+xdFsRFNyY+o+VHrHnTh4L/2bOFFQK536QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGYaZvCPLlZG5xmruvwvHcV9wbPFMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvWmhwbThJOHVWa2JuR2F1Nl9DOGR4WDNCczhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUmzcMA0G
CSqGSIb3DQEBCwUAA4IBAQBVjsH8WMeep0THOOgtAOHvLcpgfgQa3kLotJJTTlly
sz6RbtfeJQGbZ2sYMVrLsmpbhwwg46SnlzEuSOwtYSFCivHgN/NDBaGANve4V+ST
ZkqhzbT6hnfs4zQdVGdEdoxiIjUbrFw6ztap4OXj1zwuVJnweM5z9FpY/6/B9y6W
hzNCpVIGntM5HfNtBtPFMys7xDSjOe1J+1HTNImNwQhfNz2T3+1V3hpzdhKwq/lq
Rrq1PKWdzVGxss/CKZzlfrRNuWjHi0RamtYp6xMGkxoOGTbQ5bYHm/31kXwDA6Gg
Q0qS0RfWrkPUoMeNL9FQ2kbKcJ8IFspaujcjLDoG8WVn
-----END CERTIFICATE-----
Generated at Thu Sep 3 16:53:56 2026 by rpki-client