Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_aYV9jXR-PpjqNp3X7yrxS1lKvE.roa
File: _aYV9jXR-PpjqNp3X7yrxS1lKvE.roa (raw, json)
Hash identifier: hPJPs65J5jBUSGGeNC6l2ShdBtbhMoleRcdb6QVdVyY=
Subject key identifier: FD:A6:15:F6:35:D1:F8:FA:63:A8:DA:77:5F:BC:AB:C5:2D:65:2A:F1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06C999D8239CDF53F5D01EB17028C54F2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_aYV9jXR-PpjqNp3X7yrxS1lKvE.roa
Signing time: Fri 04 Sep 2026 13:26:41 +0000
ROA not before: Fri 04 Sep 2026 13:26:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197752
IP address blocks: 82.110.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:99:9d:82:39:cd:f5:3f:5d:01:eb:17:02:8c:54:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 13:26:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fda615f635d1f8fa63a8da775fbcabc52d652af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:8c:84:94:87:5c:5b:e2:e1:f8:d8:d0:bc:
d0:34:22:23:3e:a7:17:8e:d7:2f:95:ba:68:00:80:
c8:2b:40:e0:ed:a2:62:09:b6:bd:8c:46:87:f9:68:
f3:5c:96:08:c1:52:18:aa:b7:00:40:24:61:b0:81:
c1:80:0c:94:14:3f:43:1b:7a:0e:76:1e:1a:75:52:
12:6c:f9:b7:f9:2d:73:97:11:04:ba:de:f6:9e:7a:
6f:33:b5:41:89:27:06:f4:d7:d6:40:f2:0b:6b:42:
39:a0:0d:53:16:0b:7b:32:fe:f4:ea:1e:b0:d2:18:
78:41:35:06:6f:77:dc:5b:46:8a:cd:9b:cd:0d:39:
db:e4:2a:af:a1:8c:60:81:cd:68:03:53:36:91:b6:
c7:4c:6b:65:cf:7b:4b:7c:8b:49:13:b6:3d:1f:99:
13:4c:f8:ab:ab:37:49:cd:4a:47:19:a7:75:98:91:
ee:c1:7a:c6:bf:3b:1b:ad:24:f3:1f:fe:df:7e:19:
2c:87:20:01:06:51:73:b7:38:76:ec:16:81:11:4a:
16:f0:97:c6:f2:1c:e0:8a:79:63:40:28:3e:5b:cd:
ef:6e:46:1d:aa:9f:b9:ec:0d:5b:fa:a4:36:7b:ac:
38:71:30:3e:cf:87:95:7c:50:e9:d9:2e:ed:c6:ab:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:15:F6:35:D1:F8:FA:63:A8:DA:77:5F:BC:AB:C5:2D:65:2A:F1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_aYV9jXR-PpjqNp3X7yrxS1lKvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.108.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:8c:5a:b4:84:6d:a7:e4:5d:77:7f:e5:34:d9:5f:c9:88:67:
8c:46:cd:78:36:f5:94:52:b2:10:06:40:63:1a:8e:41:9d:c5:
f2:3c:69:8b:e7:37:d4:58:12:f8:f0:8e:b8:ce:36:d9:dd:27:
af:e6:0e:8d:cb:f7:bd:00:27:68:8f:e9:a1:ae:bd:2b:c4:64:
70:a1:d6:37:5d:10:fa:dd:53:9e:f5:1a:76:2e:24:64:87:29:
17:59:84:8b:e2:3f:39:7e:aa:e0:c2:86:4d:f6:fa:d2:d3:9d:
35:4a:3a:d9:76:2c:73:22:7c:39:cf:90:26:8b:af:13:ee:46:
90:b2:50:6e:cd:ed:76:fe:41:b1:35:20:10:0a:b5:9a:db:a4:
4d:7f:d3:07:a9:e5:8d:96:92:c5:20:09:de:bb:fc:c3:1f:55:
47:9e:ac:e8:cd:2e:9b:37:47:42:66:a2:68:f8:ce:7e:28:d5:
7f:d0:8c:14:d8:44:b7:74:a6:3d:df:96:e0:87:46:71:e2:55:
bc:01:6a:2d:53:f1:05:f4:07:6c:34:f5:be:d4:2f:7c:74:5a:
95:6d:ee:e0:7a:cc:fe:ae:65:d1:ca:be:44:89:1e:66:35:6b:
3a:50:af:f6:c2:19:72:3f:5c:37:2a:38:37:14:05:3f:b4:15:
8f:f0:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:21 2026 by rpki-client