Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/a1yEHuSLk6ChID2HZLUOpfGWWWc.roa
File: a1yEHuSLk6ChID2HZLUOpfGWWWc.roa (raw, json)
Hash identifier: G6JEZfI/+/2CnX5AAFdLMih075JU2t9Q5ddUCCff/Ps=
Subject key identifier: 6B:5C:84:1E:E4:8B:93:A0:A1:20:3D:87:64:B5:0E:A5:F1:96:59:67
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F78C836EFA42AB73C975FD7231E16ADBE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/a1yEHuSLk6ChID2HZLUOpfGWWWc.roa
Signing time: Sun 19 Jul 2026 05:10:14 +0000
ROA not before: Sun 19 Jul 2026 05:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 82.108.173.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.84.188.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
87.85.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:78:c8:36:ef:a4:2a:b7:3c:97:5f:d7:23:1e:16:ad:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 19 05:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b5c841ee48b93a0a1203d8764b50ea5f1965967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:c4:59:b4:70:89:f9:b8:78:67:01:02:09:
f8:51:4f:d9:bc:5f:4f:f7:bd:20:83:7e:fd:f7:75:
cd:8e:ea:ad:cf:f1:c8:04:b1:a4:1a:3b:40:59:33:
61:34:d3:a5:d4:a5:e0:73:42:f7:9b:17:13:97:4e:
4c:1a:b3:c5:4d:ac:90:36:da:bb:21:99:e8:4b:cf:
a8:59:d4:bf:60:e6:6c:f1:7c:a3:83:17:be:11:62:
38:7b:b2:18:4c:7a:51:b5:a5:35:24:3e:1c:55:a6:
81:ff:a2:7c:b3:cb:a0:8f:99:16:06:ef:20:92:ed:
5a:54:20:d4:4e:f0:52:72:f6:a5:17:e0:74:1a:19:
8a:22:e0:37:98:14:bb:2f:4b:cc:93:1c:fe:3b:59:
ee:56:38:4e:93:4f:f9:96:1e:ac:ee:5e:cc:d2:f5:
a5:7d:ff:f5:b8:f5:c1:2d:b4:20:03:a9:91:d7:c7:
b6:1c:66:d5:72:e6:49:3c:78:b9:e5:81:aa:a3:00:
ad:af:7f:ad:74:c9:59:9f:a3:bf:13:bf:8f:aa:d6:
38:e2:97:e6:8e:32:0b:81:35:76:6d:e8:3f:8e:40:
36:52:f5:94:82:4d:12:f3:f3:31:09:fa:20:96:5f:
1f:50:c3:96:c0:38:88:dd:c7:ed:d5:66:1b:26:e2:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:84:1E:E4:8B:93:A0:A1:20:3D:87:64:B5:0E:A5:F1:96:59:67
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/a1yEHuSLk6ChID2HZLUOpfGWWWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.173.0/24
82.109.98.0/24
82.109.151.0/24
87.83.232.0/24
87.84.188.0/24
87.84.232.0/24
87.85.97.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:b6:34:63:c2:eb:c7:7a:11:3d:1d:be:a5:b8:ee:98:b4:46:
46:9b:71:f4:c2:dd:1d:99:38:b6:dd:8c:c3:4b:92:2f:0c:25:
ba:fe:92:4a:71:b2:71:0f:df:68:67:9a:ea:3c:24:a0:0e:85:
c7:32:97:e4:70:bb:fe:0a:97:95:af:0d:53:67:29:7e:54:4e:
a4:c5:ac:9d:34:78:30:70:43:33:78:51:63:19:e4:b1:73:34:
30:88:ea:b0:3d:1b:ce:55:66:b1:4c:53:c5:b7:8b:6d:49:1e:
81:a9:11:2a:8e:e3:1b:bc:21:e5:b1:d9:c1:96:e8:a8:52:fd:
76:5d:db:20:5a:ce:7d:dd:19:b2:05:6e:b8:9a:36:30:d7:6d:
fe:4b:d9:e5:55:6b:f2:38:f6:42:47:f3:34:a5:f9:c5:9f:71:
dd:36:88:40:26:87:14:6d:e3:95:9e:25:29:09:35:91:10:05:
7a:5d:92:79:5e:13:19:f4:c3:a5:0e:05:95:2d:ca:2f:da:b1:
b3:f1:14:fb:01:ec:6c:8f:15:d1:a7:04:cb:09:7e:9a:98:df:
70:b6:b2:ee:b0:7a:20:c9:21:fa:a1:9e:3c:67:80:31:8a:cf:
0e:28:04:70:b7:f1:03:34:b3:b6:69:d4:43:08:40:18:30:d7:
dd:12:ae:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:45 2026 by rpki-client