Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aP0kcklnfIFMr4uv0CzkUFpktcA.roa
File: aP0kcklnfIFMr4uv0CzkUFpktcA.roa (raw, json)
Hash identifier: W6dNBThYTKpTVBSiBV7+Vt0m9wWzzGGqpu//eVVd1ys=
Subject key identifier: 68:FD:24:72:49:67:7C:81:4C:AF:8B:AF:D0:2C:E4:50:5A:64:B5:C0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F7A32C29485BA1ED80F7B010E68A2094D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aP0kcklnfIFMr4uv0CzkUFpktcA.roa
Signing time: Sun 19 Jul 2026 11:46:14 +0000
ROA not before: Sun 19 Jul 2026 11:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 82.109.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:32:c2:94:85:ba:1e:d8:0f:7b:01:0e:68:a2:09:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 19 11:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68fd247249677c814caf8bafd02ce4505a64b5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:67:e9:46:b4:73:fd:c7:73:cf:90:f4:4c:
d0:23:22:64:04:e6:60:a4:93:04:ff:b2:03:36:3f:
f4:e7:cb:44:92:14:cb:d8:88:05:fd:a4:6a:da:98:
f9:d7:03:31:fb:a0:7f:ed:85:a4:d3:3e:7e:6c:97:
a4:00:35:92:de:17:85:31:7d:bb:31:35:43:3c:89:
35:c8:f7:97:9b:ef:ee:5f:e3:90:66:e7:5a:16:43:
29:90:c2:1c:ed:56:1a:77:94:8c:2c:76:52:d2:68:
b0:33:e3:3e:0d:ab:57:03:ea:ea:a3:6d:da:7d:2a:
03:d9:1a:0a:44:a8:bd:6b:de:dd:89:2e:ba:85:76:
a0:a2:24:c8:d4:29:79:d8:df:fc:06:ea:c1:ad:7e:
56:36:5d:ce:d1:cc:81:d2:35:74:00:fe:cc:c9:d6:
d6:6b:61:a9:15:8b:a5:4e:b9:2d:81:a6:c8:c2:c3:
f7:99:26:2d:36:cd:ab:98:0a:42:58:39:bc:48:53:
9a:4b:3e:15:c6:8a:a4:61:58:e2:d4:05:7b:d5:db:
86:d5:b4:ed:c4:6a:2c:35:5b:ec:c9:be:5e:f2:b1:
0a:ab:e1:e7:bd:17:cd:e4:ac:04:9b:76:e3:b9:47:
74:19:c2:e6:02:70:60:4b:46:b3:d1:6e:2d:26:11:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FD:24:72:49:67:7C:81:4C:AF:8B:AF:D0:2C:E4:50:5A:64:B5:C0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aP0kcklnfIFMr4uv0CzkUFpktcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.102.0/24
Signature Algorithm: sha256WithRSAEncryption
39:35:18:eb:d2:d0:34:9b:7b:56:eb:ef:55:be:29:5e:5f:1b:
85:06:e7:ed:f1:7c:91:1f:68:e1:f9:33:7c:31:a4:8f:ef:2e:
91:ea:d1:b5:61:ae:ff:91:ec:45:c8:70:bc:60:d2:fe:44:45:
08:da:41:bf:62:16:88:8c:37:4b:cb:c8:06:51:2d:94:64:28:
32:68:bd:01:57:0b:af:20:a4:d4:65:3a:2c:5b:fc:a6:65:dd:
9e:fc:75:dd:ad:5e:4d:b5:0a:bf:07:0a:64:75:26:2e:be:c3:
af:ab:ea:ee:f9:34:6d:06:55:2f:52:b3:13:0a:82:cd:fc:73:
c4:d3:4b:69:78:87:1e:4b:9c:a9:03:02:01:7f:e3:6d:9e:15:
fc:7e:af:88:ca:88:c2:77:1f:8f:8a:77:fc:fc:d8:10:23:31:
2e:2a:d1:92:89:0d:8d:f0:af:92:9a:6d:44:62:12:51:ed:85:
d1:8c:ac:f6:4a:43:d8:32:32:66:8b:6c:21:59:74:8a:7d:a4:
ae:f0:af:55:27:8e:6d:90:37:30:09:3d:38:28:b9:53:ac:bd:
36:6d:ff:3c:03:21:72:4e:f2:b6:27:23:ce:f1:d7:3d:90:78:
2a:ea:c0:c4:62:1d:fc:fc:a2:83:ed:f6:4b:55:bf:5e:90:0a:
c5:eb:da:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:20 2026 by rpki-client