Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b1cGtmW-8L0Jl5wcPqCkFjG-u1I.roa
File: b1cGtmW-8L0Jl5wcPqCkFjG-u1I.roa (raw, json)
Hash identifier: W+n9C31RceQBW4H9i7XjVSQxta9d4KIRgCM1rPVCO7E=
Subject key identifier: 6F:57:06:B6:65:BE:F0:BD:09:97:9C:1C:3E:A0:A4:16:31:BE:BB:52
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A152A78DC433F3EF75A85AEC2468FA613F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b1cGtmW-8L0Jl5wcPqCkFjG-u1I.roa
Signing time: Mon 19 Oct 2026 05:34:34 +0000
ROA not before: Mon 19 Oct 2026 05:34:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64013
IP address blocks: 82.109.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:a7:8d:c4:33:f3:ef:75:a8:5a:ec:24:68:fa:61:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 19 05:34:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f5706b665bef0bd09979c1c3ea0a41631bebb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:d4:31:bb:27:b8:54:d9:6b:ac:ea:01:92:
e8:35:3e:ba:67:81:22:9f:94:50:9a:42:27:13:b2:
bf:6c:99:d8:97:5e:18:91:12:b1:b1:a8:f3:48:e2:
f1:19:64:2c:52:82:4c:10:8f:ea:76:6c:1e:e7:8c:
f7:e8:ef:55:93:08:24:6c:21:0a:ae:70:b0:91:48:
ea:9e:83:55:ec:5e:0f:60:d7:4b:cf:28:d4:98:17:
c6:56:9c:bd:bd:29:db:c5:b1:49:34:f5:a9:a9:e9:
22:d6:2b:85:85:22:c8:89:24:72:6e:28:0e:4c:ce:
6a:30:42:d6:6d:0a:f8:04:3b:58:60:f0:c5:cf:e3:
43:6f:12:a1:76:66:0b:bf:68:eb:32:ac:41:42:3a:
29:77:e3:cc:96:63:61:6a:9a:29:ac:66:ba:2e:ff:
55:60:41:fc:e6:e9:ca:1f:dd:f5:14:50:1a:3a:22:
4e:77:02:70:96:8d:22:33:3f:1c:0f:35:7b:82:20:
ec:d1:ac:c0:ae:4f:f4:a3:ae:5c:3f:6c:0c:6a:0d:
eb:18:7a:0a:de:e0:90:8c:89:f4:9f:83:c2:9a:91:
ce:67:eb:7f:31:91:d0:e2:c5:fe:42:cb:7f:a9:b5:
17:55:65:c9:f9:33:d2:ea:03:07:05:f7:1a:6c:c1:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:57:06:B6:65:BE:F0:BD:09:97:9C:1C:3E:A0:A4:16:31:BE:BB:52
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b1cGtmW-8L0Jl5wcPqCkFjG-u1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.168.0/22
Signature Algorithm: sha256WithRSAEncryption
41:63:75:e2:87:db:3a:f1:72:4a:11:fe:3c:ee:fe:50:e5:39:
a6:32:87:53:e0:f3:06:72:f9:7c:be:61:fd:4b:13:1b:d3:2b:
28:a8:8a:46:c4:eb:8a:89:98:ff:1b:05:e2:76:d6:ef:3d:64:
f4:61:f4:1b:69:ea:55:d4:ad:4d:31:60:24:1e:3d:5a:d0:e0:
4e:38:bb:19:4f:ea:2b:ef:f2:16:d0:b1:53:e0:21:57:2b:e3:
cd:2b:84:c9:69:a3:8b:70:93:37:b4:76:7f:8e:cd:b0:04:83:
57:9d:22:00:96:8c:b6:53:f7:46:e5:84:01:38:0c:37:f3:15:
63:f1:8a:67:36:08:b8:db:4d:0f:95:70:e6:9d:1c:95:1d:f1:
cc:6b:1d:35:6d:82:1c:92:aa:32:aa:65:f7:7f:ec:ad:f8:ab:
20:43:3c:50:7a:49:1d:36:6b:7b:24:95:3f:77:64:f1:08:54:
16:46:50:9b:75:b6:e6:54:57:8c:b5:73:47:8b:57:bf:98:ec:
e2:b7:74:76:9d:3d:fb:36:84:ab:c9:45:db:fc:ed:3e:70:c8:
9c:9c:05:a6:7e:eb:14:90:81:54:0f:49:41:06:9b:fe:9a:22:
b0:4d:68:61:eb:39:13:14:60:b0:bc:0a:54:16:3d:c0:dc:a8:
39:81:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:03 2026 by rpki-client