Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bSnKUtAzkL_SKrrweJQpFObjRV0.roa
File: bSnKUtAzkL_SKrrweJQpFObjRV0.roa (raw, json)
Hash identifier: JVYejohSughBeFHNeU2ij/d5KLhN98CmX9Fa+9FT5c4=
Subject key identifier: 6D:29:CA:52:D0:33:90:BF:D2:2A:BA:F0:78:94:29:14:E6:E3:45:5D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F65111AE814D079AA88F0D0892B3A9052
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bSnKUtAzkL_SKrrweJQpFObjRV0.roa
Signing time: Wed 15 Jul 2026 09:17:27 +0000
ROA not before: Wed 15 Jul 2026 09:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 82.109.102.0/24 maxlen: 24
87.82.235.0/24 maxlen: 24
87.84.206.0/24 maxlen: 24
87.85.129.0/24 maxlen: 24
87.85.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:11:1a:e8:14:d0:79:aa:88:f0:d0:89:2b:3a:90:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 15 09:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d29ca52d03390bfd22abaf078942914e6e3455d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4c:fd:e6:ca:0e:37:21:4a:e7:a8:c9:63:c4:
ac:fb:b2:02:f6:bc:cb:d0:69:f9:c2:37:2f:4d:25:
6f:c2:1e:85:5c:fd:7c:52:70:32:ff:30:7b:50:f1:
f9:67:81:fc:34:47:de:b0:6c:f9:53:72:62:dd:32:
5d:3b:5c:78:0f:04:12:73:c9:38:9e:d2:80:f3:0d:
8d:f3:80:75:ca:a4:98:df:83:21:07:34:c2:c6:8e:
80:17:01:e2:1a:6a:c4:a8:ae:c1:44:13:f4:c4:67:
ca:5b:c4:9e:6b:4a:e7:e3:c2:b1:29:ad:02:58:4d:
3f:58:6f:69:66:1c:f8:6e:1e:71:68:b1:02:ba:8e:
4d:cf:26:94:06:eb:92:c9:41:f8:91:71:dd:fa:e9:
8a:71:7a:d1:f4:30:4b:41:fd:e4:d5:ad:f7:11:c9:
9c:b2:c4:92:2e:1a:be:4b:fa:25:70:c5:a0:a6:58:
9d:e0:7b:9c:c7:68:18:8d:40:b5:3d:c0:f5:7d:c4:
a9:0b:45:2b:9e:88:74:33:d8:6d:42:7c:1b:7b:f9:
de:11:1e:fe:4a:bf:75:f8:5d:23:79:69:23:a3:a3:
e3:39:fe:ad:0d:8d:3d:8a:a1:17:cf:c0:04:28:e5:
db:87:70:4b:45:6e:95:2a:1b:5e:de:77:49:10:16:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:29:CA:52:D0:33:90:BF:D2:2A:BA:F0:78:94:29:14:E6:E3:45:5D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bSnKUtAzkL_SKrrweJQpFObjRV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.102.0/24
87.82.235.0/24
87.84.206.0/24
87.85.129.0/24
87.85.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:fb:f3:09:9b:73:ff:fe:19:59:b8:af:08:3c:8d:c3:36:ea:
17:1d:c2:80:ca:7e:40:28:7f:4f:d0:8e:17:7a:a1:89:dc:bd:
d0:84:04:13:2a:ff:55:98:d3:d1:39:c1:ad:50:fe:50:b2:97:
6f:31:de:f3:d8:7d:b1:f9:be:ed:90:aa:c1:12:42:e5:47:6c:
8d:15:5a:5d:c0:29:a1:6e:72:5d:05:8f:e2:d9:58:ac:96:eb:
db:28:ca:8b:20:4c:88:6a:13:10:67:b0:eb:51:3d:52:db:e1:
ef:b3:9b:a3:a7:72:55:2e:b6:11:53:56:be:5f:49:8b:04:e3:
b5:75:5a:b4:5d:c2:6e:22:1b:62:d9:61:a4:cb:22:6b:db:28:
85:6d:0d:95:2c:79:6d:2b:06:fd:6a:c8:c2:4a:a6:23:8a:4b:
20:e6:3d:b9:c3:16:b1:63:41:ab:30:fd:20:cc:d3:6c:c4:fa:
6a:13:4d:98:5b:f3:c9:c7:79:5e:fc:6c:0a:15:6b:3a:57:5e:
84:28:2b:0d:e9:19:c5:2c:68:8c:f4:2b:f2:b0:8f:2a:db:79:
a8:a8:56:1b:bc:76:fc:31:d1:23:5e:f0:41:75:d6:de:62:b4:
70:7c:a2:b8:8f:fb:1f:7e:f0:20:cd:70:08:e1:16:dd:1c:7b:
95:e4:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:27 2026 by rpki-client