Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cAUlZir-hu9EaU7rfxtouHXA14g.roa
File: cAUlZir-hu9EaU7rfxtouHXA14g.roa (raw, json)
Hash identifier: LkRhIx43oKWJg1vnnnG0Cl04FBo0u66AhH3ax7TrncU=
Subject key identifier: 70:05:25:66:2A:FE:86:EF:44:69:4E:EB:7F:1B:68:B8:75:C0:D7:88
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0633BD8E7B5CDC7A07144B5C896C19EB1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cAUlZir-hu9EaU7rfxtouHXA14g.roa
Signing time: Wed 02 Sep 2026 17:47:41 +0000
ROA not before: Wed 02 Sep 2026 17:47:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 268624
IP address blocks: 82.108.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:3b:d8:e7:b5:cd:c7:a0:71:44:b5:c8:96:c1:9e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 2 17:47:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=700525662afe86ef44694eeb7f1b68b875c0d788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:cd:61:22:63:62:9b:5f:a9:00:ab:07:dc:
a9:96:42:04:2b:44:c3:aa:e6:9a:dd:12:f5:55:af:
20:f1:2a:70:54:02:9c:0f:47:90:89:14:cb:f2:4e:
d4:f5:c9:28:40:18:dd:42:e7:0a:b4:aa:22:c5:87:
e5:6b:44:15:8c:1b:f5:3d:b0:4c:59:f5:d7:3c:fa:
b3:7d:f2:52:9f:24:6b:6c:0b:5a:e9:a9:e0:7d:3c:
85:04:2b:a6:90:4e:a6:c8:b4:dd:7c:3d:71:48:09:
fc:8e:9b:5f:ec:6d:3e:63:4c:85:47:a4:06:5f:47:
5f:c0:35:2e:44:16:7e:39:22:c6:84:d5:7f:b7:87:
33:c6:4a:b3:e6:be:c5:c2:4f:99:89:c2:05:c2:02:
8e:aa:de:6d:89:e4:64:9d:35:2e:a0:1e:e1:2e:bf:
59:17:3a:d5:ee:13:41:e0:45:78:5f:de:5a:bb:a9:
86:93:30:29:74:77:4d:26:20:9e:d9:11:65:87:b2:
c5:c3:91:9d:65:a3:c7:fa:b1:2e:1f:f4:46:8e:91:
7e:48:00:a7:39:14:5a:33:06:0d:9a:05:5b:ad:06:
5b:13:d5:56:72:c1:8d:f5:dc:a6:02:5c:88:1c:d7:
20:a8:3a:99:82:a3:9b:ea:71:46:12:58:51:96:e3:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:25:66:2A:FE:86:EF:44:69:4E:EB:7F:1B:68:B8:75:C0:D7:88
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cAUlZir-hu9EaU7rfxtouHXA14g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.115.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:5e:c0:12:2d:d8:79:74:f4:f4:7d:73:32:91:67:4e:82:9e:
07:a4:9a:26:14:95:a9:4f:98:fd:a0:2b:20:d8:11:20:db:8f:
9a:aa:f9:29:0d:9a:1b:51:a9:6f:ad:d5:bb:f5:07:a6:b5:95:
4c:cb:3d:21:03:51:4f:2b:25:b0:c7:5e:a4:b0:97:ec:b6:ce:
3c:2d:90:11:d6:38:5e:b7:c7:9a:77:f4:a2:2a:c3:81:1e:30:
15:78:80:fd:e7:13:fa:9c:49:76:e3:1f:1a:f7:dc:f7:42:5e:
c9:ce:3a:42:d4:46:d1:37:0f:ee:6d:98:6f:8e:66:b1:26:8d:
f3:b0:b7:ed:26:93:fb:64:cf:b9:ae:8c:59:42:33:f6:13:e1:
47:c9:09:40:41:23:96:5d:9c:23:0b:67:b9:46:d6:f3:b0:64:
52:1e:f1:2c:20:b6:2c:6a:8b:bf:ce:f3:84:96:3a:ab:67:d4:
f9:af:37:2e:d0:6c:85:8b:33:d1:e2:6c:4e:3e:9a:06:35:6b:
80:24:2c:af:13:4c:17:cb:17:b9:7a:6f:05:56:8c:4c:68:df:
fa:0c:90:15:22:53:26:ba:8d:e2:bb:bb:93:a3:d0:af:f6:de:
b3:52:c9:fc:34:ea:40:9b:82:95:86:26:d0:09:71:78:08:61:
76:dd:c6:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBjO9jntc3HoHFEtciWwZ6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTAyMTc0NzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDA1MjU2NjJhZmU4NmVmNDQ2OTRlZWI3ZjFiNjhiODc1YzBkNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCbNYSJjYptfqQCrB9yplkIEK0TD
quaa3RL1Va8g8SpwVAKcD0eQiRTL8k7U9ckoQBjdQucKtKoixYfla0QVjBv1PbBM
WfXXPPqzffJSnyRrbAta6angfTyFBCumkE6myLTdfD1xSAn8jptf7G0+Y0yFR6QG
X0dfwDUuRBZ+OSLGhNV/t4czxkqz5r7Fwk+ZicIFwgKOqt5tieRknTUuoB7hLr9Z
FzrV7hNB4EV4X95au6mGkzApdHdNJiCe2RFlh7LFw5GdZaPH+rEuH/RGjpF+SACn
ORRaMwYNmgVbrQZbE9VWcsGN9dymAlyIHNcgqDqZgqOb6nFGElhRluOP5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHAFJWYq/obvRGlO638baLh1wNeIMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvY0FVbFppci1odTlFYVU3cmZ4dG91SFhBMTRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUmxzMA0G
CSqGSIb3DQEBCwUAA4IBAQDNXsASLdh5dPT0fXMykWdOgp4HpJomFJWpT5j9oCsg
2BEg24+aqvkpDZobUalvrdW79QemtZVMyz0hA1FPKyWwx16ksJfsts48LZAR1jhe
t8ead/SiKsOBHjAVeID95xP6nEl24x8a99z3Ql7JzjpC1EbRNw/ubZhvjmaxJo3z
sLftJpP7ZM+5roxZQjP2E+FHyQlAQSOWXZwjC2e5RtbzsGRSHvEsILYsaou/zvOE
ljqrZ9T5rzcu0GyFizPR4mxOPpoGNWuAJCyvE0wXyxe5em8FVoxMaN/6DJAVIlMm
uo3iu7uTo9Cv9t6zUsn8NOpAm4KVhibQCXF4CGF23caB
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:57 2026 by rpki-client