Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cLG60Mf8eaaGtqFU8gr8yKvlr00.roa
File: cLG60Mf8eaaGtqFU8gr8yKvlr00.roa (raw, json)
Hash identifier: ZFA6tdWkb/x75guzOiBR7OTiAHNVZQCIsDn7zq8u2f0=
Subject key identifier: 70:B1:BA:D0:C7:FC:79:A6:86:B6:A1:54:F2:0A:FC:C8:AB:E5:AF:4D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06B95B8BB21FF4791BDC9026B540703CE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cLG60Mf8eaaGtqFU8gr8yKvlr00.roa
Signing time: Fri 04 Sep 2026 08:42:49 +0000
ROA not before: Fri 04 Sep 2026 08:42:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 82.108.166.0/24 maxlen: 24
82.108.194.0/24 maxlen: 24
82.108.201.0/24 maxlen: 24
82.108.220.0/24 maxlen: 24
87.84.65.0/24 maxlen: 24
87.84.66.0/24 maxlen: 24
87.84.69.0/24 maxlen: 24
87.86.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 20:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:95:b8:bb:21:ff:47:91:bd:c9:02:6b:54:07:03:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 08:42:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70b1bad0c7fc79a686b6a154f20afcc8abe5af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:b8:f5:c9:48:45:32:09:06:10:d5:cf:0e:
bf:43:89:f8:95:21:54:2c:aa:f9:5f:b6:02:ae:b8:
1d:04:98:10:8f:1d:77:09:b3:32:d8:76:d1:cf:b8:
15:93:ba:a7:5c:77:20:8d:df:b7:53:eb:4f:6a:75:
ea:1e:f6:bb:06:0d:35:49:b2:2f:b8:30:0e:f9:47:
90:cf:60:89:c1:f5:ab:78:b1:98:e6:2c:f7:2e:97:
7b:e4:20:4f:70:ab:d1:7d:16:d8:06:97:5c:7d:5d:
49:fd:de:19:4a:89:a3:c5:5f:e0:c6:8d:e3:a3:88:
1d:72:fa:38:1e:7b:02:c7:fa:7f:9f:1c:e7:89:50:
54:41:c1:e4:7e:8c:ec:c1:3f:ba:66:6d:2c:b7:a6:
67:27:94:d7:7a:60:4d:f6:3a:03:49:f4:95:c9:0a:
52:67:e8:63:89:d1:7f:7d:e0:cf:0f:42:87:08:b2:
85:3c:2e:79:de:0e:c2:e6:12:10:39:92:04:22:32:
66:d4:3a:2a:d2:67:92:61:5f:2f:8e:d2:80:b3:dc:
d8:e7:1c:3e:af:bb:20:13:9e:24:24:1d:54:75:f3:
32:1d:91:f8:7f:a0:30:b2:f7:49:9c:23:1b:36:5a:
7a:cb:c2:d9:5a:c4:9b:4e:47:38:ca:a7:04:33:39:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:BA:D0:C7:FC:79:A6:86:B6:A1:54:F2:0A:FC:C8:AB:E5:AF:4D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cLG60Mf8eaaGtqFU8gr8yKvlr00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.166.0/24
82.108.194.0/24
82.108.201.0/24
82.108.220.0/24
87.84.65.0-87.84.66.255
87.84.69.0/24
87.86.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3c:9b:7f:0c:93:f0:02:b3:1f:42:5b:1f:e6:45:18:ed:23:
14:ff:8b:fc:16:c1:04:7d:eb:14:6d:fe:7f:7f:24:f8:ac:04:
e1:4d:e3:1a:22:0c:62:ea:ba:e7:19:4d:f8:11:9a:85:bd:a2:
de:c4:47:c4:df:de:54:2e:0b:cc:a0:93:9e:52:59:6b:2c:55:
85:6e:98:25:64:34:32:eb:52:7b:47:78:61:b0:de:b1:e5:7c:
5a:2d:a7:e0:04:ae:d0:16:3f:46:5b:2c:69:22:26:9b:6b:38:
81:db:07:65:84:54:fc:27:e1:ad:af:fe:36:4f:18:21:34:0e:
6a:fc:f2:93:72:04:9e:a5:b4:cf:24:33:05:80:73:22:c9:95:
28:6d:02:d2:e1:d2:96:ef:b3:e4:cb:92:51:e3:07:00:1a:e8:
b9:e3:9e:06:00:db:3f:2a:58:63:79:dd:a0:ee:45:32:9f:ae:
a8:6c:c0:50:34:b1:cc:ee:71:e6:20:ba:2c:c2:5b:82:43:29:
f6:a0:a8:74:53:9b:09:19:94:53:80:dc:63:52:a5:58:ef:49:
06:d6:ab:ab:41:d9:ef:0b:d2:bf:33:31:64:a0:36:94:d6:46:
0b:da:b5:b3:63:bf:64:16:12:c5:26:7b:65:d1:09:51:07:da:
78:5c:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:48:54 2026 by rpki-client