Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cnrSf4XPmqd8kirg1jgLRwnh3uE.roa
File: cnrSf4XPmqd8kirg1jgLRwnh3uE.roa (raw, json)
Hash identifier: +yvhfcLOu3kyP1xV1NfvjGa/nGxGivcLZPLaFH8xI+k=
Subject key identifier: 72:7A:D2:7F:85:CF:9A:A7:7C:92:2A:E0:D6:38:0B:47:09:E1:DE:E1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A01AD960B41A8F1ABC9C1C70DE561A0F23
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cnrSf4XPmqd8kirg1jgLRwnh3uE.roa
Signing time: Wed 19 Aug 2026 16:27:28 +0000
ROA not before: Wed 19 Aug 2026 16:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219036
IP address blocks: 82.108.122.0/23 maxlen: 24
87.82.62.0/23 maxlen: 24
87.83.123.0/24 maxlen: 24
87.83.199.0/24 maxlen: 24
87.86.20.0/23 maxlen: 24
87.86.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:d9:60:b4:1a:8f:1a:bc:9c:1c:70:de:56:1a:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 19 16:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=727ad27f85cf9aa77c922ae0d6380b4709e1dee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:4d:ac:6a:05:10:42:5b:6b:d5:7a:68:ea:
60:d1:ba:58:8c:6b:f5:16:bd:f0:15:5b:a6:1e:52:
f1:a3:72:65:81:39:0a:a1:1d:e9:b5:bd:c6:ea:b1:
07:33:6d:4a:44:10:df:c4:2c:f0:e6:99:84:cc:45:
16:5b:fa:4b:21:76:fa:c9:69:bb:42:92:3b:a5:a7:
d6:38:d2:53:59:0c:4e:ca:00:98:da:f6:e9:42:95:
ea:e2:d3:ec:29:b7:bf:b3:ad:53:07:37:06:c2:83:
f0:b3:26:d4:5c:2c:17:15:13:32:4a:de:cb:6f:d8:
0d:c7:a4:18:fb:52:57:5a:88:12:d2:ac:5d:ad:f7:
56:3f:94:56:43:39:63:54:61:9b:ea:06:f2:43:5c:
36:3b:8e:2f:02:41:59:af:f8:84:e1:07:80:a4:99:
2a:a5:b3:32:38:62:57:93:29:c5:d6:78:19:d5:af:
05:50:21:25:de:15:d5:5c:62:4f:6d:21:97:7d:48:
3e:af:7b:de:72:cf:19:01:8c:ee:89:d2:fb:55:b9:
73:44:2d:87:a1:24:03:e8:74:67:47:0e:65:67:1b:
be:57:24:18:e3:ac:e7:35:d0:f8:d0:cd:bd:56:b0:
ff:48:51:9d:c2:ad:95:14:a9:f4:19:fe:6b:3c:49:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7A:D2:7F:85:CF:9A:A7:7C:92:2A:E0:D6:38:0B:47:09:E1:DE:E1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cnrSf4XPmqd8kirg1jgLRwnh3uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.122.0/23
87.82.62.0/23
87.83.123.0/24
87.83.199.0/24
87.86.20.0/23
87.86.210.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:c1:14:9b:64:e1:d2:d9:6f:50:70:ab:71:97:aa:b4:56:29:
11:dd:e2:5a:cf:51:3b:5b:dc:38:eb:8a:77:eb:8f:7e:19:0b:
44:65:2b:fe:fe:5d:1a:11:95:7f:64:9c:f8:0d:9c:89:6e:93:
e7:4e:6f:e3:52:ee:99:0a:fd:97:ee:5d:66:d1:fe:64:3a:85:
cd:7f:c5:36:c6:94:75:90:0e:89:31:68:f4:2a:ca:39:e3:55:
3c:97:74:cd:6d:b3:93:01:e0:e8:9a:6d:2e:8a:09:dc:18:ca:
ce:ab:7f:5f:f3:24:44:9c:50:f2:5f:03:76:81:13:fc:38:f7:
61:b5:67:ef:23:07:d8:15:b6:28:f6:e7:5b:56:a9:ab:e5:28:
1c:53:cb:69:d2:f7:08:00:00:8a:98:c4:43:3f:c3:72:a0:9b:
41:b8:69:0a:33:d3:6f:ff:66:e5:81:c7:16:40:f4:1b:b1:fc:
57:d3:df:c9:fe:e1:1f:e7:97:2b:74:80:c3:e3:a1:e6:21:71:
61:80:53:59:4a:c9:4a:48:f2:d7:c1:c4:3c:d4:17:0e:fe:bc:
e8:93:77:01:c0:f9:57:04:0a:5b:54:26:49:14:20:0b:b3:85:
f5:b6:8a:2a:72:58:02:44:3d:e6:c3:7a:9d:fc:35:c7:c9:a7:
83:b8:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:36 2026 by rpki-client