Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dxH1DqmLB5Rk8Iry0SqdqPiQAtY.roa
File: dxH1DqmLB5Rk8Iry0SqdqPiQAtY.roa (raw, json)
Hash identifier: n/5m8g5SZds9cxVru/NE+RzPVb/t9JoHJoldZl2t154=
Subject key identifier: 77:11:F5:0E:A9:8B:07:94:64:F0:8A:F2:D1:2A:9D:A8:F8:90:02:D6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0FB7F7D97A4913E2E4509470B7C8F5073
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dxH1DqmLB5Rk8Iry0SqdqPiQAtY.roa
Signing time: Fri 02 Oct 2026 07:23:51 +0000
ROA not before: Fri 02 Oct 2026 07:23:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 82.108.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:7f:7d:97:a4:91:3e:2e:45:09:47:0b:7c:8f:50:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 2 07:23:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7711f50ea98b079464f08af2d12a9da8f89002d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:a3:86:85:ff:6c:57:50:74:77:50:2c:b7:
87:55:ff:59:cf:7f:0b:ac:73:92:4b:0c:b2:a1:2a:
81:fc:04:dc:9f:eb:d0:44:13:c2:3b:a7:94:fa:29:
e0:09:ec:9d:a1:c7:e7:06:a9:e1:3a:68:43:5b:60:
61:f0:7e:64:72:4e:80:cc:f8:f7:ea:db:fa:b1:a1:
c4:ab:8c:36:c3:62:b7:0b:a0:45:f0:3d:6d:a1:3b:
4d:68:66:cb:63:32:62:a8:6e:96:dd:41:fc:c8:ea:
f7:7c:0d:94:95:9f:df:35:91:ca:35:59:51:e1:b8:
ea:4e:ef:b4:fc:26:9e:52:cb:f0:8a:3e:a9:64:d5:
c6:86:eb:30:e2:80:6a:5a:41:ad:97:13:8e:c5:bd:
f1:41:82:81:90:cb:c3:53:71:2e:55:61:15:3f:98:
ea:1b:4d:1b:cd:2b:34:7f:03:cb:79:c9:79:12:c8:
15:df:b9:3f:e2:d6:bd:82:25:19:f8:b9:87:53:98:
14:4f:1b:22:d1:c8:d2:68:59:91:f4:7e:d8:3f:c8:
7a:09:ba:61:e3:3d:a0:9e:30:31:33:3c:f6:79:4d:
81:2c:4f:8a:03:89:41:6a:24:f0:79:c1:7b:b5:c7:
7c:38:d0:1a:cf:99:1f:f6:71:96:12:80:46:82:22:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:11:F5:0E:A9:8B:07:94:64:F0:8A:F2:D1:2A:9D:A8:F8:90:02:D6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dxH1DqmLB5Rk8Iry0SqdqPiQAtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:92:57:73:26:c9:b6:4b:69:23:d6:1a:3a:23:80:a3:b7:f8:
d3:ba:20:c5:bd:01:7f:b0:61:43:78:02:24:36:c1:80:7d:84:
bc:15:db:84:76:ff:ca:fa:cb:4d:f7:6c:63:cc:75:6f:e8:77:
44:69:0f:9b:c0:17:77:0a:6b:50:dc:b3:2e:27:bc:9f:1e:21:
a2:03:a4:0a:ff:4a:57:bd:34:73:41:23:f7:a2:7c:4c:7e:64:
88:98:69:88:ea:69:7d:11:d0:60:bc:ea:17:e2:88:41:b7:13:
08:4f:f3:6a:dc:65:87:bc:2e:30:e5:ff:74:28:28:50:79:62:
a7:e4:9c:72:65:63:88:04:0e:07:f1:cf:fa:90:b0:a4:a3:d4:
1f:ed:8f:5d:e8:bb:8e:e8:be:a6:06:ae:d3:77:e7:64:b2:a4:
e9:f8:86:30:a1:07:c4:7e:38:5a:5f:cd:80:c7:0d:55:5c:db:
54:46:ea:e8:2d:7e:4c:ff:70:0e:31:01:7b:1f:f0:bf:61:c5:
7f:9e:31:0c:d3:bf:c9:ac:fb:62:a3:d7:9e:5f:e0:8c:d8:0b:
d2:df:bf:d1:3d:49:f1:50:d6:36:34:5e:e1:18:18:70:f1:6a:
cc:4f:e4:c6:49:f4:1c:84:24:ce:59:b5:b1:b7:da:d7:f2:63:
d6:60:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:43:19 2026 by rpki-client