Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eRUn6dVsiScqKK94V28HNHNN2aY.roa
File: eRUn6dVsiScqKK94V28HNHNN2aY.roa (raw, json)
Hash identifier: 5zOsPrtt0YPAJkUqsziMzddsvUUlXomq0L2y8ayOWmk=
Subject key identifier: 79:15:27:E9:D5:6C:89:27:2A:28:AF:78:57:6F:07:34:73:4D:D9:A6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A02479F9532167CD81814C79AD4B38DC5D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eRUn6dVsiScqKK94V28HNHNN2aY.roa
Signing time: Fri 21 Aug 2026 13:19:28 +0000
ROA not before: Fri 21 Aug 2026 13:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 82.108.104.0/22 maxlen: 22
82.109.156.0/24 maxlen: 24
83.148.144.0/22 maxlen: 22
83.148.162.0/24 maxlen: 24
83.148.165.0/24 maxlen: 24
83.148.166.0/23 maxlen: 23
83.148.174.0/23 maxlen: 23
83.148.177.0/24 maxlen: 24
83.148.178.0/23 maxlen: 23
83.148.188.0/24 maxlen: 24
85.189.193.0/24 maxlen: 24
85.189.194.0/24 maxlen: 24
87.83.114.0/24 maxlen: 24
92.244.178.0/23 maxlen: 23
92.244.188.0/23 maxlen: 23
195.40.145.0/24 maxlen: 24
195.40.146.0/23 maxlen: 24
195.40.148.0/22 maxlen: 24
195.40.192.0/18 maxlen: 24
195.172.0.0/18 maxlen: 24
195.172.64.0/19 maxlen: 24
195.172.224.0/19 maxlen: 24
212.134.29.0/24 maxlen: 24
212.134.30.0/24 maxlen: 24
212.134.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:79:f9:53:21:67:cd:81:81:4c:79:ad:4b:38:dc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 21 13:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=791527e9d56c89272a28af78576f0734734dd9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:a7:c8:46:e9:5f:da:e4:e2:96:e6:39:19:
3e:b1:0b:7b:f0:09:2b:3a:55:ed:8f:cd:91:a9:b9:
cd:73:f7:08:76:96:9a:ce:bd:69:c8:ec:70:7f:4e:
6d:84:51:54:72:55:3f:5d:75:0f:c8:60:9b:48:9d:
df:8a:3e:40:d8:6d:6a:b7:ad:c1:68:d3:aa:65:40:
9f:00:40:3c:3b:10:ed:71:cb:91:58:52:60:cc:e7:
69:e8:56:c8:df:36:9e:f4:91:17:bd:61:0b:4b:c6:
15:4e:8a:ce:e5:83:b1:8e:5f:9b:ed:93:f6:b5:a3:
b1:3c:2a:dd:d9:7a:64:0d:0b:71:0d:13:9d:3a:6a:
9d:92:8d:e3:1e:dd:3e:4f:f9:60:74:4b:40:af:fd:
bb:bd:ee:70:b3:f0:f0:d9:af:9d:49:21:34:d9:c2:
e6:49:ba:ac:7c:49:3a:2c:19:ef:1c:0e:05:c7:8b:
5a:2b:03:f7:18:99:6c:a5:d9:91:2b:cf:e3:51:36:
d9:0f:97:de:32:28:ac:4a:87:a3:fb:9a:1e:66:70:
d5:a3:a8:29:ab:9f:00:ae:24:2f:f3:50:03:88:80:
81:ec:c6:3c:fd:59:f9:ab:6b:98:18:ed:31:71:2c:
a8:e3:ee:35:3d:31:26:74:20:cd:e8:65:28:eb:98:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:15:27:E9:D5:6C:89:27:2A:28:AF:78:57:6F:07:34:73:4D:D9:A6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eRUn6dVsiScqKK94V28HNHNN2aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.104.0/22
82.109.156.0/24
83.148.144.0/22
83.148.162.0/24
83.148.165.0-83.148.167.255
83.148.174.0/23
83.148.177.0-83.148.179.255
83.148.188.0/24
85.189.193.0-85.189.194.255
87.83.114.0/24
92.244.178.0/23
92.244.188.0/23
195.40.145.0-195.40.151.255
195.40.192.0/18
195.172.0.0-195.172.95.255
195.172.224.0/19
212.134.29.0-212.134.31.255
Signature Algorithm: sha256WithRSAEncryption
bc:14:86:90:e7:f0:f0:cc:d2:a0:ec:53:a6:80:50:3e:20:27:
c0:da:05:41:f0:82:1d:8e:92:52:88:60:d6:96:fd:8e:18:9e:
1d:53:aa:8a:11:e3:b7:aa:df:d4:24:ed:e1:fb:7e:5d:b2:c9:
c2:29:49:f9:38:36:0a:32:8e:2f:cd:27:fb:8d:6b:34:bf:e5:
88:ab:5b:9c:4e:d2:48:fd:a5:42:66:99:db:3f:0d:96:a2:f3:
59:5a:66:8e:1d:bb:8a:f3:5f:f7:e3:e9:62:70:8c:e6:13:46:
b7:55:1c:3f:ea:09:73:a3:1b:60:4f:6e:fd:8e:77:ff:ae:29:
3a:8f:ef:6f:6f:22:16:df:0f:60:d8:2a:82:5a:3f:b3:c4:c1:
d2:eb:1b:01:7d:41:52:8a:04:c5:77:ab:44:1b:83:25:3b:fa:
4d:19:42:66:36:cd:07:f0:0b:6f:ca:24:2e:dd:44:84:ee:73:
0b:e0:fc:4b:db:97:6e:2c:8c:ce:45:83:d4:cc:9b:e7:03:72:
35:7c:7c:d0:6a:4b:77:26:ed:cc:87:1b:ea:7d:b1:e4:b8:f6:
48:08:4b:6b:ff:28:70:5b:d3:53:55:c0:96:d6:0d:8b:e1:24:
23:43:ff:e9:78:76:ad:56:b6:0f:58:17:20:07:50:14:9b:9a:
df:39:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:34 2026 by rpki-client