Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fHKfUPWUTyz-_PtrRXIRsA5Y-EE.roa
File: fHKfUPWUTyz-_PtrRXIRsA5Y-EE.roa (raw, json)
Hash identifier: syRbOjmByOykPgKnYaqdQKtPjIrVZsZ1+DIjSsdkUVo=
Subject key identifier: 7C:72:9F:50:F5:94:4F:2C:FE:FC:FB:6B:45:72:11:B0:0E:58:F8:41
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FB6743303335313C367C36A21026F806F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fHKfUPWUTyz-_PtrRXIRsA5Y-EE.roa
Signing time: Fri 31 Jul 2026 04:34:56 +0000
ROA not before: Fri 31 Jul 2026 04:34:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219324
IP address blocks: 82.108.77.0/24 maxlen: 24
212.212.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:74:33:03:33:53:13:c3:67:c3:6a:21:02:6f:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 31 04:34:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c729f50f5944f2cfefcfb6b457211b00e58f841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:f5:d2:ba:cc:6b:90:ef:07:5f:25:67:52:
2b:b5:c4:c1:39:24:af:8b:58:ff:d3:6b:b0:e9:8f:
50:a9:8e:90:dc:d2:c3:ca:21:e5:2b:b8:84:0e:e3:
67:f5:c3:bd:c9:20:57:e7:01:6c:e3:14:fe:00:93:
e6:cd:cd:51:a9:79:2f:b7:79:2b:56:d7:a5:6e:2a:
cb:19:25:67:21:aa:47:29:c7:e8:ad:b9:ab:81:b5:
81:e2:66:0d:57:84:15:54:13:eb:aa:8e:64:5e:e5:
91:cb:92:b3:bb:3d:36:f9:4b:bf:e4:76:12:a8:08:
15:a9:7c:be:6e:1d:54:a2:38:fd:97:90:41:4d:94:
6d:28:e8:c6:90:69:7b:ea:f8:27:e8:48:62:84:30:
e3:d5:66:d0:37:45:b9:d5:d2:f1:04:98:a4:54:c4:
8b:91:0d:8f:da:c3:95:a5:3f:4a:74:99:56:af:81:
18:3e:e4:82:f0:0d:fc:ac:99:07:bf:b5:e9:c6:e3:
a5:77:5c:e6:93:28:5b:08:bb:a5:2b:f6:06:b9:5d:
c5:44:65:fc:f8:3d:d3:1f:d8:ac:1f:1e:7d:23:47:
3e:dd:c0:47:34:3e:6c:52:ce:61:9c:b7:6c:13:64:
aa:bb:39:72:67:82:a5:7f:ce:63:94:67:84:e3:9b:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:9F:50:F5:94:4F:2C:FE:FC:FB:6B:45:72:11:B0:0E:58:F8:41
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fHKfUPWUTyz-_PtrRXIRsA5Y-EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.77.0/24
212.212.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:90:b5:92:1b:4c:a7:d7:7f:86:1f:f2:58:ff:7e:20:aa:e1:
3b:1c:d0:8b:6d:ad:ba:fe:43:97:c2:05:a6:63:d6:4f:e4:88:
97:1e:28:4b:04:1a:2e:48:8e:30:74:2f:8c:f4:18:26:57:33:
16:30:75:f7:0f:ac:b7:91:b0:b9:58:73:fc:e3:eb:e6:7c:f2:
93:f1:24:c3:86:91:de:7d:d6:ce:ec:3d:15:fe:76:05:a8:57:
29:c9:9f:29:3d:94:69:c8:7c:95:fa:eb:a2:3d:de:d1:71:10:
47:3b:21:ab:82:9d:0b:d4:95:cf:20:9e:15:62:c3:de:4b:1f:
df:1d:b0:69:6f:2f:94:f4:e0:ed:f1:51:5f:e3:07:d6:22:25:
20:d2:95:83:7d:a8:9d:a2:a2:0f:1e:87:fd:c5:84:07:8b:80:
95:2d:e7:0f:d2:ed:e1:72:e6:63:31:9b:f7:41:96:fe:7b:c8:
39:cc:9a:93:c5:a9:dc:3f:dc:ca:49:0e:c3:fd:73:07:30:4e:
7e:c6:62:a7:74:db:0b:af:52:1e:20:6d:96:09:7b:78:0c:3b:
af:7d:1b:6a:9b:c3:d6:03:b7:bd:84:8f:31:f7:2f:3e:82:d4:
5d:ec:f7:ef:4f:11:41:25:a8:f7:9a:ae:22:db:c0:e8:c6:f9:
7f:3d:ce:8e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+2dDMDM1MTw2fDaiECb4BvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzMxMDQzNDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzcyOWY1MGY1OTQ0ZjJjZmVmY2ZiNmI0NTcyMTFiMDBlNThmODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyP10rrMa5DvB18lZ1IrtcTBOSSv
i1j/02uw6Y9QqY6Q3NLDyiHlK7iEDuNn9cO9ySBX5wFs4xT+AJPmzc1RqXkvt3kr
VtelbirLGSVnIapHKcforbmrgbWB4mYNV4QVVBPrqo5kXuWRy5Kzuz02+Uu/5HYS
qAgVqXy+bh1Uojj9l5BBTZRtKOjGkGl76vgn6EhihDDj1WbQN0W51dLxBJikVMSL
kQ2P2sOVpT9KdJlWr4EYPuSC8A38rJkHv7XpxuOld1zmkyhbCLulK/YGuV3FRGX8
+D3TH9isHx59I0c+3cBHND5sUs5hnLdsE2SquzlyZ4Klf85jlGeE45tzYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHxyn1D1lE8s/vz7a0VyEbAOWPhBMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZkhLZlVQV1VUeXotX1B0clJYSVJzQTVZLUVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUmxNAwQA
1NQaMA0GCSqGSIb3DQEBCwUAA4IBAQAekLWSG0yn13+GH/JY/34gquE7HNCLba26
/kOXwgWmY9ZP5IiXHihLBBouSI4wdC+M9BgmVzMWMHX3D6y3kbC5WHP84+vmfPKT
8STDhpHefdbO7D0V/nYFqFcpyZ8pPZRpyHyV+uuiPd7RcRBHOyGrgp0L1JXPIJ4V
YsPeSx/fHbBpby+U9ODt8VFf4wfWIiUg0pWDfaidoqIPHof9xYQHi4CVLecP0u3h
cuZjMZv3QZb+e8g5zJqTxancP9zKSQ7D/XMHME5+xmKndNsLr1IeIG2WCXt4DDuv
fRtqm8PWA7e9hI8x9y8+gtRd7PfvTxFBJaj3mq4i28Doxvl/Pc6O
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:01 2026 by rpki-client