Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fRBIpmGKCwT-9NsIum_THrPKO_4.roa
File: fRBIpmGKCwT-9NsIum_THrPKO_4.roa (raw, json)
Hash identifier: ePGvoNwOx7SjfqKdBGoywZdQv+hF7tvtUzY7NXOnoIs=
Subject key identifier: 7D:10:48:A6:61:8A:0B:04:FE:F4:DB:08:BA:6F:D3:1E:B3:CA:3B:FE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06CABEC12AFB1C207592925CB0D35F023
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fRBIpmGKCwT-9NsIum_THrPKO_4.roa
Signing time: Fri 04 Sep 2026 13:46:41 +0000
ROA not before: Fri 04 Sep 2026 13:46:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211392
IP address blocks: 82.110.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:ab:ec:12:af:b1:c2:07:59:29:25:cb:0d:35:f0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 13:46:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d1048a6618a0b04fef4db08ba6fd31eb3ca3bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:bb:1a:6b:b7:fc:7e:9f:e4:66:f0:29:d5:
4c:7a:e9:00:e3:52:05:27:b4:8c:61:68:87:d9:95:
95:e5:94:ab:7c:71:27:a9:b9:cc:15:e6:cf:10:5f:
a0:9d:e7:34:cc:46:40:74:18:69:04:ec:6f:f4:70:
9b:72:4f:25:35:09:10:f9:7b:32:d7:4d:2c:51:54:
99:56:54:7f:f7:c0:e1:55:43:88:60:78:51:b1:4d:
3a:4b:08:0d:f7:97:90:fe:df:4e:68:d1:62:bd:15:
cd:ab:67:fa:29:27:01:ae:f0:11:52:91:98:b7:6a:
c8:b4:55:03:1f:c2:72:e4:be:f4:8e:6a:35:df:4d:
74:7b:1d:8c:73:25:52:75:b3:1d:c1:b8:d1:62:97:
35:87:ae:54:77:05:ce:e4:89:34:b2:8d:73:51:fc:
69:a9:a1:f4:8d:13:30:18:38:f9:5e:1e:44:6b:8a:
fb:55:b2:a5:ef:a3:16:21:1e:c0:5f:f6:82:43:77:
4b:92:59:1f:8e:06:ae:4b:d3:85:d0:27:1f:6a:9b:
ca:9c:d9:dc:1e:38:77:63:9a:46:3c:f9:26:3a:41:
b5:4a:36:34:bf:13:0e:d2:ea:4f:eb:0b:51:a4:5c:
7f:18:14:e5:af:b6:78:c3:a6:b1:b9:0e:97:88:b1:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:48:A6:61:8A:0B:04:FE:F4:DB:08:BA:6F:D3:1E:B3:CA:3B:FE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fRBIpmGKCwT-9NsIum_THrPKO_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.108.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:4b:7d:b0:84:98:0d:15:ab:a5:0f:eb:79:3b:c7:02:b0:f7:
6b:cd:9f:24:8f:9b:a7:7f:6b:16:14:74:e5:33:40:e5:2e:57:
c9:0b:30:5d:b4:0e:86:0a:f5:d9:84:cf:65:78:0f:8a:36:de:
ea:72:97:5c:b3:aa:bf:d5:36:91:f3:be:46:f1:ae:bb:ff:28:
da:b2:76:41:eb:7c:2b:cc:b6:26:65:cb:04:7c:4c:83:38:92:
c0:3b:92:23:64:6e:d0:59:87:49:9f:c6:9c:50:2b:c9:7b:2d:
e4:9f:15:0c:c4:2f:72:c4:f8:2c:2a:5c:e4:e3:d4:c2:ba:16:
86:b6:6c:c7:e2:9a:8f:3a:d6:0c:58:6c:55:13:73:36:96:63:
58:7b:ae:6c:25:8c:50:8b:34:0a:bc:9b:7a:3a:a7:e7:76:1a:
6b:b0:0d:e0:b4:37:4f:0f:e2:5a:dc:db:bb:ac:d3:a4:bc:97:
9c:24:85:71:3a:68:e4:23:75:c5:1e:5c:f8:e1:3b:ed:f2:44:
7a:b5:4a:30:43:da:2a:5f:0a:43:f0:8f:d1:ca:92:8c:73:40:
65:c1:c1:87:f6:71:7a:43:44:1d:9d:63:84:e0:7d:30:1d:e1:
76:aa:f9:52:10:b7:77:76:4a:2d:83:b8:73:bc:58:96:34:28:
da:aa:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 11:39:47 2026 by rpki-client