Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fRrAvDbdnuUc3JOmRqkNirNzeGU.roa
File: fRrAvDbdnuUc3JOmRqkNirNzeGU.roa (raw, json)
Hash identifier: 8rwi/6bfcCzI6aC4QIVBAPee367KzUyH1oGbftG4Ehg=
Subject key identifier: 7D:1A:C0:BC:36:DD:9E:E5:1C:DC:93:A6:46:A9:0D:8A:B3:73:78:65
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0332D3597AA82B235E0AF612A0CC57D2B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fRrAvDbdnuUc3JOmRqkNirNzeGU.roa
Signing time: Mon 24 Aug 2026 09:49:55 +0000
ROA not before: Mon 24 Aug 2026 09:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 82.108.127.0/24 maxlen: 24
87.83.65.0/24 maxlen: 24
87.85.97.0/24 maxlen: 24
195.40.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:2d:35:97:aa:82:b2:35:e0:af:61:2a:0c:c5:7d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 24 09:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d1ac0bc36dd9ee51cdc93a646a90d8ab3737865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:74:2f:43:a2:8b:86:01:22:1f:bd:07:da:
a9:c3:bf:23:bb:c2:28:a1:5c:e0:0e:a6:7c:48:1b:
1d:9e:d9:54:03:c5:5b:dd:b4:36:2f:3d:d4:2f:d5:
55:b6:de:48:90:8c:8b:57:3d:e2:33:58:3d:32:ee:
4d:25:69:94:7b:05:d7:d0:21:4d:eb:be:f7:3c:e3:
81:b6:c9:bc:f5:5e:9a:50:62:86:2e:a7:6f:9e:0f:
de:0f:e4:0b:ec:9a:a7:d4:31:7b:e4:0e:a6:98:3d:
72:13:35:1c:99:41:e0:8d:e4:48:22:5a:72:b4:b1:
a6:ba:73:cf:b8:b9:ad:52:39:48:47:73:a3:e9:ca:
16:85:3a:8f:73:3c:a9:93:5f:ac:96:8e:89:94:12:
f0:2d:88:f8:ee:7e:af:a7:92:84:6a:8f:d3:72:aa:
ff:bd:7c:fe:27:52:3a:7e:ce:4f:87:c2:a6:a4:0f:
b2:cf:31:9c:30:49:f3:7a:50:a6:41:fe:e6:8c:9d:
42:4b:e4:b5:73:10:12:05:63:26:e2:4f:21:67:53:
84:a5:7b:06:4e:0e:e1:88:fd:e5:38:51:23:14:ff:
31:c3:43:0d:5f:7c:1f:3a:1c:ea:89:62:93:ab:a0:
a3:bb:ec:fa:43:0b:51:fb:fd:86:d6:65:b7:52:41:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1A:C0:BC:36:DD:9E:E5:1C:DC:93:A6:46:A9:0D:8A:B3:73:78:65
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fRrAvDbdnuUc3JOmRqkNirNzeGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.127.0/24
87.83.65.0/24
87.85.97.0/24
195.40.158.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:55:23:fc:37:0c:5b:67:c7:8e:83:ca:b7:29:51:cf:c0:25:
48:aa:29:0b:25:51:f2:5d:d6:b6:15:98:a1:b4:b7:c3:a6:70:
44:55:98:75:11:07:e0:e9:dc:6a:2a:4d:96:12:30:f1:5a:16:
f5:cc:2b:ab:66:37:93:39:0a:e1:08:45:57:08:a8:a9:f0:1c:
8c:2b:7d:34:71:f0:58:c4:56:5a:39:80:9f:36:87:cb:1e:55:
fa:5b:e3:3b:22:ef:75:bd:c1:26:ee:c6:45:83:d0:db:30:f5:
d8:f3:b1:2b:46:22:35:bd:30:e2:32:19:64:9a:e4:ba:15:11:
16:7f:df:78:bc:44:f8:30:be:57:d0:de:a8:38:2e:9a:0b:42:
c9:7b:f0:e0:c6:4d:be:01:b6:f3:59:bd:3b:dd:36:a1:3d:80:
af:c6:e7:8a:1f:8e:ac:0a:8d:ad:00:a6:91:7f:ed:dc:af:35:
4b:58:c0:f1:59:f1:de:4b:20:c5:b6:b2:86:2b:ec:10:a3:71:
bb:f2:36:7d:d6:7f:2f:6c:99:68:bc:8c:ec:19:d2:ee:6d:3c:
06:c3:f0:7c:fb:e4:91:12:3a:9a:e7:4a:71:2b:fe:e1:69:56:
e2:85:d3:40:46:3e:22:f8:e1:5e:2e:57:d5:0c:99:d3:b8:3d:
56:2a:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:32 2026 by rpki-client