Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gHbQP-aMge3wqEmCgZnwfqrap7k.roa
File: gHbQP-aMge3wqEmCgZnwfqrap7k.roa (raw, json)
Hash identifier: nta66NpGsu8UzC2O7KoXCV0zzYdIYYeHrF2Jzu/60qM=
Subject key identifier: 80:76:D0:3F:E6:8C:81:ED:F0:A8:49:82:81:99:F0:7E:AA:DA:A7:B9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0500274C3CDB6318D403AB27671726BF2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gHbQP-aMge3wqEmCgZnwfqrap7k.roa
Signing time: Sun 30 Aug 2026 00:12:13 +0000
ROA not before: Sun 30 Aug 2026 00:12:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 82.108.10.0/23 maxlen: 23
82.108.48.0/23 maxlen: 23
82.108.62.0/23 maxlen: 23
82.108.64.0/22 maxlen: 22
82.108.96.0/23 maxlen: 23
82.108.136.0/23 maxlen: 23
82.108.192.0/23 maxlen: 23
86.53.5.0/24 maxlen: 24
86.53.22.0/24 maxlen: 24
86.53.25.0/24 maxlen: 24
86.53.26.0/24 maxlen: 24
86.53.166.0/24 maxlen: 24
87.82.200.0/22 maxlen: 22
87.82.204.0/23 maxlen: 23
87.82.208.0/23 maxlen: 23
87.82.211.0/24 maxlen: 24
87.83.37.0/24 maxlen: 24
87.83.38.0/24 maxlen: 24
87.83.40.0/24 maxlen: 24
87.83.42.0/23 maxlen: 23
87.83.76.0/22 maxlen: 22
87.84.50.0/23 maxlen: 23
87.84.72.0/24 maxlen: 24
87.84.74.0/23 maxlen: 23
87.84.136.0/24 maxlen: 24
87.84.138.0/24 maxlen: 24
87.84.148.0/23 maxlen: 23
87.84.155.0/24 maxlen: 24
87.84.181.0/24 maxlen: 24
87.84.184.0/23 maxlen: 23
87.85.254.0/24 maxlen: 24
87.86.6.0/23 maxlen: 23
87.86.15.0/24 maxlen: 24
87.86.26.0/24 maxlen: 24
195.40.3.0/24 maxlen: 24
195.40.14.0/23 maxlen: 23
195.40.64.0/23 maxlen: 23
195.40.66.0/23 maxlen: 23
195.40.68.0/23 maxlen: 23
195.40.79.0/24 maxlen: 24
195.40.81.0/24 maxlen: 24
195.40.84.0/24 maxlen: 24
195.40.90.0/24 maxlen: 24
195.40.93.0/24 maxlen: 24
195.40.98.0/23 maxlen: 23
195.40.102.0/23 maxlen: 23
195.40.124.0/23 maxlen: 23
195.40.126.0/23 maxlen: 23
195.40.164.0/23 maxlen: 23
195.40.168.0/23 maxlen: 23
195.40.170.0/23 maxlen: 23
195.40.172.0/23 maxlen: 23
195.40.174.0/23 maxlen: 23
195.40.190.0/23 maxlen: 23
195.172.126.0/23 maxlen: 23
195.172.132.0/23 maxlen: 23
195.172.146.0/23 maxlen: 23
195.172.148.0/23 maxlen: 23
195.172.208.0/23 maxlen: 23
212.134.206.0/24 maxlen: 24
212.135.14.0/23 maxlen: 23
212.135.176.0/23 maxlen: 24
212.135.182.0/23 maxlen: 23
212.135.184.0/23 maxlen: 23
212.135.186.0/23 maxlen: 23
212.135.188.0/24 maxlen: 24
212.135.216.0/23 maxlen: 23
212.135.224.0/23 maxlen: 23
212.135.226.0/23 maxlen: 23
212.135.229.0/24 maxlen: 24
212.135.230.0/23 maxlen: 23
212.135.232.0/23 maxlen: 23
212.135.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:50:02:74:c3:cd:b6:31:8d:40:3a:b2:76:71:72:6b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 30 00:12:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8076d03fe68c81edf0a849828199f07eaadaa7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:34:c6:47:64:ff:e2:2b:d4:7d:08:55:62:
b4:b5:cb:ff:e2:50:b1:ba:aa:f9:d5:89:44:1e:1f:
e2:da:74:05:47:34:41:82:a7:d8:ea:0c:9c:11:6f:
93:5c:06:60:83:59:71:33:be:55:35:ae:0c:00:3f:
34:bf:5a:b4:3d:4d:45:75:ca:14:5e:45:4b:c7:9d:
88:8c:59:c5:a5:4c:3b:2c:4f:bb:ea:1c:b1:c6:bf:
9c:e0:07:99:e6:21:04:99:92:a4:e3:cc:1c:58:fe:
dc:8e:0b:fe:45:20:a9:57:53:85:8c:30:3f:af:35:
48:ef:ed:6f:a9:21:6f:bb:03:a3:05:4d:d5:45:c6:
e0:e0:31:30:c8:14:4b:f7:fe:5f:c5:c6:da:a4:b9:
dc:05:b6:b9:39:37:29:a6:24:f8:3d:f5:69:13:d7:
31:a2:22:d2:be:1e:35:87:2d:41:44:cb:e8:5a:f7:
00:07:03:9d:62:f0:ea:4a:f3:90:7b:49:fe:b1:fd:
d3:b7:1d:68:27:46:bb:1d:a2:bf:27:58:57:73:38:
c3:11:49:d6:3d:09:4a:09:61:12:b4:d2:21:1a:58:
67:81:2f:a0:03:51:2a:0b:1b:3c:2e:ca:ff:75:42:
9a:9b:bf:98:df:4a:c9:5b:d5:6a:a2:34:ee:4f:d7:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:76:D0:3F:E6:8C:81:ED:F0:A8:49:82:81:99:F0:7E:AA:DA:A7:B9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gHbQP-aMge3wqEmCgZnwfqrap7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.10.0/23
82.108.48.0/23
82.108.62.0-82.108.67.255
82.108.96.0/23
82.108.136.0/23
82.108.192.0/23
86.53.5.0/24
86.53.22.0/24
86.53.25.0-86.53.26.255
86.53.166.0/24
87.82.200.0-87.82.205.255
87.82.208.0/23
87.82.211.0/24
87.83.37.0-87.83.38.255
87.83.40.0/24
87.83.42.0/23
87.83.76.0/22
87.84.50.0/23
87.84.72.0/24
87.84.74.0/23
87.84.136.0/24
87.84.138.0/24
87.84.148.0/23
87.84.155.0/24
87.84.181.0/24
87.84.184.0/23
87.85.254.0/24
87.86.6.0/23
87.86.15.0/24
87.86.26.0/24
195.40.3.0/24
195.40.14.0/23
195.40.64.0-195.40.69.255
195.40.79.0/24
195.40.81.0/24
195.40.84.0/24
195.40.90.0/24
195.40.93.0/24
195.40.98.0/23
195.40.102.0/23
195.40.124.0/22
195.40.164.0/23
195.40.168.0/21
195.40.190.0/23
195.172.126.0/23
195.172.132.0/23
195.172.146.0-195.172.149.255
195.172.208.0/23
212.134.206.0/24
212.135.14.0/23
212.135.176.0/23
212.135.182.0-212.135.188.255
212.135.216.0/23
212.135.224.0/22
212.135.229.0-212.135.233.255
212.135.238.0/23
Signature Algorithm: sha256WithRSAEncryption
95:c7:e5:9a:c0:91:20:c7:f8:a8:7b:e5:0c:36:ee:5e:1a:e6:
93:a5:55:d3:53:8c:7c:d8:0f:8a:a5:15:a2:df:e5:75:6d:de:
5c:7a:83:31:47:40:34:43:da:11:b8:a4:3b:e5:71:da:5d:7c:
5f:84:0a:55:91:f0:ae:fa:ca:a6:08:3b:d1:b2:de:d4:64:38:
b5:ff:c5:72:84:da:ac:1b:80:ba:9e:83:7b:7f:c1:13:40:c0:
2c:c0:3b:cc:e9:62:d3:7b:3a:0b:64:39:4f:76:43:8c:94:53:
d0:a6:22:88:bb:33:8b:d4:07:7d:ce:21:14:53:e4:14:ce:e6:
ba:18:2b:7f:0a:7f:79:fb:3f:76:0c:29:6f:c0:be:24:2d:35:
82:2c:2a:69:81:06:fa:45:f5:50:58:18:e9:e2:92:ea:24:51:
40:c7:c4:ed:d0:29:3d:e5:20:d2:e2:9f:7b:1f:bc:67:43:53:
be:bd:d3:57:ed:83:d9:43:7f:7a:51:4e:8d:db:c0:e0:3c:4f:
a3:3f:e5:7f:87:f8:d1:36:cc:80:54:ef:57:e8:5b:1d:5c:53:
9e:a5:44:88:74:9d:61:56:f2:31:66:10:bd:49:3e:4b:4f:a0:
b1:62:20:10:6f:28:8c:92:08:3f:2a:e5:b3:44:5f:0e:f9:1c:
fb:b4:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:06 2026 by rpki-client