Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ghFFZ91dj7FOPVOHJBv6cAKQLvQ.roa
File: ghFFZ91dj7FOPVOHJBv6cAKQLvQ.roa (raw, json)
Hash identifier: XEpekbN3Z5ui/d+0R/YLcuAcRB2UqmpVE30ejHxxntw=
Subject key identifier: 82:11:45:67:DD:5D:8F:B1:4E:3D:53:87:24:1B:FA:70:02:90:2E:F4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A04435C867716270141ABA66367F783F07
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ghFFZ91dj7FOPVOHJBv6cAKQLvQ.roa
Signing time: Thu 27 Aug 2026 17:12:50 +0000
ROA not before: Thu 27 Aug 2026 17:12:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 82.108.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:35:c8:67:71:62:70:14:1a:ba:66:36:7f:78:3f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 27 17:12:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82114567dd5d8fb14e3d5387241bfa7002902ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b1:cf:31:30:c9:f2:42:e7:a1:47:50:70:93:
05:b3:f7:5d:9d:a3:ec:46:26:9d:90:c9:03:67:fa:
97:24:bc:b9:b0:bb:23:d1:75:88:68:1f:b6:15:cc:
7d:b3:35:c5:68:c6:13:d0:ef:21:84:50:ca:80:6e:
28:ef:fb:08:23:e0:67:22:f9:ca:81:2b:ad:72:7d:
31:db:46:fc:bd:d7:07:57:ff:d2:15:e2:cf:63:24:
fa:4b:09:bc:a2:6b:61:95:d1:d6:d5:af:4f:f1:28:
73:b3:f0:83:83:24:df:43:24:a8:4b:96:1e:42:e1:
f9:f9:dd:3b:c3:ea:c0:5b:13:5b:ff:73:9a:2f:43:
4e:c9:69:a0:33:dc:e8:dd:a8:25:da:98:09:c8:cc:
65:94:8d:7b:a8:2a:88:66:93:35:ab:ae:aa:ab:aa:
05:30:b9:29:22:e8:df:64:4a:c5:e8:61:0a:0c:dd:
47:b6:a4:28:73:97:f9:b3:17:91:5e:04:50:9b:32:
65:b6:63:eb:36:7c:21:7b:a7:fd:b4:37:24:fe:f7:
c8:a7:59:ed:8d:e7:d2:e8:35:f0:51:c9:00:09:f3:
58:95:d5:65:04:8c:ed:74:8e:82:69:5e:1e:95:13:
e0:49:14:03:19:2d:89:28:37:0d:13:a4:46:c1:60:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:11:45:67:DD:5D:8F:B1:4E:3D:53:87:24:1B:FA:70:02:90:2E:F4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ghFFZ91dj7FOPVOHJBv6cAKQLvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.110.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:47:09:41:b4:1a:7b:1b:20:3d:5e:c1:67:84:a5:09:61:8b:
96:7e:e5:42:7d:99:f4:78:f4:ad:4f:b2:7b:dc:5d:c3:da:f1:
8a:d7:e9:c0:89:1b:7b:8a:4e:5f:23:8c:e4:59:4f:41:1d:31:
4d:04:96:a6:21:a1:6f:1d:c9:61:6a:cd:c9:17:9c:2f:c0:e6:
13:54:35:13:8a:d8:ec:b7:d8:69:67:c6:32:40:4e:19:d6:1d:
ad:00:73:fb:67:9f:82:8c:cf:72:89:e1:64:c0:ee:2f:88:84:
4b:0d:2b:a3:11:a5:82:d1:40:d9:d3:dd:82:74:d9:9e:f1:d8:
bc:2f:82:49:de:f2:97:79:9e:7d:85:7f:71:94:bf:a8:ff:16:
d9:40:20:cf:7b:3c:02:22:67:63:25:18:f7:a0:b1:5d:f9:7a:
5a:88:4a:4a:6d:76:39:bd:e7:4d:d3:fc:75:eb:d8:3c:37:b2:
97:89:d3:19:e3:8b:c3:90:5c:e0:2f:b5:b5:9e:7d:2a:b0:3b:
67:d1:14:8a:be:90:eb:e1:77:dd:4f:59:fa:86:37:c8:0d:0d:
e8:77:e7:6c:2e:2f:6c:a1:ce:74:c4:5e:00:1a:a4:6d:64:e6:
82:0e:d1:24:00:7a:23:05:63:ef:b6:2f:0e:9e:21:98:5b:38:
29:bb:42:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBENchncWJwFBq6ZjZ/eD8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODI3MTcxMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjExNDU2N2RkNWQ4ZmIxNGUzZDUzODcyNDFiZmE3MDAyOTAyZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbHPMTDJ8kLnoUdQcJMFs/ddnaPs
RiadkMkDZ/qXJLy5sLsj0XWIaB+2Fcx9szXFaMYT0O8hhFDKgG4o7/sII+BnIvnK
gSutcn0x20b8vdcHV//SFeLPYyT6Swm8omthldHW1a9P8Shzs/CDgyTfQySoS5Ye
QuH5+d07w+rAWxNb/3OaL0NOyWmgM9zo3agl2pgJyMxllI17qCqIZpM1q66qq6oF
MLkpIujfZErF6GEKDN1HtqQoc5f5sxeRXgRQmzJltmPrNnwhe6f9tDck/vfIp1nt
jefS6DXwUckACfNYldVlBIztdI6CaV4elRPgSRQDGS2JKDcNE6RGwWCgfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIIRRWfdXY+xTj1ThyQb+nACkC70MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZ2hGRlo5MWRqN0ZPUFZPSEpCdjZjQUtRTHZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUmxuMA0G
CSqGSIb3DQEBCwUAA4IBAQDNRwlBtBp7GyA9XsFnhKUJYYuWfuVCfZn0ePStT7J7
3F3D2vGK1+nAiRt7ik5fI4zkWU9BHTFNBJamIaFvHclhas3JF5wvwOYTVDUTitjs
t9hpZ8YyQE4Z1h2tAHP7Z5+CjM9yieFkwO4viIRLDSujEaWC0UDZ092CdNme8di8
L4JJ3vKXeZ59hX9xlL+o/xbZQCDPezwCImdjJRj3oLFd+XpaiEpKbXY5vedN0/x1
69g8N7KXidMZ44vDkFzgL7W1nn0qsDtn0RSKvpDr4XfdT1n6hjfIDQ3od+dsLi9s
oc50xF4AGqRtZOaCDtEkAHojBWPvti8OniGYWzgpu0Jc
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:37:19 2026 by rpki-client