Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/grBBJpeNQ31Vqk9Y27GHKXpakdE.roa
File: grBBJpeNQ31Vqk9Y27GHKXpakdE.roa (raw, json)
Hash identifier: M3WIszOysm1nvohgg9Iq/YANeDqixhSCR/d3IXNVlUk=
Subject key identifier: 82:B0:41:26:97:8D:43:7D:55:AA:4F:58:DB:B1:87:29:7A:5A:91:D1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A00DA62A60456875E7D2E97C1B26C30529
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/grBBJpeNQ31Vqk9Y27GHKXpakdE.roa
Signing time: Mon 17 Aug 2026 02:56:28 +0000
ROA not before: Mon 17 Aug 2026 02:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 82.108.90.0/24 maxlen: 24
82.108.110.0/24 maxlen: 24
82.108.115.0/24 maxlen: 24
82.108.121.0/24 maxlen: 24
82.108.124.0/24 maxlen: 24
82.108.134.0/24 maxlen: 24
82.108.138.0/24 maxlen: 24
82.108.210.0/24 maxlen: 24
82.108.211.0/24 maxlen: 24
82.108.213.0/24 maxlen: 24
82.108.215.0/24 maxlen: 24
82.109.159.0/24 maxlen: 24
82.109.196.0/24 maxlen: 24
82.109.197.0/24 maxlen: 24
82.109.199.0/24 maxlen: 24
82.110.50.0/24 maxlen: 24
82.110.52.0/24 maxlen: 24
82.110.54.0/24 maxlen: 24
82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
82.110.228.0/24 maxlen: 24
82.110.232.0/24 maxlen: 24
87.82.56.0/24 maxlen: 24
87.82.58.0/24 maxlen: 24
87.82.60.0/24 maxlen: 24
87.82.194.0/24 maxlen: 24
87.82.197.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.82.246.0/24 maxlen: 24
87.82.255.0/24 maxlen: 24
87.83.15.0/24 maxlen: 24
87.83.20.0/24 maxlen: 24
87.83.22.0/24 maxlen: 24
87.83.70.0/24 maxlen: 24
87.83.71.0/24 maxlen: 24
87.83.113.0/24 maxlen: 24
87.83.204.0/24 maxlen: 24
87.83.222.0/24 maxlen: 24
87.83.223.0/24 maxlen: 24
87.84.56.0/24 maxlen: 24
87.84.58.0/24 maxlen: 24
87.84.60.0/24 maxlen: 24
87.84.61.0/24 maxlen: 24
87.84.63.0/24 maxlen: 24
87.84.153.0/24 maxlen: 24
87.84.210.0/24 maxlen: 24
87.84.212.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.84.237.0/24 maxlen: 24
87.85.75.0/24 maxlen: 24
87.85.77.0/24 maxlen: 24
87.85.136.0/24 maxlen: 24
87.85.141.0/24 maxlen: 24
87.85.227.0/24 maxlen: 24
87.85.229.0/24 maxlen: 24
87.85.241.0/24 maxlen: 24
87.85.243.0/24 maxlen: 24
87.85.245.0/24 maxlen: 24
87.85.247.0/24 maxlen: 24
87.85.248.0/24 maxlen: 24
87.85.250.0/24 maxlen: 24
87.86.94.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
87.86.186.0/24 maxlen: 24
87.86.216.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0d:a6:2a:60:45:68:75:e7:d2:e9:7c:1b:26:c3:05:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 17 02:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82b04126978d437d55aa4f58dbb187297a5a91d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:69:fa:ed:46:ca:10:59:9e:c8:94:04:9c:
7c:24:e0:a8:b1:7d:f6:48:2d:8d:e7:3b:fe:2e:5a:
ad:10:d1:65:2a:fb:11:b1:37:f7:87:89:c4:3f:fa:
fc:81:1e:00:af:c3:dc:1d:8a:f9:fd:a3:d6:ce:84:
7c:47:ba:25:fd:99:da:33:ae:66:b5:b3:88:9b:6f:
79:10:79:23:aa:49:03:d2:9b:a0:14:16:1f:e2:72:
a0:11:64:65:ce:7f:bf:ef:89:07:f0:c0:4d:84:96:
62:60:2e:c5:4a:d3:16:2c:e2:d9:c2:a5:b3:da:7b:
e9:e6:07:29:3a:f9:6d:a1:f2:17:5c:4a:a6:9a:2f:
97:91:30:66:67:b2:a8:88:29:bb:78:c7:91:80:39:
b7:cd:a8:c5:8b:e4:b8:e0:6b:62:16:f8:e3:fb:ce:
13:ec:b2:99:c6:8b:74:aa:0a:30:02:b0:45:22:b9:
8b:ec:d1:ff:b4:cc:57:23:2e:96:10:2c:31:b7:5a:
2d:d2:5a:3b:b6:67:c3:a0:26:64:75:6b:da:34:73:
92:cf:14:b4:db:e5:c4:d1:59:02:27:78:4d:dd:ba:
9a:d4:08:1d:54:9a:f3:8f:9d:ab:fa:5c:f2:7b:59:
8e:1c:ed:42:02:73:eb:84:1f:e8:00:85:79:3f:6d:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B0:41:26:97:8D:43:7D:55:AA:4F:58:DB:B1:87:29:7A:5A:91:D1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/grBBJpeNQ31Vqk9Y27GHKXpakdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
82.108.110.0/24
82.108.115.0/24
82.108.121.0/24
82.108.124.0/24
82.108.134.0/24
82.108.138.0/24
82.108.210.0/23
82.108.213.0/24
82.108.215.0/24
82.109.159.0/24
82.109.196.0/23
82.109.199.0/24
82.110.50.0/24
82.110.52.0/24
82.110.54.0/24
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
82.110.228.0/24
82.110.232.0/24
87.82.56.0/24
87.82.58.0/24
87.82.60.0/24
87.82.194.0/24
87.82.197.0/24
87.82.213.0/24
87.82.246.0/24
87.82.255.0/24
87.83.15.0/24
87.83.20.0/24
87.83.22.0/24
87.83.70.0/23
87.83.113.0/24
87.83.204.0/24
87.83.222.0/23
87.84.56.0/24
87.84.58.0/24
87.84.60.0/23
87.84.63.0/24
87.84.153.0/24
87.84.210.0/24
87.84.212.0/24
87.84.218.0/24
87.84.237.0/24
87.85.75.0/24
87.85.77.0/24
87.85.136.0/24
87.85.141.0/24
87.85.227.0/24
87.85.229.0/24
87.85.241.0/24
87.85.243.0/24
87.85.245.0/24
87.85.247.0-87.85.248.255
87.85.250.0/24
87.86.94.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
87.86.186.0/24
87.86.216.0/24
212.135.143.0/24
Signature Algorithm: sha256WithRSAEncryption
68:31:65:41:c5:01:50:3a:48:ad:c6:e0:69:3d:a1:6c:d5:60:
49:cc:24:58:d4:13:17:84:23:cc:c5:31:df:02:63:ba:6f:f6:
e9:d9:28:13:7e:89:83:09:bb:0f:55:cc:33:ef:48:5f:9a:bb:
37:13:d8:5a:66:33:36:65:a4:f8:5a:31:53:76:61:96:84:19:
af:11:33:ee:be:13:ee:99:b4:ee:78:86:a1:0b:67:0a:8f:b5:
22:88:1d:ec:7f:c4:e5:1f:16:21:fe:13:3d:27:a6:b5:15:bb:
68:03:d7:1f:5f:09:d2:f3:b1:41:81:59:47:43:61:76:df:c1:
74:52:85:6a:15:f2:db:c4:cf:51:1b:dd:fe:0a:70:22:2f:71:
bc:86:98:4e:aa:4d:3d:29:1c:d7:e5:6d:cf:55:f1:71:68:26:
5f:95:a5:ee:33:b9:9d:70:1f:3e:3c:bf:14:47:ed:37:66:0c:
bb:57:f0:4f:31:3e:ab:1e:d5:c2:06:9e:a9:c9:5e:14:95:92:
bc:c0:ae:32:0b:8d:03:00:0f:cb:cc:6a:72:d8:f9:a6:3b:8f:
f0:d0:3b:8a:6d:5a:2d:7d:f4:39:ca:ea:1f:5b:ef:77:41:4f:
3d:24:49:10:bf:19:1f:93:f0:65:41:2b:c6:ca:3b:69:8d:09:
42:b9:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:08:19 2026 by rpki-client