Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/h8T1SJ6KJehGLea8tKAv6pY1Anc.roa
File: h8T1SJ6KJehGLea8tKAv6pY1Anc.roa (raw, json)
Hash identifier: KSz9mjJCAGzVyrHiXGRvwZHNBWbgXghwA7WGsX8EWJk=
Subject key identifier: 87:C4:F5:48:9E:8A:25:E8:46:2D:E6:BC:B4:A0:2F:EA:96:35:02:77
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06B93C40059AC383B916C77D35EBCCFDC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/h8T1SJ6KJehGLea8tKAv6pY1Anc.roa
Signing time: Fri 04 Sep 2026 08:40:41 +0000
ROA not before: Fri 04 Sep 2026 08:40:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216047
IP address blocks: 82.109.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:93:c4:00:59:ac:38:3b:91:6c:77:d3:5e:bc:cf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 08:40:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87c4f5489e8a25e8462de6bcb4a02fea96350277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:05:fa:fd:d9:50:83:b9:00:db:e9:7d:d8:
28:2c:a7:c5:fb:76:98:06:26:22:3b:6d:8d:67:76:
8f:58:e1:8a:74:13:d9:15:2d:36:0b:f4:20:a3:e2:
4b:10:d4:ea:e6:a3:5d:e1:d3:9c:be:20:69:91:7e:
95:57:5b:83:bd:88:84:b7:c7:48:db:6c:67:72:cc:
d6:70:ab:3a:14:cc:70:34:89:0e:d8:c2:f0:41:ec:
6c:07:05:cc:5e:4e:c0:1c:74:e2:77:4c:79:2c:79:
02:23:da:17:65:29:7a:13:78:39:28:67:99:4a:e1:
6d:54:81:6e:3e:d8:ff:28:bd:22:7d:36:00:69:a2:
4d:d5:7f:a3:33:3a:d5:0b:6b:9e:bf:3e:86:b1:5a:
b3:d1:0f:4c:af:e0:52:bb:a5:9f:0b:f1:ae:71:9b:
8d:1c:db:bb:ab:2a:97:0a:ca:7a:93:1a:74:fb:46:
b2:f1:65:b5:58:1b:5d:7f:06:cb:91:6a:d5:1f:49:
1a:9b:01:f4:b8:d8:28:78:64:af:30:b5:df:6a:ac:
1b:c3:a7:15:2d:b3:7a:cd:69:b9:c6:00:89:62:88:
62:8f:b5:db:98:31:cb:22:3b:0a:de:34:7c:ac:60:
e5:c4:b5:bb:b7:f0:92:30:65:67:93:96:9b:a1:f5:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C4:F5:48:9E:8A:25:E8:46:2D:E6:BC:B4:A0:2F:EA:96:35:02:77
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/h8T1SJ6KJehGLea8tKAv6pY1Anc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.168.0/22
Signature Algorithm: sha256WithRSAEncryption
89:66:53:17:6a:bc:2f:ec:43:fc:1c:86:3c:ad:f3:b4:ff:13:
38:50:75:f4:60:f0:b4:45:eb:65:ae:de:16:6c:48:46:b3:bc:
ea:09:8c:07:96:e5:a7:68:cc:c6:c2:52:81:ff:5c:3d:3b:eb:
d0:d7:3e:f6:ce:d9:22:7d:3f:79:56:f9:18:96:db:47:96:13:
66:9e:f5:d8:84:be:20:c4:e9:37:7c:8b:df:85:e2:d3:93:20:
6f:34:81:dd:57:23:8f:a9:61:c0:3e:64:be:84:8b:fd:af:98:
8a:ca:53:b7:0c:5c:57:eb:e4:10:d7:af:2d:c0:5f:98:87:a2:
ef:32:c0:22:dc:50:15:ce:76:f6:4a:71:14:b4:1e:c8:8f:6d:
6e:dc:66:15:e5:eb:76:90:8d:6d:a6:7d:7d:05:de:e7:78:e8:
3a:c1:fe:43:1f:7b:a8:a1:a6:b5:66:13:58:15:0a:fc:b5:bb:
d4:7a:4c:74:41:91:65:2c:72:81:22:cd:c4:2d:98:d7:82:fc:
d9:fa:ec:d3:35:43:0b:e4:e5:f7:ba:29:43:85:2f:f6:32:bd:
e4:e3:3c:f6:06:75:01:d4:9a:e9:9d:62:e3:40:01:71:6a:1a:
af:5d:b1:b7:ba:d4:3f:fc:89:05:14:6a:3d:8f:0d:c5:80:1a:
25:7d:93:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBrk8QAWaw4O5Fsd9NevM/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTA0MDg0MDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2M0ZjU0ODllOGEyNWU4NDYyZGU2YmNiNGEwMmZlYTk2MzUwMjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3cF+v3ZUIO5ANvpfdgoLKfF+3aY
BiYiO22NZ3aPWOGKdBPZFS02C/Qgo+JLENTq5qNd4dOcviBpkX6VV1uDvYiEt8dI
22xncszWcKs6FMxwNIkO2MLwQexsBwXMXk7AHHTid0x5LHkCI9oXZSl6E3g5KGeZ
SuFtVIFuPtj/KL0ifTYAaaJN1X+jMzrVC2uevz6GsVqz0Q9Mr+BSu6WfC/GucZuN
HNu7qyqXCsp6kxp0+0ay8WW1WBtdfwbLkWrVH0kamwH0uNgoeGSvMLXfaqwbw6cV
LbN6zWm5xgCJYohij7XbmDHLIjsK3jR8rGDlxLW7t/CSMGVnk5abofW91wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIfE9UieiiXoRi3mvLSgL+qWNQJ3MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvaDhUMVNKNktKZWhHTGVhOHRLQXY2cFkxQW5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUm2oMA0G
CSqGSIb3DQEBCwUAA4IBAQCJZlMXarwv7EP8HIY8rfO0/xM4UHX0YPC0Retlrt4W
bEhGs7zqCYwHluWnaMzGwlKB/1w9O+vQ1z72ztkifT95VvkYlttHlhNmnvXYhL4g
xOk3fIvfheLTkyBvNIHdVyOPqWHAPmS+hIv9r5iKylO3DFxX6+QQ168twF+Yh6Lv
MsAi3FAVznb2SnEUtB7Ij21u3GYV5et2kI1tpn19Bd7neOg6wf5DH3uooaa1ZhNY
FQr8tbvUekx0QZFlLHKBIs3ELZjXgvzZ+uzTNUML5OX3uilDhS/2Mr3k4zz2BnUB
1JrpnWLjQAFxahqvXbG3utQ//IkFFGo9jw3FgBolfZOB
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:11 2026 by rpki-client