Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/j6ujIvSEHqcBgWP_OGAhdCRUrGE.roa
File: j6ujIvSEHqcBgWP_OGAhdCRUrGE.roa (raw, json)
Hash identifier: BPKGw6RhhbzkffawK0Ti1oyjK+mmyHLGEeQWshK1+/k=
Subject key identifier: 8F:AB:A3:22:F4:84:1E:A7:01:81:63:FF:38:60:21:74:24:54:AC:61
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F3A6BB62CD4F2033873B0D35BFB8A608C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/j6ujIvSEHqcBgWP_OGAhdCRUrGE.roa
Signing time: Tue 07 Jul 2026 02:32:45 +0000
ROA not before: Tue 07 Jul 2026 02:32:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 82.108.173.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
87.83.85.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.84.188.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
87.85.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:6b:b6:2c:d4:f2:03:38:73:b0:d3:5b:fb:8a:60:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 7 02:32:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8faba322f4841ea7018163ff386021742454ac61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:e3:88:a2:c4:01:e9:72:2b:2a:a5:ee:b7:
54:96:29:af:6d:2f:48:69:22:02:c8:57:59:d7:dd:
7d:26:6f:5f:80:8e:a3:99:f4:b8:dc:98:99:ce:6d:
89:11:3f:be:42:44:4e:c3:5a:c7:68:78:58:5d:ae:
41:bc:ab:06:92:95:04:c2:da:ae:33:6b:69:b6:12:
d8:38:04:6f:dd:a4:2e:c0:3b:53:7d:c0:42:12:c7:
84:f2:6c:03:22:8d:14:19:f6:43:50:36:0c:c3:b2:
38:cb:85:85:21:91:2c:fe:21:74:3c:1d:d5:0f:b5:
62:c2:c5:86:ef:0f:95:19:01:a6:6c:68:e0:c4:8a:
00:e7:6c:8c:d7:6d:c0:98:da:1b:74:b0:31:1e:67:
84:21:5f:b4:6a:7c:a0:a8:9a:f4:53:7c:6e:f9:8d:
41:22:0c:c6:ec:9b:b7:39:71:15:f3:f3:51:73:3f:
fd:3a:b7:93:94:87:1f:6c:c4:74:d0:78:53:11:e9:
da:28:19:b7:32:ad:71:46:0c:6a:b1:2f:6e:7a:3d:
fd:d8:54:6f:94:68:22:f8:38:79:f9:c3:6d:f4:ba:
49:9c:66:6b:38:9d:a0:30:42:0c:1d:35:27:5c:04:
c1:75:d9:78:cd:19:f0:41:d6:58:66:d1:56:f4:47:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:A3:22:F4:84:1E:A7:01:81:63:FF:38:60:21:74:24:54:AC:61
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/j6ujIvSEHqcBgWP_OGAhdCRUrGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.173.0/24
82.109.98.0/24
82.109.151.0/24
87.83.85.0/24
87.83.232.0/24
87.84.188.0/24
87.84.232.0/24
87.85.97.0/24
Signature Algorithm: sha256WithRSAEncryption
42:13:cd:a6:18:48:71:6e:64:35:21:21:4d:ef:1c:3b:8b:03:
a6:a1:83:4d:43:2b:7d:77:bb:79:a2:95:e9:e1:a6:8c:0a:fc:
77:39:2e:8a:52:c0:0e:8c:71:a2:2e:15:bf:a6:25:9b:5e:3b:
17:5f:38:45:a4:00:59:a6:df:6a:cf:2a:f2:d0:a2:b7:90:5b:
c8:9c:e9:da:2c:f1:46:69:6a:75:c4:45:2d:e4:89:c5:b0:ab:
0f:7d:7f:c0:3b:51:79:02:ee:f5:9d:6c:11:1b:7f:ef:b3:96:
68:dd:3b:05:b2:60:dc:c7:3c:43:e0:03:ee:6c:bb:fb:92:04:
7b:e9:5a:5a:bf:fe:8a:64:5f:83:24:cc:c2:91:50:b9:98:71:
44:b7:9b:b9:25:46:84:5c:66:3e:eb:98:48:f5:19:6b:de:15:
c1:bb:9e:1c:8e:ae:ff:67:89:a5:35:77:73:00:e5:3f:65:0c:
51:72:24:28:30:4f:47:77:a9:27:69:3a:83:d0:b4:63:61:ab:
b3:d1:89:12:f3:2e:fc:be:0c:03:7c:52:ee:21:9a:59:7e:c5:
a3:2c:51:bf:8a:51:39:9e:02:96:f1:07:de:53:aa:43:cd:82:
88:82:4a:cd:0a:6c:39:1b:f1:2d:22:b5:99:45:a5:d9:16:07:
65:60:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:00 2026 by rpki-client