Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jQvc1UbHF6ODPecfiXfrh0Su7LA.roa
File: jQvc1UbHF6ODPecfiXfrh0Su7LA.roa (raw, json)
Hash identifier: 6bC3F7AhmOGm0bEax/kU1sRpUC8OeRgdT3UfFnD72sg=
Subject key identifier: 8D:0B:DC:D5:46:C7:17:A3:83:3D:E7:1F:89:77:EB:87:44:AE:EC:B0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A052D5BA75E57425FEE0BD5E15D3690654
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jQvc1UbHF6ODPecfiXfrh0Su7LA.roa
Signing time: Sun 30 Aug 2026 13:22:13 +0000
ROA not before: Sun 30 Aug 2026 13:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 82.109.189.0/24 maxlen: 24
82.109.192.0/24 maxlen: 24
82.109.193.0/24 maxlen: 24
87.83.56.0/24 maxlen: 24
87.83.58.0/24 maxlen: 24
87.83.59.0/24 maxlen: 24
87.83.63.0/24 maxlen: 24
87.83.120.0/24 maxlen: 24
87.83.126.0/24 maxlen: 24
87.83.160.0/24 maxlen: 24
87.83.162.0/24 maxlen: 24
87.83.167.0/24 maxlen: 24
87.84.67.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.222.0/24 maxlen: 24
87.85.228.0/24 maxlen: 24
87.86.174.0/24 maxlen: 24
212.134.42.0/24 maxlen: 24
212.134.45.0/24 maxlen: 24
212.134.55.0/24 maxlen: 24
212.134.129.0/24 maxlen: 24
212.134.132.0/24 maxlen: 24
212.134.144.0/24 maxlen: 24
212.134.145.0/24 maxlen: 24
212.134.147.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.186.0/24 maxlen: 24
212.134.187.0/24 maxlen: 24
212.134.195.0/24 maxlen: 24
212.134.197.0/24 maxlen: 24
212.134.245.0/24 maxlen: 24
212.134.255.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.67.0/24 maxlen: 24
212.135.70.0/24 maxlen: 24
212.135.72.0/24 maxlen: 24
212.135.74.0/24 maxlen: 24
212.135.78.0/24 maxlen: 24
212.135.99.0/24 maxlen: 24
212.135.102.0/24 maxlen: 24
212.135.136.0/24 maxlen: 24
212.135.142.0/24 maxlen: 24
212.135.149.0/24 maxlen: 24
212.135.162.0/24 maxlen: 24
212.135.205.0/24 maxlen: 24
212.135.241.0/24 maxlen: 24
212.135.244.0/24 maxlen: 24
212.135.247.0/24 maxlen: 24
212.135.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:d5:ba:75:e5:74:25:fe:e0:bd:5e:15:d3:69:06:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 30 13:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d0bdcd546c717a3833de71f8977eb8744aeecb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:7f:55:96:a8:27:39:71:51:7b:65:69:31:
2c:a2:75:3f:5f:bc:56:90:e6:09:00:f5:7a:b5:62:
ec:8f:78:a1:43:13:46:59:dd:d5:20:89:de:44:af:
53:c4:51:2a:22:37:18:e7:ae:a8:30:30:80:27:f7:
e7:9f:82:a0:95:ab:aa:49:2b:15:42:21:da:42:63:
f5:95:8b:75:e6:a8:05:bd:e3:88:d5:4d:58:bc:15:
7e:7a:91:f9:e4:0e:55:b8:50:18:c0:e9:05:cb:96:
2e:c1:c3:28:1f:9f:d8:bb:f4:7f:a7:06:7b:73:ef:
17:51:b9:86:24:a2:46:9c:72:36:20:a2:ba:f2:b7:
8e:14:8e:a9:24:a4:b8:91:39:bd:ca:a4:b6:1d:d3:
9b:8c:07:70:a5:74:fa:e6:ab:d4:67:56:6d:50:f6:
79:db:26:89:07:d8:fe:f3:34:69:07:00:85:f6:d6:
f2:e3:be:af:54:ba:23:88:1d:01:64:01:1c:03:a6:
d1:3a:70:c0:7b:8f:11:22:82:05:cb:e6:8d:94:db:
03:44:4d:ca:fa:84:be:c7:f6:2b:bc:94:20:c0:3d:
9a:9e:57:02:61:9c:d3:00:fd:9c:33:1a:51:e3:47:
5c:f8:de:8a:bf:b0:33:2c:e5:c1:4c:ce:9c:89:b2:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0B:DC:D5:46:C7:17:A3:83:3D:E7:1F:89:77:EB:87:44:AE:EC:B0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jQvc1UbHF6ODPecfiXfrh0Su7LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.189.0/24
82.109.192.0/23
87.83.56.0/24
87.83.58.0/23
87.83.63.0/24
87.83.120.0/24
87.83.126.0/24
87.83.160.0/24
87.83.162.0/24
87.83.167.0/24
87.84.67.0/24
87.84.79.0/24
87.84.128.0/24
87.84.132.0/24
87.84.154.0/24
87.84.158.0/24
87.84.222.0/24
87.85.228.0/24
87.86.174.0/24
212.134.42.0/24
212.134.45.0/24
212.134.55.0/24
212.134.129.0/24
212.134.132.0/24
212.134.144.0/23
212.134.147.0/24
212.134.179.0/24
212.134.186.0/23
212.134.195.0/24
212.134.197.0/24
212.134.245.0/24
212.134.255.0/24
212.135.26.0/24
212.135.67.0/24
212.135.70.0/24
212.135.72.0/24
212.135.74.0/24
212.135.78.0/24
212.135.99.0/24
212.135.102.0/24
212.135.136.0/24
212.135.142.0/24
212.135.149.0/24
212.135.162.0/24
212.135.205.0/24
212.135.241.0/24
212.135.244.0/24
212.135.247.0/24
212.135.254.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:69:14:64:f5:a7:9a:79:91:d2:5c:33:55:a6:34:b9:2e:ab:
2d:23:f0:8f:3b:09:1e:96:dd:49:1d:fa:3f:fc:82:79:36:88:
81:f3:74:16:90:fe:19:ef:db:f0:54:36:32:2b:b5:02:ef:f6:
7b:a4:9e:e3:3d:64:e6:8a:4a:0c:af:aa:d1:7e:56:da:78:4d:
05:e6:ca:c4:65:43:35:96:85:d1:f7:a2:7a:df:de:3c:38:44:
49:2c:b3:8e:26:36:a8:ed:66:1b:3f:c9:bf:8d:a2:75:99:28:
46:26:3d:c0:63:40:04:1e:03:c9:3d:9d:6e:c0:e9:95:3e:fc:
cd:d2:40:4d:4e:18:37:73:8c:cc:59:41:6f:c8:b1:64:12:e0:
61:5d:ca:fb:9f:d2:95:98:ed:65:51:8a:93:be:e1:69:85:a6:
cb:b7:be:f6:ee:c9:97:1a:58:e8:bb:9e:fa:a4:f1:22:2f:a6:
ab:36:99:a2:f8:8e:ca:ee:04:0e:29:90:f6:57:d3:35:2b:36:
da:ab:1e:8d:9e:e1:79:22:83:a8:7e:68:ae:b2:0c:35:d4:cf:
87:d0:8c:2e:45:79:96:b9:e8:00:59:15:05:ca:40:5b:47:88:
fe:96:e4:ff:3d:93:a1:e9:ce:c8:a6:30:15:16:77:67:61:ae:
51:b4:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:30 2026 by rpki-client