Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kDo48tunkMWeisomuiHLbWEVo8s.roa
File: kDo48tunkMWeisomuiHLbWEVo8s.roa (raw, json)
Hash identifier: XUPF6V4WdAX0wpgeSIE5EH7WwtJ2IhuFVYiSxS2TJRE=
Subject key identifier: 90:3A:38:F2:DB:A7:90:C5:9E:8A:CA:26:BA:21:CB:6D:61:15:A3:CB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F27CCDFA9ACF227747F362BA508A0358B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kDo48tunkMWeisomuiHLbWEVo8s.roa
Signing time: Fri 03 Jul 2026 11:46:05 +0000
ROA not before: Fri 03 Jul 2026 11:46:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 87.82.232.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.245.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.86.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.161.0/24 maxlen: 24
87.83.163.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.83.192.0/24 maxlen: 24
87.83.216.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.152.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.156.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.84.239.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:cc:df:a9:ac:f2:27:74:7f:36:2b:a5:08:a0:35:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 3 11:46:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=903a38f2dba790c59e8aca26ba21cb6d6115a3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:f6:e0:a2:ee:4c:3f:05:2d:a8:de:a9:8d:
da:09:48:6e:e8:da:5e:1f:71:a1:e5:30:bd:6a:4c:
21:25:b2:d2:69:71:e4:73:21:23:da:9e:1d:91:51:
af:d2:6c:21:b0:5d:d2:bf:a7:ed:90:a7:a0:cc:db:
98:c8:40:a1:4c:03:41:ee:da:da:f3:00:28:81:5d:
a6:25:46:f2:e3:32:23:b2:54:58:f9:9f:c9:02:00:
24:11:08:41:0c:da:e0:2b:6b:15:05:b0:c8:70:38:
b9:ad:08:57:cf:1f:8f:ea:d0:25:1f:ae:60:70:d2:
99:03:3e:68:b0:e4:76:48:b8:9c:21:2e:38:1d:e6:
4f:dc:ba:88:17:33:da:ff:f2:8b:36:81:50:d9:85:
76:3d:4a:99:73:8d:4c:fc:13:7b:a9:64:bd:b4:de:
4a:0b:08:05:fd:5a:77:e3:92:be:a1:6b:4d:b4:f1:
fe:f9:ba:db:ef:7f:98:9e:59:2f:f5:5e:81:64:47:
69:44:67:bd:a6:d3:3d:bd:63:5c:fa:56:c9:d5:14:
73:4e:be:6c:68:81:ca:0c:71:f7:af:8b:65:0f:34:
a0:d3:7e:0f:79:d2:37:6f:20:69:6e:e0:76:0b:6d:
40:9e:00:bf:7c:e0:5b:ed:12:87:9f:fe:ff:80:33:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3A:38:F2:DB:A7:90:C5:9E:8A:CA:26:BA:21:CB:6D:61:15:A3:CB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kDo48tunkMWeisomuiHLbWEVo8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.232.0/24
87.82.240.0/23
87.82.243.0/24
87.82.245.0/24
87.82.247.0/24
87.83.86.0/24
87.83.125.0/24
87.83.161.0/24
87.83.163.0/24
87.83.174.0/24
87.83.192.0/24
87.83.216.0/24
87.84.64.0/24
87.84.76.0/24
87.84.79.0/24
87.84.128.0/24
87.84.130.0/24
87.84.132.0/24
87.84.134.0/24
87.84.152.0/24
87.84.154.0/24
87.84.156.0/24
87.84.158.0/24
87.84.220.0/24
87.84.239.0/24
212.135.135.0/24
212.135.143.0/24
212.135.161.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a2:83:36:a0:74:39:5d:ec:97:ab:90:23:7d:30:ac:3f:99:
90:0b:00:11:64:43:01:47:ca:26:75:2c:87:b9:76:51:b1:e0:
bf:f7:25:4f:50:9a:cc:90:07:0b:6b:76:e0:5e:e4:e4:43:a3:
c3:2e:5f:7f:74:4d:c5:33:90:93:65:2a:52:a9:8c:be:cc:1c:
62:26:57:0e:88:a9:72:e9:4b:80:02:5e:81:50:dd:ef:e6:29:
ae:4f:8b:36:1b:74:82:95:21:62:71:3d:a2:e5:56:1b:20:60:
f5:58:01:6b:c4:7d:49:68:f0:bf:b9:73:cb:84:58:c0:0b:ba:
21:3f:35:47:4a:fc:c0:1e:24:57:77:f4:f3:40:a6:8d:82:23:
e9:c8:d6:aa:d0:45:66:68:81:3f:40:ca:c9:ea:e7:c0:76:58:
fa:bb:ea:23:fb:4c:83:ef:bd:a4:c6:a6:b8:18:1e:46:ac:6b:
07:f0:f7:91:60:38:0f:d0:90:82:9d:26:ad:97:dd:7a:0f:f3:
1e:f6:46:c4:40:dc:4f:58:50:b4:48:f2:d4:3c:1d:94:a6:42:
48:bd:82:c9:69:7c:d8:25:dc:31:82:27:e3:3a:fe:28:3b:b2:
f5:99:78:5d:55:91:5e:01:13:06:66:16:48:36:33:b7:c7:05:
86:de:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 19:56:11 2026 by rpki-client