Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/muDVX7ZPKQ4bTCueLiyNlnqJubY.roa
File: muDVX7ZPKQ4bTCueLiyNlnqJubY.roa (raw, json)
Hash identifier: CWQ/9KrsZpXw0Gg4LQ95++3fqiROENHLIUl24jDNl04=
Subject key identifier: 9A:E0:D5:5F:B6:4F:29:0E:1B:4C:2B:9E:2E:2C:8D:96:7A:89:B9:B6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A05CD84A5DA9F1526E538C068E075B9265
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/muDVX7ZPKQ4bTCueLiyNlnqJubY.roa
Signing time: Tue 01 Sep 2026 12:01:13 +0000
ROA not before: Tue 01 Sep 2026 12:01:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 82.108.162.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
87.85.130.0/24 maxlen: 24
87.86.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:d8:4a:5d:a9:f1:52:6e:53:8c:06:8e:07:5b:92:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 1 12:01:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ae0d55fb64f290e1b4c2b9e2e2c8d967a89b9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:60:c6:4f:f7:cb:48:12:e6:d7:ef:0c:87:
48:b9:e2:ad:27:45:f4:af:56:61:85:54:d0:f3:5e:
e2:7e:5e:fc:38:ce:90:3c:18:2c:a5:04:b9:1a:a9:
5f:03:21:6a:73:de:e3:a0:1d:14:b5:7f:c9:fc:84:
a8:93:ac:9c:ba:04:de:87:cb:f8:5a:09:3b:6f:7a:
2e:d2:41:0f:16:73:57:f7:c5:39:fc:8d:45:1f:27:
69:35:63:d4:c6:27:70:35:38:3c:12:94:76:c8:38:
e3:de:58:46:fe:e6:79:d6:56:47:63:d1:bb:2c:bb:
fc:1d:bc:c7:c9:1d:90:e2:02:42:c6:7c:af:f6:77:
b8:79:e9:e5:e2:ba:de:94:0e:17:b1:ca:4d:05:b5:
00:71:34:7b:de:f3:41:7b:d7:17:8b:5c:1c:fd:53:
6e:b7:b3:9c:49:96:44:2f:ad:a2:e0:46:2d:be:cd:
9a:5b:75:00:3b:c6:04:26:51:d6:9d:69:61:a8:2c:
c2:cb:04:ba:98:2a:61:4c:ae:ab:c0:06:bb:f2:44:
8b:a7:98:d4:62:d9:e2:31:4d:49:fe:e9:49:3a:ef:
f1:c1:57:f5:e9:02:6b:81:26:28:80:87:02:df:70:
25:78:77:00:cc:85:59:d9:63:3d:c2:28:3e:65:7a:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E0:D5:5F:B6:4F:29:0E:1B:4C:2B:9E:2E:2C:8D:96:7A:89:B9:B6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/muDVX7ZPKQ4bTCueLiyNlnqJubY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.162.0/24
87.84.232.0/24
87.85.130.0/24
87.86.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:15:9c:e2:c0:c5:f0:38:83:ea:1d:8b:a9:88:99:7e:01:4b:
a4:ff:75:4a:e6:ec:34:ab:49:b4:df:b0:80:60:04:91:44:ab:
07:2a:2a:db:19:6c:d9:43:9e:66:56:21:b7:03:a2:2d:76:e3:
fd:75:99:4d:26:f3:67:24:ae:ec:4a:9d:d9:1c:55:30:82:2a:
5d:4f:1a:28:37:92:e7:58:bb:7c:b5:e1:64:b2:17:76:8e:8c:
ba:77:bf:e3:88:0b:1c:94:df:dc:c4:00:49:f8:e9:f7:aa:48:
45:b0:58:cc:6c:dc:da:d4:2c:4b:11:32:af:b8:e2:50:85:1a:
d9:2b:4b:45:2f:94:dd:be:58:2d:1d:50:14:b8:04:9a:54:71:
2f:40:29:db:ad:6c:34:96:44:64:17:0a:33:e7:40:60:09:60:
da:d0:3e:42:74:f6:b0:2b:38:79:86:7b:f5:6d:9e:46:cc:f9:
91:de:66:4f:8f:2a:15:1d:c5:ca:e1:4e:65:f9:55:08:90:d1:
88:ee:c9:0c:6b:04:a0:37:eb:3a:5a:cd:6a:be:c7:09:fd:85:
60:fa:9e:8c:57:41:af:b1:19:5c:ef:63:2c:ed:9f:c3:cb:75:
ce:38:e8:e3:cd:d0:e9:b6:61:79:9c:6e:27:d3:da:e8:12:2e:
59:92:41:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:40:38 2026 by rpki-client