Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/p4dW6hJ3feZ4NSGX-1XBDUyEuQs.roa
File: p4dW6hJ3feZ4NSGX-1XBDUyEuQs.roa (raw, json)
Hash identifier: X340ynuKhq++Fn+s3XfR5u+H2KipKnzqIJDcFMx67T0=
Subject key identifier: A7:87:56:EA:12:77:7D:E6:78:35:21:97:FB:55:C1:0D:4C:84:B9:0B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A055209358E967BA093F2F33C883F27864
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/p4dW6hJ3feZ4NSGX-1XBDUyEuQs.roa
Signing time: Mon 31 Aug 2026 00:03:13 +0000
ROA not before: Mon 31 Aug 2026 00:03:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 82.108.90.0/24 maxlen: 24
82.108.138.0/24 maxlen: 24
82.109.102.0/24 maxlen: 24
82.109.144.0/24 maxlen: 24
82.109.195.0/24 maxlen: 24
82.109.198.0/24 maxlen: 24
82.110.105.0/24 maxlen: 24
87.82.195.0/24 maxlen: 24
87.82.196.0/24 maxlen: 24
87.82.233.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.61.0/24 maxlen: 24
87.83.62.0/24 maxlen: 24
87.83.124.0/24 maxlen: 24
87.83.165.0/24 maxlen: 24
87.83.166.0/24 maxlen: 24
87.83.194.0/24 maxlen: 24
87.83.197.0/24 maxlen: 24
87.83.198.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.133.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.223.0/24 maxlen: 24
87.85.77.0/24 maxlen: 24
87.86.19.0/24 maxlen: 24
87.86.23.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.138.0/24 maxlen: 24
212.134.139.0/24 maxlen: 24
212.134.146.0/24 maxlen: 24
212.134.155.0/24 maxlen: 24
212.134.163.0/24 maxlen: 24
212.134.182.0/24 maxlen: 24
212.134.192.0/24 maxlen: 24
212.134.193.0/24 maxlen: 24
212.134.194.0/24 maxlen: 24
212.134.196.0/24 maxlen: 24
212.134.200.0/24 maxlen: 24
212.134.230.0/24 maxlen: 24
212.134.235.0/24 maxlen: 24
212.134.236.0/24 maxlen: 24
212.135.25.0/24 maxlen: 24
212.135.64.0/24 maxlen: 24
212.135.65.0/24 maxlen: 24
212.135.68.0/24 maxlen: 24
212.135.69.0/24 maxlen: 24
212.135.71.0/24 maxlen: 24
212.135.73.0/24 maxlen: 24
212.135.75.0/24 maxlen: 24
212.135.79.0/24 maxlen: 24
212.135.96.0/24 maxlen: 24
212.135.97.0/24 maxlen: 24
212.135.101.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.137.0/24 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.206.0/24 maxlen: 24
212.135.207.0/24 maxlen: 24
212.135.245.0/24 maxlen: 24
212.135.251.0/24 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:20:93:58:e9:67:ba:09:3f:2f:33:c8:83:f2:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 31 00:03:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a78756ea12777de678352197fb55c10d4c84b90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9c:09:9b:3f:b9:e1:47:70:02:88:ad:9f:00:
63:4e:3a:53:f3:1e:4e:fa:3f:3d:70:9c:7e:48:a1:
03:07:5c:47:38:8d:d3:2a:d1:70:35:8a:9b:f6:fd:
b6:75:ef:b5:6c:1a:e7:84:45:f5:6b:e0:e8:39:f1:
81:d8:0f:95:d3:10:ec:ae:e4:12:b9:a3:37:58:26:
bb:3c:a2:1c:23:cb:48:e1:4a:8c:9d:30:d3:c6:98:
85:6d:d1:be:9b:b3:c3:a3:09:db:57:7e:fb:ce:c3:
41:12:57:91:36:b1:e5:f0:4d:4f:5c:24:be:49:80:
f7:e3:da:dd:0e:2b:22:0e:6c:56:8e:0b:a9:b1:8f:
02:dc:04:ad:7e:17:28:f2:02:56:e1:3c:20:b8:d0:
70:b7:15:45:f4:c5:e7:ae:69:35:76:83:0c:d7:e9:
17:e9:3b:47:91:9f:85:c8:6f:fc:88:d7:2a:a0:f0:
8b:7b:40:b7:73:d8:93:c0:88:42:68:b2:b6:ac:2e:
ec:17:28:8f:fe:49:e9:67:af:6a:c9:68:d7:fb:3c:
6a:1c:00:a0:d8:6d:d3:c4:da:a8:14:da:ad:c2:2f:
db:d5:d9:ec:ea:70:29:39:d5:b9:41:d2:ce:97:d5:
55:90:2b:20:63:98:a3:09:b8:5a:35:7c:52:73:d4:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:87:56:EA:12:77:7D:E6:78:35:21:97:FB:55:C1:0D:4C:84:B9:0B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/p4dW6hJ3feZ4NSGX-1XBDUyEuQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
82.108.138.0/24
82.109.102.0/24
82.109.144.0/24
82.109.195.0/24
82.109.198.0/24
82.110.105.0/24
87.82.195.0-87.82.196.255
87.82.233.0/24
87.82.241.0/24
87.82.243.0/24
87.82.247.0/24
87.83.61.0-87.83.62.255
87.83.124.0/24
87.83.165.0-87.83.166.255
87.83.194.0/24
87.83.197.0-87.83.198.255
87.84.130.0/24
87.84.133.0-87.84.134.255
87.84.223.0/24
87.85.77.0/24
87.86.19.0/24
87.86.23.0/24
212.134.36.0/24
212.134.138.0/23
212.134.146.0/24
212.134.155.0/24
212.134.163.0/24
212.134.182.0/24
212.134.192.0-212.134.194.255
212.134.196.0/24
212.134.200.0/24
212.134.230.0/24
212.134.235.0-212.134.236.255
212.135.25.0/24
212.135.64.0/23
212.135.68.0/23
212.135.71.0/24
212.135.73.0/24
212.135.75.0/24
212.135.79.0/24
212.135.96.0/23
212.135.101.0/24
212.135.129.0/24
212.135.135.0/24
212.135.137.0/24
212.135.155.0/24
212.135.206.0/23
212.135.245.0/24
212.135.251.0-212.135.253.255
Signature Algorithm: sha256WithRSAEncryption
c8:03:48:1d:62:25:05:3f:35:87:48:cb:e9:d4:d9:53:74:ae:
3a:17:86:93:55:73:72:34:d6:10:92:10:6f:9d:e9:5b:39:c9:
aa:51:85:a3:ad:63:27:c4:9f:c1:8b:f5:b4:8d:d1:38:64:5f:
48:d2:42:6c:46:59:73:c8:90:ef:ae:1c:e2:e9:f0:e4:60:96:
77:07:3e:aa:50:01:eb:96:c0:20:39:01:b7:9c:60:50:fd:70:
6a:c7:68:c5:77:63:22:1e:d7:ba:bd:d3:52:31:2c:3f:b3:e1:
47:d5:48:c0:fc:21:55:65:8f:b0:a2:3d:55:26:0f:59:49:a0:
0e:5c:2f:92:29:5b:18:04:b7:a8:f5:67:e6:14:35:4f:e1:0b:
fb:d6:4c:90:28:6b:60:b5:0a:2c:52:55:45:ad:dc:6e:e8:e1:
ab:ab:d2:c5:98:32:c7:b6:fd:c6:64:87:23:08:7e:e1:5d:cc:
d1:9e:f9:84:2b:17:48:78:1a:7d:7c:d3:d7:75:29:fa:de:3d:
2f:7d:7a:04:19:1d:c2:8e:cd:8d:e1:02:c4:c3:9c:fc:cb:48:
76:ab:4c:38:e8:80:8d:3b:fd:68:e2:ad:ed:26:83:38:ed:7e:
7b:4e:6e:f1:58:77:b9:54:84:e3:e0:09:51:4a:fc:46:b7:29:
5d:8e:18:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:24 2026 by rpki-client