Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rVRwv2sGo9MFUHSl2QNZ8PnnUQ8.roa
File: rVRwv2sGo9MFUHSl2QNZ8PnnUQ8.roa (raw, json)
Hash identifier: 2W14u0a3lCm/COrSR3+Lqi/3BgOBScVZBofFhDLwm+Y=
Subject key identifier: AD:54:70:BF:6B:06:A3:D3:05:50:74:A5:D9:03:59:F0:F9:E7:51:0F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A00DA62AB5ADAA0423FD60637BBCB7AAB7
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rVRwv2sGo9MFUHSl2QNZ8PnnUQ8.roa
Signing time: Mon 17 Aug 2026 02:56:28 +0000
ROA not before: Mon 17 Aug 2026 02:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 82.108.90.0/24 maxlen: 24
82.108.110.0/24 maxlen: 24
82.108.115.0/24 maxlen: 24
82.108.138.0/24 maxlen: 24
82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
82.110.232.0/24 maxlen: 24
87.82.194.0/24 maxlen: 24
87.82.197.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.82.246.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.84.237.0/24 maxlen: 24
87.85.77.0/24 maxlen: 24
87.85.250.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
87.86.186.0/24 maxlen: 24
87.86.216.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0d:a6:2a:b5:ad:aa:04:23:fd:60:63:7b:bc:b7:aa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 17 02:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad5470bf6b06a3d3055074a5d90359f0f9e7510f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:7e:a2:25:98:04:45:d4:ac:9e:a3:91:34:
a1:aa:19:39:41:9c:ae:54:12:08:3a:dd:c0:76:dc:
45:6b:2c:17:85:f2:b2:1d:bc:05:a0:a6:e5:28:92:
55:4a:a7:b2:7d:1d:f2:56:51:bd:54:68:97:be:7e:
8c:a1:7d:cd:99:97:84:64:1c:bb:ca:04:7e:e0:0e:
aa:1b:ab:2c:22:06:30:2f:03:7a:f2:22:2f:91:c6:
dd:c4:73:ce:1c:27:fd:4d:2f:f9:d1:d1:9e:e0:e7:
1c:aa:43:70:de:fe:bb:ad:37:17:13:27:e2:ad:df:
79:3b:66:70:db:17:51:39:ed:c4:4f:6a:5d:b0:da:
58:b6:08:f3:92:ad:bc:4a:3f:61:fb:a7:95:a7:ed:
b0:25:d3:d8:1c:f1:e0:08:ee:f0:f1:a2:21:dc:86:
ae:a4:91:e3:23:25:69:62:7b:94:80:e9:2d:c8:ee:
18:e8:c9:8c:04:c3:e4:2c:ae:75:1a:b4:a9:e4:77:
be:eb:05:04:cb:c3:e7:85:ac:85:19:f7:0a:ba:00:
7e:4b:36:b9:12:37:7f:f0:54:55:1c:21:ca:08:78:
a8:f4:3c:58:ff:e7:0b:2c:7b:fd:54:4a:32:4c:18:
3a:e2:96:51:15:a1:cd:20:25:56:87:b4:d5:ea:45:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:54:70:BF:6B:06:A3:D3:05:50:74:A5:D9:03:59:F0:F9:E7:51:0F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rVRwv2sGo9MFUHSl2QNZ8PnnUQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
82.108.110.0/24
82.108.115.0/24
82.108.138.0/24
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
82.110.232.0/24
87.82.194.0/24
87.82.197.0/24
87.82.213.0/24
87.82.246.0/24
87.84.218.0/24
87.84.237.0/24
87.85.77.0/24
87.85.250.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
87.86.186.0/24
87.86.216.0/24
212.135.143.0/24
Signature Algorithm: sha256WithRSAEncryption
04:77:ce:f1:1a:56:a7:d6:6f:ff:6a:7e:4d:43:72:55:d3:b9:
1c:71:2f:09:52:54:66:a0:9c:41:16:fa:fc:f4:3c:41:9b:94:
60:2c:d7:5d:11:d9:5d:0f:09:46:cb:16:6b:6a:5d:7c:79:23:
e8:52:c1:1f:46:b6:20:3a:7a:3f:a9:02:82:05:86:9c:32:5c:
17:4f:5c:f6:06:02:42:01:88:e2:e1:1b:c6:b0:11:6b:fd:8f:
f8:49:7e:e6:be:6e:0a:12:f1:f7:b3:52:aa:b6:5d:0e:d3:69:
a8:4f:8d:83:ef:90:57:13:05:3b:a0:f4:0d:29:d6:c7:b4:16:
e9:97:c7:80:b4:28:f1:98:5f:b1:d3:0e:23:89:29:04:f9:39:
14:9d:c2:bf:3c:a0:2f:02:cf:b6:6e:5c:3d:9e:8f:c8:46:d3:
66:df:7e:c0:65:45:e4:2f:0d:62:25:43:02:01:a8:43:8b:1d:
68:80:46:d0:39:8b:d1:0f:e3:19:dd:f1:59:30:1d:e0:27:07:
ae:a6:36:6a:7b:7c:f1:a6:63:66:99:e0:39:b6:7a:66:ab:c8:
c1:be:a3:ce:62:7f:00:9a:79:2b:7f:6f:9a:f2:bc:be:b3:75:
8e:7c:56:05:30:ba:d8:44:f5:3a:d2:6b:c4:86:c6:a5:b0:87:
e9:d5:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:31 2026 by rpki-client