Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rn-KzSwu_YHd4NJibi0vMVzuzSs.roa
File: rn-KzSwu_YHd4NJibi0vMVzuzSs.roa (raw, json)
Hash identifier: IiSuSoXdrgy16vhkfSOCr68a2CF7PiTYXkZXJ/jNLtw=
Subject key identifier: AE:7F:8A:CD:2C:2E:FD:81:DD:E0:D2:62:6E:2D:2F:31:5C:EE:CD:2B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A087255E9DFA8FB237A4D7A8155E02136F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rn-KzSwu_YHd4NJibi0vMVzuzSs.roa
Signing time: Wed 09 Sep 2026 17:09:28 +0000
ROA not before: Wed 09 Sep 2026 17:09:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63099
IP address blocks: 82.109.4.0/22 maxlen: 24
82.109.56.0/22 maxlen: 24
87.83.31.0/24 maxlen: 24
87.83.49.0/24 maxlen: 24
87.83.51.0/24 maxlen: 24
87.83.72.0/24 maxlen: 24
87.83.75.0/24 maxlen: 24
87.83.91.0/24 maxlen: 24
87.83.118.0/24 maxlen: 24
87.83.169.0/24 maxlen: 24
87.83.200.0/24 maxlen: 24
87.83.212.0/24 maxlen: 24
87.83.215.0/24 maxlen: 24
87.83.229.0/24 maxlen: 24
87.83.236.0/24 maxlen: 24
87.84.49.0/24 maxlen: 24
87.84.150.0/24 maxlen: 24
87.84.187.0/24 maxlen: 24
87.84.228.0/22 maxlen: 24
87.85.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:25:5e:9d:fa:8f:b2:37:a4:d7:a8:15:5e:02:13:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 9 17:09:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae7f8acd2c2efd81dde0d2626e2d2f315ceecd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:99:4c:1c:f6:82:36:de:dd:ce:57:72:79:
3c:42:5b:85:1c:ef:f1:d5:0a:be:85:15:50:f5:2d:
a2:5e:84:09:47:f1:c3:bc:6c:06:ac:f9:5c:c8:6d:
f6:af:a4:2c:b9:01:3d:66:2b:da:de:ab:63:7e:05:
51:4a:72:ad:8d:28:c2:ce:64:c6:fb:0f:18:75:0a:
07:24:e5:f2:02:38:9a:f4:1c:aa:ba:05:33:a0:0a:
7d:e5:ed:5e:99:09:a2:fa:f5:36:38:3a:a7:28:ba:
e2:21:24:56:77:5b:a2:87:04:6e:d0:f0:13:3e:6a:
bd:33:00:8f:02:25:da:c6:ca:bc:21:02:d2:1c:6a:
c8:be:8c:a5:06:12:71:3d:f8:71:0b:1f:32:56:03:
a8:a7:20:4b:4a:5c:a8:81:3d:2a:26:b4:4e:2a:38:
a0:65:6c:5c:4c:c0:8c:40:5d:69:09:da:60:29:75:
01:4b:8f:05:b5:c8:87:0c:35:3f:9b:7e:d0:8f:38:
17:98:4b:8a:93:14:66:b3:40:f3:bb:31:10:04:e1:
f8:81:b0:d0:10:08:08:68:dd:d2:9b:ac:ae:e0:df:
b8:cc:88:47:94:ee:c0:6d:27:85:82:c9:f7:1f:50:
e1:0f:ed:5f:69:52:7e:5a:51:56:85:7f:0e:b8:e7:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:8A:CD:2C:2E:FD:81:DD:E0:D2:62:6E:2D:2F:31:5C:EE:CD:2B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rn-KzSwu_YHd4NJibi0vMVzuzSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.4.0/22
82.109.56.0/22
87.83.31.0/24
87.83.49.0/24
87.83.51.0/24
87.83.72.0/24
87.83.75.0/24
87.83.91.0/24
87.83.118.0/24
87.83.169.0/24
87.83.200.0/24
87.83.212.0/24
87.83.215.0/24
87.83.229.0/24
87.83.236.0/24
87.84.49.0/24
87.84.150.0/24
87.84.187.0/24
87.84.228.0/22
87.85.160.0/22
Signature Algorithm: sha256WithRSAEncryption
34:9d:63:2b:af:2a:17:b9:1e:15:23:e6:69:93:db:18:c5:57:
c7:fc:74:85:c0:8f:f7:ce:7d:b2:f7:f6:aa:f2:fc:44:fc:3c:
5d:31:c4:11:e6:f9:5d:19:d9:b2:68:9b:8c:80:46:a3:99:37:
23:88:47:b9:9e:b4:fe:17:cf:42:0c:0f:e6:9b:40:eb:3e:2f:
92:78:61:64:ff:4b:e0:a4:23:11:41:fc:9d:c9:96:69:d6:48:
31:ba:e4:af:2f:83:65:38:0b:c8:9c:46:8f:33:c0:3c:82:a0:
19:67:f2:e6:06:88:66:48:29:bf:54:a1:ef:35:12:f1:33:6b:
3b:62:e5:19:21:6a:95:5a:7f:21:b9:6c:b0:61:fc:04:1d:ec:
16:42:26:ee:eb:04:d8:31:6a:92:f5:af:de:af:bb:b5:d9:47:
46:71:1b:b3:55:af:0f:e3:aa:fb:36:fb:70:29:cf:eb:45:48:
1f:d8:06:22:4c:0d:6c:f6:50:bc:1c:5e:59:eb:34:8b:6e:c9:
1f:9d:9e:09:4c:7c:75:35:3b:45:4f:ba:44:f9:05:68:54:04:
63:a0:18:12:9b:80:ec:4f:bc:5b:71:42:79:fd:6a:d8:37:49:
f8:bc:18:77:78:8f:e9:be:87:4c:76:4d:3f:fd:0c:fe:56:07:
27:29:47:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:00 2026 by rpki-client