Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/s0-joHfyqWt6dt3m42aDQQBS9vk.roa
File: s0-joHfyqWt6dt3m42aDQQBS9vk.roa (raw, json)
Hash identifier: Iou+ZAQipN3SYif7uccZzVZ15RbbWwLGxdMv+cKf3m4=
Subject key identifier: B3:4F:A3:A0:77:F2:A9:6B:7A:76:DD:E6:E3:66:83:41:00:52:F6:F9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A024DDC47EC6208B7F59BB875ACD55866F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/s0-joHfyqWt6dt3m42aDQQBS9vk.roa
Signing time: Fri 21 Aug 2026 15:08:28 +0000
ROA not before: Fri 21 Aug 2026 15:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 83.148.131.0/24 maxlen: 24
83.148.132.0/22 maxlen: 22
83.148.140.0/22 maxlen: 22
195.40.16.0/23 maxlen: 24
195.40.88.0/23 maxlen: 24
195.40.152.0/24 maxlen: 24
195.40.184.0/23 maxlen: 24
212.135.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:dd:c4:7e:c6:20:8b:7f:59:bb:87:5a:cd:55:86:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 21 15:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b34fa3a077f2a96b7a76dde6e36683410052f6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:85:fc:d2:c0:b9:3b:92:0c:11:dd:d9:c0:
9b:9b:34:9a:fa:83:1c:1f:03:73:53:8d:42:a8:41:
b9:9f:ea:bf:07:03:a2:e8:11:c7:1a:f7:96:26:b2:
fb:14:44:54:c8:35:a9:6c:78:94:24:73:2c:d4:81:
8a:fc:9f:c4:26:aa:67:5f:87:c1:bb:6f:75:f3:f4:
37:63:fe:57:5e:e3:70:e5:7f:bc:dc:de:87:b3:36:
84:ba:69:b3:20:a9:73:35:15:24:1a:c2:fa:e6:f9:
0b:18:2f:d4:ef:61:d5:ea:52:3d:9d:ca:df:d6:d3:
62:24:8d:f7:72:43:b8:48:a8:50:f5:ec:d2:7d:ac:
dc:c5:f8:87:77:59:e5:64:54:c5:f9:47:be:52:70:
c5:e1:61:e4:83:09:21:5b:d7:f9:f5:ef:2d:64:31:
6f:d7:8d:e1:d2:0f:cb:27:54:02:26:5b:5d:07:98:
d6:b0:41:08:22:47:ff:92:1d:46:20:be:6c:58:25:
93:51:b5:96:f9:d8:50:52:59:c2:4b:8b:aa:64:ee:
77:b8:e8:7d:e8:f9:2b:f8:29:74:cd:a7:f4:29:a3:
bf:e9:9f:d2:75:a2:cc:54:f6:2a:ab:e3:9f:20:d5:
12:e4:48:a9:59:d1:9b:f7:35:b7:52:40:ed:b5:59:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4F:A3:A0:77:F2:A9:6B:7A:76:DD:E6:E3:66:83:41:00:52:F6:F9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/s0-joHfyqWt6dt3m42aDQQBS9vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.148.131.0-83.148.135.255
83.148.140.0/22
195.40.16.0/23
195.40.88.0/23
195.40.152.0/24
195.40.184.0/23
212.135.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:49:8a:4b:07:6d:cb:48:7b:19:28:26:0a:70:48:9d:d4:86:
d9:ab:9a:fb:de:8c:ba:36:8d:95:5d:f8:d9:76:00:29:4e:48:
25:e9:1d:88:a3:29:13:7d:af:0f:53:d2:b0:7a:88:8d:bd:2c:
63:34:78:6e:18:22:60:ec:90:6b:e8:d2:ac:a2:60:20:e5:46:
03:21:48:3d:2b:dc:b9:86:c4:7c:8d:2c:70:24:fb:8f:e1:c0:
f8:aa:ad:56:e7:99:54:c6:1e:90:57:05:3a:22:b9:7e:7d:f2:
19:4e:83:e5:6a:fe:80:55:a3:e1:e4:d8:d3:5c:46:6f:8e:b9:
40:18:79:c4:fe:de:d8:76:47:8c:94:56:a3:35:b6:ce:a9:ac:
7b:4c:cd:26:03:64:6a:55:c1:31:fa:99:7e:6f:24:d8:90:b9:
6d:9c:e2:f4:2a:e3:91:33:11:78:69:07:52:13:aa:44:58:67:
d0:4c:ea:e0:72:b5:24:09:8a:67:7e:64:77:98:77:b5:92:c1:
d8:9e:c9:f1:9e:fd:ed:84:2f:25:8b:e1:71:99:7b:7f:07:60:
50:bf:11:58:97:40:50:2f:c5:2e:8f:f0:5a:8d:9b:26:c8:4f:
99:96:83:9d:e0:52:c9:e2:bc:09:b2:24:ca:a3:89:7e:c6:fb:
1f:41:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:55 2026 by rpki-client