Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/sAAxhrkGRuuiuhZ-p-f9AcPXPr4.roa
File: sAAxhrkGRuuiuhZ-p-f9AcPXPr4.roa (raw, json)
Hash identifier: odXT03XWF2OZmhebTtcQTBeEwelUkIZTTMiUuVa2urE=
Subject key identifier: B0:00:31:86:B9:06:46:EB:A2:BA:16:7E:A7:E7:FD:01:C3:D7:3E:BE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A047BC2635B7CA82B5C68B2FA75618BF4D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/sAAxhrkGRuuiuhZ-p-f9AcPXPr4.roa
Signing time: Fri 28 Aug 2026 09:38:27 +0000
ROA not before: Fri 28 Aug 2026 09:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 82.108.130.0/24 maxlen: 24
82.110.120.0/22 maxlen: 24
87.86.18.0/24 maxlen: 24
87.86.160.0/22 maxlen: 24
212.134.168.0/23 maxlen: 24
212.135.192.0/22 maxlen: 24
217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:bc:26:35:b7:ca:82:b5:c6:8b:2f:a7:56:18:bf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 28 09:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0003186b90646eba2ba167ea7e7fd01c3d73ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:6f:fa:64:fd:ee:07:ba:ff:63:d1:78:b8:
eb:d4:1f:df:01:61:39:f5:dc:52:5f:ab:a2:0e:14:
12:64:0c:19:03:27:28:96:20:be:9d:fc:e2:04:e4:
4b:bc:05:5c:fe:ce:e8:e8:19:29:b5:72:91:5c:fa:
6e:35:23:8a:1f:bb:2e:7c:14:8d:32:a8:5d:fd:43:
71:d7:b2:01:14:a7:12:00:37:dc:52:c2:81:ea:ad:
60:bf:ca:4e:15:38:32:6c:3b:29:5c:3a:a4:e2:d7:
54:d6:75:40:88:e0:09:b2:8c:3b:4b:ef:11:d3:5e:
76:00:7c:ea:b7:ef:e2:6b:e2:b2:cd:e2:d8:ea:30:
d2:6c:25:00:fd:71:c3:8b:d4:86:52:3c:49:37:69:
5a:b9:85:7c:a3:45:d0:2a:05:95:b8:1c:fb:3e:fd:
8d:67:72:f4:f7:3e:2e:18:7d:1a:6a:8a:ff:61:f9:
f9:aa:be:fe:b3:11:11:32:81:52:30:97:56:b1:df:
30:49:f2:e1:d8:38:de:49:ea:7a:af:d8:c8:ba:aa:
15:7e:72:38:5f:47:c7:1a:06:51:43:4f:26:26:44:
36:85:54:10:04:22:be:e5:ee:86:d6:2c:01:64:c8:
a4:97:05:82:14:b1:38:dd:92:f8:cb:cf:cc:32:15:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:31:86:B9:06:46:EB:A2:BA:16:7E:A7:E7:FD:01:C3:D7:3E:BE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/sAAxhrkGRuuiuhZ-p-f9AcPXPr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.130.0/24
82.110.120.0/22
87.86.18.0/24
87.86.160.0/22
212.134.168.0/23
212.135.192.0/22
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3d:19:b0:ec:0a:cf:de:d6:fd:03:fa:d2:52:1f:1d:6f:b5:
30:7c:46:22:9e:72:53:dd:e0:8c:4e:48:a7:61:a3:0f:5c:d1:
e8:22:83:45:df:83:53:f0:be:b2:9f:96:28:3e:7f:1e:bc:f5:
3f:cd:01:07:8e:64:07:f8:7b:8b:94:49:69:eb:ba:9b:ab:4b:
54:58:76:b9:5c:cf:0d:bd:a8:1c:3a:3f:bd:7c:46:b7:a7:a2:
b4:cb:30:0f:86:6d:42:3d:4d:7c:62:56:30:87:d5:54:2b:26:
11:c8:50:c4:b6:8f:46:48:00:bb:1c:0a:62:c3:f4:aa:2b:5c:
1e:cf:3c:07:0d:48:a2:ce:5c:06:a7:09:f8:46:c0:16:b5:61:
d9:38:0e:86:c9:d5:23:fb:a0:93:e3:d0:fc:f1:da:c3:61:d0:
a3:05:9f:3c:f2:af:03:4f:2b:5c:ea:0f:f1:81:48:24:13:fe:
4e:7c:8e:0d:bd:de:f7:4b:1d:64:ed:97:f8:62:5d:80:50:3f:
6b:b8:f6:81:79:3c:4a:6b:5b:c6:ba:ae:50:c0:76:bf:6c:ef:
96:73:1a:19:66:03:28:42:04:b6:1a:6a:c6:81:83:90:5e:a1:
ba:e1:30:e1:e8:6d:05:50:3a:1e:9a:01:30:06:cb:36:98:a7:
01:70:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:38 2026 by rpki-client