Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/skT5JTIwySHu1qYaXC3Lp53CQnE.roa
File: skT5JTIwySHu1qYaXC3Lp53CQnE.roa (raw, json)
Hash identifier: 6LEsCCaBJeHP9shUgiPhvNXUZ72VXCqHl6x/Jffm4Gk=
Subject key identifier: B2:44:F9:25:32:30:C9:21:EE:D6:A6:1A:5C:2D:CB:A7:9D:C2:42:71
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A03E5E6574FE0E62A6F64085A82493F67E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/skT5JTIwySHu1qYaXC3Lp53CQnE.roa
Signing time: Wed 26 Aug 2026 13:59:28 +0000
ROA not before: Wed 26 Aug 2026 13:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 82.109.195.0/24 maxlen: 24
82.109.198.0/24 maxlen: 24
87.82.195.0/24 maxlen: 24
87.82.196.0/24 maxlen: 24
87.82.233.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.61.0/24 maxlen: 24
87.83.62.0/24 maxlen: 24
87.83.165.0/24 maxlen: 24
87.83.194.0/24 maxlen: 24
87.83.197.0/24 maxlen: 24
87.83.198.0/24 maxlen: 24
87.84.133.0/24 maxlen: 24
87.86.19.0/24 maxlen: 24
87.86.23.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.138.0/24 maxlen: 24
212.134.139.0/24 maxlen: 24
212.134.146.0/24 maxlen: 24
212.134.155.0/24 maxlen: 24
212.134.163.0/24 maxlen: 24
212.134.182.0/24 maxlen: 24
212.134.192.0/24 maxlen: 24
212.134.193.0/24 maxlen: 24
212.134.194.0/24 maxlen: 24
212.134.196.0/24 maxlen: 24
212.134.200.0/24 maxlen: 24
212.134.230.0/24 maxlen: 24
212.134.235.0/24 maxlen: 24
212.134.236.0/24 maxlen: 24
212.135.25.0/24 maxlen: 24
212.135.64.0/24 maxlen: 24
212.135.65.0/24 maxlen: 24
212.135.68.0/24 maxlen: 24
212.135.69.0/24 maxlen: 24
212.135.71.0/24 maxlen: 24
212.135.73.0/24 maxlen: 24
212.135.75.0/24 maxlen: 24
212.135.79.0/24 maxlen: 24
212.135.96.0/24 maxlen: 24
212.135.97.0/24 maxlen: 24
212.135.101.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.137.0/24 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.206.0/24 maxlen: 24
212.135.207.0/24 maxlen: 24
212.135.245.0/24 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5e:65:74:fe:0e:62:a6:f6:40:85:a8:24:93:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 26 13:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b244f9253230c921eed6a61a5c2dcba79dc24271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:2c:85:79:b5:bd:25:4c:ee:f5:27:2a:6a:
9e:33:c6:db:51:d0:03:7b:55:aa:05:97:9d:9d:02:
e1:c4:6e:6f:ed:b4:95:2b:c4:20:84:28:b1:68:94:
3a:d0:6b:98:80:0f:57:07:08:73:d9:5e:d5:e6:00:
1f:42:b2:09:32:cb:c1:57:50:89:c0:2a:c2:8a:14:
94:fa:6f:fa:e5:46:6f:d0:7b:b0:87:dd:63:0c:66:
a3:05:44:ac:91:cc:f5:4b:99:3e:dd:21:63:f6:af:
ac:94:28:a9:ae:c2:6b:25:62:39:23:67:8e:60:dc:
55:4f:47:7f:e7:3d:26:b1:ba:fe:1a:21:2d:38:40:
42:3d:2e:f4:a1:3d:7f:44:cc:8d:26:d4:56:c4:20:
b3:f7:78:09:5a:e3:58:ee:98:db:df:ce:8f:15:73:
a6:ca:4c:2c:e9:be:35:b0:63:b6:c4:e7:3f:48:5f:
d3:1f:24:1f:16:88:3d:6e:dd:0a:cb:73:74:e0:d5:
57:12:c4:90:1e:a4:80:4d:72:f5:38:7e:99:9c:f9:
12:ab:06:4d:02:0f:5f:3c:39:06:36:1e:39:4e:87:
4f:38:b9:5e:35:1e:5f:f9:15:be:24:1e:5f:7e:30:
a1:5a:3f:50:1d:b6:8d:43:a0:c4:2d:50:32:12:f4:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:F9:25:32:30:C9:21:EE:D6:A6:1A:5C:2D:CB:A7:9D:C2:42:71
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/skT5JTIwySHu1qYaXC3Lp53CQnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.195.0/24
82.109.198.0/24
87.82.195.0-87.82.196.255
87.82.233.0/24
87.82.243.0/24
87.82.247.0/24
87.83.61.0-87.83.62.255
87.83.165.0/24
87.83.194.0/24
87.83.197.0-87.83.198.255
87.84.133.0/24
87.86.19.0/24
87.86.23.0/24
212.134.36.0/24
212.134.138.0/23
212.134.146.0/24
212.134.155.0/24
212.134.163.0/24
212.134.182.0/24
212.134.192.0-212.134.194.255
212.134.196.0/24
212.134.200.0/24
212.134.230.0/24
212.134.235.0-212.134.236.255
212.135.25.0/24
212.135.64.0/23
212.135.68.0/23
212.135.71.0/24
212.135.73.0/24
212.135.75.0/24
212.135.79.0/24
212.135.96.0/23
212.135.101.0/24
212.135.129.0/24
212.135.137.0/24
212.135.155.0/24
212.135.206.0/23
212.135.245.0/24
212.135.252.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:81:1b:bb:3b:9a:91:6b:55:cc:36:ed:47:ef:f0:d8:1b:8e:
8b:18:51:12:b2:09:36:d9:02:97:91:51:11:c9:08:3d:f3:08:
05:b4:85:3f:23:9e:a7:92:00:29:23:a5:db:34:f0:fb:a0:68:
ba:ba:30:17:1d:f2:36:95:c8:1d:57:96:ec:9f:2a:77:24:e5:
5e:5d:87:1c:fe:da:4b:5b:0a:34:6e:37:54:89:46:37:ba:97:
60:d1:db:fb:19:a0:17:88:70:34:af:87:2b:c8:6c:f4:d8:60:
10:4a:e8:90:01:6a:b0:91:5c:78:0c:7e:39:4d:7c:90:7d:08:
de:39:72:60:9a:54:5f:6d:b7:a7:88:67:f5:e9:75:ce:21:59:
7c:4d:6c:57:2f:0d:2a:b2:b9:35:3d:38:da:ae:58:00:13:8e:
6a:ff:7a:19:8d:ca:ed:23:8c:fe:e4:1b:ae:e0:8d:7b:4d:b9:
7c:39:33:7d:cd:64:e3:60:62:38:38:81:bc:a2:d8:f5:a7:7d:
6f:fb:f6:cf:a7:ed:9e:1c:7b:40:f8:65:e0:9c:2b:4c:dd:12:
0d:b4:5a:6a:58:5b:3a:e8:5a:c7:bc:2c:36:56:bf:92:cf:88:
8e:54:4c:a1:a0:15:4c:3e:22:68:05:97:4b:06:c9:c4:e8:8f:
5e:28:c6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:56:54 2026 by rpki-client