Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tRxSfInRcf2Q0wNhRxx_6a0En0g.roa
File: tRxSfInRcf2Q0wNhRxx_6a0En0g.roa (raw, json)
Hash identifier: 7IPGp7Dmjn06Od90CGkuBc4Y1+2aKZAyNSBcoEvRDJM=
Subject key identifier: B5:1C:52:7C:89:D1:71:FD:90:D3:03:61:47:1C:7F:E9:AD:04:9F:48
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0611FF82AB0BE0FDC738AAA4085F02D9C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tRxSfInRcf2Q0wNhRxx_6a0En0g.roa
Signing time: Wed 02 Sep 2026 07:58:00 +0000
ROA not before: Wed 02 Sep 2026 07:58:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 82.108.166.0/24 maxlen: 24
82.108.194.0/24 maxlen: 24
82.108.201.0/24 maxlen: 24
82.108.220.0/24 maxlen: 24
87.84.65.0/24 maxlen: 24
87.84.66.0/24 maxlen: 24
87.84.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:1f:f8:2a:b0:be:0f:dc:73:8a:aa:40:85:f0:2d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 2 07:58:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b51c527c89d171fd90d30361471c7fe9ad049f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:d1:b5:9b:9e:09:08:9a:1b:4b:64:b6:55:
22:2b:c2:d6:8a:1d:fb:d3:5d:68:df:27:96:a1:82:
9f:66:ac:64:eb:37:2d:52:22:3c:ab:25:cb:78:dd:
9a:63:1c:45:25:8c:69:8b:fd:6e:3a:9c:c1:2f:42:
ac:e2:48:11:76:f4:25:9b:6e:b6:03:72:25:17:ce:
cf:a7:88:ff:93:f9:d5:c4:ea:96:1e:2c:e5:8b:62:
05:cd:8f:73:d0:78:52:35:a8:4e:06:8e:d5:88:31:
4a:ea:d4:65:a5:f3:2b:a9:28:23:73:f8:91:b0:c6:
d8:e1:51:b2:22:e5:df:1c:49:f5:d5:c4:9a:f7:77:
f8:72:e6:ef:9c:bd:1b:60:95:e3:1a:fb:2f:d5:4a:
e4:92:bf:b2:7e:b0:cc:68:b5:01:96:39:01:7a:22:
f1:99:c3:1a:94:60:c5:7c:e6:45:99:22:13:ac:08:
87:97:fa:a2:98:be:2c:31:0a:af:68:2c:b9:cd:8f:
44:c9:46:3c:59:93:be:99:e9:b4:55:cf:92:3a:eb:
e5:37:00:3f:2e:92:38:1d:52:d0:cf:9a:2b:b9:a1:
00:8d:e5:c5:4f:f4:6c:f2:bb:81:08:47:24:2a:fa:
e0:92:c7:b2:da:be:6e:06:ed:fc:47:1b:57:e3:92:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:52:7C:89:D1:71:FD:90:D3:03:61:47:1C:7F:E9:AD:04:9F:48
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tRxSfInRcf2Q0wNhRxx_6a0En0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.166.0/24
82.108.194.0/24
82.108.201.0/24
82.108.220.0/24
87.84.65.0-87.84.66.255
87.84.69.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ea:1a:81:ca:05:8d:4c:00:ee:75:c5:9c:e0:da:13:14:8b:
f2:e7:25:c1:41:50:99:18:36:67:ea:45:3f:96:0c:f9:07:77:
e3:22:62:46:9f:5e:3b:ae:ca:16:e1:6f:81:aa:19:b2:80:69:
0c:e6:ff:78:3d:be:14:a8:ff:cb:ba:99:aa:8c:35:2d:8e:eb:
e5:67:5c:1a:56:5d:19:c3:73:b5:27:77:fb:9d:f3:91:a1:69:
05:b0:a5:cd:68:65:24:80:cf:b0:fd:b2:ca:6b:e8:c3:16:06:
2c:17:89:35:bd:9e:32:c8:73:99:11:46:4a:21:13:cb:eb:16:
04:ba:9f:a5:47:ee:f2:46:a3:2c:f1:79:7e:ff:fe:0d:82:4e:
8e:72:c2:12:8e:c2:37:65:2e:6b:32:82:c5:b8:89:29:b1:6f:
ed:1d:9f:54:67:18:a9:17:bc:42:79:0b:fa:bd:0f:50:89:85:
3a:ca:72:a4:85:e8:83:9c:bb:ce:64:4f:54:77:67:02:99:78:
d7:40:71:79:67:3f:02:8a:4a:d0:95:bb:e8:04:d5:42:02:08:
a7:92:7f:4f:8a:dd:4a:ac:48:54:4e:17:c3:57:4a:89:91:10:
21:15:e0:18:70:23:c0:5c:ff:ad:ba:bd:74:81:37:d1:a3:1c:
e4:dd:ae:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:33 2026 by rpki-client