Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uM9cDu3jLIMIKPYW2Hg8-BE1RUU.roa
File: uM9cDu3jLIMIKPYW2Hg8-BE1RUU.roa (raw, json)
Hash identifier: U6IRzNq86Uzk+kSB1Sh1uRC9crn3AHmMnPuB3y0Zuuk=
Subject key identifier: B8:CF:5C:0E:ED:E3:2C:83:08:28:F6:16:D8:78:3C:F8:11:35:45:45
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E40D6C3EF4C74267004A31899EF273BD5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uM9cDu3jLIMIKPYW2Hg8-BE1RUU.roa
Signing time: Tue 19 May 2026 15:24:37 +0000
ROA not before: Tue 19 May 2026 15:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 82.108.10.0/23 maxlen: 23
82.108.48.0/23 maxlen: 23
82.108.62.0/23 maxlen: 23
82.108.64.0/22 maxlen: 22
82.108.96.0/23 maxlen: 23
82.108.136.0/23 maxlen: 23
82.108.192.0/23 maxlen: 23
87.82.200.0/22 maxlen: 22
87.82.204.0/23 maxlen: 23
87.82.208.0/23 maxlen: 23
87.82.211.0/24 maxlen: 24
87.83.37.0/24 maxlen: 24
87.83.38.0/24 maxlen: 24
87.83.40.0/24 maxlen: 24
87.83.42.0/23 maxlen: 23
87.83.76.0/22 maxlen: 22
87.84.50.0/23 maxlen: 23
87.84.72.0/24 maxlen: 24
87.84.74.0/23 maxlen: 23
87.84.136.0/24 maxlen: 24
87.84.138.0/24 maxlen: 24
87.84.148.0/23 maxlen: 23
87.84.181.0/24 maxlen: 24
87.84.184.0/23 maxlen: 23
87.86.6.0/23 maxlen: 23
87.86.15.0/24 maxlen: 24
87.86.26.0/24 maxlen: 24
195.40.3.0/24 maxlen: 24
195.40.14.0/23 maxlen: 23
195.40.64.0/23 maxlen: 23
195.40.66.0/23 maxlen: 23
195.40.68.0/23 maxlen: 23
195.40.79.0/24 maxlen: 24
195.40.81.0/24 maxlen: 24
195.40.84.0/24 maxlen: 24
195.40.90.0/24 maxlen: 24
195.40.93.0/24 maxlen: 24
195.40.98.0/23 maxlen: 23
195.40.102.0/23 maxlen: 23
195.40.124.0/23 maxlen: 23
195.40.126.0/23 maxlen: 23
195.40.164.0/23 maxlen: 23
195.40.168.0/23 maxlen: 23
195.40.170.0/23 maxlen: 23
195.40.172.0/23 maxlen: 23
195.40.174.0/23 maxlen: 23
195.40.190.0/23 maxlen: 23
195.172.126.0/23 maxlen: 23
195.172.132.0/23 maxlen: 23
195.172.146.0/23 maxlen: 23
195.172.148.0/23 maxlen: 23
195.172.208.0/23 maxlen: 23
212.134.206.0/24 maxlen: 24
212.135.14.0/23 maxlen: 23
212.135.176.0/23 maxlen: 24
212.135.182.0/23 maxlen: 23
212.135.184.0/23 maxlen: 23
212.135.186.0/23 maxlen: 23
212.135.188.0/24 maxlen: 24
212.135.216.0/23 maxlen: 23
212.135.224.0/23 maxlen: 23
212.135.226.0/23 maxlen: 23
212.135.229.0/24 maxlen: 24
212.135.230.0/23 maxlen: 23
212.135.232.0/23 maxlen: 23
212.135.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:d6:c3:ef:4c:74:26:70:04:a3:18:99:ef:27:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 19 15:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8cf5c0eede32c830828f616d8783cf811354545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:f2:0d:95:13:ea:65:b2:4c:83:7b:69:d9:
bb:81:b5:0f:71:eb:26:d4:f7:29:37:19:e1:b7:4a:
11:5b:fc:f0:4d:96:0e:7c:ec:b9:d1:16:28:ec:bc:
d9:b1:cb:62:7b:53:fa:08:c8:f4:8e:44:fc:89:a6:
66:42:a0:a6:74:f3:66:50:bc:94:e1:51:6f:da:ee:
81:f1:a6:37:5e:f9:aa:1d:0b:63:57:1c:50:9b:28:
b5:37:52:3e:f5:e3:dd:3c:1c:93:2b:a9:97:fb:d8:
4b:46:c3:01:e8:82:32:e1:fe:9a:f7:cb:22:33:ea:
c5:ba:74:10:04:4f:68:f1:80:4e:d4:c2:e7:4b:40:
60:8c:4f:49:64:d0:28:d1:61:25:af:41:a5:06:02:
e9:26:b3:24:ba:6f:de:f3:fb:c0:fe:09:80:a3:bf:
16:77:8b:d0:74:3f:0d:f2:60:1d:e0:22:e8:f4:6b:
60:4f:f3:be:32:bd:1b:eb:eb:2d:e1:fd:79:c7:00:
04:82:7c:23:92:02:23:33:e9:b5:1b:6e:ee:f5:2e:
1f:39:18:1f:01:3e:69:02:9e:81:4f:69:7f:5a:dc:
68:7f:48:9a:3c:dd:73:55:75:03:14:83:fc:d4:64:
a3:dd:ab:25:9a:3e:29:1e:76:56:1d:01:ea:c8:6f:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:5C:0E:ED:E3:2C:83:08:28:F6:16:D8:78:3C:F8:11:35:45:45
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uM9cDu3jLIMIKPYW2Hg8-BE1RUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.10.0/23
82.108.48.0/23
82.108.62.0-82.108.67.255
82.108.96.0/23
82.108.136.0/23
82.108.192.0/23
87.82.200.0-87.82.205.255
87.82.208.0/23
87.82.211.0/24
87.83.37.0-87.83.38.255
87.83.40.0/24
87.83.42.0/23
87.83.76.0/22
87.84.50.0/23
87.84.72.0/24
87.84.74.0/23
87.84.136.0/24
87.84.138.0/24
87.84.148.0/23
87.84.181.0/24
87.84.184.0/23
87.86.6.0/23
87.86.15.0/24
87.86.26.0/24
195.40.3.0/24
195.40.14.0/23
195.40.64.0-195.40.69.255
195.40.79.0/24
195.40.81.0/24
195.40.84.0/24
195.40.90.0/24
195.40.93.0/24
195.40.98.0/23
195.40.102.0/23
195.40.124.0/22
195.40.164.0/23
195.40.168.0/21
195.40.190.0/23
195.172.126.0/23
195.172.132.0/23
195.172.146.0-195.172.149.255
195.172.208.0/23
212.134.206.0/24
212.135.14.0/23
212.135.176.0/23
212.135.182.0-212.135.188.255
212.135.216.0/23
212.135.224.0/22
212.135.229.0-212.135.233.255
212.135.238.0/23
Signature Algorithm: sha256WithRSAEncryption
74:e4:8a:0c:4e:e6:28:61:3d:34:41:ea:12:24:c6:ff:a4:35:
ec:69:41:e8:ad:f3:e1:70:de:3a:bc:d5:dd:4d:21:91:ba:a8:
17:17:a7:6f:11:99:de:2e:3b:e6:2d:d5:c4:5c:40:1f:77:b1:
22:fb:c7:9d:08:52:c2:e9:bd:a6:b7:cc:44:e3:49:9b:0b:14:
14:00:ea:c8:ce:6d:70:09:c1:01:5c:d4:7c:f3:9a:40:9b:46:
69:34:cf:d3:77:db:01:c7:27:fa:cc:2a:00:f6:a6:ed:9e:60:
d0:5c:0e:78:e9:45:38:eb:7a:1d:51:2d:aa:e0:25:e8:89:32:
30:09:43:4d:8a:09:25:4f:13:53:04:85:48:00:ca:4d:0a:fc:
63:50:34:f0:6f:19:e6:20:47:8d:ff:fc:30:ec:fc:c9:44:b7:
ac:45:c7:a5:e0:d5:ff:2f:37:f4:55:24:bd:45:03:fc:80:70:
a7:21:1c:25:f2:c9:81:7a:bd:b5:89:8a:a0:05:51:51:95:64:
53:c3:c6:2e:90:7a:6e:ab:61:25:0d:df:a4:40:b8:68:89:56:
74:a4:6b:0a:42:b3:ac:5c:74:50:ee:87:2e:b9:9d:71:0f:03:
b7:96:9b:c4:73:c9:1e:da:b1:7b:23:2e:2e:0b:23:21:15:00:
23:f3:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 11:48:05 2026 by rpki-client