Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xKXrj66_jdXmvNlaP00BwE8fcw8.roa
File: xKXrj66_jdXmvNlaP00BwE8fcw8.roa (raw, json)
Hash identifier: dOH1mLlNAE/Wg+xnqsAmieaTQlWcKTku/c9Yc66c3pE=
Subject key identifier: C4:A5:EB:8F:AE:BF:8D:D5:E6:BC:D9:5A:3F:4D:01:C0:4F:1F:73:0F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A12391BD5C8DF63BDF59248EA639BD4290
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xKXrj66_jdXmvNlaP00BwE8fcw8.roa
Signing time: Sat 10 Oct 2026 02:08:35 +0000
ROA not before: Sat 10 Oct 2026 02:08:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 82.108.90.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.83.46.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.85.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:91:bd:5c:8d:f6:3b:df:59:24:8e:a6:39:bd:42:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 10 02:08:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4a5eb8faebf8dd5e6bcd95a3f4d01c04f1f730f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:72:77:d9:65:cc:69:2a:ce:70:e9:80:59:
d6:55:5b:2f:7b:aa:ff:96:73:74:ed:7f:8a:8e:09:
92:29:fb:d2:3e:e9:47:a8:9b:01:c7:8d:45:9c:0e:
74:a4:e8:9b:36:36:a4:bb:01:78:db:ec:c8:bf:ba:
11:37:b7:93:2d:3c:26:0a:ce:55:19:41:37:f1:e2:
72:87:e9:85:49:14:9c:b0:19:d8:e4:ef:0d:34:3c:
58:53:81:91:a8:76:55:dc:4e:51:38:8b:b9:51:e3:
bf:ba:98:dc:63:34:63:ee:22:de:3c:aa:6d:ce:8f:
3a:d7:f6:60:d4:20:ff:05:3f:73:1e:63:4b:74:da:
8c:fa:75:c0:a8:64:b4:a7:50:a0:29:ae:ce:0a:e7:
82:4e:1a:bc:67:31:e6:3e:3c:f9:db:d3:cb:46:06:
a1:ed:ba:f1:e5:d6:52:cf:b0:9f:35:59:5b:ff:34:
2e:d1:32:48:76:f1:2f:19:58:8c:7e:66:36:d1:66:
e9:6d:ef:81:f9:7e:5a:b9:77:3f:20:c3:cc:17:eb:
3a:04:e1:3c:f5:30:6c:3f:6c:80:bd:9c:ca:c5:15:
25:56:13:84:d3:41:b1:a8:81:f5:da:89:bd:0c:e3:
99:7c:6a:ad:eb:5b:4d:30:72:7c:be:65:a6:38:6b:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:EB:8F:AE:BF:8D:D5:E6:BC:D9:5A:3F:4D:01:C0:4F:1F:73:0F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xKXrj66_jdXmvNlaP00BwE8fcw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
87.82.213.0/24
87.83.46.0/24
87.84.218.0/24
87.85.230.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d7:e8:e6:86:48:50:51:0d:43:ab:20:22:99:62:97:01:b5:
56:77:33:03:88:94:5c:9c:4f:d7:66:5e:b1:b9:6a:2c:96:62:
9a:37:12:75:d8:97:3d:1b:bb:b0:ed:43:b4:6b:9a:f3:be:1c:
00:f5:b4:a5:1e:8e:30:de:13:13:a7:97:28:2d:36:8b:25:16:
82:8c:aa:6f:8e:fa:e6:4d:2e:0c:0f:21:e9:5f:7b:65:15:ec:
c1:64:53:1d:5e:57:53:e7:64:8a:59:16:b4:cd:0d:f9:9d:5d:
e7:0c:0d:6e:c3:72:c4:0a:c4:b8:4c:8f:b9:8f:2f:51:de:3d:
da:9d:e7:f5:1f:d8:9e:bd:e3:f3:c7:14:b8:e0:66:60:20:f1:
04:03:f0:3a:f5:7f:f6:9e:37:33:a1:ed:ab:88:31:e1:df:df:
0a:0a:40:c7:d9:a7:4a:66:4d:5d:66:06:af:1a:8e:38:22:99:
a4:7e:b3:46:27:90:4f:2c:47:87:12:c4:d0:4e:ee:4c:7d:6f:
7c:66:33:aa:6e:61:be:f9:08:54:6b:9b:dd:8f:0d:88:74:8f:
87:41:55:74:49:89:73:fc:c3:77:2d:93:e8:85:3a:4a:2b:21:
79:d7:e7:41:92:80:d0:70:22:be:82:23:ce:ef:59:ec:40:01:
0a:f6:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:28:02 2026 by rpki-client