Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/z8ds2dQ12iyRyqT4z6WRGkAeevY.roa
File: z8ds2dQ12iyRyqT4z6WRGkAeevY.roa (raw, json)
Hash identifier: z/0TujActkzXMUGBKlsPxFdrc7388nXTTZqfhmw5sDk=
Subject key identifier: CF:C7:6C:D9:D4:35:DA:2C:91:CA:A4:F8:CF:A5:91:1A:40:1E:7A:F6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0A5982C9766787D058E7A8B60580F0100
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/z8ds2dQ12iyRyqT4z6WRGkAeevY.roa
Signing time: Tue 15 Sep 2026 15:03:28 +0000
ROA not before: Tue 15 Sep 2026 15:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218694
IP address blocks: 82.109.224.0/22 maxlen: 24
87.84.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:98:2c:97:66:78:7d:05:8e:7a:8b:60:58:0f:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 15 15:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfc76cd9d435da2c91caa4f8cfa5911a401e7af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:fc:70:fa:26:30:3d:0d:b6:5c:38:f6:63:
9c:58:55:6f:18:cc:b8:55:e3:44:a9:d1:fd:e5:7f:
bd:5f:d6:26:92:ec:d9:04:af:38:98:66:4b:51:83:
70:a2:93:13:bd:68:0a:cc:3e:ec:86:29:90:75:39:
bd:fb:62:cd:56:1a:3b:d3:f5:6b:c0:04:11:46:5a:
d8:ea:35:ce:03:d2:9c:6d:c6:92:15:07:ad:a9:2d:
62:2e:cf:7a:54:26:78:39:4e:25:f8:71:70:dc:a7:
69:63:4c:44:72:68:0d:0a:66:b0:fe:da:ef:7d:91:
1d:9d:4e:f5:c9:69:79:5b:1f:a4:e5:76:3d:d8:a9:
ce:be:ef:75:c6:c0:30:f9:53:0a:a5:52:9b:c8:11:
1e:3f:c0:7b:69:62:38:e5:50:31:fc:f4:3e:74:bc:
8f:7e:db:ac:dd:79:e2:32:d5:32:70:23:52:b5:f7:
87:7a:cf:81:3e:5c:b8:f2:9e:de:05:be:ea:c3:24:
59:eb:6c:00:04:52:f0:85:1d:d6:d2:df:2e:05:8f:
3f:85:93:9e:bb:16:bc:b2:ea:45:87:a8:27:02:22:
53:06:43:fc:36:74:95:fd:0f:47:bd:e9:ed:25:0a:
17:b1:e4:9c:48:f6:72:7c:c3:c9:e6:91:5b:00:ea:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C7:6C:D9:D4:35:DA:2C:91:CA:A4:F8:CF:A5:91:1A:40:1E:7A:F6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/z8ds2dQ12iyRyqT4z6WRGkAeevY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.224.0/22
87.84.190.0/23
Signature Algorithm: sha256WithRSAEncryption
65:28:76:c8:24:2a:b2:5b:47:84:a1:e3:06:a0:f7:9e:2e:94:
8b:e9:e0:11:8f:63:0d:ea:a7:9c:83:39:e8:d5:41:d4:19:0f:
e4:76:06:d7:a5:a7:20:44:91:d9:26:81:4a:9c:e6:37:97:09:
85:71:ee:ca:a5:b2:aa:1b:ae:ad:cc:57:c8:87:8b:aa:88:bf:
69:b6:f4:f0:78:8b:75:97:d3:c9:4f:5d:8b:b1:fc:30:2c:dd:
47:d4:e0:65:be:c0:c5:38:a5:2d:4c:40:9e:a0:6a:d2:fd:0c:
a0:70:81:6a:0e:2f:7f:fd:2f:ef:0a:fe:aa:12:d8:c8:d4:25:
4b:16:f2:95:73:6d:49:42:b8:d2:a1:e8:75:af:49:8d:f6:f3:
69:bb:fa:fc:08:11:80:23:27:34:e5:ac:b5:9b:44:7e:fa:86:
3c:9e:0e:d1:1c:67:1c:40:42:3b:be:c1:95:d4:23:61:a0:a6:
7b:2d:79:7c:cf:af:95:76:70:e5:3a:2b:9f:2e:73:67:55:7e:
28:4e:6a:10:f8:95:4a:91:ec:cf:69:db:63:33:b1:c9:d8:04:
08:68:b1:f5:a6:40:f3:b3:82:55:b9:ef:f0:e1:03:75:01:f1:
01:fe:3d:46:d0:5f:7e:67:ea:fa:52:9d:b1:7e:4c:f2:6c:33:
f8:0b:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:32:49 2026 by rpki-client