Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0m8-ARzC6VmiDqdvbbto7PZofCg.roa
File: 0m8-ARzC6VmiDqdvbbto7PZofCg.roa (raw, json)
Hash identifier: 3Yk88k0Ylmh88wXbrUbDQs02E++zHcZoefpz2EsRfQ4=
Subject key identifier: D2:6F:3E:01:1C:C2:E9:59:A2:0E:A7:6F:6D:BB:68:EC:F6:68:7C:28
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019ECF56D28ADC35B1CEC9567F2EC9642A51
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0m8-ARzC6VmiDqdvbbto7PZofCg.roa
Signing time: Tue 16 Jun 2026 07:30:34 +0000
ROA not before: Tue 16 Jun 2026 07:30:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402402
IP address blocks: 82.108.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:56:d2:8a:dc:35:b1:ce:c9:56:7f:2e:c9:64:2a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 16 07:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d26f3e011cc2e959a20ea76f6dbb68ecf6687c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:cb:be:64:1f:7d:22:6d:88:50:da:9b:f7:
4c:98:0a:8b:a5:1d:59:f2:b1:8c:92:c7:20:5a:04:
a6:f1:4c:86:fb:38:d8:01:b3:59:40:97:ab:f7:81:
08:4b:3d:f8:c4:3d:6b:9e:a9:3f:1a:9c:2c:80:18:
13:0d:98:3c:b0:35:b9:cf:d7:70:ab:21:fc:85:3f:
d9:a7:c3:21:d4:1e:ab:63:25:dd:b0:3f:b8:88:70:
fa:b8:58:6e:4d:04:a2:3b:d7:55:e8:18:e7:a6:d9:
b8:53:76:a9:21:6a:88:16:96:0a:e3:84:0a:e3:c4:
71:77:56:0e:bd:12:68:ad:ec:29:91:19:45:c8:54:
5b:db:b7:8d:2f:0f:25:19:dd:22:06:33:73:44:d9:
ef:55:47:e9:c9:13:d5:26:5c:52:8c:2b:18:da:c1:
0f:7e:73:d2:14:da:63:60:c7:a1:86:67:55:d4:cb:
30:f0:30:48:ef:43:68:10:10:1d:67:7a:ad:e1:8a:
12:7a:ce:40:96:9d:08:e1:b8:6e:c6:48:16:49:cf:
ed:d6:ae:25:9b:00:0f:dc:c2:24:1b:d4:d8:a4:c7:
85:22:2a:b5:1f:b5:37:6a:88:0e:84:97:90:61:e2:
21:29:9d:4c:08:55:93:13:5d:e3:39:51:7b:4b:47:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:3E:01:1C:C2:E9:59:A2:0E:A7:6F:6D:BB:68:EC:F6:68:7C:28
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0m8-ARzC6VmiDqdvbbto7PZofCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.101.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:19:02:6e:82:7f:be:27:8a:01:9c:dc:c4:15:1b:c1:73:62:
53:51:a6:8f:b4:06:e4:52:ab:c9:45:dc:32:33:15:08:81:80:
7c:b4:57:00:5d:64:20:83:94:d0:cf:f1:88:50:5a:eb:0f:58:
fb:3d:b1:b6:65:9a:06:bc:e6:53:04:3f:a3:cc:ff:3c:11:68:
65:7d:a8:b5:ab:e4:25:11:bc:fc:11:71:87:85:bf:c2:7a:54:
75:0c:2f:c0:88:a6:6c:73:fe:88:f7:4b:c6:cc:4f:b1:69:db:
59:f5:bb:c0:13:93:f4:2a:9e:82:a7:0a:7b:1f:38:c3:3a:ba:
3e:05:e6:a8:28:bd:38:4c:3f:dc:cf:59:13:0c:64:30:21:06:
d1:74:c2:62:ac:cc:1b:75:d3:22:3d:c0:e3:b1:d0:29:3a:af:
68:44:0c:ea:50:35:04:1f:fe:6c:4d:7a:49:c3:e0:45:86:a2:
1b:f1:b2:08:c2:e7:13:7e:b6:a1:47:95:56:a5:04:45:19:ab:
3b:ea:99:e6:98:d6:c0:6c:28:09:f4:29:1f:7b:e6:b8:c9:a6:
86:ae:dd:70:bc:8e:90:d7:aa:54:51:69:ec:7d:d5:00:1f:dc:
b6:6f:be:fa:dd:bd:35:e3:35:8d:aa:12:4d:bf:00:90:65:11:
ea:a2:be:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7PVtKK3DWxzslWfy7JZCpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjE2MDczMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjZmM2UwMTFjYzJlOTU5YTIwZWE3NmY2ZGJiNjhlY2Y2Njg3YzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHDLvmQffSJtiFDam/dMmAqLpR1Z
8rGMkscgWgSm8UyG+zjYAbNZQJer94EISz34xD1rnqk/GpwsgBgTDZg8sDW5z9dw
qyH8hT/Zp8Mh1B6rYyXdsD+4iHD6uFhuTQSiO9dV6Bjnptm4U3apIWqIFpYK44QK
48Rxd1YOvRJorewpkRlFyFRb27eNLw8lGd0iBjNzRNnvVUfpyRPVJlxSjCsY2sEP
fnPSFNpjYMehhmdV1Msw8DBI70NoEBAdZ3qt4YoSes5Alp0I4bhuxkgWSc/t1q4l
mwAP3MIkG9TYpMeFIiq1H7U3aogOhJeQYeIhKZ1MCFWTE13jOVF7S0eZkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJvPgEcwulZog6nb227aOz2aHwoMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvMG04LUFSekM2Vm1pRHFkdmJidG83UFpvZkNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUmxlMA0G
CSqGSIb3DQEBCwUAA4IBAQBbGQJugn++J4oBnNzEFRvBc2JTUaaPtAbkUqvJRdwy
MxUIgYB8tFcAXWQgg5TQz/GIUFrrD1j7PbG2ZZoGvOZTBD+jzP88EWhlfai1q+Ql
Ebz8EXGHhb/CelR1DC/AiKZsc/6I90vGzE+xadtZ9bvAE5P0Kp6Cpwp7HzjDOro+
BeaoKL04TD/cz1kTDGQwIQbRdMJirMwbddMiPcDjsdApOq9oRAzqUDUEH/5sTXpJ
w+BFhqIb8bIIwucTfrahR5VWpQRFGas76pnmmNbAbCgJ9Ckfe+a4yaaGrt1wvI6Q
16pUUWnsfdUAH9y2b7763b014zWNqhJNvwCQZRHqor7l
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:19:59 2026 by rpki-client