Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8ivHCAJZ9FFzYykoQMucKLboUxg.roa
File: 8ivHCAJZ9FFzYykoQMucKLboUxg.roa (raw, json)
Hash identifier: QY6ULS3KzPU4hX/L6j7uMzSupVwFdNOLiiobDituc18=
Subject key identifier: F2:2B:C7:08:02:59:F4:51:73:63:29:28:40:CB:9C:28:B6:E8:53:18
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA7A54B3FEE677482D95718C03F980E97
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8ivHCAJZ9FFzYykoQMucKLboUxg.roa
Signing time: Tue 28 Jul 2026 07:34:15 +0000
ROA not before: Tue 28 Jul 2026 07:34:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 82.108.90.0/24 maxlen: 24
82.108.110.0/24 maxlen: 24
82.108.115.0/24 maxlen: 24
82.108.138.0/24 maxlen: 24
82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
82.110.232.0/24 maxlen: 24
85.189.16.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.245.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.86.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.161.0/24 maxlen: 24
87.83.163.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.83.192.0/24 maxlen: 24
87.83.216.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.152.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.156.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.84.237.0/24 maxlen: 24
87.84.239.0/24 maxlen: 24
87.85.77.0/24 maxlen: 24
87.85.250.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
87.86.186.0/24 maxlen: 24
87.86.216.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
217.79.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:a5:4b:3f:ee:67:74:82:d9:57:18:c0:3f:98:0e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 07:34:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f22bc7080259f4517363292840cb9c28b6e85318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:35:42:69:9c:84:34:a1:02:7b:48:35:96:
73:d8:6c:ad:93:29:24:4a:f6:a2:97:0e:da:47:97:
26:76:6a:73:bb:91:76:87:f1:ad:2e:98:4a:45:2e:
a2:0b:4e:2d:49:6a:ec:1b:63:7c:85:a2:ef:55:1d:
74:32:1a:76:be:c6:95:ff:20:ae:85:ea:ff:37:cd:
da:c3:af:c9:9f:54:e8:45:9d:df:0d:37:49:f1:64:
a7:5d:6e:26:18:79:e5:96:6d:ee:68:58:fa:97:90:
f5:f0:be:b2:2b:a2:1c:7f:74:78:ee:16:90:97:67:
40:5d:cd:d6:cd:bc:ec:5d:ce:23:09:0a:ea:02:8f:
68:84:2f:de:36:ea:35:c2:3a:56:80:7e:a8:6c:35:
86:6f:6f:2e:d1:a0:5b:39:dc:85:b0:f6:0e:82:17:
78:0b:be:cd:90:04:00:9d:b5:88:49:8f:a4:e4:55:
ca:d4:69:50:84:ef:5d:ae:91:70:6d:27:81:06:ea:
69:af:22:d1:c7:af:48:6d:6f:3c:09:70:7a:d6:54:
34:22:7b:b6:d5:e3:a9:99:be:55:7b:e6:20:fd:9f:
6a:ef:d3:2a:57:ea:3d:a7:79:59:c0:4d:c1:10:0a:
16:91:ac:c7:70:be:f2:ef:6f:a2:6a:b6:c3:14:f5:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:C7:08:02:59:F4:51:73:63:29:28:40:CB:9C:28:B6:E8:53:18
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8ivHCAJZ9FFzYykoQMucKLboUxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
82.108.110.0/24
82.108.115.0/24
82.108.138.0/24
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
82.110.232.0/24
85.189.16.0/24
85.189.36.0/24
87.82.213.0/24
87.82.232.0/24
87.82.240.0/23
87.82.243.0/24
87.82.245.0/24
87.82.247.0/24
87.83.86.0/24
87.83.125.0/24
87.83.161.0/24
87.83.163.0/24
87.83.174.0/24
87.83.192.0/24
87.83.216.0/24
87.84.64.0/24
87.84.76.0/24
87.84.79.0/24
87.84.128.0/24
87.84.130.0/24
87.84.132.0/24
87.84.134.0/24
87.84.152.0/24
87.84.154.0/24
87.84.156.0/24
87.84.158.0/24
87.84.218.0/24
87.84.237.0/24
87.84.239.0/24
87.85.77.0/24
87.85.250.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
87.86.186.0/24
87.86.216.0/24
212.135.143.0/24
217.79.113.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3b:a1:a7:0a:b6:9f:83:11:2c:41:e1:c6:14:9e:e4:d3:5a:
da:2a:bf:76:e4:04:e4:23:2a:bf:01:2d:60:73:76:a8:e6:48:
f9:bb:00:59:6c:59:63:0a:66:60:15:39:4d:2b:14:ce:15:e9:
63:e8:97:18:db:47:15:26:56:5e:33:64:eb:30:0e:f9:e8:dd:
25:9e:45:ee:2f:6a:b9:3b:37:77:4f:40:07:b5:3b:c3:a4:a5:
3e:8c:24:fd:8c:9f:50:9e:d4:16:87:38:22:e2:9d:33:ec:78:
5f:2e:df:5f:64:65:23:f3:d3:02:21:7b:4b:6b:41:2c:37:47:
f6:36:00:ed:4f:55:3c:e3:a1:c9:84:ca:11:bb:51:e3:06:0e:
b5:0c:69:b2:7b:77:9b:5b:06:45:4e:2a:c9:11:f5:df:d9:35:
28:e3:23:8c:c8:07:9c:a4:3c:85:b7:3d:71:66:af:1f:ef:04:
4a:fa:68:e5:0e:6d:90:4b:36:d9:cd:98:3b:b8:d4:50:7c:cd:
e7:32:99:c8:75:b3:6a:c0:4f:22:af:09:2f:19:4a:e1:94:6a:
e9:db:4c:60:46:75:e8:4b:ec:9d:0a:4c:0e:bc:66:6c:66:01:
e4:88:03:cc:91:9b:a3:15:78:97:71:99:04:48:d3:9a:f2:93:
58:3d:a0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:43:42 2026 by rpki-client