Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8o8YwyXiyGwZW59bFjEnl5T-R_w.roa
File: 8o8YwyXiyGwZW59bFjEnl5T-R_w.roa (raw, json)
Hash identifier: Lg7UKBLweZmEoKyNL7QPdt1f66AmZ7keD82dyxCQCYw=
Subject key identifier: F2:8F:18:C3:25:E2:C8:6C:19:5B:9F:5B:16:31:27:97:94:FE:47:FC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA526403D2A0F1B48CEB2D1D9D48BCB3E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8o8YwyXiyGwZW59bFjEnl5T-R_w.roa
Signing time: Mon 27 Jul 2026 19:56:15 +0000
ROA not before: Mon 27 Jul 2026 19:56:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219401
IP address blocks: 82.108.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:26:40:3d:2a:0f:1b:48:ce:b2:d1:d9:d4:8b:cb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 27 19:56:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f28f18c325e2c86c195b9f5b1631279794fe47fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:52:b5:39:ee:97:f3:b8:5d:69:0b:1a:7f:
8f:94:d8:52:fc:c8:be:fc:d2:b6:e1:b1:3c:ed:53:
ec:ea:5f:5a:53:d9:76:88:c7:eb:74:9d:19:e1:4e:
bc:28:a2:03:5b:71:2e:88:3f:a6:4f:a8:98:ab:e3:
8b:50:a4:f0:ff:c9:68:02:6e:08:29:83:f0:9c:b6:
7b:4c:33:d8:04:79:53:cd:0c:50:87:05:60:b4:00:
3d:b4:ef:3b:e9:b0:e4:fc:c6:25:74:32:e5:a7:fa:
f4:c0:48:a1:1d:c4:16:33:4b:f8:42:cd:56:4f:7c:
62:6f:02:9e:30:b0:8b:00:95:1b:e3:94:f0:39:3f:
a6:17:d7:df:eb:ce:cd:d8:61:d0:56:e4:25:d4:f4:
2c:cf:93:db:4e:d2:ce:e3:89:bf:1a:9c:4a:5d:ee:
c6:13:ac:ed:21:70:04:39:4f:ad:76:e1:38:f8:cf:
05:73:da:4a:e5:8c:72:b7:ac:dc:1f:0e:a6:14:f3:
a5:d7:37:78:a2:de:9d:af:da:da:b3:0b:d0:bd:2e:
a2:3c:8c:28:96:24:62:69:64:cb:2c:58:84:f6:70:
b9:12:ca:1b:30:6e:b0:bc:c1:0e:10:a9:95:6f:70:
da:3f:fe:14:38:da:77:f0:c4:dd:ac:a8:c8:7e:01:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8F:18:C3:25:E2:C8:6C:19:5B:9F:5B:16:31:27:97:94:FE:47:FC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8o8YwyXiyGwZW59bFjEnl5T-R_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.206.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:3f:28:89:f8:78:7e:48:91:e9:45:58:04:1a:76:89:06:11:
9e:ec:27:96:96:66:3b:00:a0:54:71:d7:5b:a9:39:bf:90:eb:
58:9c:49:a8:74:91:8d:03:0d:2a:c1:33:39:dc:36:27:3c:d8:
af:85:57:3c:35:7d:19:15:64:61:6a:98:2e:7e:25:9c:fb:42:
69:46:a3:10:43:28:fb:70:ac:5a:11:9d:7a:6e:40:49:2e:d7:
24:0b:11:81:2d:0b:cd:df:ff:4f:62:d8:5b:6e:94:21:73:7b:
82:ce:48:07:c9:07:3c:29:ab:62:3d:76:49:53:c5:73:aa:55:
29:0f:2c:ea:15:dd:94:de:56:af:e2:71:7a:16:c5:6b:2b:a1:
f9:95:97:32:99:8f:ad:cf:e3:1a:ae:78:0f:f8:f6:cd:6d:59:
be:13:b8:35:d6:16:7d:74:74:08:4a:3c:86:b2:1d:71:0b:b5:
21:29:7e:85:89:30:e3:12:d5:ae:90:57:f4:09:22:55:e8:6f:
4d:fb:c7:1f:52:c7:c7:ae:a9:41:2c:f6:ec:05:5d:81:6f:44:
da:08:60:78:d4:0e:7a:1c:c6:57:2b:36:4b:20:b6:88:ad:11:
79:da:0b:69:46:3b:61:83:75:2f:df:a0:d5:62:59:02:6d:d6:
57:42:9b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:31 2026 by rpki-client