Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AngjxMy2ylRrDPmfCai85QlVgUk.roa
File: AngjxMy2ylRrDPmfCai85QlVgUk.roa (raw, json)
Hash identifier: im+/nzdMM7nqz+fnz8Xyiw1svT5LQ3kai81nNXeUJRs=
Subject key identifier: 02:78:23:C4:CC:B6:CA:54:6B:0C:F9:9F:09:A8:BC:E5:09:55:81:49
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0AFA3932EB62ED2D62D9BED68C951B7E0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AngjxMy2ylRrDPmfCai85QlVgUk.roa
Signing time: Thu 17 Sep 2026 13:52:07 +0000
ROA not before: Thu 17 Sep 2026 13:52:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 82.108.134.0/24 maxlen: 24
87.82.60.0/24 maxlen: 24
87.85.241.0/24 maxlen: 24
217.79.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:a3:93:2e:b6:2e:d2:d6:2d:9b:ed:68:c9:51:b7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 17 13:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=027823c4ccb6ca546b0cf99f09a8bce509558149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:3e:d4:1f:70:2e:ae:9e:99:05:56:d3:14:
14:4b:b0:ae:f8:a6:3b:53:57:4f:5a:d9:f0:46:44:
10:e0:26:a6:74:4d:51:b2:5b:74:2f:11:4b:9c:ea:
59:ae:b3:54:be:61:f0:f6:5d:eb:4b:6e:e8:96:15:
e0:0e:fd:d7:84:49:6c:3d:3e:fd:b5:25:7d:c6:70:
e0:58:18:5b:1a:cd:12:68:fb:85:e9:07:83:0c:fe:
bc:fd:36:fa:3d:51:02:45:d3:bc:5b:ad:15:9f:19:
da:7c:2d:aa:cf:7f:40:69:01:5c:bb:66:ce:5e:f1:
21:d8:8b:dd:89:89:18:fe:4a:f2:b5:d3:ab:81:99:
52:59:17:18:ca:3a:b1:fb:39:9e:48:2b:25:33:98:
0c:ae:01:f1:a3:db:7e:45:b9:eb:84:74:89:02:33:
b1:9e:2f:70:e7:bf:f4:3a:33:b3:4c:f3:b5:ca:4a:
65:58:57:fd:d8:07:60:eb:23:a0:6c:4b:84:8e:e3:
8e:06:82:d1:ce:01:04:81:68:00:e1:b8:71:ff:a9:
74:7f:79:75:06:7e:f9:69:da:ad:06:f8:9a:cc:c3:
f6:80:88:cc:48:0c:0f:68:54:a2:c1:cd:55:d2:cf:
6b:13:63:c1:aa:dd:74:45:89:77:45:d8:2d:df:a7:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:78:23:C4:CC:B6:CA:54:6B:0C:F9:9F:09:A8:BC:E5:09:55:81:49
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AngjxMy2ylRrDPmfCai85QlVgUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.134.0/24
87.82.60.0/24
87.85.241.0/24
217.79.126.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:0e:20:4d:f4:d4:d0:58:e6:87:ab:18:0c:de:8a:55:7a:f3:
40:b5:61:89:e5:19:a4:19:74:4d:7e:0d:39:44:01:7a:81:ae:
6b:21:60:e2:51:c4:6c:df:4c:10:bd:d3:06:5a:09:e7:e0:7f:
2e:88:eb:4f:e9:65:ac:e9:01:d5:f8:7d:31:f9:61:d6:38:30:
9c:e8:61:ef:9d:72:3f:b2:c2:97:11:24:eb:84:6c:34:0d:72:
2a:4a:55:04:5d:3b:3b:6b:7d:17:18:96:c5:0c:eb:e5:8d:9b:
fa:83:c0:96:16:26:64:35:7a:1d:0d:14:0f:6e:8b:8e:79:72:
93:37:58:ca:b6:22:dd:73:79:47:36:d1:89:d1:25:6f:28:e6:
eb:42:8d:29:d4:b5:16:77:f5:85:54:3f:8b:4d:8e:7b:12:c3:
c8:be:da:53:dd:8b:de:4d:64:ff:83:2d:ac:11:cc:b7:bc:4a:
e6:b8:35:af:12:d5:16:a1:ee:00:72:8f:a2:84:52:35:88:da:
59:8f:6d:30:ec:04:03:de:20:83:f7:84:b5:f0:b1:47:11:af:
5b:f3:02:ff:1d:15:bb:d3:47:6c:68:1d:6b:1f:67:f0:a1:26:
94:42:99:08:b2:77:5b:1c:f6:3e:dc:4d:cf:18:95:56:5c:5e:
52:e5:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:32 2026 by rpki-client