Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DoQVpTXHhXQ0_Lq_kwJtMuQb66Y.roa
File: DoQVpTXHhXQ0_Lq_kwJtMuQb66Y.roa (raw, json)
Hash identifier: RVgZQc6aZsjOud5cznM9hVbRia3r4n/KBU5OEhoWIDA=
Subject key identifier: 0E:84:15:A5:35:C7:85:74:34:FC:BA:BF:93:02:6D:32:E4:1B:EB:A6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0A5982C2C2D866964D61FA4C677D1D057
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DoQVpTXHhXQ0_Lq_kwJtMuQb66Y.roa
Signing time: Tue 15 Sep 2026 15:03:28 +0000
ROA not before: Tue 15 Sep 2026 15:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139659
IP address blocks: 82.109.224.0/22 maxlen: 24
85.189.40.0/23 maxlen: 24
85.189.44.0/23 maxlen: 24
85.189.54.0/23 maxlen: 24
85.189.58.0/23 maxlen: 24
85.189.66.0/23 maxlen: 24
85.189.70.0/23 maxlen: 24
85.189.80.0/23 maxlen: 24
85.189.88.0/23 maxlen: 24
87.84.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:98:2c:2c:2d:86:69:64:d6:1f:a4:c6:77:d1:d0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 15 15:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e8415a535c7857434fcbabf93026d32e41beba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:93:e7:f3:82:f7:cc:b3:15:a1:10:fa:84:
8e:84:59:ed:35:8f:35:12:d0:12:bd:e1:d6:f7:b4:
3c:34:58:d7:33:49:b1:03:ae:7a:6c:03:08:a0:c9:
ba:5a:d1:7c:73:5c:56:40:72:0e:67:45:76:96:9f:
be:f7:e6:8b:36:b5:11:52:10:35:46:ea:f3:d5:c8:
62:2f:23:83:5d:c6:c2:cf:8d:0d:02:6d:c5:67:53:
71:49:cc:a4:71:82:92:aa:6b:0c:e9:1e:14:e4:3f:
8a:b2:1a:07:92:26:82:c0:d2:a1:7e:f1:58:f9:4b:
fe:5e:1b:7a:55:4d:b2:d5:b2:2b:24:2c:64:11:0e:
76:20:d0:d0:9a:39:53:82:79:c8:fb:65:8f:5f:27:
64:3a:a4:4d:d4:65:bb:a5:db:54:70:e2:a0:3b:91:
7e:f5:ee:c8:03:f6:26:3e:3b:0d:e7:69:2b:56:11:
71:8b:da:e4:37:f3:c0:a8:23:c9:58:c0:5b:07:4c:
fc:3d:47:45:61:5d:a2:f7:aa:c6:82:b5:d7:af:48:
c6:21:70:81:3d:69:4c:c8:a8:12:6d:f2:cd:ca:3d:
69:a9:7a:ac:e5:e6:57:66:17:1c:a4:ef:8a:2e:b3:
46:3d:6d:51:9b:4c:06:3d:a6:df:63:ac:96:d9:7e:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:84:15:A5:35:C7:85:74:34:FC:BA:BF:93:02:6D:32:E4:1B:EB:A6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DoQVpTXHhXQ0_Lq_kwJtMuQb66Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.224.0/22
85.189.40.0/23
85.189.44.0/23
85.189.54.0/23
85.189.58.0/23
85.189.66.0/23
85.189.70.0/23
85.189.80.0/23
85.189.88.0/23
87.84.190.0/23
Signature Algorithm: sha256WithRSAEncryption
be:c8:20:27:ad:2b:ed:31:1e:b7:5a:c9:91:6e:bd:8a:2c:6a:
a6:7c:3c:87:0f:d2:3d:2a:d9:37:41:1e:80:43:04:69:4f:1e:
51:48:49:bd:7e:c8:71:95:77:43:0c:fd:98:89:db:48:46:e4:
0d:b8:77:e4:04:be:62:32:49:96:65:f8:5a:8a:f1:70:47:02:
a4:33:84:a3:15:fe:cf:c6:10:b8:aa:77:c9:d6:71:48:2d:e5:
9f:b0:cc:67:50:9b:44:dc:f1:ff:be:41:af:3d:ba:e9:fe:fa:
f1:bb:33:63:3e:3b:ee:e4:c8:8f:74:a0:41:f7:ea:c8:12:fd:
20:c9:3e:2a:2f:c7:da:60:c4:f7:2c:6b:fe:29:16:85:96:ac:
ba:30:f0:66:88:f5:2c:3e:04:a6:58:a3:b9:68:85:ef:e5:55:
d8:05:e9:e6:b6:1f:0e:04:f2:6b:2a:fa:d9:70:e1:a6:d0:86:
df:4e:54:5a:9a:36:dc:dc:cd:0a:88:6a:0a:0c:06:24:2c:e0:
a3:df:3d:b5:22:1a:02:1a:0f:26:54:15:2f:9e:97:65:f4:68:
68:7b:a3:e5:b9:47:71:6f:c8:4b:74:d7:29:14:6b:b6:d2:e5:
72:9a:26:6c:09:96:0a:9c:13:dd:0b:3a:6f:d2:1e:4d:17:9b:
5e:98:4d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:27:25 2026 by rpki-client