Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/H-OnLrWUu49Dhoy1zbHIBuZU1lo.roa
File: H-OnLrWUu49Dhoy1zbHIBuZU1lo.roa (raw, json)
Hash identifier: /yQ2uOU6aqdmVVhxyFSgG6JBRhEiAXU2TlRCzaRSL84=
Subject key identifier: 1F:E3:A7:2E:B5:94:BB:8F:43:86:8C:B5:CD:B1:C8:06:E6:54:D6:5A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0AB8AB32C95CF6B88609023DFF4471AB7
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/H-OnLrWUu49Dhoy1zbHIBuZU1lo.roa
Signing time: Wed 16 Sep 2026 18:46:28 +0000
ROA not before: Wed 16 Sep 2026 18:46:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212335
IP address blocks: 82.108.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:8a:b3:2c:95:cf:6b:88:60:90:23:df:f4:47:1a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 16 18:46:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fe3a72eb594bb8f43868cb5cdb1c806e654d65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:74:ea:7d:d5:39:63:ca:0d:e5:0e:33:2f:
1a:c9:2e:6d:b8:f7:05:bb:7a:e9:f9:54:35:ee:90:
48:16:e1:f4:5e:e1:81:ef:b4:8b:ed:34:2e:86:d2:
18:b8:6a:b3:4e:a2:25:c9:08:c3:ac:0b:04:f6:ed:
96:d3:62:eb:bf:b1:b3:39:7b:68:c9:4e:8e:fa:f0:
54:1a:22:cb:e3:d4:fb:0c:30:f3:99:37:5b:68:2b:
61:06:1f:8d:da:e4:b3:02:c8:15:1a:d8:e3:b2:c4:
1e:0f:59:55:51:86:95:b8:bc:3e:e7:28:aa:e8:49:
59:9e:1f:ab:f1:5f:eb:19:ba:9b:de:73:85:87:e9:
f7:ec:de:03:d0:4e:03:8d:7c:13:9c:e0:4e:64:98:
50:b1:23:d6:03:38:f8:35:0f:ce:81:e5:6b:6c:a9:
40:1b:3f:20:21:bc:94:82:2d:e5:fb:5a:2f:b8:6c:
5e:ef:ae:ac:5d:52:44:eb:b1:f1:1e:f9:d9:32:38:
37:33:9e:3c:68:d6:a6:1b:f0:1a:9f:78:19:e4:12:
b1:09:50:29:d3:e7:b8:1d:b8:98:9f:6a:dd:8b:04:
db:21:4c:42:b4:bc:35:8d:5c:49:6e:a1:a9:ad:1c:
9b:80:11:21:6a:fa:e0:3a:b6:f7:d2:96:6d:7e:7a:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E3:A7:2E:B5:94:BB:8F:43:86:8C:B5:CD:B1:C8:06:E6:54:D6:5A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/H-OnLrWUu49Dhoy1zbHIBuZU1lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.124.0/24
Signature Algorithm: sha256WithRSAEncryption
07:12:b0:52:b2:20:90:d2:f5:ad:b1:e6:53:62:1d:d0:f5:00:
7c:63:45:e5:64:3f:ee:3a:f3:6d:de:35:d4:2e:ce:5e:cf:25:
65:25:6f:ad:e7:c2:28:ac:5f:0a:f8:81:2c:84:de:b9:fd:ce:
db:db:51:b5:eb:40:d1:0b:b4:ee:9f:8a:fa:55:c7:e5:53:1a:
68:b8:83:74:b6:dd:e2:88:ea:e1:99:e5:5c:f3:43:f9:b4:5b:
8f:cf:f4:1f:e3:0f:24:c2:07:b0:29:e9:66:be:04:db:d0:e8:
f5:87:af:97:5c:3d:23:f3:25:fa:cd:a9:c5:18:63:45:2f:6a:
cb:32:68:3f:f6:dd:8c:cb:9a:21:42:7c:f9:43:f0:72:6f:45:
07:bb:c9:ec:70:7f:be:37:51:1b:75:e2:08:b6:89:6f:37:b8:
76:e1:a7:d2:01:16:bb:26:76:a5:3f:3e:41:8c:e6:7e:dc:84:
5e:7c:a9:a7:68:44:ad:71:7b:cd:1d:80:9e:50:63:71:6a:7c:
ce:78:18:aa:70:03:de:ce:26:99:39:3e:52:1e:ba:b6:c4:20:
26:18:69:5e:e9:77:f0:5c:4d:18:21:34:90:bf:62:a4:9f:99:
8a:aa:88:59:a4:74:46:2d:5a:df:4e:06:c6:ed:1b:8a:97:40:
35:67:e8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:05 2026 by rpki-client