Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YQHv8shfFrV0BxWKUHG3A9jg0rk.roa
File: YQHv8shfFrV0BxWKUHG3A9jg0rk.roa (raw, json)
Hash identifier: P5AmavYv1xrj6dDQ1eyCIldgC1K2VJNAWaBwBZnTXRk=
Subject key identifier: 61:01:EF:F2:C8:5F:16:B5:74:07:15:8A:50:71:B7:03:D8:E0:D2:B9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A082AFB58000046271C466A90237295FBA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YQHv8shfFrV0BxWKUHG3A9jg0rk.roa
Signing time: Tue 08 Sep 2026 20:22:28 +0000
ROA not before: Tue 08 Sep 2026 20:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 82.108.120.0/24 maxlen: 24
82.109.157.0/24 maxlen: 24
87.85.71.0/24 maxlen: 24
87.85.131.0/24 maxlen: 24
87.85.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:af:b5:80:00:04:62:71:c4:66:a9:02:37:29:5f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 8 20:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6101eff2c85f16b57407158a5071b703d8e0d2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:a9:1a:b0:9b:67:bd:8f:b3:5c:f1:af:f6:
7a:e0:16:9e:99:a3:55:8e:1e:5f:5f:d5:64:e9:33:
0f:f1:d3:94:fc:46:df:9e:b3:9c:c5:26:fd:33:f7:
b6:c7:48:bd:9f:67:ca:13:d5:c7:2e:cd:93:c2:5b:
97:bb:60:49:96:10:03:98:9d:49:3a:cd:0d:4f:8b:
96:97:c3:00:ab:3f:dd:ba:53:a7:12:da:ff:d0:39:
19:da:49:34:3f:a0:f5:64:67:d1:54:4b:01:56:8b:
0c:4f:91:dc:61:f2:af:db:69:89:50:4d:0e:4e:0d:
ea:68:11:cb:dc:08:2d:1c:7c:3a:9a:e0:fc:cf:e3:
f6:95:32:fc:e2:89:5c:25:23:61:51:d9:43:6a:38:
0d:00:8f:07:49:b6:17:79:9c:28:c3:18:51:22:53:
d7:96:13:45:4b:8f:c8:ec:9c:97:16:fd:b3:95:fa:
77:57:de:fb:3e:7e:f6:9d:bd:2a:83:11:0d:a1:6d:
40:32:a5:c0:09:77:0b:6d:1b:53:eb:d3:25:8d:8b:
ec:fe:95:ba:a0:1a:2a:95:21:a9:6d:35:b3:45:f0:
9c:00:61:e5:90:ba:38:82:75:8e:b2:44:c8:c2:94:
59:f9:c0:e3:36:15:75:56:05:5a:47:a5:c9:f8:15:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:01:EF:F2:C8:5F:16:B5:74:07:15:8A:50:71:B7:03:D8:E0:D2:B9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YQHv8shfFrV0BxWKUHG3A9jg0rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.120.0/24
82.109.157.0/24
87.85.71.0/24
87.85.131.0/24
87.85.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:ea:bd:af:0a:27:55:75:bd:25:63:22:21:3d:07:60:ac:ba:
18:47:32:da:c7:7f:4c:75:a0:eb:17:71:2d:c3:91:69:25:18:
49:65:29:bf:8a:66:44:c4:3e:78:10:5e:8a:64:b8:74:59:37:
a8:c2:29:4f:1f:bd:01:65:93:82:bf:15:22:fd:4a:f4:e8:fd:
8a:3c:5f:1f:fb:c7:4e:26:18:37:5d:a2:ad:73:ff:c9:a7:c5:
dd:10:f4:6d:f4:68:27:b0:ef:1b:6b:81:fb:fe:69:76:ec:35:
cb:e3:fb:30:f3:b4:67:e5:de:50:71:fd:bb:69:48:40:64:18:
28:34:3e:0f:2e:6e:f3:5a:8e:cf:6d:82:fd:9b:41:ac:f1:fc:
ee:7c:db:38:d1:20:b9:88:89:55:98:f3:71:22:17:f6:35:ff:
47:f0:2d:4d:3e:8c:e0:61:47:7c:47:ba:1f:6d:61:d8:a8:38:
37:91:f6:6d:1c:64:b5:ed:f1:21:15:3f:c3:a2:4f:1c:1b:ed:
13:e3:71:93:bb:73:89:a6:a2:11:b1:83:3a:0e:1f:b7:a6:ff:
f4:ab:85:7d:2d:c2:76:02:e3:1f:e1:cb:17:4f:e2:f8:68:1a:
0b:c9:a4:a5:75:b8:8c:12:39:bf:b7:88:19:50:ae:25:3f:08:
dd:49:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:29:19 2026 by rpki-client