Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_3cbbhQWtSJtSKK_mfvvFSChx4w.roa
File: _3cbbhQWtSJtSKK_mfvvFSChx4w.roa (raw, json)
Hash identifier: U5abHohJhC6UihPvZxiJ1y70q6zROazpkYyON95/BvE=
Subject key identifier: FF:77:1B:6E:14:16:B5:22:6D:48:A2:BF:99:FB:EF:15:20:A1:C7:8C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A084A395D7EC84F4385160DDE6CAE2AEE8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_3cbbhQWtSJtSKK_mfvvFSChx4w.roa
Signing time: Wed 09 Sep 2026 05:28:28 +0000
ROA not before: Wed 09 Sep 2026 05:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211750
IP address blocks: 82.108.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:a3:95:d7:ec:84:f4:38:51:60:dd:e6:ca:e2:ae:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 9 05:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff771b6e1416b5226d48a2bf99fbef1520a1c78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:90:60:24:8c:2d:89:3d:d7:43:97:ba:4f:
cb:33:9a:80:0c:60:7e:aa:26:fe:97:ad:29:87:c6:
b0:2b:c3:50:54:83:04:96:04:84:f1:a7:7a:72:70:
77:9d:01:e0:6a:77:4a:98:b8:8e:64:af:d1:a8:a7:
54:b2:48:04:89:eb:59:46:3a:76:87:83:7c:f3:bc:
09:0a:44:79:d2:2a:0f:b0:a0:21:b5:3b:5c:f0:2f:
43:3f:b3:c7:11:2d:64:51:06:a6:97:70:ec:e7:a6:
e2:b4:d7:da:b5:17:c8:e4:87:63:fd:08:14:93:af:
91:d1:b3:59:e6:c6:68:49:ce:82:6a:59:b6:aa:52:
2f:dc:a7:fd:56:ac:a1:34:c2:b2:49:31:a7:3d:31:
6e:24:5e:c8:45:83:b7:1c:3e:29:9c:60:34:ba:80:
1d:0b:46:75:fd:15:6e:58:60:f1:f3:96:bb:74:f7:
e0:72:aa:37:95:0f:4f:e2:33:1e:2d:00:4d:fb:07:
e0:03:20:30:84:4e:5a:2f:27:80:04:d5:3b:7b:20:
e4:90:38:b1:4f:82:71:d5:b4:40:be:36:49:01:46:
9a:43:e3:e6:c8:1b:21:18:89:93:2d:aa:5d:95:bb:
8f:94:c0:47:8c:24:30:97:a6:34:86:bc:47:57:b5:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:77:1B:6E:14:16:B5:22:6D:48:A2:BF:99:FB:EF:15:20:A1:C7:8C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_3cbbhQWtSJtSKK_mfvvFSChx4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.131.0/24
Signature Algorithm: sha256WithRSAEncryption
67:50:f8:32:73:d0:8e:46:2f:48:a4:72:24:74:be:a2:49:8e:
09:3c:11:be:cd:54:e0:3c:bc:9b:13:f4:51:bc:ee:4a:74:c9:
7a:e7:3c:5a:1c:ca:28:91:86:12:36:3c:44:ad:91:02:fa:2a:
47:86:f9:89:ad:5e:b1:db:fd:89:d2:f2:4c:03:e0:b9:e6:b1:
ce:c3:ea:31:9a:14:8e:3d:fa:b9:8f:3e:93:33:e6:d2:ca:37:
32:53:08:64:53:8f:04:86:73:54:c4:9e:04:4b:18:03:48:14:
2b:81:76:a5:73:bb:ff:1d:ef:c2:cd:57:ca:84:c0:79:6b:da:
f5:52:29:54:bc:7f:8d:0d:e8:12:aa:24:83:00:58:e5:a6:2c:
4e:7b:67:89:20:ad:df:40:f8:36:df:55:89:36:a0:53:c1:c0:
02:e3:93:7f:5b:51:f8:fa:eb:fd:f9:9e:b2:d1:b8:f2:be:8e:
7c:f7:0a:33:8d:d7:d7:4c:ce:94:02:d5:55:13:28:77:10:e5:
bb:9f:71:47:85:20:ce:ba:3e:31:54:f9:c8:d7:b8:2c:01:a3:
f7:64:0a:09:b9:88:b7:d0:69:70:9f:bd:53:85:b2:14:d6:a1:
63:93:82:b2:2c:0a:a8:51:0a:98:2d:05:14:30:f6:8a:72:86:
04:09:bc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:37:59 2026 by rpki-client