Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/a73FBfRm3fbHyov-FbD_L5R3qAY.roa
File: a73FBfRm3fbHyov-FbD_L5R3qAY.roa (raw, json)
Hash identifier: s98z1v/K+8YDntos7pTriWt9/CaTeD/eD7drZ5K178M=
Subject key identifier: 6B:BD:C5:05:F4:66:DD:F6:C7:CA:8B:FE:15:B0:FF:2F:94:77:A8:06
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B5D9DBB0907E6E5C5FCE9B453A4808AA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/a73FBfRm3fbHyov-FbD_L5R3qAY.roa
Signing time: Fri 18 Sep 2026 18:49:08 +0000
ROA not before: Fri 18 Sep 2026 18:49:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 82.108.61.0/24 maxlen: 24
82.108.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:d9:db:b0:90:7e:6e:5c:5f:ce:9b:45:3a:48:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 18:49:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bbdc505f466ddf6c7ca8bfe15b0ff2f9477a806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:f4:44:ef:4f:bb:30:a0:fa:08:14:1e:1a:
8c:56:3e:91:f0:f1:ff:ce:3d:ba:0e:bd:7f:12:0e:
41:d4:35:16:ed:91:63:ea:e5:08:44:98:8a:f0:5b:
7f:b0:47:88:48:6f:70:5a:1a:6d:d1:a4:e2:e1:29:
ad:a9:88:00:9b:6c:9b:c5:87:3c:c2:1c:4c:40:4a:
bb:74:84:7d:d1:6f:4d:c3:1a:b0:9a:4f:00:d0:e8:
70:a7:ab:6f:fe:28:04:4a:fb:d3:10:a5:b4:cf:8b:
d1:db:d3:11:5c:79:b9:18:76:a1:8c:2d:49:31:f3:
0c:ed:94:d1:f6:9e:78:ce:95:4e:37:7f:d2:d0:b3:
a4:21:b7:bd:d0:ed:3d:3e:55:6d:23:2c:8c:fd:40:
01:7a:4d:fb:9b:db:45:96:dd:0d:ce:58:e2:80:37:
1e:58:95:84:a3:4c:df:ab:8b:2f:d6:2a:6c:07:b5:
28:bf:35:fa:81:22:91:57:f5:d8:7d:2a:a7:89:74:
3f:c3:ce:fd:b8:30:01:1e:0c:8d:84:a8:c3:ee:ba:
8b:a7:8d:1c:34:90:c9:45:7e:88:c0:e1:e2:cf:d1:
e0:fa:92:a4:dd:e5:e0:64:f4:db:ad:ec:a7:3b:9c:
28:3d:4a:93:dd:c1:ea:0d:ac:d8:06:15:ac:d7:d9:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BD:C5:05:F4:66:DD:F6:C7:CA:8B:FE:15:B0:FF:2F:94:77:A8:06
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/a73FBfRm3fbHyov-FbD_L5R3qAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.61.0/24
82.108.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:65:42:d5:cf:6b:9a:c2:4a:83:55:dd:65:58:a7:72:9c:3f:
2e:f5:51:d6:00:10:f2:1c:f9:e8:5d:97:67:fa:f9:4e:34:3a:
f0:5e:e5:a3:09:02:ab:8b:aa:c3:17:3d:8f:e7:09:1b:95:d9:
4f:84:d2:59:4f:e8:49:3c:51:e7:71:05:3a:4d:5f:02:fe:43:
b9:10:37:4b:af:38:6a:64:1b:dc:62:a7:b0:a6:c8:2c:33:5e:
35:18:1e:5c:1a:c1:ed:2d:76:88:9b:87:80:1a:23:17:4d:32:
b7:25:c9:b3:77:4f:e1:2a:3b:0b:36:4a:55:28:f3:8a:9b:9a:
f6:2c:63:bc:4f:84:c3:68:1a:7c:10:c2:09:bb:a6:be:37:ce:
1d:f0:65:73:e7:ed:e1:22:12:32:93:f5:bf:4c:4f:a3:99:47:
a8:de:3b:b6:c1:68:73:91:83:f4:fd:55:c0:42:b0:36:23:bc:
d0:d7:81:13:a0:be:12:a1:58:59:af:bf:55:9a:0b:c3:f7:c2:
f4:f0:31:cc:e3:c2:dd:59:76:19:79:50:7a:55:60:ee:84:69:
56:47:c5:9b:9e:11:68:60:f3:8f:81:f6:53:b7:74:5d:ee:6b:
61:55:a6:37:3a:cf:ea:6b:f0:27:96:46:bf:c9:1c:c1:28:d4:
a6:5c:4c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:27 2026 by rpki-client