Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cmc2XopqpIauHU1hR7C06_d9M2M.roa
File: cmc2XopqpIauHU1hR7C06_d9M2M.roa (raw, json)
Hash identifier: w34SsivKUlQv5k0xad1jThWAdybRYZ5YZ+l/0rrSvz8=
Subject key identifier: 72:67:36:5E:8A:6A:A4:86:AE:1D:4D:61:47:B0:B4:EB:F7:7D:33:63
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BCFA805CD01D08056288A37EF7DB50A1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cmc2XopqpIauHU1hR7C06_d9M2M.roa
Signing time: Sun 20 Sep 2026 04:02:08 +0000
ROA not before: Sun 20 Sep 2026 04:02:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 82.108.127.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
87.83.65.0/24 maxlen: 24
87.85.97.0/24 maxlen: 24
195.40.158.0/24 maxlen: 24
195.72.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:fa:80:5c:d0:1d:08:05:62:88:a3:7e:f7:db:50:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 20 04:02:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7267365e8a6aa486ae1d4d6147b0b4ebf77d3363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:af:81:ac:c1:73:a8:df:bd:da:f1:48:91:
3b:11:da:85:11:26:6b:3f:12:47:c2:4d:84:bf:81:
42:78:dd:9d:31:64:90:d3:1d:d8:f4:a7:73:62:19:
73:e1:3c:17:f1:a4:37:a0:cb:99:ac:18:fe:70:0b:
e9:90:5a:e3:8f:14:58:a7:56:6f:f0:a2:1f:69:be:
05:c9:6d:a6:69:f4:18:5c:2f:95:57:69:f4:d3:16:
2f:90:a6:66:d7:69:6b:96:23:1c:9f:3d:10:02:38:
4e:29:03:b6:80:37:bc:d1:18:bb:a6:13:67:53:57:
c7:8c:7b:8f:b0:d2:41:d3:3c:54:d7:59:87:b8:cd:
80:0e:eb:23:99:21:e9:24:4e:e0:f5:92:8e:61:bb:
b5:e2:c0:7d:86:5e:e0:7f:f9:3b:aa:5a:97:50:d1:
5b:6d:72:ec:0e:95:aa:b0:b8:05:b6:b9:e1:eb:a1:
88:0f:76:b7:2c:6b:8b:8c:9e:40:46:64:43:c3:10:
f5:14:e9:3a:37:f8:bb:9f:f7:fb:97:e8:57:95:58:
50:1e:00:2f:75:27:a7:1e:ac:d0:85:63:c5:03:b0:
00:5a:d0:e1:ff:32:3c:17:a0:80:b7:b0:b0:0f:29:
18:bd:1b:a1:b9:0d:5c:ac:02:b1:11:51:7d:8b:9f:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:67:36:5E:8A:6A:A4:86:AE:1D:4D:61:47:B0:B4:EB:F7:7D:33:63
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cmc2XopqpIauHU1hR7C06_d9M2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.127.0/24
85.189.36.0/24
87.83.65.0/24
87.85.97.0/24
195.40.158.0/24
195.72.169.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:56:43:cc:ef:e5:6e:25:fe:d6:5e:0a:7d:22:aa:b5:61:cb:
39:b7:1a:e1:40:a5:f8:0f:28:7d:0b:6a:34:54:0f:69:31:ad:
a1:41:0a:e9:23:52:76:24:d0:10:84:23:d5:03:c2:78:ad:00:
40:50:dd:44:eb:ef:ac:25:e6:c6:c5:52:46:c6:2c:15:26:56:
ea:0f:27:47:de:6b:36:f5:49:6a:cb:67:3e:57:46:7b:8e:82:
17:bd:f3:37:39:b4:3f:9c:a4:06:04:7d:1b:15:e4:74:a9:d3:
3c:48:bb:c6:55:65:8f:9e:f1:fd:5a:06:90:92:3e:e8:84:7a:
64:cf:d6:d0:3d:55:2d:e0:87:7d:d1:d8:73:ae:60:a7:58:1a:
55:21:da:6a:61:82:c0:f2:2e:57:53:a5:ce:5b:bf:0c:36:01:
19:9e:04:a6:25:79:48:d8:06:0c:8f:bf:90:85:a2:70:d7:5c:
44:e5:b3:02:94:79:1d:1f:60:ec:2c:aa:c4:40:20:5e:e1:a1:
0e:45:fe:a0:d4:9d:7e:e8:2d:62:29:53:e7:0e:36:26:7f:fa:
60:c5:f3:67:8d:d5:5c:6f:f8:98:c8:d4:c2:12:7a:8f:0c:52:
9b:cd:e0:d7:4a:b4:32:00:62:36:77:3c:a8:a6:7f:27:df:91:
bd:25:c2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:45 2026 by rpki-client