Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/edUuj84rj9VFL4pZ9fEjLCmDZ4E.roa
File: edUuj84rj9VFL4pZ9fEjLCmDZ4E.roa (raw, json)
Hash identifier: Zg2KNXgLNTNsl7SuPP5u6d/plbJSlSGz+6QUWllAcE0=
Subject key identifier: 79:D5:2E:8F:CE:2B:8F:D5:45:2F:8A:59:F5:F1:23:2C:29:83:67:81
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B44D6B709C025D343A1B182669E86ACE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/edUuj84rj9VFL4pZ9fEjLCmDZ4E.roa
Signing time: Fri 18 Sep 2026 11:36:07 +0000
ROA not before: Fri 18 Sep 2026 11:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 82.108.110.0/24 maxlen: 24
185.3.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:4d:6b:70:9c:02:5d:34:3a:1b:18:26:69:e8:6a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 11:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79d52e8fce2b8fd5452f8a59f5f1232c29836781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bb:ec:de:54:42:ce:4c:b7:5e:2c:e8:09:b9:
f8:15:4b:b7:6b:1f:09:71:08:96:a0:86:a2:3c:0a:
a8:be:f7:7b:d1:d5:63:d3:19:3b:e1:20:e4:59:5a:
25:55:02:ab:d0:16:98:0b:2f:c1:bc:17:af:d8:cf:
86:b7:d4:d1:ca:1e:65:34:eb:8a:02:f0:73:68:d2:
0e:5e:8a:f5:38:51:0b:e9:b7:36:16:21:9b:53:3e:
fd:d3:17:2e:25:66:2c:53:72:b8:fc:a4:d7:3c:5c:
a9:d6:ee:1a:cb:24:34:28:26:77:12:11:04:06:83:
e6:01:36:0f:fd:05:d7:7d:88:4f:1a:12:c1:23:3b:
ea:fa:ef:66:89:aa:49:f2:90:60:dd:7e:63:81:06:
ba:8f:46:0a:c8:94:f0:32:69:8d:4d:70:d6:5f:ce:
0a:81:2b:68:cd:bc:ed:96:ea:1a:28:26:5d:ea:e6:
fc:a8:98:7f:d6:96:2f:82:ff:1c:1a:7f:bb:5a:0e:
60:07:1f:66:53:98:23:9c:72:3f:6d:42:12:c9:10:
06:ff:8e:e3:d6:29:2d:69:8e:42:49:d3:18:39:1b:
e2:6c:82:0e:20:9f:b5:7a:0f:a6:d2:09:66:c4:8c:
9a:46:50:2b:cb:89:84:b8:8f:80:80:61:b2:28:e1:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D5:2E:8F:CE:2B:8F:D5:45:2F:8A:59:F5:F1:23:2C:29:83:67:81
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/edUuj84rj9VFL4pZ9fEjLCmDZ4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.110.0/24
185.3.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:bc:e1:62:73:b0:c5:fb:8a:29:0a:76:7c:10:c7:96:22:60:
36:a7:b0:19:f2:ba:1c:39:d0:c9:d4:45:98:24:9a:4b:94:1c:
7f:5a:50:ee:cd:01:1b:91:04:bc:48:05:39:fe:7d:15:28:0a:
96:1e:2a:18:22:26:c0:bf:05:f7:ff:18:41:5e:5e:f1:ff:9b:
6b:f3:72:23:4a:c6:cb:62:8a:d0:29:4c:fa:c3:bc:94:a7:fe:
1e:25:bb:67:67:35:63:fe:d3:f4:c8:f5:5d:8e:31:76:75:5b:
b1:d2:20:e6:51:70:b8:e1:f0:e8:8c:1d:1d:ad:41:4c:29:60:
94:b9:92:31:76:70:e2:f1:9c:62:bb:11:c3:f6:ca:5a:3a:3b:
26:db:51:a0:83:df:bf:f5:0c:18:ed:67:e2:e7:5c:d0:b6:d2:
78:84:6f:ec:d6:64:6d:bf:91:52:ac:c4:8b:21:c1:f0:f4:bf:
e5:33:86:bb:a7:f4:86:23:1b:a6:f6:b8:9f:90:ae:e6:ac:e9:
a6:36:71:f0:80:f9:46:97:9a:6e:ce:0e:64:68:67:ae:ac:60:
46:ad:dd:47:2a:3f:e5:f4:dc:56:d7:92:61:29:d1:95:84:71:
70:39:ae:64:ef:0f:17:7a:25:69:90:5b:4f:d9:64:77:71:e4:
59:0d:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:28 2026 by rpki-client