Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g4gO1N-lUzbuXX5-ZIX80AUtGlA.roa
File: g4gO1N-lUzbuXX5-ZIX80AUtGlA.roa (raw, json)
Hash identifier: iUPZDf/X9Rz68OELZYkffmNRQHKPG1MRiWNlOKg64Ps=
Subject key identifier: 83:88:0E:D4:DF:A5:53:36:EE:5D:7E:7E:64:85:FC:D0:05:2D:1A:50
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BE19F87404BF28F56676E78286206DE5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g4gO1N-lUzbuXX5-ZIX80AUtGlA.roa
Signing time: Sun 20 Sep 2026 09:16:07 +0000
ROA not before: Sun 20 Sep 2026 09:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 82.108.125.0/24 maxlen: 24
82.108.133.0/24 maxlen: 24
85.189.4.0/24 maxlen: 24
85.189.26.0/24 maxlen: 24
87.82.63.0/24 maxlen: 24
87.82.193.0/24 maxlen: 24
87.83.220.0/24 maxlen: 24
87.83.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:19:f8:74:04:bf:28:f5:66:76:e7:82:86:20:6d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 20 09:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83880ed4dfa55336ee5d7e7e6485fcd0052d1a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:61:40:d4:0e:05:85:22:73:4b:aa:cf:59:
b3:76:d2:65:6f:94:6d:55:5f:f0:71:5d:df:de:cc:
70:68:9f:10:20:8c:a7:fc:7a:9f:2f:ac:03:1a:2a:
cd:80:28:e9:ab:ed:dc:72:91:3c:05:af:05:8f:b4:
0a:d9:f5:38:04:3b:88:6a:c0:9f:21:4d:c1:21:dd:
ea:12:4b:98:14:1c:20:32:3c:9e:a0:3f:f7:56:0a:
dd:58:83:ea:e3:62:b9:ca:c5:30:44:74:eb:d2:99:
61:63:f1:54:ce:ab:23:8e:1e:6e:38:a0:e4:23:78:
d6:1f:b8:72:54:ba:dc:ca:37:2c:45:ca:4e:a9:55:
dc:5d:67:d2:b5:de:73:c8:4c:0b:2c:93:e6:c7:61:
5e:d2:36:47:55:6a:d2:ce:3b:77:57:33:97:8e:54:
9b:e1:c4:bb:64:6b:0b:40:af:af:34:c5:d4:12:df:
c9:2d:04:7b:de:be:24:7b:e5:77:9b:90:3f:a0:79:
68:44:20:91:cf:ea:90:7d:e7:ee:f4:b2:a3:92:2e:
e3:9a:fe:2f:c7:8a:b1:12:e7:ba:be:24:20:12:ed:
af:fb:a1:1a:93:c2:17:55:d4:6a:46:12:80:e9:a1:
ef:e7:db:49:a1:a5:c1:52:90:cb:e7:9d:df:01:f2:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:88:0E:D4:DF:A5:53:36:EE:5D:7E:7E:64:85:FC:D0:05:2D:1A:50
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g4gO1N-lUzbuXX5-ZIX80AUtGlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.125.0/24
82.108.133.0/24
85.189.4.0/24
85.189.26.0/24
87.82.63.0/24
87.82.193.0/24
87.83.220.0/24
87.83.235.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3d:43:43:db:83:ad:2e:46:54:19:78:2c:f9:f8:ba:b2:a0:
fb:20:ab:bf:27:96:7f:fa:7b:61:fc:58:17:b6:3f:c1:bc:4c:
8c:23:17:58:a0:0d:f8:cd:60:3d:cc:61:ff:d2:f7:08:ba:a2:
b6:9f:50:c5:ae:9e:7d:fd:51:ba:8e:22:df:71:96:36:9e:63:
9d:c6:ae:a5:e3:20:ea:da:58:ca:37:08:96:c9:40:7a:0e:0a:
bb:85:a8:c4:ef:6a:bc:55:c0:64:f0:ed:b7:e8:0a:47:9a:25:
e2:ad:2e:c1:be:3c:51:83:b3:f2:14:ee:cf:06:fc:42:ad:38:
df:b3:ae:2f:5b:33:25:53:ef:3c:9a:44:47:5f:4f:49:63:cc:
3a:4d:ed:74:e4:3a:2f:bf:f9:38:f3:b9:72:c9:64:2b:d8:8a:
04:28:29:d6:77:74:a2:93:c5:91:bc:f7:02:86:ef:f9:0d:86:
37:15:e5:64:c1:b0:30:d0:8f:d2:00:fc:c0:85:71:97:8a:af:
29:eb:63:d7:48:3c:b6:bf:db:c3:6f:db:6b:cd:e1:ba:1c:24:
07:28:a3:e1:bd:b5:51:76:4d:53:8f:30:19:4e:01:82:18:d5:
2d:6c:0c:94:33:ed:3b:9e:4c:b1:89:f9:d5:fc:20:d4:13:74:
f1:b6:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:20 2026 by rpki-client