Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hgZGLzAkYLc6lJNt9yIyF25OZoM.roa
File: hgZGLzAkYLc6lJNt9yIyF25OZoM.roa (raw, json)
Hash identifier: CBI9qGzLUxKYtTlNIvVJl3nhISdEHM0srDG8T4ZAylU=
Subject key identifier: 86:06:46:2F:30:24:60:B7:3A:94:93:6D:F7:22:32:17:6E:4E:66:83
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F9E1E51A6414FA1DA9173DCC83F6BE86E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hgZGLzAkYLc6lJNt9yIyF25OZoM.roa
Signing time: Sun 26 Jul 2026 11:10:14 +0000
ROA not before: Sun 26 Jul 2026 11:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 82.109.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:1e:51:a6:41:4f:a1:da:91:73:dc:c8:3f:6b:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 26 11:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8606462f302460b73a94936df72232176e4e6683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e9:e0:50:44:c1:a1:41:6f:90:37:03:2b:2d:
f1:e8:2a:a2:40:8a:c7:c0:4e:52:ac:29:00:01:36:
b2:d5:6f:85:d8:e7:cf:7d:c4:d8:60:20:c6:2f:cd:
3b:74:9c:04:2c:4b:ef:f4:96:69:58:22:0a:d5:00:
21:dc:c5:e7:15:8d:c1:80:7b:4a:d9:2e:71:b7:18:
10:0b:44:d9:ec:41:b9:b5:ea:01:62:9d:f3:b2:3b:
cf:ef:3b:e0:54:82:8a:7a:19:a0:dc:6f:62:ec:27:
d0:8f:f0:f7:0d:33:0f:b5:29:ea:0c:f1:fa:ab:d7:
27:6d:73:7d:53:96:cf:bf:9b:a8:c2:70:b3:a8:56:
31:e2:3b:66:7e:9b:de:ec:ec:0e:7f:f0:92:a5:2f:
ef:b6:a1:fd:74:e2:37:bf:f3:9a:bc:21:6f:54:68:
89:16:48:41:38:d3:6a:b1:d7:32:bc:6b:0e:19:3b:
2b:2c:f3:06:5e:da:e4:89:80:41:bd:21:03:c8:47:
3c:33:95:82:ee:fb:91:6c:d8:d8:65:58:60:dd:6c:
12:05:e5:ec:08:d2:6f:7d:d3:e8:df:e7:f2:c8:06:
fb:fd:06:99:e9:54:7c:16:16:36:3b:54:2e:9b:21:
35:f3:ab:59:7d:a8:8d:3c:09:d3:e2:2c:12:e3:a4:
38:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:06:46:2F:30:24:60:B7:3A:94:93:6D:F7:22:32:17:6E:4E:66:83
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hgZGLzAkYLc6lJNt9yIyF25OZoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:57:41:13:33:cf:ad:a3:d8:bc:6d:06:63:9b:12:ca:62:f0:
6b:3f:ac:1e:ab:a1:22:e4:11:c5:d8:69:3c:1a:4d:36:c5:f3:
3c:b3:c3:1d:75:66:49:38:ab:97:b9:3f:67:9d:29:c5:80:2b:
8f:56:0d:7d:c4:f9:a5:5f:bb:f2:f1:0b:b8:3e:ae:af:66:01:
33:41:a4:de:81:dc:e7:98:c5:36:b3:bf:5c:c0:89:d6:79:1e:
ff:f5:97:92:0d:9b:72:6d:c9:1f:b9:b7:14:d6:81:bf:79:a9:
85:ac:29:80:72:b5:51:6c:ec:95:1a:fc:ff:65:50:6e:d5:9c:
ce:95:e4:76:e5:ee:64:e3:6d:6f:03:04:cb:38:ce:90:e3:9c:
11:bd:ea:7d:b8:d0:da:c2:07:50:fb:35:8a:0a:a6:c2:05:84:
87:75:aa:7b:23:75:a6:25:96:54:50:72:df:9e:2c:ff:ce:a8:
36:3d:c4:eb:76:1a:b0:d7:58:ed:fd:10:48:89:03:cb:dc:3b:
23:07:46:0b:11:b4:8b:18:10:20:53:10:b8:b9:39:c7:f6:cb:
a0:9f:e3:27:2e:d2:ea:76:b1:42:d8:21:05:60:da:3d:31:d1:
b0:c4:59:02:83:3b:25:c2:dd:4d:f0:44:64:28:59:d2:41:57:
bb:5f:ea:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:26:01 2026 by rpki-client