Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jXUw0Ss_wpIWwZ7ASBJDj-DpFtc.roa
File: jXUw0Ss_wpIWwZ7ASBJDj-DpFtc.roa (raw, json)
Hash identifier: ar/RAOXm5isimJMFYkooUMff/KJOg3qoR19qfjFZP0U=
Subject key identifier: 8D:75:30:D1:2B:3F:C2:92:16:C1:9E:C0:48:12:43:8F:E0:E9:16:D7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0A9EF9EBB49DB6923CBF77B9B74F5250F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jXUw0Ss_wpIWwZ7ASBJDj-DpFtc.roa
Signing time: Wed 16 Sep 2026 11:17:28 +0000
ROA not before: Wed 16 Sep 2026 11:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210464
IP address blocks: 82.108.121.0/24 maxlen: 24
87.83.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:ef:9e:bb:49:db:69:23:cb:f7:7b:9b:74:f5:25:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 16 11:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d7530d12b3fc29216c19ec04812438fe0e916d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:01:72:6d:33:6e:b9:09:25:77:74:00:90:
49:32:c0:11:ce:ee:45:4a:62:68:9c:78:27:a5:d3:
11:53:1e:06:91:fb:4a:c2:2c:3f:49:01:8c:f3:47:
ba:9c:0e:ef:92:29:78:eb:86:45:28:e7:6e:c6:57:
0b:c2:fe:3f:70:c5:3f:06:08:87:17:f1:55:7e:b9:
f7:5b:a1:84:19:fe:1f:73:11:c6:f8:4b:7e:c8:1a:
b9:7b:47:4e:78:77:81:64:76:3c:21:03:7c:e6:8d:
2d:93:0f:f6:d6:52:74:a2:96:2b:a8:d3:4f:27:d1:
cc:ff:92:6a:85:bc:3b:03:2f:57:98:66:df:3b:1a:
c6:18:1c:6b:f1:42:6d:6d:a8:52:f2:18:9a:92:7c:
3f:75:b1:10:30:ff:01:db:9c:aa:41:75:52:6d:e9:
22:6f:13:8d:e4:fd:9b:84:b8:46:ae:91:78:9d:99:
fa:d2:60:70:b9:d4:43:34:85:cd:7f:f1:42:4a:9b:
56:b0:a4:ca:ea:df:e7:94:d3:04:88:13:ff:ff:6b:
4e:81:60:57:81:07:25:5e:52:27:24:cb:c1:1f:e8:
60:59:4d:41:44:e2:cf:28:79:73:56:73:36:5a:3c:
7e:af:0e:e5:7a:f7:e7:13:7c:6b:48:8a:d1:66:e7:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:75:30:D1:2B:3F:C2:92:16:C1:9E:C0:48:12:43:8F:E0:E9:16:D7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jXUw0Ss_wpIWwZ7ASBJDj-DpFtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.121.0/24
87.83.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:aa:83:75:c9:28:0a:84:d2:64:72:90:76:29:85:53:ac:77:
20:9b:06:c2:0c:e1:a6:e8:65:0c:cf:0e:2c:5d:34:90:b0:87:
92:31:b8:ee:47:f0:04:a7:67:4a:5f:cc:04:c0:e7:78:8c:b3:
54:37:8c:84:3b:40:e0:82:b7:46:d6:11:2e:a4:88:46:1f:41:
b7:b8:3b:d2:84:55:77:63:44:2f:b2:ef:70:6a:15:ff:9c:23:
c2:80:61:87:b7:74:d7:63:b7:e2:c8:ea:5b:a1:3b:23:a6:e2:
b1:f2:b9:d5:eb:f4:1f:a9:7f:09:a7:fc:cc:0f:81:9c:96:10:
d7:6d:f6:4b:c6:65:07:9b:0b:f4:cb:6b:05:27:4c:e5:cd:e7:
7b:47:f9:a3:d3:f7:13:f5:fc:69:32:c1:ca:84:2d:5c:42:08:
ae:0e:13:4b:fa:fe:be:98:6d:0f:f7:b2:a8:38:64:c8:9b:eb:
ef:dd:cb:48:75:80:33:f3:92:fe:16:5c:49:d6:ae:b1:0d:c4:
13:51:e7:72:fe:83:e8:57:e7:44:ad:a0:65:0c:d1:96:a6:f5:
66:b8:23:74:40:11:5b:14:03:e5:62:b3:84:14:c1:15:91:00:
01:b5:ad:85:55:6a:1d:0f:51:de:1a:5c:d0:3c:bb:2d:a6:11:
66:9b:a6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:31 2026 by rpki-client