Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kMU5Qrdr3pj81-96lXxRSeI6XQ8.roa
File: kMU5Qrdr3pj81-96lXxRSeI6XQ8.roa (raw, json)
Hash identifier: JoV1z20ta03RNhONoPw2YU0/LSbhNSmyDMVxhK/3ceY=
Subject key identifier: 90:C5:39:42:B7:6B:DE:98:FC:D7:EF:7A:95:7C:51:49:E2:3A:5D:0F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B9B034F2E649DFACD3CC3635DC421737
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kMU5Qrdr3pj81-96lXxRSeI6XQ8.roa
Signing time: Sat 19 Sep 2026 12:42:07 +0000
ROA not before: Sat 19 Sep 2026 12:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 82.108.4.0/22 maxlen: 22
82.108.32.0/21 maxlen: 21
82.108.44.0/22 maxlen: 22
82.108.52.0/22 maxlen: 22
82.108.68.0/22 maxlen: 22
82.108.88.0/23 maxlen: 23
82.108.92.0/22 maxlen: 22
82.108.102.0/23 maxlen: 23
82.108.116.0/22 maxlen: 22
82.108.140.0/22 maxlen: 22
82.108.152.0/23 maxlen: 23
85.189.23.0/24 maxlen: 24
85.189.72.0/23 maxlen: 23
85.189.74.0/23 maxlen: 23
85.189.76.0/23 maxlen: 23
85.189.78.0/23 maxlen: 23
85.189.132.0/23 maxlen: 23
85.189.153.0/24 maxlen: 24
85.189.154.0/23 maxlen: 23
85.189.156.0/24 maxlen: 24
85.189.159.0/24 maxlen: 24
85.189.160.0/24 maxlen: 24
85.189.162.0/24 maxlen: 24
85.189.164.0/23 maxlen: 23
85.189.167.0/24 maxlen: 24
85.189.174.0/23 maxlen: 23
85.189.178.0/24 maxlen: 24
85.189.181.0/24 maxlen: 24
85.189.183.0/24 maxlen: 24
85.189.189.0/24 maxlen: 24
85.189.190.0/23 maxlen: 23
87.83.192.0/24 maxlen: 24
87.86.24.0/23 maxlen: 23
87.86.242.0/24 maxlen: 24
212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.212.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:b0:34:f2:e6:49:df:ac:d3:cc:36:35:dc:42:17:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 19 12:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90c53942b76bde98fcd7ef7a957c5149e23a5d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:f9:60:71:68:83:4b:b5:86:a0:c2:0a:0f:
bd:11:9b:29:e6:9b:0e:48:1a:04:22:be:e0:6b:97:
70:f1:ec:cf:37:2b:4a:3b:01:bc:96:7a:87:15:4c:
00:29:fe:35:c5:16:70:d3:44:3f:26:e4:93:64:b3:
76:c5:a0:1d:14:f0:89:e3:45:cc:9a:a2:b0:03:ad:
32:b0:1e:41:0c:ac:20:09:2c:fc:23:eb:5c:be:84:
07:11:ef:09:36:d5:54:c1:3b:19:dd:22:23:d0:e4:
e0:e7:1c:76:03:59:61:d5:68:e6:fe:7b:15:2b:14:
f0:40:86:29:77:8b:22:a8:17:8c:67:fe:90:13:24:
37:ff:f2:bc:71:a6:be:17:25:7f:55:6b:0f:14:3d:
39:0c:f7:cf:0b:ea:f1:97:16:70:a2:86:49:30:57:
f5:fc:e8:0f:69:cc:09:8e:bf:3a:1b:13:2a:5c:91:
cb:bd:80:a2:61:44:4e:26:85:f7:84:8a:fc:95:d0:
fc:bc:e9:38:0d:d4:ca:50:18:79:b6:4a:41:0a:da:
59:6a:8b:2a:dc:27:e5:1b:c7:b7:7d:ba:9e:2b:5d:
58:ed:e6:35:66:f0:cf:6b:a9:6d:16:bf:2e:9d:e7:
f2:2e:2e:30:16:bb:11:4f:7d:3e:1d:17:ba:e2:bd:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:39:42:B7:6B:DE:98:FC:D7:EF:7A:95:7C:51:49:E2:3A:5D:0F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kMU5Qrdr3pj81-96lXxRSeI6XQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.4.0/22
82.108.32.0/21
82.108.44.0/22
82.108.52.0/22
82.108.68.0/22
82.108.88.0/23
82.108.92.0/22
82.108.102.0/23
82.108.116.0/22
82.108.140.0/22
82.108.152.0/23
85.189.23.0/24
85.189.72.0/21
85.189.132.0/23
85.189.153.0-85.189.156.255
85.189.159.0-85.189.160.255
85.189.162.0/24
85.189.164.0/23
85.189.167.0/24
85.189.174.0/23
85.189.178.0/24
85.189.181.0/24
85.189.183.0/24
85.189.189.0-85.189.191.255
87.83.192.0/24
87.86.24.0/23
87.86.242.0/24
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.124.0/22
212.134.164.0/22
212.134.208.0/22
212.134.224.0/22
212.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:90:ea:44:69:c5:68:3e:ab:51:c9:00:69:15:c5:65:d6:77:
b5:c9:68:5e:82:39:bf:d2:56:c5:38:f7:e8:93:f7:22:bf:fa:
3d:08:19:c3:a2:90:f7:9b:d1:5d:ac:f8:7b:6c:18:ab:49:fe:
36:a0:7f:5d:dc:56:01:85:ae:80:b2:50:7c:f3:21:fb:2a:e0:
ac:d3:2e:4c:5d:ad:2c:c1:7a:57:66:aa:8d:b1:cc:f9:e8:e2:
76:e1:5a:a8:ad:4f:24:0a:a0:59:cc:35:e9:c1:db:3e:e1:cb:
f0:e8:26:63:3c:95:1d:03:3c:72:ae:ad:33:a2:0c:4d:40:d6:
53:b4:88:be:29:e7:5a:b3:9b:05:1d:61:c8:29:ad:3f:fc:02:
13:40:0e:25:9f:5a:9a:af:4f:91:f0:8a:49:7a:ce:d8:b1:bd:
8c:09:6b:aa:12:02:18:45:04:cf:02:e9:5f:44:ed:48:f1:15:
e5:7d:3a:5f:ea:b2:2c:42:2e:56:7e:71:4f:dd:20:e0:c0:da:
77:0a:17:fc:85:14:63:1f:bf:06:e6:ad:06:45:f6:c8:bc:40:
b8:98:5a:31:ff:b9:67:c1:99:19:1b:2f:88:de:c3:18:7e:ec:
5a:3d:bc:fc:34:57:d1:2d:fe:4d:d7:c8:51:eb:7c:dc:1d:5b:
f5:35:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:02 2026 by rpki-client