Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oPljhBuF_Nd8bkwnaVTmInzDo5o.roa
File: oPljhBuF_Nd8bkwnaVTmInzDo5o.roa (raw, json)
Hash identifier: n03e0E9cX2lNKXH6liV5eI1ZWjywZPnTvxyUs4h1U6I=
Subject key identifier: A0:F9:63:84:1B:85:FC:D7:7C:6E:4C:27:69:54:E6:22:7C:C3:A3:9A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A083792196A477B7A1E9A06874F8C36B1F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oPljhBuF_Nd8bkwnaVTmInzDo5o.roa
Signing time: Wed 09 Sep 2026 00:02:28 +0000
ROA not before: Wed 09 Sep 2026 00:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 82.108.10.0/23 maxlen: 23
82.108.48.0/23 maxlen: 23
82.108.62.0/23 maxlen: 23
82.108.64.0/22 maxlen: 22
82.108.96.0/23 maxlen: 23
82.108.136.0/23 maxlen: 23
82.108.192.0/23 maxlen: 23
85.189.17.0/24 maxlen: 24
86.53.5.0/24 maxlen: 24
86.53.22.0/24 maxlen: 24
86.53.25.0/24 maxlen: 24
86.53.26.0/24 maxlen: 24
86.53.166.0/24 maxlen: 24
87.82.200.0/22 maxlen: 22
87.82.204.0/23 maxlen: 23
87.82.208.0/23 maxlen: 23
87.82.211.0/24 maxlen: 24
87.83.37.0/24 maxlen: 24
87.83.38.0/24 maxlen: 24
87.83.40.0/24 maxlen: 24
87.83.42.0/23 maxlen: 23
87.83.76.0/22 maxlen: 22
87.84.50.0/23 maxlen: 23
87.84.72.0/24 maxlen: 24
87.84.74.0/23 maxlen: 23
87.84.136.0/24 maxlen: 24
87.84.138.0/24 maxlen: 24
87.84.148.0/23 maxlen: 23
87.84.155.0/24 maxlen: 24
87.84.181.0/24 maxlen: 24
87.84.184.0/23 maxlen: 23
87.86.6.0/23 maxlen: 23
87.86.15.0/24 maxlen: 24
87.86.26.0/24 maxlen: 24
195.40.3.0/24 maxlen: 24
195.40.14.0/23 maxlen: 23
195.40.64.0/23 maxlen: 23
195.40.66.0/23 maxlen: 23
195.40.68.0/23 maxlen: 23
195.40.79.0/24 maxlen: 24
195.40.81.0/24 maxlen: 24
195.40.84.0/24 maxlen: 24
195.40.90.0/24 maxlen: 24
195.40.93.0/24 maxlen: 24
195.40.98.0/23 maxlen: 23
195.40.102.0/23 maxlen: 23
195.40.124.0/23 maxlen: 23
195.40.126.0/23 maxlen: 23
195.40.164.0/23 maxlen: 23
195.40.168.0/23 maxlen: 23
195.40.170.0/23 maxlen: 23
195.40.172.0/23 maxlen: 23
195.40.174.0/23 maxlen: 23
195.40.190.0/23 maxlen: 23
195.172.126.0/23 maxlen: 23
195.172.132.0/23 maxlen: 23
195.172.146.0/23 maxlen: 23
195.172.148.0/23 maxlen: 23
195.172.208.0/23 maxlen: 23
212.134.206.0/24 maxlen: 24
212.135.14.0/23 maxlen: 23
212.135.176.0/23 maxlen: 24
212.135.182.0/23 maxlen: 23
212.135.184.0/23 maxlen: 23
212.135.186.0/23 maxlen: 23
212.135.188.0/24 maxlen: 24
212.135.216.0/23 maxlen: 23
212.135.224.0/23 maxlen: 23
212.135.226.0/23 maxlen: 23
212.135.229.0/24 maxlen: 24
212.135.230.0/23 maxlen: 23
212.135.232.0/23 maxlen: 23
212.135.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:79:21:96:a4:77:b7:a1:e9:a0:68:74:f8:c3:6b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 9 00:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0f963841b85fcd77c6e4c276954e6227cc3a39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:ce:aa:d2:18:50:56:c1:3b:de:90:38:63:
45:70:52:32:32:0b:09:7d:13:99:be:02:95:4f:11:
41:23:16:1d:c3:b2:6a:b7:23:01:6e:78:d6:ee:9f:
83:81:83:53:a4:42:e2:3f:7c:fa:8f:bd:65:da:ae:
88:6c:0d:65:8d:bf:c3:ad:6c:5a:ff:fd:dd:db:86:
57:7c:9e:f6:5a:6d:51:6f:dd:e5:ac:7d:ba:ff:9d:
ff:1f:cb:fb:d7:c4:dc:a3:17:70:a6:52:46:9d:4b:
23:ab:0b:96:ba:03:a1:78:9d:3a:a1:be:c2:e6:b2:
e5:55:d4:8c:04:1a:3a:96:bb:d0:b0:06:fa:14:54:
c7:cd:4a:db:14:88:07:44:b4:89:4c:1a:cd:62:e7:
f7:60:f4:bf:c4:23:2b:6f:2b:dd:17:e0:24:fd:ca:
40:f6:ac:64:cf:b8:46:5d:bd:45:e8:b1:73:99:fa:
d7:e2:5d:61:11:8c:52:31:ff:11:36:b3:ad:0f:61:
bb:86:ef:9c:55:91:28:47:8e:07:3f:94:66:8e:41:
85:a4:d3:5f:7a:bd:05:5b:d9:78:6c:7e:99:7c:d9:
f9:62:4e:5a:62:36:70:75:d1:49:be:2e:7d:76:45:
cd:5c:ca:bd:67:bb:5c:0b:f1:b5:af:11:20:5f:a2:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F9:63:84:1B:85:FC:D7:7C:6E:4C:27:69:54:E6:22:7C:C3:A3:9A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oPljhBuF_Nd8bkwnaVTmInzDo5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.10.0/23
82.108.48.0/23
82.108.62.0-82.108.67.255
82.108.96.0/23
82.108.136.0/23
82.108.192.0/23
85.189.17.0/24
86.53.5.0/24
86.53.22.0/24
86.53.25.0-86.53.26.255
86.53.166.0/24
87.82.200.0-87.82.205.255
87.82.208.0/23
87.82.211.0/24
87.83.37.0-87.83.38.255
87.83.40.0/24
87.83.42.0/23
87.83.76.0/22
87.84.50.0/23
87.84.72.0/24
87.84.74.0/23
87.84.136.0/24
87.84.138.0/24
87.84.148.0/23
87.84.155.0/24
87.84.181.0/24
87.84.184.0/23
87.86.6.0/23
87.86.15.0/24
87.86.26.0/24
195.40.3.0/24
195.40.14.0/23
195.40.64.0-195.40.69.255
195.40.79.0/24
195.40.81.0/24
195.40.84.0/24
195.40.90.0/24
195.40.93.0/24
195.40.98.0/23
195.40.102.0/23
195.40.124.0/22
195.40.164.0/23
195.40.168.0/21
195.40.190.0/23
195.172.126.0/23
195.172.132.0/23
195.172.146.0-195.172.149.255
195.172.208.0/23
212.134.206.0/24
212.135.14.0/23
212.135.176.0/23
212.135.182.0-212.135.188.255
212.135.216.0/23
212.135.224.0/22
212.135.229.0-212.135.233.255
212.135.238.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:1c:d6:e8:a8:c5:e1:e4:d7:34:b8:87:a2:1b:d9:a1:13:c8:
45:5b:b4:25:d6:1d:12:82:a5:24:ab:2f:d8:43:ab:a5:07:db:
97:88:e9:be:06:29:ba:7c:2f:0c:86:af:28:b3:51:1e:19:a4:
34:75:9e:46:1e:6e:7e:51:07:f7:dc:21:e7:5d:77:15:02:c1:
84:ba:f7:39:38:9c:83:ff:af:3a:50:35:ac:3f:a7:21:b3:70:
17:40:fd:fe:30:26:4d:af:0a:2f:5e:15:fa:02:fe:c8:ee:ba:
51:26:78:e0:e4:d5:1d:30:a7:f0:5e:e8:f1:f6:da:45:b8:f5:
c2:40:17:8b:4a:9e:e9:4f:b4:41:df:12:87:d9:63:79:0e:8d:
4a:25:88:84:f3:1d:e6:c7:dd:c5:53:97:63:ff:12:dc:c1:d2:
e4:c3:db:00:46:92:37:68:1f:c3:fe:d1:95:1e:24:5c:a9:63:
11:3e:4a:71:8b:ff:e8:0b:5c:ec:cc:23:ef:ac:07:5b:f2:27:
6f:66:3a:ba:0c:43:ca:9d:82:fd:11:6a:2d:eb:f0:a8:46:dc:
4e:eb:53:9f:40:25:bd:1f:b5:70:78:f7:6b:4f:aa:db:61:3b:
d2:21:a8:c9:6e:59:b5:c8:5c:a7:d4:51:53:57:58:d0:60:42:
b4:1d:13:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:42 2026 by rpki-client