Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/74dVetNZGPedHsy6k1SIou3NmMo.roa
File: 74dVetNZGPedHsy6k1SIou3NmMo.roa (raw, json)
Hash identifier: Woz3F+ox6mEqDp03ff/JGxa3SAWWwJ/8Aov9dLFYxoE=
Subject key identifier: EF:87:55:7A:D3:59:18:F7:9D:1E:CC:BA:93:54:88:A2:ED:CD:98:CA
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019D0AADB58F6ED48634106CB452AD9745D7
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/74dVetNZGPedHsy6k1SIou3NmMo.roa
Signing time: Fri 20 Mar 2026 09:57:29 +0000
ROA not before: Fri 20 Mar 2026 09:57:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 82.206.2.0/23 maxlen: 23
82.206.4.0/22 maxlen: 24
82.206.8.0/23 maxlen: 24
82.206.16.0/22 maxlen: 24
82.206.72.0/21 maxlen: 21
82.206.76.0/22 maxlen: 22
82.206.80.0/21 maxlen: 21
82.206.88.0/21 maxlen: 24
82.206.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:ad:b5:8f:6e:d4:86:34:10:6c:b4:52:ad:97:45:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Mar 20 09:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef87557ad35918f79d1eccba935488a2edcd98ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d9:af:54:ba:15:66:8b:2f:0d:2f:ca:cc:95:
67:33:db:d2:83:68:82:35:a5:bd:47:ac:1d:96:a7:
17:52:74:4e:3c:10:ab:00:f4:0f:5c:69:1d:1c:4c:
21:83:31:f7:75:a0:78:44:dc:11:f3:d6:64:51:08:
df:dc:9a:63:8e:61:b4:dd:0e:88:5c:38:0e:36:ef:
2d:51:04:43:b5:6c:4c:99:1c:97:7f:92:36:23:91:
f0:68:e6:6b:66:89:87:98:17:c0:fb:f2:63:12:27:
26:93:bc:31:15:f4:5c:54:27:89:8c:ab:df:38:82:
a6:38:be:2d:68:fc:59:fa:67:a5:4e:82:b7:26:d7:
3b:b2:ba:f0:d7:93:d7:74:51:e3:6f:4b:93:5a:c3:
3d:40:d4:61:3f:16:cf:96:62:09:e0:b7:83:d3:70:
31:6b:27:d2:1f:fa:1b:0e:9d:c2:dd:c2:5f:b2:3d:
9e:fd:fb:e2:9c:63:82:57:20:ac:15:39:cd:64:62:
45:e7:15:95:58:d0:eb:28:c0:79:35:1d:1e:ba:9b:
91:08:bb:0f:4e:ea:75:6a:ee:67:45:0f:bd:5e:84:
2d:da:49:e4:d5:7e:91:55:38:21:5b:e0:8c:ed:49:
82:59:4b:05:87:5a:0a:e3:70:c6:46:97:92:cf:9f:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:87:55:7A:D3:59:18:F7:9D:1E:CC:BA:93:54:88:A2:ED:CD:98:CA
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/74dVetNZGPedHsy6k1SIou3NmMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0-82.206.9.255
82.206.16.0/22
82.206.72.0-82.206.127.255
Signature Algorithm: sha256WithRSAEncryption
25:e1:27:ec:c3:e5:48:fb:61:e0:4c:64:a7:9c:97:75:b0:04:
0c:20:6c:dc:2a:b1:b6:ca:d3:07:7a:ff:f4:a2:c5:f8:e6:c6:
37:13:fd:df:29:be:2e:7f:de:de:6b:5a:a5:5c:f2:c5:bf:f2:
c6:76:e0:1f:e0:1c:50:70:b8:38:1d:83:76:ac:bb:fb:ca:8a:
9e:1b:a2:76:5e:cc:74:6c:e8:80:53:c6:cc:93:a9:16:23:cf:
1c:a9:69:0e:dc:98:ef:15:bd:b3:ad:54:51:b2:2a:c0:70:11:
94:91:5d:e7:87:75:e2:e0:8a:0f:c1:0d:e8:43:2d:1c:14:2f:
02:c0:eb:e6:fd:f9:56:2f:1e:7e:13:e0:37:da:8e:d8:8b:74:
2e:c5:d8:2a:ee:17:10:f8:03:cc:a2:20:72:de:ba:cc:72:24:
32:36:24:b7:a7:69:de:2f:53:bb:00:3d:62:d6:db:28:86:1a:
5f:7f:60:be:0f:71:19:ce:05:e8:46:26:0e:e3:e2:d1:df:cd:
4d:9a:07:0c:6e:ab:8c:59:ad:2c:32:2a:23:bc:81:9c:b7:1a:
aa:80:81:94:07:66:60:13:f2:42:e9:11:43:b6:8f:60:a4:19:
03:10:fc:00:20:7e:18:8d:30:d9:cf:20:52:b2:47:7c:bc:3e:
4d:d7:8e:b5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0KrbWPbtSGNBBstFKtl0XXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjYwMzIwMDk1NzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjg3NTU3YWQzNTkxOGY3OWQxZWNjYmE5MzU0ODhhMmVkY2Q5OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NmvVLoVZosvDS/KzJVnM9vSg2iC
NaW9R6wdlqcXUnROPBCrAPQPXGkdHEwhgzH3daB4RNwR89ZkUQjf3JpjjmG03Q6I
XDgONu8tUQRDtWxMmRyXf5I2I5HwaOZrZomHmBfA+/JjEicmk7wxFfRcVCeJjKvf
OIKmOL4taPxZ+melToK3Jtc7srrw15PXdFHjb0uTWsM9QNRhPxbPlmIJ4LeD03Ax
ayfSH/obDp3C3cJfsj2e/fvinGOCVyCsFTnNZGJF5xWVWNDrKMB5NR0eupuRCLsP
Tup1au5nRQ+9XoQt2knk1X6RVTghW+CM7UmCWUsFh1oK43DGRpeSz59eawIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO+HVXrTWRj3nR7MupNUiKLtzZjKMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvNzRkVmV0TlpHUGVkSHN5NmsxU0lvdTNObU1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAFSzgID
BAFSzggDBAJSzhAwDAMEA1LOSAMEB1LOADANBgkqhkiG9w0BAQsFAAOCAQEAJeEn
7MPlSPth4Exkp5yXdbAEDCBs3CqxtsrTB3r/9KLF+ObGNxP93ym+Ln/e3mtapVzy
xb/yxnbgH+AcUHC4OB2Ddqy7+8qKnhuidl7MdGzogFPGzJOpFiPPHKlpDtyY7xW9
s61UUbIqwHARlJFd54d14uCKD8EN6EMtHBQvAsDr5v35Vi8efhPgN9qO2It0LsXY
Ku4XEPgDzKIgct66zHIkMjYkt6dp3i9TuwA9YtbbKIYaX39gvg9xGc4F6EYmDuPi
0d/NTZoHDG6rjFmtLDIqI7yBnLcaqoCBlAdmYBPyQukRQ7aPYKQZAxD8ACB+GI0w
2c8gUrJHfLw+TdeOtQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:05 2026 by rpki-client