Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7ZWQoQZgsR31fCw7Eik7v9OQpt8.roa
File: 7ZWQoQZgsR31fCw7Eik7v9OQpt8.roa (raw, json)
Hash identifier: Xa/kALI4XoUMg/ZiCsfoCzZ7c/3IIegxpClTwt7U5ng=
Subject key identifier: ED:95:90:A1:06:60:B1:1D:F5:7C:2C:3B:12:29:3B:BF:D3:90:A6:DF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C4C02C6EA34C971E2F7E19EA557B1DFF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7ZWQoQZgsR31fCw7Eik7v9OQpt8.roa
Signing time: Mon 21 Sep 2026 16:15:23 +0000
ROA not before: Mon 21 Sep 2026 16:15:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
82.110.225.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:c0:2c:6e:a3:4c:97:1e:2f:7e:19:ea:55:7b:1d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 21 16:15:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed9590a10660b11df57c2c3b12293bbfd390a6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:14:cc:aa:f0:f2:7c:eb:5d:53:e1:41:46:
b1:ec:ac:87:92:d2:98:49:79:dc:93:a4:ba:c4:b9:
4e:41:ae:80:9e:98:d5:25:3c:08:a0:43:ea:b9:fa:
77:28:7c:8c:d0:21:1b:b5:9b:50:c2:c1:bb:52:05:
e1:63:44:7f:30:95:fd:5e:a2:b6:92:6f:29:37:f5:
64:6c:33:53:34:e5:64:20:89:07:6a:ff:cd:96:79:
21:28:89:aa:3e:81:20:18:f9:5b:15:5d:5a:ac:6a:
e4:b1:b4:a2:0f:fc:11:11:79:96:8f:95:0c:b7:ec:
f8:2d:4e:48:50:76:38:6b:a0:34:f6:b0:eb:63:b5:
9e:30:a8:67:80:de:b6:5e:71:85:9b:ea:fd:df:38:
8a:bf:62:33:47:4f:21:f5:24:52:01:05:c7:cb:39:
7b:b0:1b:84:b1:f8:48:a4:1b:5e:05:8d:54:c2:a1:
4e:ba:0c:44:ae:79:29:fa:bb:03:e4:5d:f0:54:8c:
6f:c8:fb:d3:4c:93:b1:08:a8:87:eb:80:f2:30:82:
2d:65:f8:88:a1:5a:fc:6d:44:ef:9b:f9:c4:8b:eb:
8c:36:c1:16:60:ed:ab:54:a7:de:9a:eb:5c:4a:f4:
fd:ae:ff:cb:eb:91:3d:52:ec:25:21:62:cf:21:60:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:95:90:A1:06:60:B1:1D:F5:7C:2C:3B:12:29:3B:BF:D3:90:A6:DF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7ZWQoQZgsR31fCw7Eik7v9OQpt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
82.110.225.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
Signature Algorithm: sha256WithRSAEncryption
87:18:41:b6:05:c9:cc:f4:34:2c:8b:3a:22:01:4b:09:89:09:
07:16:04:01:0d:d4:48:29:e4:91:df:d0:04:b6:60:51:5c:48:
ba:65:c2:d3:66:06:d6:da:54:16:50:6f:a5:95:6b:5b:05:0c:
d4:95:4e:5c:1b:5a:a8:ab:23:73:69:23:ca:0e:09:12:2c:26:
37:35:83:76:dc:3d:53:36:9e:a0:5a:82:4f:43:05:41:fa:ee:
30:4b:20:ff:40:6b:4c:d5:18:43:fd:91:9f:7f:ea:53:0a:e9:
1c:5b:3f:82:ed:99:1e:f3:76:42:03:21:fa:25:c3:34:74:4d:
af:fb:9b:cb:73:ef:ce:00:fa:e5:55:90:08:87:5f:20:1c:ed:
44:9c:6c:80:58:7c:2d:b0:f8:73:a2:09:fc:95:e6:b7:22:e1:
6f:02:89:b1:69:f4:98:66:63:dc:12:18:28:2c:4b:e0:51:89:
ca:e0:dc:3b:d4:c8:84:4a:6e:c7:37:9e:92:38:d7:86:63:97:
90:94:e7:17:da:d8:45:35:1e:99:05:e9:4e:1a:85:e3:55:a6:
cd:ac:2b:74:1e:09:49:0d:4a:93:e4:7e:f2:b1:71:0e:b2:97:
1b:af:59:34:f9:27:27:9f:46:01:9e:03:7c:55:46:73:07:8a:
a9:a3:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:06:34 2026 by rpki-client