Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DMOwgnWHq3WOBMeG0jagxdjY2A4.roa
File: DMOwgnWHq3WOBMeG0jagxdjY2A4.roa (raw, json)
Hash identifier: dIAghbxx3k7cZIuIXH6V80qoKDUSFlgedKguI7chZII=
Subject key identifier: 0C:C3:B0:82:75:87:AB:75:8E:04:C7:86:D2:36:A0:C5:D8:D8:D8:0E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C148CAA2ED9593A9C07454523B0F292B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DMOwgnWHq3WOBMeG0jagxdjY2A4.roa
Signing time: Mon 21 Sep 2026 00:06:08 +0000
ROA not before: Mon 21 Sep 2026 00:06:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
82.110.225.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
212.134.105.0/24 maxlen: 24
212.134.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:48:ca:a2:ed:95:93:a9:c0:74:54:52:3b:0f:29:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 21 00:06:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cc3b0827587ab758e04c786d236a0c5d8d8d80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:5b:d5:66:22:b3:91:d4:e5:af:6b:a3:9f:
85:27:21:8d:c5:36:b6:3d:ea:03:72:37:5f:65:c0:
fb:3b:b1:9f:50:65:ec:47:37:f1:d7:e6:80:76:fc:
3a:01:cb:47:d1:6d:41:63:7f:3c:bd:e8:61:37:b3:
59:2d:84:56:7b:03:3b:b4:f7:fd:b9:72:d8:1b:4f:
5f:47:43:88:28:a3:01:d4:43:53:a6:60:a8:17:76:
ac:2d:0c:c2:b9:66:01:9d:43:9e:f0:a7:27:53:76:
46:5c:43:a9:fd:c0:a2:55:76:b0:dc:1f:20:04:6e:
ad:30:e7:3d:85:f4:fb:76:28:4f:e8:90:25:8b:ec:
c6:c9:2d:74:2c:f0:fb:8b:4e:ed:60:c9:c8:2d:34:
42:fa:f4:7f:48:82:3b:38:07:d0:86:6b:57:47:e4:
dd:ef:4c:1d:b3:27:cb:15:f7:6c:74:67:66:e2:ad:
af:fc:44:89:ad:19:f8:2c:ee:ad:32:48:07:77:a6:
19:23:ae:0a:63:26:aa:6f:8b:3a:35:a0:73:64:93:
56:ea:42:f1:12:f8:d0:a8:b8:4c:a4:f3:7d:9a:e9:
16:c6:6f:82:64:7c:40:87:88:e4:1a:b8:7f:f8:6a:
39:c9:dc:e2:52:47:e9:45:c7:b5:78:22:c3:61:2f:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C3:B0:82:75:87:AB:75:8E:04:C7:86:D2:36:A0:C5:D8:D8:D8:0E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DMOwgnWHq3WOBMeG0jagxdjY2A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
82.110.225.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
212.134.105.0/24
212.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
44:77:d1:f7:2a:0c:8b:88:3c:58:90:90:fd:2d:f3:c2:63:43:
a4:61:d8:08:e2:c1:a0:1a:e4:25:5d:8b:0c:ea:fa:0b:f5:07:
c4:66:5b:0d:68:70:2d:68:00:3b:48:36:8d:f7:de:60:b5:16:
0b:b9:61:43:c9:c9:f1:e3:2b:f2:9f:f1:a3:04:0e:fa:cd:b8:
0f:72:27:f0:3b:0f:73:c1:66:de:f1:de:bf:32:f6:ad:62:ec:
82:d0:ec:1f:79:4e:34:a4:e6:7c:c7:a7:61:83:1a:5c:29:85:
25:96:d4:57:1d:6f:cc:b5:88:5f:78:98:1d:4c:d3:10:5b:d8:
ee:06:91:da:cd:11:92:a0:7f:2a:6e:f9:ca:a4:ae:d0:14:70:
d8:55:cd:ff:59:45:01:80:91:89:55:f1:35:33:d1:7a:b0:ab:
ca:8b:9d:7e:bf:97:4f:4a:17:e0:3a:00:b9:40:74:a5:df:fa:
d3:53:d7:38:49:c0:da:31:dd:d7:f3:0f:5b:6c:a5:e0:2e:64:
f6:7d:d7:0e:05:21:c0:01:6e:ee:4c:dc:f2:32:0b:5e:39:eb:
54:f4:3f:f4:35:93:62:75:94:8b:a5:33:b7:4a:ca:14:1e:d2:
c0:fe:2d:3b:cc:ae:b6:7a:31:9d:0e:33:49:5e:d6:cc:39:28:
d2:8b:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:13:55 2026 by rpki-client