Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ks4swGsJIrapsXczA0u4rmDLKNw.roa
File: Ks4swGsJIrapsXczA0u4rmDLKNw.roa (raw, json)
Hash identifier: aAhUIdeEX0gC4J4j2DOdmyQVQmOpXJuujzt/crZ0J9I=
Subject key identifier: 2A:CE:2C:C0:6B:09:22:B6:A9:B1:77:33:03:4B:B8:AE:60:CB:28:DC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E16C91406A9815D98D9A7AE70BE9FE590
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ks4swGsJIrapsXczA0u4rmDLKNw.roa
Signing time: Mon 11 May 2026 11:25:37 +0000
ROA not before: Mon 11 May 2026 11:25:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 82.108.62.0/23 maxlen: 23
82.108.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:c9:14:06:a9:81:5d:98:d9:a7:ae:70:be:9f:e5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 11 11:25:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ace2cc06b0922b6a9b17733034bb8ae60cb28dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:23:ff:5e:39:38:91:70:35:df:39:01:75:
01:40:ff:6f:70:73:19:1f:e0:1b:f4:74:11:95:b0:
55:79:e2:29:ef:41:6d:c4:fe:9a:c6:4a:e2:f0:b2:
0c:d5:6c:4b:cd:38:e7:a3:ce:92:49:8a:dd:b1:77:
71:25:2c:0f:56:2e:38:9a:4e:ad:e4:23:63:26:59:
9f:ca:3d:bf:8d:8f:36:30:c1:6e:91:27:36:de:f6:
15:63:3c:e0:36:a6:b7:93:75:76:3a:f1:dd:b9:7f:
6a:8a:cb:ec:1e:a9:ff:01:74:6b:5c:7a:36:bc:99:
e1:0b:a0:11:8c:b0:fc:f0:f1:21:3e:a9:a8:56:10:
9c:71:04:0d:eb:ef:94:04:a6:b0:91:ef:d2:87:78:
af:d6:90:b6:c0:03:b5:e8:7f:78:fe:0e:9c:9b:06:
03:a0:37:62:e7:73:06:a4:7f:af:09:0d:aa:b9:7e:
7d:14:f8:7c:7b:45:bd:80:7e:36:1f:82:ac:c5:70:
91:70:4c:f0:da:ab:e9:f2:65:39:f5:9b:e0:92:cf:
56:9f:fc:83:5d:d8:74:83:e8:c3:ac:3a:17:21:be:
74:cb:f5:0d:e2:33:8a:3d:8e:89:cf:d1:b1:8d:db:
05:35:ed:02:73:c2:68:ef:e9:89:09:4c:08:59:72:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CE:2C:C0:6B:09:22:B6:A9:B1:77:33:03:4B:B8:AE:60:CB:28:DC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ks4swGsJIrapsXczA0u4rmDLKNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.62.0/23
82.108.192.0/23
Signature Algorithm: sha256WithRSAEncryption
71:bd:d5:65:40:ce:97:de:b5:23:9a:9e:8d:fb:0c:a2:af:a9:
26:35:96:e8:a0:16:02:aa:e7:0d:aa:0b:e7:ac:a4:72:1b:9a:
5b:a7:28:ff:10:34:fe:0d:7e:32:0b:07:72:3b:0d:21:79:89:
ad:9f:38:12:64:87:fa:66:44:8b:98:8b:0d:bc:8b:c1:b3:b4:
6c:4f:95:31:1e:4e:d5:6f:95:df:b6:64:ed:fd:38:71:d4:d5:
d3:75:36:16:75:3c:c5:4f:b3:d6:ee:17:63:2c:9f:7b:2d:0d:
96:28:2f:59:81:f9:15:66:f4:ea:09:cb:4c:9e:35:5e:4d:87:
12:54:9a:8f:41:0e:47:13:9b:f2:30:36:f6:a8:ec:f2:6a:22:
b1:6f:90:51:f7:22:70:60:e3:a5:4b:f2:af:20:27:79:98:59:
8a:78:82:2e:5f:a2:be:17:ab:85:6a:d1:b5:25:f2:0d:7f:d2:
e6:ba:92:94:3b:56:9b:e0:ac:59:e7:d5:b8:96:f2:6e:e1:2e:
0b:21:be:6e:09:e5:e1:30:0f:3a:97:0e:a1:14:15:c0:cc:a2:
f2:6c:cc:52:5e:b3:59:22:58:bf:ee:13:56:d0:7b:b2:d5:6d:
1a:51:6b:7c:a2:7d:68:76:4a:fc:e3:b5:00:ec:c9:a2:1d:08:
b1:0d:3e:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4WyRQGqYFdmNmnrnC+n+WQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNTExMTEyNTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWNlMmNjMDZiMDkyMmI2YTliMTc3MzMwMzRiYjhhZTYwY2IyOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmscj/145OJFwNd85AXUBQP9vcHMZ
H+Ab9HQRlbBVeeIp70FtxP6axkri8LIM1WxLzTjno86SSYrdsXdxJSwPVi44mk6t
5CNjJlmfyj2/jY82MMFukSc23vYVYzzgNqa3k3V2OvHduX9qisvsHqn/AXRrXHo2
vJnhC6ARjLD88PEhPqmoVhCccQQN6++UBKawke/Sh3iv1pC2wAO16H94/g6cmwYD
oDdi53MGpH+vCQ2quX59FPh8e0W9gH42H4KsxXCRcEzw2qvp8mU59Zvgks9Wn/yD
Xdh0g+jDrDoXIb50y/UN4jOKPY6Jz9GxjdsFNe0Cc8Jo7+mJCUwIWXIxWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCrOLMBrCSK2qbF3MwNLuK5gyyjcMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvS3M0c3dHc0pJcmFwc1hjekEwdTRybURMS053LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUmw+AwQB
UmzAMA0GCSqGSIb3DQEBCwUAA4IBAQBxvdVlQM6X3rUjmp6N+wyir6kmNZbooBYC
qucNqgvnrKRyG5pbpyj/EDT+DX4yCwdyOw0heYmtnzgSZIf6ZkSLmIsNvIvBs7Rs
T5UxHk7Vb5XftmTt/Thx1NXTdTYWdTzFT7PW7hdjLJ97LQ2WKC9ZgfkVZvTqCctM
njVeTYcSVJqPQQ5HE5vyMDb2qOzyaiKxb5BR9yJwYOOlS/KvICd5mFmKeIIuX6K+
F6uFatG1JfINf9LmupKUO1ab4KxZ59W4lvJu4S4LIb5uCeXhMA86lw6hFBXAzKLy
bMxSXrNZIli/7hNW0Huy1W0aUWt8on1odkr847UA7MmiHQixDT40
-----END CERTIFICATE-----
Generated at Wed May 13 06:56:30 2026 by rpki-client