Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PcKbLo2dUZMJXrIUQ7YGM4quBaM.roa
File: PcKbLo2dUZMJXrIUQ7YGM4quBaM.roa (raw, json)
Hash identifier: y8Lx4gSMzy3oPOAjCVDZVf+xJdo5wx6I+yL3MGjeo1k=
Subject key identifier: 3D:C2:9B:2E:8D:9D:51:93:09:5E:B2:14:43:B6:06:33:8A:AE:05:A3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D4024CB831B72BAEAE7B661986F03399
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PcKbLo2dUZMJXrIUQ7YGM4quBaM.roa
Signing time: Thu 24 Sep 2026 15:21:55 +0000
ROA not before: Thu 24 Sep 2026 15:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 82.109.189.0/24 maxlen: 24
82.109.192.0/24 maxlen: 24
82.109.193.0/24 maxlen: 24
87.82.61.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.222.0/24 maxlen: 24
87.86.174.0/24 maxlen: 24
212.134.55.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.195.0/24 maxlen: 24
212.134.198.0/24 maxlen: 24
212.134.245.0/24 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.142.0/24 maxlen: 24
212.135.144.0/24 maxlen: 24
212.135.149.0/24 maxlen: 24
212.135.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:02:4c:b8:31:b7:2b:ae:ae:7b:66:19:86:f0:33:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 15:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dc29b2e8d9d5193095eb21443b606338aae05a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:9c:7b:83:9c:c4:95:1f:1f:be:4a:72:1c:
b2:32:0c:9a:8d:c8:f3:fe:2c:a2:6f:e9:80:ab:a0:
6b:08:a1:b8:79:10:ff:35:80:ff:22:0b:b5:75:62:
98:63:f4:86:8a:fe:9d:7f:a6:5b:84:58:93:f9:6f:
4f:c8:53:9e:e3:6e:93:7a:f8:1c:8a:5c:f4:6a:a8:
5b:5e:22:7b:02:92:d1:ca:aa:00:24:c4:ce:77:50:
cf:05:b0:68:59:05:db:b0:2f:b2:53:d3:9d:42:66:
68:65:5d:27:fb:a9:fc:97:5e:4a:31:a6:fc:42:c6:
24:62:1f:bf:5f:59:6b:25:23:01:de:cc:a1:e8:9a:
ae:90:9d:22:94:a5:67:d8:0c:e4:34:90:ab:be:2d:
d3:4c:99:38:67:df:45:b6:eb:45:51:b7:3a:e6:67:
00:a4:53:53:4b:b1:7e:ce:bf:49:f9:61:1d:52:bb:
c1:29:d7:ec:3e:67:2b:f9:d8:bb:8d:ee:b5:94:8a:
34:0c:fc:c6:75:4f:b9:9e:ba:92:d7:87:67:2a:81:
78:7b:76:15:5c:a7:9f:5a:a5:2f:e1:61:2e:6a:e2:
0c:3c:41:c5:ce:e3:a9:db:bb:70:63:64:7b:52:d8:
c1:c8:f2:7c:40:6e:3d:d1:dd:06:b5:c8:6d:9f:2b:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C2:9B:2E:8D:9D:51:93:09:5E:B2:14:43:B6:06:33:8A:AE:05:A3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PcKbLo2dUZMJXrIUQ7YGM4quBaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.189.0/24
82.109.192.0/23
87.82.61.0/24
87.84.79.0/24
87.84.128.0/24
87.84.132.0/24
87.84.154.0/24
87.84.158.0/24
87.84.222.0/24
87.86.174.0/24
212.134.55.0/24
212.134.179.0/24
212.134.195.0/24
212.134.198.0/24
212.134.245.0/24
212.135.24.0/24
212.135.142.0/24
212.135.144.0/24
212.135.149.0/24
212.135.241.0/24
Signature Algorithm: sha256WithRSAEncryption
01:01:1d:e5:68:6b:0c:05:b0:24:39:dd:85:98:20:0a:1d:07:
78:bb:9d:6c:78:49:73:57:b4:06:4c:5c:bf:50:be:c8:1a:06:
16:e0:dd:10:da:11:43:f2:87:89:3e:51:20:c7:a1:2f:39:43:
13:d6:8d:8e:81:69:43:12:aa:43:a0:c2:e5:3a:65:58:38:7a:
02:51:f9:ff:04:f2:5d:35:29:47:1b:d6:22:b8:6c:1f:bb:8b:
a5:6e:f9:f8:5b:1d:4a:97:f7:85:a7:c5:28:e7:98:92:b6:85:
6c:11:0e:a0:09:aa:a2:38:d7:20:c0:65:b6:30:61:bf:c5:45:
5c:74:6a:ab:c3:fb:d7:d1:d7:50:a8:f9:0d:16:47:31:81:ec:
14:c8:7f:9d:a6:fa:bd:45:29:2a:e7:ee:02:b6:40:19:88:62:
89:b9:3c:5b:49:52:cb:d4:da:22:46:de:ae:63:2b:d9:42:64:
e9:d1:1a:cb:51:0e:0a:5a:5d:6d:d2:ea:26:c7:db:0a:d3:f4:
f2:38:83:bd:20:fd:29:6f:20:ad:f6:7a:e6:44:ca:fb:61:3d:
9c:92:40:a1:a3:f1:9a:c0:2a:0a:0a:f2:0b:50:91:af:a3:46:
06:97:9a:1c:83:6b:2d:be:c2:85:aa:83:91:d5:a7:d0:11:d4:
af:62:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:04:54 2026 by rpki-client