Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PpEI5Z8mKRFfZtCwml1z4Wy3EcQ.roa
File: PpEI5Z8mKRFfZtCwml1z4Wy3EcQ.roa (raw, json)
Hash identifier: Iac0/xcJ1BsPcxapMXLAc3FKT91w67XxVqHfKEzLg8s=
Subject key identifier: 3E:91:08:E5:9F:26:29:11:5F:66:D0:B0:9A:5D:73:E1:6C:B7:11:C4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D5E2F2B1CDCE2A975A2963B17DFE9CA6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PpEI5Z8mKRFfZtCwml1z4Wy3EcQ.roa
Signing time: Fri 25 Sep 2026 00:06:55 +0000
ROA not before: Fri 25 Sep 2026 00:06:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 82.108.40.0/23 maxlen: 24
82.108.98.0/24 maxlen: 24
82.108.129.0/24 maxlen: 24
82.108.135.0/24 maxlen: 24
82.108.208.0/24 maxlen: 24
82.108.209.0/24 maxlen: 24
82.108.213.0/24 maxlen: 24
82.108.214.0/24 maxlen: 24
82.108.215.0/24 maxlen: 24
82.108.216.0/22 maxlen: 24
82.109.153.0/24 maxlen: 24
82.109.154.0/24 maxlen: 24
82.109.155.0/24 maxlen: 24
82.109.156.0/24 maxlen: 24
82.109.196.0/24 maxlen: 24
82.109.199.0/24 maxlen: 24
82.110.50.0/24 maxlen: 24
82.110.53.0/24 maxlen: 24
82.110.228.0/24 maxlen: 24
87.82.194.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.82.246.0/24 maxlen: 24
87.82.252.0/24 maxlen: 24
87.83.15.0/24 maxlen: 24
87.83.20.0/24 maxlen: 24
87.83.21.0/24 maxlen: 24
87.83.22.0/24 maxlen: 24
87.83.23.0/24 maxlen: 24
87.83.67.0/24 maxlen: 24
87.83.71.0/24 maxlen: 24
87.83.113.0/24 maxlen: 24
87.83.114.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.161.0/24 maxlen: 24
87.83.163.0/24 maxlen: 24
87.83.164.0/24 maxlen: 24
87.83.204.0/24 maxlen: 24
87.83.216.0/23 maxlen: 24
87.83.219.0/24 maxlen: 24
87.83.222.0/24 maxlen: 24
87.84.56.0/24 maxlen: 24
87.84.57.0/24 maxlen: 24
87.84.58.0/24 maxlen: 24
87.84.61.0/24 maxlen: 24
87.84.62.0/24 maxlen: 24
87.84.63.0/24 maxlen: 24
87.84.203.0/24 maxlen: 24
87.84.209.0/24 maxlen: 24
87.84.210.0/24 maxlen: 24
87.84.211.0/24 maxlen: 24
87.84.212.0/24 maxlen: 24
87.84.214.0/24 maxlen: 24
87.84.215.0/24 maxlen: 24
87.85.224.0/24 maxlen: 24
87.85.226.0/24 maxlen: 24
87.85.248.0/24 maxlen: 24
87.85.250.0/24 maxlen: 24
87.86.93.0/24 maxlen: 24
87.86.94.0/24 maxlen: 24
109.204.104.0/21 maxlen: 24
194.242.157.0/24 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.135.159.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
217.79.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:e2:f2:b1:cd:ce:2a:97:5a:29:63:b1:7d:fe:9c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 25 00:06:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e9108e59f2629115f66d0b09a5d73e16cb711c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:ef:a5:b6:0a:f2:94:9a:45:46:56:fd:6b:
53:56:9b:ee:ed:fc:00:03:a4:2b:de:55:1d:11:86:
a2:72:7d:97:85:f5:7b:db:94:9c:92:03:1e:1b:90:
c3:82:a8:99:d4:bc:7d:47:3b:85:a8:c2:43:9a:85:
eb:75:05:79:c3:cb:27:00:fa:32:df:d6:c5:45:04:
9d:2e:6c:78:8f:44:aa:11:db:cb:c4:6f:bb:e1:fb:
32:69:b0:b6:29:1c:00:0f:bd:b3:41:6c:0c:7a:60:
b5:46:65:2d:ee:22:e2:a3:6f:2f:0c:fc:83:8d:94:
94:be:9b:be:df:62:69:e3:82:4d:31:ae:f7:aa:2d:
3d:97:2f:3c:ea:c8:6c:be:5a:2f:85:72:ad:1d:33:
72:3c:d3:d4:2a:32:cb:88:ff:6a:66:05:41:41:4b:
24:4e:08:1d:b0:fb:f5:02:49:b7:ff:7e:e6:30:2a:
ae:ff:f3:7c:86:b8:b3:c5:67:f6:df:f1:b8:36:0e:
e7:c1:e6:da:d2:0a:d6:3b:48:0b:6f:ca:84:e6:14:
5d:1f:a3:e2:eb:11:7c:dd:4b:96:b5:45:49:fa:9a:
67:d5:4f:6c:1d:5d:63:d7:91:5f:03:98:b6:61:5d:
08:13:7d:d2:6e:74:c9:9c:1c:86:94:23:b8:83:f2:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:08:E5:9F:26:29:11:5F:66:D0:B0:9A:5D:73:E1:6C:B7:11:C4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PpEI5Z8mKRFfZtCwml1z4Wy3EcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.40.0/23
82.108.98.0/24
82.108.129.0/24
82.108.135.0/24
82.108.208.0/23
82.108.213.0-82.108.219.255
82.109.153.0-82.109.156.255
82.109.196.0/24
82.109.199.0/24
82.110.50.0/24
82.110.53.0/24
82.110.228.0/24
87.82.194.0/24
87.82.232.0/24
87.82.246.0/24
87.82.252.0/24
87.83.15.0/24
87.83.20.0/22
87.83.67.0/24
87.83.71.0/24
87.83.113.0-87.83.114.255
87.83.125.0/24
87.83.161.0/24
87.83.163.0-87.83.164.255
87.83.204.0/24
87.83.216.0/23
87.83.219.0/24
87.83.222.0/24
87.84.56.0-87.84.58.255
87.84.61.0-87.84.63.255
87.84.203.0/24
87.84.209.0-87.84.212.255
87.84.214.0/23
87.85.224.0/24
87.85.226.0/24
87.85.248.0/24
87.85.250.0/24
87.86.93.0-87.86.94.255
109.204.104.0/21
194.242.157.0/24
212.134.38.0/24
212.134.116.0/22
212.135.159.0/24
212.135.161.0/24
212.135.164.0/24
217.79.96.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c1:3f:c7:ed:67:2f:d3:81:ac:35:a5:67:02:69:75:18:97:
45:49:76:cf:f0:fe:f8:1c:53:a1:30:5b:88:29:e7:25:c4:93:
78:14:88:21:6f:bb:b8:66:2b:ba:a2:6c:95:47:2e:2b:8a:5a:
eb:0a:b0:12:98:90:a8:2a:87:6c:29:95:3d:65:01:94:bd:b2:
ae:24:1f:39:7e:fe:ea:a0:49:96:b9:6e:e4:ec:0d:4a:c3:39:
2a:3b:60:03:be:62:09:b7:fd:d0:cd:71:cd:00:0b:f1:9f:b9:
56:9d:c6:1d:4f:77:a3:ab:a7:42:50:bf:5d:ad:52:ae:c2:fe:
7a:0f:f4:bb:c6:57:e3:b4:8f:6b:93:bd:41:ad:4d:1a:be:36:
ec:38:87:bf:f2:ca:da:b8:0e:d4:01:0d:b7:14:a6:76:7c:ac:
e8:50:6b:a6:83:10:95:5e:f8:95:1a:5f:0d:d2:f2:0c:0a:ab:
a5:60:20:76:64:c0:d3:56:48:18:95:9e:5a:69:70:36:ad:ac:
04:29:55:63:d7:cd:d8:c3:61:79:5a:7c:4f:86:24:18:89:1d:
db:24:8f:c3:d2:2b:36:98:23:4e:11:70:c7:9a:72:af:57:4d:
84:c1:a7:ac:df:9b:2b:bd:ab:be:4d:0a:2c:ea:28:83:a2:76:
f1:80:d9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:52:26 2026 by rpki-client