Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S75C_hbLkb0K1mwfKyOpwP_Hl-Y.roa
File: S75C_hbLkb0K1mwfKyOpwP_Hl-Y.roa (raw, json)
Hash identifier: XxZ6HcMzPhsuJj5yLbX1KIpJgefFgO/X3bSw/0iQJbo=
Subject key identifier: 4B:BE:42:FE:16:CB:91:BD:0A:D6:6C:1F:2B:23:A9:C0:FF:C7:97:E6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1D0267EA84E20C08D484B81E73A59DDEF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S75C_hbLkb0K1mwfKyOpwP_Hl-Y.roa
Signing time: Thu 12 Nov 2026 14:25:46 +0000
ROA not before: Thu 12 Nov 2026 14:25:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 82.108.126.0/24 maxlen: 24
82.108.166.0/24 maxlen: 24
82.108.194.0/24 maxlen: 24
82.108.201.0/24 maxlen: 24
87.82.196.0/24 maxlen: 24
87.83.115.0/24 maxlen: 24
87.84.65.0/24 maxlen: 24
87.84.66.0/24 maxlen: 24
87.84.69.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.152.0/24 maxlen: 24
87.84.239.0/24 maxlen: 24
87.85.70.0/24 maxlen: 24
87.85.240.0/24 maxlen: 24
87.85.250.0/24 maxlen: 24
87.86.16.0/24 maxlen: 24
87.86.183.0/24 maxlen: 24
194.242.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:26:7e:a8:4e:20:c0:8d:48:4b:81:e7:3a:59:dd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 12 14:25:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bbe42fe16cb91bd0ad66c1f2b23a9c0ffc797e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:69:45:af:95:02:2b:61:7e:5e:4d:db:18:
93:4d:34:7f:87:b0:77:82:ac:95:b3:c2:46:f9:26:
ee:cf:66:ff:3e:75:5f:8a:8d:b4:1b:4d:bf:77:ee:
55:84:e9:28:ac:ac:c7:06:bb:8a:af:86:7c:3c:2f:
28:4e:e8:6e:c6:58:36:6e:df:e9:f2:64:22:f3:8b:
13:1c:ff:a1:91:fc:4b:5a:c5:5d:e4:73:05:e2:ca:
72:62:97:a8:80:5c:56:2e:6a:af:0f:ed:5e:2f:4c:
85:e6:a6:3d:20:91:e5:d6:ac:dd:14:da:e0:e1:03:
4b:7c:78:69:a6:da:ae:a1:d7:b7:23:c4:cd:3d:3f:
03:25:72:62:29:fc:e0:54:a7:53:e1:53:57:90:70:
36:11:c3:a0:6f:b5:cc:c9:8e:42:9d:bd:5b:b4:6b:
be:77:0d:24:fe:32:fd:e8:61:4e:fb:ca:59:5e:e1:
09:15:81:5f:83:30:76:74:fa:c7:a0:34:d7:1b:28:
30:70:4b:8a:b9:d9:b6:72:a0:6e:b3:02:a3:77:e5:
a2:38:6f:1f:e7:95:19:04:9d:15:b8:0c:07:db:ed:
9e:58:4e:e4:88:27:82:a7:fa:6d:e9:fa:39:75:28:
d6:f9:c8:a6:a4:9a:77:14:8e:cf:2e:4d:4b:64:e3:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BE:42:FE:16:CB:91:BD:0A:D6:6C:1F:2B:23:A9:C0:FF:C7:97:E6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S75C_hbLkb0K1mwfKyOpwP_Hl-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.126.0/24
82.108.166.0/24
82.108.194.0/24
82.108.201.0/24
87.82.196.0/24
87.83.115.0/24
87.84.65.0-87.84.66.255
87.84.69.0/24
87.84.134.0/24
87.84.152.0/24
87.84.239.0/24
87.85.70.0/24
87.85.240.0/24
87.85.250.0/24
87.86.16.0/24
87.86.183.0/24
194.242.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:58:9a:2c:72:7c:73:e0:5e:ac:a1:81:84:5a:ca:bb:db:a4:
58:1c:5f:f2:3b:da:19:59:a6:6f:72:8d:ab:71:f6:50:00:3b:
75:4c:eb:0e:46:bf:59:b4:78:7e:67:d7:63:43:8f:d7:58:de:
52:c5:4e:c4:d6:22:38:44:5d:ba:66:a3:1d:88:5e:c9:2b:15:
0d:f0:31:54:64:e5:30:8d:5e:84:76:64:2f:47:69:17:64:51:
0f:b2:2b:ac:df:ca:f7:a1:eb:c8:cd:ba:01:04:ac:df:e9:70:
1f:19:dc:76:c8:cf:c9:4e:12:0d:ab:1e:08:0c:57:08:bf:12:
14:8b:77:54:05:cf:c5:49:2e:b7:e9:45:14:5f:e2:ba:20:94:
21:b2:99:2c:c2:8e:87:36:b9:a6:7c:27:e3:55:1c:c3:9f:bc:
a9:6f:27:cc:cc:76:1d:ad:13:8c:ce:e5:10:2e:83:e3:80:2a:
6f:3e:7f:f3:e0:fc:2d:d5:59:8b:e1:d2:23:d0:0d:65:c7:f0:
09:a3:ce:de:9a:ec:ea:25:00:79:3d:0c:1a:d4:ef:b8:ad:df:
00:5e:1c:0d:bb:c0:8e:3a:9d:16:56:84:64:ac:37:6b:f6:d5:
09:4e:b0:9a:f5:47:11:3c:43:e2:c2:71:70:41:57:8b:e4:b4:
80:9b:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:41:00 2026 by rpki-client