Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SFjol5BB9IFFQgB5EQYiV0W6ODo.roa
File: SFjol5BB9IFFQgB5EQYiV0W6ODo.roa (raw, json)
Hash identifier: gwUewz2F/fVNBVcPXScV1y1jp+FmRNezug9/Gq6rfbQ=
Subject key identifier: 48:58:E8:97:90:41:F4:81:45:42:00:79:11:06:22:57:45:BA:38:3A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B373875554ADE987BD29226EC59E3D09
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SFjol5BB9IFFQgB5EQYiV0W6ODo.roa
Signing time: Fri 18 Sep 2026 07:38:07 +0000
ROA not before: Fri 18 Sep 2026 07:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210809
IP address blocks: 82.110.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:73:87:55:54:ad:e9:87:bd:29:22:6e:c5:9e:3d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 07:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4858e8979041f481454200791106225745ba383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:f6:30:0c:0c:02:26:e0:4a:3c:30:44:cc:
ff:51:ac:35:0f:45:4b:c0:0a:28:0d:4e:76:59:5e:
ce:21:58:3d:a7:0e:f4:1d:0a:cc:ec:f1:c5:15:cd:
44:78:98:6c:ca:77:d8:04:1c:d3:ed:18:11:36:c7:
5c:67:98:98:3b:f9:7d:21:15:7c:73:33:bd:bb:8d:
06:9a:32:72:8c:0b:c1:58:65:d6:33:3c:79:fd:95:
e8:21:ec:67:90:25:b9:f4:25:a2:a7:06:ef:15:ce:
50:62:28:ce:60:d5:4e:14:6d:1e:cf:ed:a0:53:1e:
8c:f5:6d:95:f5:05:04:b3:be:fe:56:be:3b:f7:69:
92:70:90:58:02:97:e5:07:5f:72:0b:20:cb:89:d6:
dc:46:2e:4c:a5:27:81:16:30:60:f6:36:13:fe:29:
16:2b:ef:dd:ec:24:28:16:b2:38:ab:34:32:1b:57:
75:5f:58:45:46:a8:a9:1d:7e:64:33:7f:7e:44:a4:
c1:33:01:60:7e:5a:ed:a1:f0:5a:34:18:e0:48:11:
75:3e:94:32:b3:e8:e9:fb:d4:b8:61:8f:83:22:d8:
12:8f:62:0a:4f:30:a9:60:24:5f:2b:aa:95:78:05:
42:fc:5d:30:dc:da:f8:c1:f8:29:5d:8a:cd:95:c7:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:58:E8:97:90:41:F4:81:45:42:00:79:11:06:22:57:45:BA:38:3A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SFjol5BB9IFFQgB5EQYiV0W6ODo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.146.0/24
Signature Algorithm: sha256WithRSAEncryption
72:53:7b:9a:da:84:b4:e8:bd:53:82:74:55:d2:7f:9d:49:37:
3f:b7:5f:9a:b1:14:34:ae:19:b5:52:81:89:df:f4:9d:e1:c6:
7d:55:ff:97:ae:47:af:2d:f1:73:1b:07:42:06:81:cb:23:ca:
bc:21:04:b0:98:08:84:be:11:5c:dc:50:0a:a8:cb:83:57:e0:
7c:9f:1f:5f:6a:2c:2f:c0:e8:4d:3a:79:17:67:1f:bc:32:20:
42:2e:c7:75:4c:51:ab:31:f6:62:02:c4:28:0b:7e:30:16:a3:
b3:ef:e9:40:ad:65:57:35:96:32:54:7f:44:41:0c:f0:13:68:
0b:c1:a9:03:03:67:21:b6:e9:a3:68:03:6a:ac:74:af:5f:ca:
98:57:2e:22:c2:f8:87:1e:6f:e2:8d:96:af:c6:e9:3c:2a:23:
c6:d6:07:0d:c5:ef:85:b5:a0:c0:b6:96:a8:88:9e:49:f8:a7:
ee:4e:4c:62:90:f3:fc:c7:45:23:50:f2:c9:d8:d5:18:fd:9b:
b8:5f:05:cf:c2:8e:b8:ab:92:be:ea:55:87:0b:26:51:50:ac:
ca:e4:02:38:3a:11:93:93:ae:ea:86:61:85:4b:71:76:36:5d:
33:60:25:63:24:73:99:f8:bb:8f:c7:27:5d:53:ab:50:7a:b7:
4c:79:e3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:14:06 2026 by rpki-client