Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Trr8xmYRXWGrbFkTzCLf7YIqGUI.roa
File: Trr8xmYRXWGrbFkTzCLf7YIqGUI.roa (raw, json)
Hash identifier: fIxClivfHHzEpCmVa2eeNHRw/1rarddVzRlH7MsK4fA=
Subject key identifier: 4E:BA:FC:C6:66:11:5D:61:AB:6C:59:13:CC:22:DF:ED:82:2A:19:42
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F87D4C2E8BAF73128A270880E06E19A9C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Trr8xmYRXWGrbFkTzCLf7YIqGUI.roa
Signing time: Wed 22 Jul 2026 03:18:15 +0000
ROA not before: Wed 22 Jul 2026 03:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151373
IP address blocks: 82.108.164.0/24 maxlen: 24
82.109.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:d4:c2:e8:ba:f7:31:28:a2:70:88:0e:06:e1:9a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 22 03:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ebafcc666115d61ab6c5913cc22dfed822a1942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:25:98:e3:be:3f:6c:60:f8:76:4d:0b:d4:
61:5c:a2:d4:86:45:64:04:73:f1:bd:e4:c5:25:9d:
53:3b:5a:36:b3:8e:c3:f0:cb:55:ea:ac:5e:bf:f9:
7d:d3:bd:f9:e3:50:f1:1e:80:93:a6:11:77:ea:3c:
d2:6c:00:de:c9:4b:b8:f5:38:65:29:8a:e2:15:52:
34:3d:09:1b:0c:89:08:f6:d5:dd:99:0e:53:13:5b:
d6:a0:56:b3:44:e8:3a:37:eb:ad:c3:a2:7b:80:58:
d4:f0:a3:21:b1:f3:cb:bc:5e:6e:ed:20:a1:54:0f:
b7:68:e7:ca:7f:f1:42:41:bc:68:c9:be:ff:35:ab:
7a:2e:8f:e2:e6:09:ae:2e:34:78:e8:90:fa:af:45:
84:2b:c4:87:b8:d1:0c:d4:0d:4c:0a:b3:69:c0:2b:
00:8a:84:03:44:8c:cf:99:6e:5b:31:3b:43:9d:c3:
b8:f0:6f:d0:2f:53:a9:94:71:a6:9b:c1:0f:a0:9b:
c8:6c:01:e5:20:c7:5b:ea:89:0b:17:99:98:f1:57:
70:7b:99:82:c5:27:ff:d2:5c:7c:ff:64:8e:99:26:
0d:f7:a0:39:43:c5:8b:84:01:60:45:5f:a9:25:a5:
24:26:9f:e9:7a:b0:68:b9:da:c2:12:1b:ee:af:4d:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BA:FC:C6:66:11:5D:61:AB:6C:59:13:CC:22:DF:ED:82:2A:19:42
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Trr8xmYRXWGrbFkTzCLf7YIqGUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.164.0/24
82.109.241.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6f:4f:69:9f:e3:a9:ea:e1:ae:07:4b:20:98:75:99:79:01:
fe:bb:a3:11:67:71:0b:34:e6:8a:10:5f:3a:20:a2:94:e5:f7:
84:a4:41:07:eb:ed:c8:1b:4a:b2:1d:9f:58:91:cd:bd:18:0e:
08:7f:a3:da:71:74:2e:d7:3d:92:73:96:63:14:1d:10:be:64:
3e:03:4e:6d:38:d9:81:ed:5b:99:a2:33:8b:08:1e:55:dd:1e:
f5:b2:97:84:ae:0d:6e:80:55:a1:0e:e2:85:3c:31:07:28:0f:
97:dc:64:98:94:d2:77:53:bf:e7:b3:75:32:d4:56:d0:de:73:
72:3c:2e:10:3f:d7:d2:f1:a5:6b:83:89:c4:0e:db:41:83:14:
ce:a1:15:44:49:51:ed:d9:c6:dd:6e:8a:12:9b:48:97:62:d9:
15:c1:cc:8f:57:00:c6:ce:a3:59:cb:23:c8:f2:4c:0a:5b:62:
9f:99:0e:f1:69:92:2b:26:8b:20:8a:44:9f:e3:a6:f2:cc:5a:
bb:c1:f4:46:16:3f:e8:6f:b9:1b:d8:72:e0:5d:cf:e3:b6:d6:
ae:4e:8a:ff:2c:be:64:31:32:1e:0f:62:6f:70:ad:ce:d1:e0:
cc:4f:b5:0c:01:a1:5c:cc:d2:b8:2b:62:bd:5d:1a:d6:c6:24:
55:97:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:19 2026 by rpki-client