Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UEVMTTtGgr9mIj2xnsDu7Hj7iDs.roa
File: UEVMTTtGgr9mIj2xnsDu7Hj7iDs.roa (raw, json)
Hash identifier: 6x3Q5X7Ym6dzf1KNsW1OHWTyrLnrajU1etFzvT+H3go=
Subject key identifier: 50:45:4C:4D:3B:46:82:BF:66:22:3D:B1:9E:C0:EE:EC:78:FB:88:3B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1AA7A8654BB552BD0A7E253FE857FA9D4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UEVMTTtGgr9mIj2xnsDu7Hj7iDs.roa
Signing time: Thu 05 Nov 2026 06:51:58 +0000
ROA not before: Thu 05 Nov 2026 06:51:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 82.109.153.0/24 maxlen: 24
82.110.53.0/24 maxlen: 24
82.110.54.0/24 maxlen: 24
87.82.61.0/24 maxlen: 24
87.82.194.0/24 maxlen: 24
87.83.172.0/24 maxlen: 24
87.85.253.0/24 maxlen: 24
212.134.132.0/24 maxlen: 24
212.135.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:7a:86:54:bb:55:2b:d0:a7:e2:53:fe:85:7f:a9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 5 06:51:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50454c4d3b4682bf66223db19ec0eeec78fb883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:49:ac:a4:6b:18:62:c7:e8:50:bc:55:6f:
3e:65:ae:d7:b9:e8:28:6a:71:46:83:33:c0:95:05:
18:4c:14:97:01:e3:29:0f:80:ff:4c:53:db:6d:d4:
a3:b8:43:4d:59:9b:e9:b0:da:d3:c5:78:92:3a:17:
6c:18:43:50:63:6b:3c:e4:ca:d7:64:63:37:fc:9b:
03:23:75:ed:0f:1f:45:f7:74:5e:f9:88:7f:5e:97:
e4:ce:55:2f:7e:24:f5:90:b3:ad:e6:66:49:fa:f1:
f6:64:31:50:15:3d:5f:c6:57:96:36:79:dc:e7:a6:
4f:ea:15:b1:94:c5:a8:8c:bd:28:ba:e9:07:77:df:
26:2f:40:f2:fa:56:3a:6c:5e:4c:e9:b0:6c:41:5e:
87:61:6a:69:1a:e8:7a:d0:d4:fc:07:d0:d7:4a:43:
c0:5f:81:df:25:11:be:d9:8f:55:fa:cb:94:81:22:
33:78:77:d5:ec:81:f1:eb:8d:c8:b0:12:29:6b:a0:
65:bc:62:10:00:6d:09:eb:07:54:cf:33:55:84:45:
16:ff:2b:e4:81:cf:3a:1a:c0:05:af:9c:91:ee:ee:
ec:6f:e5:6d:43:de:99:b3:45:7c:8a:e6:03:a8:ea:
34:c2:65:66:24:c6:7b:87:93:62:89:31:a7:b6:c5:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:45:4C:4D:3B:46:82:BF:66:22:3D:B1:9E:C0:EE:EC:78:FB:88:3B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UEVMTTtGgr9mIj2xnsDu7Hj7iDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.153.0/24
82.110.53.0-82.110.54.255
87.82.61.0/24
87.82.194.0/24
87.83.172.0/24
87.85.253.0/24
212.134.132.0/24
212.135.25.0/24
Signature Algorithm: sha256WithRSAEncryption
da:36:1d:0c:19:10:4d:04:af:7a:a5:d5:5a:a5:df:77:4c:a0:
71:de:f3:85:de:99:a2:15:d1:47:4c:af:2f:44:d4:a3:e0:b2:
68:36:75:08:2b:8f:2c:1d:2c:fe:42:4e:cf:2b:ec:76:a7:45:
a7:bc:bd:ed:e6:84:1d:bf:d3:0f:e5:10:a5:a6:52:16:f0:b3:
24:ee:1b:07:8a:51:9a:e0:47:c5:7e:b8:b7:99:85:55:c8:99:
7e:ae:c1:d9:6c:01:0e:a3:30:0b:c5:27:c1:43:7d:30:4b:20:
a2:58:d1:0e:38:de:73:91:af:d1:1f:53:b2:32:bc:28:bd:38:
f4:c6:dc:29:e4:76:d5:f9:92:c2:bc:3c:35:df:14:57:e3:bf:
f0:ba:9f:4d:31:10:24:ba:04:91:05:71:5f:ce:c5:dc:ed:73:
54:75:97:20:d6:f4:f8:b1:fd:e0:8b:b5:ea:5d:42:39:9e:aa:
bc:9a:69:e1:fd:a0:9b:3b:c5:90:4c:ba:b6:62:13:d8:44:91:
73:15:51:ce:9f:e3:f9:fc:31:2a:f0:69:61:71:3f:9c:ac:25:
da:99:87:96:39:f4:4e:79:98:41:af:b3:8d:28:64:48:1f:cc:
0a:e2:6f:98:eb:9b:e6:18:84:e9:ad:d1:f1:2c:35:cf:92:d0:
96:e9:8c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:38 2026 by rpki-client