Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Xs6JrmmLZDtUWXkFlp7IClv7yuk.roa
File: Xs6JrmmLZDtUWXkFlp7IClv7yuk.roa (raw, json)
Hash identifier: s90it3vhI2whsKjp5wcodcMIcNkjPRBliNsgLBPdTcs=
Subject key identifier: 5E:CE:89:AE:69:8B:64:3B:54:59:79:05:96:9E:C8:0A:5B:FB:CA:E9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A17CFA13FF0E88AA89DA52AD868B5282B5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Xs6JrmmLZDtUWXkFlp7IClv7yuk.roa
Signing time: Tue 27 Oct 2026 10:48:46 +0000
ROA not before: Tue 27 Oct 2026 10:48:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218862
IP address blocks: 82.108.220.0/24 maxlen: 24
87.82.197.0/24 maxlen: 24
87.83.218.0/24 maxlen: 24
87.84.59.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:fa:13:ff:0e:88:aa:89:da:52:ad:86:8b:52:82:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 27 10:48:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ece89ae698b643b54597905969ec80a5bfbcae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:31:8b:43:41:ed:d5:ad:2b:86:e6:2e:bf:
5f:59:f7:64:c1:da:3f:9a:67:c0:29:64:28:73:84:
75:d4:c9:68:10:51:7e:1c:b9:3c:58:a4:63:6b:0b:
48:d9:0b:f8:3c:b3:e3:1b:ba:c3:bd:ed:01:b8:83:
36:43:d2:09:90:81:5b:9a:db:e0:47:8c:1b:02:5a:
e5:06:c3:18:31:08:30:e8:a6:03:fd:5e:55:bd:a2:
2d:f0:5d:b2:2b:3c:28:aa:b4:a1:80:da:f9:8c:26:
62:96:b4:c5:30:95:c6:4c:2c:28:82:75:d2:87:b7:
ac:6e:b9:43:cd:3e:4c:a5:91:d5:ec:a7:9d:a1:4f:
af:8d:94:29:63:e1:30:a5:32:21:cf:f8:35:52:46:
93:69:59:48:be:5b:68:d1:98:70:5a:c8:ca:b0:9e:
c5:c8:41:20:e4:0c:52:7d:9b:0e:45:52:21:6b:02:
45:37:d8:c5:05:bf:73:95:c4:56:53:5f:a1:55:25:
34:9b:08:91:00:ab:c4:ec:e7:d2:96:ac:b3:49:e7:
0a:df:2a:ab:4b:ba:49:50:1c:38:84:bc:23:71:73:
7d:b2:e2:15:1f:9a:c0:d2:2b:b2:0f:93:ab:37:bb:
a0:d1:59:80:1c:c1:9b:f1:ca:4e:c4:46:fa:36:4d:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CE:89:AE:69:8B:64:3B:54:59:79:05:96:9E:C8:0A:5B:FB:CA:E9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Xs6JrmmLZDtUWXkFlp7IClv7yuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.220.0/24
87.82.197.0/24
87.83.218.0/24
87.84.59.0/24
87.84.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:43:e7:a5:a1:37:aa:d5:1a:2f:42:ad:04:53:37:1b:7a:88:
24:75:23:7c:2f:c4:6e:75:94:6a:6c:9f:82:4f:40:32:37:9b:
3e:1d:6d:26:bc:14:47:db:24:e4:24:4e:d3:54:66:67:39:0b:
f2:be:8d:fa:fc:4d:80:15:5d:95:13:95:6f:e2:6c:89:e6:1c:
05:be:df:c9:09:11:9a:53:01:6a:f1:17:60:4d:95:a4:f0:f8:
a6:6e:3f:89:b6:cd:2f:b3:4f:d1:24:a9:0a:01:99:a4:65:6c:
ad:ee:96:aa:9c:e3:5c:0f:0b:ac:bd:5f:96:b7:ed:d6:26:9e:
a2:28:e3:9a:13:71:eb:bf:26:47:c8:13:52:cb:8a:c9:07:89:
15:22:d1:a0:ad:e9:cd:1f:32:76:5b:67:00:5d:3b:87:a4:48:
85:64:6d:f9:51:9f:ff:eb:ec:02:00:1b:02:c4:37:64:4d:fc:
f7:fb:05:69:54:0c:93:33:04:80:83:10:8b:84:04:66:5f:26:
ef:94:4b:96:23:fe:e4:1c:2b:7b:98:db:50:cf:87:72:1b:b5:
cc:ea:f0:9d:fa:35:a9:f1:df:5e:ab:dc:e3:55:14:c3:38:e6:
31:46:42:ef:7a:e3:2a:4f:9f:4c:85:c0:93:f8:49:2b:8a:20:
ad:8d:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:35 2026 by rpki-client