Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/avqY4tHL-OMi-KdThbzt3rzKvGs.roa
File: avqY4tHL-OMi-KdThbzt3rzKvGs.roa (raw, json)
Hash identifier: hb9qnnd+uiUr70PqGTJGBA2kmPy/J9hiyw7vkVwQ3Rs=
Subject key identifier: 6A:FA:98:E2:D1:CB:F8:E3:22:F8:A7:53:85:BC:ED:DE:BC:CA:BC:6B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8663D0888785AE1EF8358CC08474F11C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/avqY4tHL-OMi-KdThbzt3rzKvGs.roa
Signing time: Tue 21 Jul 2026 20:35:15 +0000
ROA not before: Tue 21 Jul 2026 20:35:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213962
IP address blocks: 82.109.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:63:d0:88:87:85:ae:1e:f8:35:8c:c0:84:74:f1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 21 20:35:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6afa98e2d1cbf8e322f8a75385bceddebccabc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:0a:1d:51:1d:3a:0c:8c:97:43:8a:54:c1:
06:cb:44:3f:1f:69:86:59:62:3f:3d:4e:19:73:a2:
4b:cc:0d:21:ca:46:19:d1:1e:1c:19:6b:58:d0:e9:
0d:47:66:22:f6:43:cf:72:80:ef:16:10:da:3b:32:
fc:27:83:83:b1:0a:91:4d:23:a5:45:a6:12:c8:62:
63:2a:82:98:78:d9:be:f7:38:8b:0d:f6:39:b1:f5:
37:6a:29:7b:be:61:93:23:a3:44:f9:c9:43:be:69:
68:2e:69:ac:89:9d:72:2e:cc:b4:ae:41:6d:2d:eb:
52:17:1c:49:99:c0:0f:66:d3:46:e5:b5:14:6e:98:
4b:e8:8c:56:f6:51:e1:82:a6:6a:72:06:3c:4e:6d:
30:49:0a:ff:24:8e:80:75:7e:f0:0c:fc:d4:51:6f:
43:e2:78:47:c0:12:b1:bb:53:08:d2:72:90:a6:02:
6a:84:95:1e:65:ba:86:95:4f:f4:1f:4e:9e:a8:18:
bd:22:a4:7c:a3:0c:d4:9b:7e:2b:a5:7b:41:77:05:
a8:b1:f7:56:fb:3c:64:24:db:81:e8:85:28:32:a8:
07:3e:bb:dc:43:4b:88:2e:7f:41:13:a3:9d:14:93:
51:a4:a7:21:34:a4:82:63:2b:60:3c:1c:6c:b9:de:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FA:98:E2:D1:CB:F8:E3:22:F8:A7:53:85:BC:ED:DE:BC:CA:BC:6B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/avqY4tHL-OMi-KdThbzt3rzKvGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4e:75:dd:06:c5:93:f1:3f:03:70:68:dc:0b:e2:b7:2b:31:
09:86:d1:8e:31:78:1d:37:17:6b:3e:e1:33:98:28:0e:a9:90:
10:84:32:3c:6b:c1:4f:50:76:a4:55:f9:3d:06:8c:8a:50:f1:
5f:90:df:c1:33:c2:0d:fa:62:87:53:d8:15:db:72:58:de:b7:
e4:2d:f2:a8:9d:45:e3:0d:fc:af:a4:17:d7:f1:e0:1d:b7:24:
38:8b:8e:39:26:f2:31:01:bf:bf:eb:a4:dd:88:24:41:4c:3b:
79:5c:86:c1:21:39:10:17:c1:29:1a:05:e4:5c:c4:5c:3c:dd:
b4:96:bc:55:7c:6f:6f:e0:81:6b:89:fa:e4:1b:5d:f9:56:6a:
0d:f5:cb:02:59:b1:95:f9:c5:ed:f5:42:28:a1:0a:19:b6:06:
5d:bb:ed:6e:57:34:45:ef:82:0e:f5:ae:9c:b9:6b:8e:07:62:
61:f2:7b:68:85:74:a8:cd:9c:ed:9f:b2:a0:ef:ce:15:ac:11:
44:bf:5e:ce:41:ea:a7:ce:34:77:2e:34:b0:8a:3f:f4:27:60:
78:53:ac:77:38:a4:6b:2b:4b:20:85:79:3d:da:b3:4d:7b:f4:
b4:bf:3c:dc:b8:2a:79:22:59:2e:15:3f:c8:d7:65:cd:fe:b3:
73:ca:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:25 2026 by rpki-client