Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cPGZMfsUl92ftTUl-EKnKKkfsJE.roa
File: cPGZMfsUl92ftTUl-EKnKKkfsJE.roa (raw, json)
Hash identifier: S6j6kPlVCwfi1rNeO1cvdlBVWDhTjx7VcDbJezlkCwY=
Subject key identifier: 70:F1:99:31:FB:14:97:DD:9F:B5:35:25:F8:42:A7:28:A9:1F:B0:91
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8334F8E8E80133920184FE3178E20FBA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cPGZMfsUl92ftTUl-EKnKKkfsJE.roa
Signing time: Tue 21 Jul 2026 05:45:14 +0000
ROA not before: Tue 21 Jul 2026 05:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 82.109.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:34:f8:e8:e8:01:33:92:01:84:fe:31:78:e2:0f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 21 05:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70f19931fb1497dd9fb53525f842a728a91fb091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:82:d9:a2:90:2f:71:03:4c:06:58:6e:f6:
b8:3b:9b:a2:fc:e8:f4:5b:63:4e:a7:8d:2c:2c:19:
8e:1d:22:99:f8:58:cd:f8:b9:e6:0e:91:60:f1:31:
9c:e3:be:50:c0:f5:fe:13:a0:5f:ae:16:7c:38:2f:
8b:8d:ed:b3:7b:8d:99:27:79:e6:ed:c3:a0:8e:d0:
c8:73:43:d3:fa:7c:a7:d6:7d:df:46:0b:ac:f1:49:
55:4f:63:f6:48:59:e8:74:f8:9e:d8:33:bb:68:e5:
09:22:17:84:63:4e:e2:64:f2:d7:39:1a:75:68:d8:
83:5e:7d:c6:21:3f:c7:2a:24:b6:15:9a:5d:6f:d3:
0d:86:8d:ae:5f:36:8e:ff:ce:db:ae:76:ca:94:bf:
51:f1:46:10:f4:18:26:cc:80:de:82:ce:6d:2b:ce:
be:b5:c2:c4:5c:f3:24:41:00:0d:48:57:ae:17:d8:
c5:a6:4a:90:72:7f:3e:52:62:3b:fb:77:a7:1c:a5:
54:a3:88:67:ae:50:1f:9b:73:a7:b2:24:97:71:9c:
fe:a5:40:42:30:ce:fe:4a:0c:66:e4:b4:d3:0d:76:
7b:5f:d5:66:89:50:7f:c6:4c:7f:d0:11:dd:96:4a:
49:53:7c:a9:d7:55:9a:20:05:95:01:0e:fa:af:9b:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F1:99:31:FB:14:97:DD:9F:B5:35:25:F8:42:A7:28:A9:1F:B0:91
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cPGZMfsUl92ftTUl-EKnKKkfsJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.176.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:9c:35:0b:4b:30:04:57:f8:2d:d3:7b:a5:06:50:8a:3b:72:
bb:12:8d:3e:a7:69:95:c5:55:9a:64:19:c4:e3:c0:61:b6:d0:
8a:27:a7:f2:b1:01:e5:6e:1b:7d:c8:cb:d0:00:7b:f9:cd:b3:
1b:1d:c8:5e:13:91:81:54:85:e2:90:bc:fd:88:b5:1b:fa:6f:
a5:d6:d8:f8:22:86:3a:a3:5b:9f:35:e8:fe:ef:93:eb:d8:ca:
00:93:96:27:31:59:af:bb:69:ef:b7:93:fe:3a:c4:bf:c3:47:
f6:90:d1:08:92:d1:a3:a0:f5:9c:9f:00:f4:e7:b2:e7:86:6f:
50:f7:1b:7e:62:56:0c:11:13:0b:1a:db:0c:76:57:7b:e6:69:
e1:b5:2d:6c:f7:17:50:3a:01:c6:c1:b1:3f:62:a2:1b:0e:de:
28:10:90:6f:fb:cc:54:01:a8:49:14:57:b0:8d:9c:8e:06:6f:
30:90:df:13:f3:63:c4:ef:59:85:09:21:c8:25:a6:fd:7d:ca:
31:f3:34:f3:f6:37:4e:8b:04:c4:cd:bd:0a:e5:4e:86:33:64:
49:1c:2f:c1:3a:95:b6:e7:eb:e8:e1:3d:96:55:21:e2:d7:8a:
86:c7:5c:41:6b:40:5b:1d:c0:eb:43:ab:38:b5:ec:1f:3e:6a:
cf:96:62:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:03 2026 by rpki-client