Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fgVsrstsOOmuwpqbrFK8bqqB_DI.roa
File: fgVsrstsOOmuwpqbrFK8bqqB_DI.roa (raw, json)
Hash identifier: Xot+IOCVzyJ/xUdZMcNk8WMMGiGUakak2rAzQKNEO1Y=
Subject key identifier: 7E:05:6C:AE:CB:6C:38:E9:AE:C2:9A:9B:AC:52:BC:6E:AA:81:FC:32
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1D23C402294698F8B7DEAD7F53DB37E88
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fgVsrstsOOmuwpqbrFK8bqqB_DI.roa
Signing time: Fri 13 Nov 2026 00:08:46 +0000
ROA not before: Fri 13 Nov 2026 00:08:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 82.109.144.0/24 maxlen: 24
87.86.181.0/24 maxlen: 24
87.86.252.0/24 maxlen: 24
212.134.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d2:3c:40:22:94:69:8f:8b:7d:ea:d7:f5:3d:b3:7e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 13 00:08:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e056caecb6c38e9aec29a9bac52bc6eaa81fc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:90:d5:0d:d0:e6:d8:42:18:ac:1c:ea:37:
97:3a:2a:c9:c0:89:6b:31:5d:7d:62:51:cb:52:3f:
c5:5a:eb:f6:44:c3:d3:9e:cf:59:a4:6b:a6:77:a9:
5c:7b:4b:58:5f:28:18:72:69:76:83:d6:7b:6c:8d:
2e:ce:b2:00:f0:2e:ff:53:f3:c7:b5:7a:0c:a7:3f:
a3:a7:94:d8:1f:4c:fc:6c:70:fb:49:e1:37:c8:6f:
fc:84:ec:f0:fc:bc:64:44:ab:ec:d9:d1:f6:30:eb:
b7:76:d4:f0:94:9c:ad:08:fc:1f:30:5b:62:a9:61:
82:54:a1:c7:c9:d0:9b:ee:73:79:d2:ab:20:57:74:
91:b9:c6:84:d5:22:66:f3:c9:09:90:dc:c8:6c:78:
63:5c:08:af:d9:80:34:5b:88:f7:b9:ea:f6:53:27:
ca:d8:83:c1:82:50:f8:66:13:f2:7d:5c:b6:18:46:
0d:21:77:1a:8c:2c:d5:d6:4a:74:fa:ca:33:c8:66:
29:36:1f:46:28:cb:a6:8d:5c:ee:e7:f7:0a:80:6a:
80:e9:ec:d5:a6:7f:21:87:ac:da:c3:32:84:80:17:
7e:27:96:35:3b:44:a6:fd:31:b7:b6:05:30:77:3d:
0f:00:fa:9e:f6:59:f3:06:65:59:14:a7:de:54:e6:
f5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:05:6C:AE:CB:6C:38:E9:AE:C2:9A:9B:AC:52:BC:6E:AA:81:FC:32
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fgVsrstsOOmuwpqbrFK8bqqB_DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.144.0/24
87.86.181.0/24
87.86.252.0/24
212.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
29:56:da:5b:da:ff:d7:c0:7d:0c:2e:2d:8b:65:32:d7:9d:de:
4d:0d:2e:d0:33:fc:47:a1:57:8c:2a:c5:73:d8:d2:1a:85:36:
6f:8a:af:10:54:65:2a:14:4b:38:ae:1f:f9:57:91:57:da:f7:
73:36:e8:09:b4:57:8b:c2:1d:d9:40:1c:4d:0c:9f:2d:b6:b7:
1e:89:c7:71:ac:34:9d:62:93:d6:0f:45:0c:12:29:29:30:27:
2b:21:4d:ef:ce:33:99:cc:dc:5b:1d:aa:62:3b:42:18:7c:39:
dc:9c:a5:6c:dc:0e:7e:2d:f7:c7:8f:7c:30:4c:0f:4a:4c:a3:
30:ce:bc:2f:b8:99:48:fa:85:9b:aa:68:5b:62:06:00:9c:72:
49:f6:ca:0c:d4:6e:fa:fb:0c:ca:41:de:78:03:eb:de:84:ed:
14:94:89:74:3e:d9:26:3d:fc:ac:55:76:3c:56:f9:c3:9d:9a:
f7:00:44:b7:d1:6c:d3:35:ed:c1:f5:bf:a4:d6:e3:ab:d8:01:
50:12:87:58:a7:7d:3c:86:16:24:95:4c:66:6c:7e:fe:d2:cc:
70:7c:99:e5:63:fc:dd:8e:18:3e:44:95:cd:89:e3:58:ff:90:
32:41:8a:e4:d3:fa:cc:0a:e2:24:1f:6a:d3:71:a8:78:07:6e:
e4:23:2a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:13:33 2026 by rpki-client