Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g_RW-byZMxCs4in1BftZ3Jt1h3M.roa
File: g_RW-byZMxCs4in1BftZ3Jt1h3M.roa (raw, json)
Hash identifier: +hHzR9YY+1m63d6HG6q/70GOnCC3r++UPMTlTVC4NRs=
Subject key identifier: 83:F4:56:F9:BC:99:33:10:AC:E2:29:F5:05:FB:59:DC:9B:75:87:73
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C9E9F470ABBC1F69895A39B8B0F5B174
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g_RW-byZMxCs4in1BftZ3Jt1h3M.roa
Signing time: Tue 22 Sep 2026 16:19:07 +0000
ROA not before: Tue 22 Sep 2026 16:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 82.108.4.0/22 maxlen: 22
82.108.32.0/21 maxlen: 21
82.108.44.0/22 maxlen: 22
82.108.52.0/22 maxlen: 22
82.108.68.0/22 maxlen: 22
82.108.88.0/23 maxlen: 23
82.108.92.0/22 maxlen: 22
82.108.102.0/23 maxlen: 23
82.108.116.0/22 maxlen: 22
82.108.140.0/22 maxlen: 22
82.108.152.0/23 maxlen: 23
85.189.23.0/24 maxlen: 24
85.189.72.0/23 maxlen: 23
85.189.74.0/23 maxlen: 23
85.189.76.0/23 maxlen: 23
85.189.78.0/23 maxlen: 23
85.189.132.0/23 maxlen: 23
85.189.153.0/24 maxlen: 24
85.189.154.0/23 maxlen: 23
85.189.156.0/24 maxlen: 24
85.189.159.0/24 maxlen: 24
85.189.160.0/24 maxlen: 24
85.189.162.0/24 maxlen: 24
85.189.164.0/23 maxlen: 23
85.189.167.0/24 maxlen: 24
85.189.174.0/23 maxlen: 23
85.189.178.0/24 maxlen: 24
85.189.181.0/24 maxlen: 24
85.189.183.0/24 maxlen: 24
85.189.189.0/24 maxlen: 24
85.189.190.0/23 maxlen: 23
87.83.192.0/24 maxlen: 24
87.86.24.0/23 maxlen: 23
87.86.242.0/24 maxlen: 24
87.86.248.0/22 maxlen: 24
212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.212.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:e9:f4:70:ab:bc:1f:69:89:5a:39:b8:b0:f5:b1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 16:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83f456f9bc993310ace229f505fb59dc9b758773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:9b:0e:ae:0f:b4:4a:66:43:d4:52:36:bb:
8d:21:da:9b:50:cc:f4:d0:af:b1:a8:44:e1:10:0a:
5c:ef:d0:9b:51:1f:41:e7:08:79:ea:53:0d:4b:f5:
cd:a0:ba:24:c9:4b:91:6f:1f:32:fb:a7:d7:ca:d5:
61:bb:10:c7:79:99:0a:0e:0c:7c:e3:e8:36:05:e4:
8a:23:fe:c4:a2:c6:6e:73:77:d2:b1:99:f0:37:d9:
aa:35:f3:18:8e:f3:58:ce:79:b7:a2:a2:fd:08:45:
5b:73:f7:f9:33:06:83:bd:38:45:ab:84:22:19:0e:
ec:25:7b:60:e3:d1:0d:6d:28:19:59:6e:4f:1d:33:
b7:ca:75:50:05:10:bf:df:8c:5a:d4:a5:5b:1c:ce:
c0:6a:70:bf:3d:1a:50:21:ff:a1:38:39:19:96:91:
e0:aa:14:6a:fc:e2:c6:08:2d:b2:38:3c:d4:9a:29:
05:f4:7f:1a:94:67:12:06:f7:59:aa:e5:74:f5:b6:
69:b1:5b:1c:f3:53:91:df:5d:d0:61:c0:83:e6:c5:
36:8f:83:4b:bc:83:05:29:80:8e:93:6e:74:7b:45:
2a:c7:45:06:78:a7:26:d2:cd:83:b0:02:2d:26:08:
dc:48:49:04:bc:c4:e8:ac:83:28:e3:f2:23:7c:5f:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:56:F9:BC:99:33:10:AC:E2:29:F5:05:FB:59:DC:9B:75:87:73
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g_RW-byZMxCs4in1BftZ3Jt1h3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.4.0/22
82.108.32.0/21
82.108.44.0/22
82.108.52.0/22
82.108.68.0/22
82.108.88.0/23
82.108.92.0/22
82.108.102.0/23
82.108.116.0/22
82.108.140.0/22
82.108.152.0/23
85.189.23.0/24
85.189.72.0/21
85.189.132.0/23
85.189.153.0-85.189.156.255
85.189.159.0-85.189.160.255
85.189.162.0/24
85.189.164.0/23
85.189.167.0/24
85.189.174.0/23
85.189.178.0/24
85.189.181.0/24
85.189.183.0/24
85.189.189.0-85.189.191.255
87.83.192.0/24
87.86.24.0/23
87.86.242.0/24
87.86.248.0/22
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.124.0/22
212.134.164.0/22
212.134.208.0/22
212.134.224.0/22
212.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
52:e4:15:4e:f8:7d:42:93:32:ba:ab:ee:ba:ec:98:39:24:ca:
a9:63:90:86:0d:1f:07:48:5c:5f:2f:ee:44:27:0d:c6:7f:a4:
8d:15:49:97:fd:03:6c:c4:ce:30:61:79:8c:10:fc:fa:60:2f:
5c:ec:43:fd:91:f1:1e:ae:9c:9a:0a:07:ef:e1:55:fd:93:95:
8a:89:2f:fc:3c:94:01:ae:f2:a9:e2:77:3c:d2:0e:31:93:e6:
fd:9e:1e:6e:1c:a2:19:cf:cb:e2:53:4a:3a:90:4f:51:1a:e6:
88:86:b3:f2:66:54:51:54:4a:2f:85:e3:8c:1a:1b:34:52:8e:
75:d3:ee:5c:3c:c6:e7:f7:8f:15:7f:f5:1f:57:dc:31:b2:3f:
40:d1:79:20:08:99:90:ab:e4:19:d9:bb:55:47:13:f7:64:ea:
7e:ce:c4:5c:41:73:e4:b9:3c:d3:54:80:de:f8:4c:36:bc:d3:
d3:80:f7:43:94:fb:07:54:37:67:11:6e:77:66:9b:68:73:6e:
54:51:33:a4:81:f5:27:f7:1c:62:14:32:89:21:69:c8:cf:da:
a0:50:a3:23:98:a1:86:af:6a:b7:bf:f2:9f:39:b8:07:88:a2:
c0:c6:46:60:61:e3:cb:82:87:c9:33:21:92:dd:f0:ca:cb:c7:
7e:b1:9e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:19:29 2026 by rpki-client