Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mqkXrSwrMgJuuCl3QdnfkWJa_oM.roa
File: mqkXrSwrMgJuuCl3QdnfkWJa_oM.roa (raw, json)
Hash identifier: wywS9K3F/ao/vzWV2Y/ykhxXJExE4UfBbtFv1bpguyo=
Subject key identifier: 9A:A9:17:AD:2C:2B:32:02:6E:B8:29:77:41:D9:DF:91:62:5A:FE:83
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8F6F2CA077AF7A2F3689AA0D162931DD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mqkXrSwrMgJuuCl3QdnfkWJa_oM.roa
Signing time: Thu 23 Jul 2026 14:44:15 +0000
ROA not before: Thu 23 Jul 2026 14:44:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 82.108.202.0/24 maxlen: 24
82.110.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:6f:2c:a0:77:af:7a:2f:36:89:aa:0d:16:29:31:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 14:44:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9aa917ad2c2b32026eb8297741d9df91625afe83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:b8:de:62:7a:02:6e:81:ce:25:e9:d2:d8:
2c:92:b1:b3:03:f3:1c:c6:5e:7b:39:5c:8d:3c:36:
8f:aa:7c:6b:36:93:8a:af:6f:c8:f2:7b:06:8f:12:
c3:cd:1c:0e:35:3a:10:7c:ff:c8:34:a2:31:28:f7:
cc:93:38:27:24:79:7f:74:a7:57:f8:9a:19:f0:fd:
43:4c:70:85:17:19:d7:29:de:95:f3:d1:36:f8:00:
f0:4c:d1:2b:a2:a1:08:fb:6f:0b:36:74:82:fa:ff:
3c:03:22:71:ff:b8:29:a5:94:1c:b5:c5:bb:2e:9b:
51:33:8e:70:a0:ab:88:2c:cd:71:44:fe:50:1c:90:
ff:e2:d0:97:0a:5b:cb:16:7d:7e:56:76:87:d1:ea:
ac:3b:45:33:e2:0f:9b:f0:6b:0c:2b:a5:10:96:ff:
2c:40:b2:6a:c9:45:c4:35:68:29:b9:a6:77:d1:51:
b8:4d:aa:0c:05:55:dd:f6:41:57:17:99:66:62:1c:
3e:54:f1:31:b9:15:4d:52:7d:d1:af:5d:22:f6:17:
38:90:f4:4f:b2:b5:89:6f:7a:3d:38:ba:a1:06:ad:
3a:4c:a2:7e:a5:eb:8a:a3:67:65:12:40:99:e3:31:
be:f6:34:2b:3e:dd:4e:08:37:90:76:46:c3:df:7a:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:17:AD:2C:2B:32:02:6E:B8:29:77:41:D9:DF:91:62:5A:FE:83
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mqkXrSwrMgJuuCl3QdnfkWJa_oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.202.0/24
82.110.105.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4e:f2:f1:d1:0b:57:d7:21:94:6c:61:1d:6a:e5:65:98:c3:
2c:5b:72:aa:10:70:06:c2:1e:04:12:16:b8:5a:4c:42:5e:14:
51:72:79:84:b5:dc:dd:a2:a5:09:c1:1b:6a:42:fa:a5:8f:2a:
cf:0e:49:39:fb:7c:17:79:fc:49:29:89:28:b0:e3:ee:d1:9c:
15:f5:f6:ca:7d:2c:36:9b:c5:be:8f:85:f0:eb:15:b6:59:9f:
8a:7e:2e:33:69:ba:09:64:bb:b3:07:52:0a:53:27:35:6a:f6:
74:9a:1a:55:4d:c1:04:c8:af:e1:0b:c5:b3:ad:59:fd:83:32:
70:10:01:94:3a:f9:97:e0:70:ed:79:2b:87:01:8c:63:9e:30:
b4:b1:27:c4:dc:7d:46:50:28:58:7a:03:1c:9f:7d:e9:22:22:
9d:11:2d:9a:d1:ac:79:94:59:53:d9:f3:1c:61:82:02:25:07:
08:15:f6:8b:13:9d:4f:8f:2f:46:aa:a5:87:91:77:05:b7:f3:
af:db:83:08:0d:79:ee:e0:37:dd:b6:2b:3c:0b:a0:da:c3:34:
8a:a5:26:e7:93:b1:16:ff:b2:e0:98:59:2b:6e:87:bb:24:91:
8d:34:b8:11:00:6d:89:2a:4c:ba:fe:8b:aa:ee:cc:5a:c8:16:
bc:71:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:08 2026 by rpki-client