Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n-jsKLLunI5lyYIjJQVGQcVESd8.roa
File: n-jsKLLunI5lyYIjJQVGQcVESd8.roa (raw, json)
Hash identifier: xelU8/LbqMVrBdAMwkNUVxR+Dw6LYe2IRDfpZDotkUE=
Subject key identifier: 9F:E8:EC:28:B2:EE:9C:8E:65:C9:82:23:25:05:46:41:C5:44:49:DF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C66B7C4CCA75CF064D2B4E556767593C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n-jsKLLunI5lyYIjJQVGQcVESd8.roa
Signing time: Tue 22 Sep 2026 00:02:08 +0000
ROA not before: Tue 22 Sep 2026 00:02:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198805
IP address blocks: 82.110.224.0/24 maxlen: 24
82.110.227.0/24 maxlen: 24
82.110.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:7c:4c:ca:75:cf:06:4d:2b:4e:55:67:67:59:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 00:02:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fe8ec28b2ee9c8e65c9822325054641c54449df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:37:d5:5b:ac:40:5a:c8:e2:06:bb:ef:1f:
88:56:c4:fe:d7:13:2e:e5:43:14:cc:7a:33:6c:8a:
04:b2:bd:21:a2:fa:12:9c:94:34:fd:6c:f1:0a:13:
73:1f:12:21:30:bc:d8:68:b8:07:46:86:0f:31:cb:
26:a9:4f:9f:4e:73:03:31:27:e9:be:e5:d8:a3:48:
d3:89:ab:30:f0:ad:4b:81:ce:0e:90:81:79:d1:d0:
7d:76:c2:58:f6:44:7b:74:be:88:50:17:a7:31:ac:
a8:17:55:24:bc:8a:4a:2d:93:52:4e:aa:19:50:3b:
0e:17:95:cb:c3:56:2f:38:89:38:f1:6c:5c:da:e8:
f4:b4:2a:92:b0:ce:1a:65:42:fb:33:a0:61:17:73:
b7:a9:3d:7e:1f:fc:7d:cf:4b:68:0e:b6:df:cb:bf:
8f:64:f6:1c:07:6a:fa:1f:6c:01:5c:bb:5e:dc:d0:
d1:a5:e8:f5:13:a0:5c:59:a4:40:84:a7:11:a8:66:
60:61:c0:03:dd:ab:c2:ab:9e:70:93:b0:b6:47:e2:
a8:a6:3f:63:f6:d5:f9:44:d5:25:79:24:fc:4a:ef:
c8:37:3e:38:ce:49:ba:1d:b7:1b:6a:47:78:4d:05:
d2:cd:ad:0c:f7:0f:d2:1a:a5:66:55:1c:0b:72:51:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:EC:28:B2:EE:9C:8E:65:C9:82:23:25:05:46:41:C5:44:49:DF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n-jsKLLunI5lyYIjJQVGQcVESd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.224.0/24
82.110.227.0/24
82.110.229.0/24
Signature Algorithm: sha256WithRSAEncryption
86:54:0a:80:c7:4d:75:51:11:88:16:03:5c:e1:35:03:b1:08:
fb:50:ff:cf:a4:92:78:65:c1:11:81:62:71:69:a8:cf:06:0c:
d2:1d:ad:c5:f4:97:10:bb:3d:dc:88:d0:3d:93:1d:5b:56:a2:
07:00:2f:7f:04:91:ac:00:f6:a7:75:8f:69:28:c3:db:87:b3:
0d:5e:af:95:1b:0a:79:e5:61:0c:54:d9:08:26:46:5f:e6:03:
6c:35:8e:5f:c1:ef:8e:31:52:44:30:f1:96:9b:aa:af:e8:d4:
05:14:75:a4:53:38:5d:27:0a:fd:1b:e4:26:18:66:ff:0f:44:
9b:dd:96:9d:e2:60:0f:a5:da:ba:32:19:8e:ce:c3:ab:2b:80:
55:aa:67:e8:c4:c1:8d:c4:42:6a:f3:60:74:46:f9:c9:69:f2:
c7:96:45:f9:5b:ca:4e:e3:27:07:13:f4:64:a8:37:41:d9:76:
36:cb:8d:54:75:1a:87:81:84:3b:97:bf:e6:e6:b7:10:ec:5d:
7e:f4:bd:6a:e8:19:37:74:88:d7:db:27:93:09:eb:42:83:de:
7e:ba:5a:9b:95:d2:e8:cf:50:c1:77:dc:83:95:d2:96:c9:cb:
2e:1a:ee:66:7b:73:60:6b:20:9b:04:a1:56:91:7a:02:68:e8:
a3:82:93:e2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDGa3xMynXPBk0rTlVnZ1k8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTIyMDAwMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmU4ZWMyOGIyZWU5YzhlNjVjOTgyMjMyNTA1NDY0MWM1NDQ0OWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupw31VusQFrI4ga77x+IVsT+1xMu
5UMUzHozbIoEsr0hovoSnJQ0/WzxChNzHxIhMLzYaLgHRoYPMcsmqU+fTnMDMSfp
vuXYo0jTiasw8K1Lgc4OkIF50dB9dsJY9kR7dL6IUBenMayoF1UkvIpKLZNSTqoZ
UDsOF5XLw1YvOIk48Wxc2uj0tCqSsM4aZUL7M6BhF3O3qT1+H/x9z0toDrbfy7+P
ZPYcB2r6H2wBXLte3NDRpej1E6BcWaRAhKcRqGZgYcAD3avCq55wk7C2R+Kopj9j
9tX5RNUleST8Su/INz44zkm6Hbcbakd4TQXSza0M9w/SGqVmVRwLclG/QQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ/o7Ciy7pyOZcmCIyUFRkHFREnfMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvbi1qc0tMTHVuSTVseVlJakpRVkdRY1ZFU2Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUm7gAwQA
Um7jAwQAUm7lMA0GCSqGSIb3DQEBCwUAA4IBAQCGVAqAx011URGIFgNc4TUDsQj7
UP/PpJJ4ZcERgWJxaajPBgzSHa3F9JcQuz3ciNA9kx1bVqIHAC9/BJGsAPandY9p
KMPbh7MNXq+VGwp55WEMVNkIJkZf5gNsNY5fwe+OMVJEMPGWm6qv6NQFFHWkUzhd
Jwr9G+QmGGb/D0Sb3Zad4mAPpdq6MhmOzsOrK4BVqmfoxMGNxEJq82B0RvnJafLH
lkX5W8pO4ycHE/RkqDdB2XY2y41UdRqHgYQ7l7/m5rcQ7F1+9L1q6Bk3dIjX2yeT
CetCg95+ulqbldLoz1DBd9yDldKWycsuGu5me3NgayCbBKFWkXoCaOijgpPi
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:08:45 2026 by rpki-client