Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n1ClidJLlCFFtNJyPJBuElJVpz0.roa
File: n1ClidJLlCFFtNJyPJBuElJVpz0.roa (raw, json)
Hash identifier: y+/INrQVcLrKY2izifivlH7gvHKtmgKzgVxeqBskPc0=
Subject key identifier: 9F:50:A5:89:D2:4B:94:21:45:B4:D2:72:3C:90:6E:12:52:55:A7:3D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1776D79473BBB34EAC030E2E7E1570770
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n1ClidJLlCFFtNJyPJBuElJVpz0.roa
Signing time: Mon 26 Oct 2026 08:57:05 +0000
ROA not before: Mon 26 Oct 2026 08:57:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 82.108.77.0/24 maxlen: 24
212.212.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:6d:79:47:3b:bb:34:ea:c0:30:e2:e7:e1:57:07:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 26 08:57:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f50a589d24b942145b4d2723c906e125255a73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:b8:99:66:21:58:1f:55:3b:d6:88:12:68:
8e:7a:ad:8c:25:ba:08:48:96:44:64:28:b3:a8:f4:
c4:e4:bb:d1:68:f2:2a:fa:6a:19:f6:21:81:4b:85:
69:f1:16:08:a5:e7:75:10:b1:12:66:e1:00:b2:eb:
4d:53:3c:ba:11:95:43:e7:99:9a:73:47:23:8e:2e:
22:44:71:4d:ce:0e:c5:06:b7:b4:06:29:0b:5a:61:
6d:cf:76:38:85:66:73:9f:5d:c9:35:0c:a4:1a:ea:
5b:7a:46:75:ee:3d:3c:9e:60:e4:77:e4:d4:0c:67:
e6:45:71:32:79:b6:ed:29:2d:fd:5d:7a:f9:ab:10:
dd:ca:98:8a:66:68:74:14:18:18:d6:a3:96:84:e1:
06:8d:16:15:52:d6:dd:82:cb:88:10:de:14:d2:86:
09:ab:68:59:5b:9a:79:e4:83:b6:0a:fa:0a:b7:da:
60:c2:c7:f0:d0:d7:e4:fb:aa:9d:72:d4:1f:b0:8c:
08:39:0e:b8:88:89:00:1f:c0:b6:a2:8c:94:44:8b:
cd:00:e4:45:e0:f0:82:3e:22:62:a2:e8:28:c7:0b:
d9:01:b5:8f:20:4b:1d:35:5c:95:87:a8:8f:24:4d:
5d:fe:dc:81:f2:ce:d5:3f:18:c8:96:23:9d:4c:dd:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:50:A5:89:D2:4B:94:21:45:B4:D2:72:3C:90:6E:12:52:55:A7:3D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n1ClidJLlCFFtNJyPJBuElJVpz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.77.0/24
212.212.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:01:8c:51:06:4b:65:96:3b:23:b2:e3:d6:4f:9c:7a:b8:a5:
66:7b:42:6c:1d:cf:9f:b1:d1:b0:7f:e9:c5:78:24:fa:46:eb:
c2:45:cb:45:73:48:f8:49:b6:65:a8:a2:37:d0:50:a3:75:10:
0f:66:26:37:28:1b:31:c4:45:be:df:fd:9d:59:da:23:b5:4f:
ce:96:50:f0:53:a8:01:0f:64:47:77:c6:e5:64:7f:35:32:44:
35:3a:35:49:92:b9:98:33:7d:7b:98:a0:97:c1:e8:ff:df:c6:
64:ec:54:d0:8d:9f:98:2c:04:a4:14:b7:6c:ad:04:d1:35:f0:
cc:56:c7:c9:3b:8d:8d:e8:ac:6a:e4:03:9d:a2:8f:4b:98:3e:
fb:a9:ad:c0:0c:4d:1d:81:8b:e0:af:98:1f:80:c5:15:77:ed:
5c:48:9b:62:5a:47:bb:c6:97:24:e5:04:ac:0f:06:fa:da:d5:
48:27:50:47:dd:01:4b:77:8d:4e:00:21:9d:81:57:df:fb:1c:
ae:ac:a2:02:1a:f5:1c:d7:29:3e:0f:33:f1:cf:96:c4:a7:c5:
ea:ec:db:ab:85:11:cf:f0:d9:6d:2f:a9:0e:92:01:77:e7:84:
b8:f5:48:d8:e2:cd:f3:96:0b:27:1a:ba:ca:b0:87:9c:84:94:
2c:5c:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:20 2026 by rpki-client