Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nwI4Qsyb0hHuVTU1OM4snJTGVw4.roa
File: nwI4Qsyb0hHuVTU1OM4snJTGVw4.roa (raw, json)
Hash identifier: nv+ScwuJrK/XfJEmxJQBPGIuOmY5VT/5SD4aJNuRKuY=
Subject key identifier: 9F:02:38:42:CC:9B:D2:11:EE:55:35:35:38:CE:2C:9C:94:C6:57:0E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8FE45ADDAF4E3590821FD64B42EC398D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nwI4Qsyb0hHuVTU1OM4snJTGVw4.roa
Signing time: Thu 23 Jul 2026 16:52:15 +0000
ROA not before: Thu 23 Jul 2026 16:52:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 82.108.173.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.84.188.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:e4:5a:dd:af:4e:35:90:82:1f:d6:4b:42:ec:39:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 16:52:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f023842cc9bd211ee55353538ce2c9c94c6570e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:45:c0:80:50:f0:c9:aa:d8:3d:a2:ce:d7:
e8:27:b5:15:c0:0b:bc:b9:22:fd:42:a9:8c:be:fc:
47:f3:1f:db:2a:46:71:7d:c9:00:88:82:27:0f:49:
04:e4:45:e7:7a:8d:71:65:b2:ca:66:0c:56:b2:77:
1a:d0:85:90:72:47:46:98:c6:3b:1e:f7:16:2f:e8:
e5:cd:0a:2e:7e:fd:c1:95:ca:11:20:26:bd:78:a9:
bb:d1:18:27:26:c9:59:4c:79:c3:bb:fb:0c:55:72:
26:1e:5c:7c:67:c3:d2:db:78:20:19:10:8c:5c:42:
b1:9f:8b:64:f2:20:40:bd:21:9a:46:90:ae:a5:41:
55:84:7d:69:45:a7:30:ce:b8:2c:a9:51:4d:c3:45:
21:00:21:2e:2b:cf:61:0b:3e:dd:f3:b3:fc:70:a2:
d0:95:7f:5b:65:07:8c:3b:73:94:ed:f9:2c:0e:24:
5f:6e:bb:38:7e:ea:21:01:2d:a2:e7:76:20:47:7a:
c4:18:cc:2c:8d:84:62:d5:87:64:18:52:2c:65:98:
68:1f:dc:77:77:af:57:e5:1c:18:11:f4:0c:b5:b0:
f2:7e:f7:fa:3e:a5:6d:93:5f:4b:49:92:89:1d:f3:
42:a3:71:09:5f:35:24:b5:b6:39:60:9c:47:ba:a6:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:38:42:CC:9B:D2:11:EE:55:35:35:38:CE:2C:9C:94:C6:57:0E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nwI4Qsyb0hHuVTU1OM4snJTGVw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.173.0/24
82.109.98.0/24
82.109.151.0/24
87.83.232.0/24
87.84.188.0/24
87.84.232.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f6:bf:89:de:d6:6a:e8:5e:d6:91:81:74:45:58:14:94:e8:
03:b4:de:76:cc:a3:ce:4b:93:bf:1e:cc:38:da:6f:96:c4:db:
57:bb:d1:99:ae:e4:62:58:2d:0e:b7:c8:8d:4f:6b:08:79:fa:
14:e7:a6:2f:5f:88:dd:1c:95:5f:0f:40:22:5d:05:37:91:35:
98:77:e7:5a:f2:e1:dc:ff:7f:2d:e4:72:16:91:d8:d2:d2:a5:
3d:8b:6d:3e:06:86:48:ba:3f:a6:12:50:4b:74:f8:8c:b6:b4:
c2:9d:50:a2:d6:1b:19:ee:4e:c4:5a:92:19:19:01:2e:a4:44:
cf:6e:20:f7:01:30:37:28:93:97:21:0a:ea:a0:95:92:43:c8:
bb:31:79:d3:e4:56:5c:78:62:89:19:e7:57:75:5c:61:6c:2a:
5c:fb:0e:35:6c:2d:35:73:79:2b:ec:5e:78:e6:c1:db:6f:ec:
a0:d6:0d:a4:6a:35:2a:37:7d:0c:d7:1c:07:a8:06:60:a6:21:
59:f1:11:87:a7:ac:8e:21:36:c6:4e:1b:82:18:67:08:54:08:
cc:f7:b8:d9:30:7c:96:84:a1:2e:85:c5:71:a9:34:ba:30:fd:
72:93:19:3a:38:be:13:f5:0d:0b:36:12:6a:b8:af:78:60:6b:
36:4d:df:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:59 2026 by rpki-client