Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vE8sZZdiB4L-vj8bqgn0FtXlp6M.roa
File: vE8sZZdiB4L-vj8bqgn0FtXlp6M.roa (raw, json)
Hash identifier: VPpJF6Qlv9yeJjhg1JYoZ5hg9w+vD7dyPDorFHaaX0Y=
Subject key identifier: BC:4F:2C:65:97:62:07:82:FE:BE:3F:1B:AA:09:F4:16:D5:E5:A7:A3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8D54D6A78A6A41A1B1E4C1A00E0E35BE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vE8sZZdiB4L-vj8bqgn0FtXlp6M.roa
Signing time: Thu 23 Jul 2026 04:56:15 +0000
ROA not before: Thu 23 Jul 2026 04:56:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42960
IP address blocks: 82.109.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:54:d6:a7:8a:6a:41:a1:b1:e4:c1:a0:0e:0e:35:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 04:56:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc4f2c6597620782febe3f1baa09f416d5e5a7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:51:f2:45:0e:4d:26:a5:42:dd:18:75:27:
fa:19:75:f7:c1:31:10:b2:9b:16:5b:ba:d1:f7:1d:
a3:24:b6:0a:0e:6c:03:4b:f4:74:f1:89:2c:60:02:
ac:1f:4e:cc:2c:89:35:a8:a9:03:eb:3e:ef:5b:03:
98:08:fb:04:5e:04:2d:39:65:19:07:82:44:b1:1b:
f6:4d:59:3b:f4:91:f3:26:6b:ed:63:75:46:db:99:
63:6d:7a:b6:ef:b5:7f:47:63:a1:c9:8b:f6:44:ff:
03:c9:60:01:74:5f:2f:6a:f2:bb:15:72:98:fa:7b:
73:00:6f:43:aa:c0:1a:d0:ad:d6:87:28:ea:e0:12:
b7:60:c6:90:40:cc:cc:56:45:6f:1a:19:4b:32:36:
96:1a:27:36:66:ca:5d:f6:31:a0:4e:90:50:3b:21:
7b:c9:2a:6f:d4:29:8f:da:e9:90:35:3e:a6:7e:8b:
5d:12:23:fd:ac:1f:1a:4a:5a:1f:7b:05:0f:6d:e5:
3f:13:11:4f:16:74:ce:9a:5f:44:ed:30:a0:de:60:
c2:ab:b4:0d:52:21:2c:84:4e:a3:40:a3:ff:f4:41:
2c:4a:c5:36:6f:01:25:9e:f3:3d:3e:60:e1:e2:07:
98:22:0d:fc:ce:17:82:f7:ea:65:d7:c6:22:b0:ed:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4F:2C:65:97:62:07:82:FE:BE:3F:1B:AA:09:F4:16:D5:E5:A7:A3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vE8sZZdiB4L-vj8bqgn0FtXlp6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3e:8b:36:6d:e4:23:4a:6a:08:53:e9:50:34:ce:ec:95:53:
75:a3:a4:75:a5:13:cf:68:d8:63:62:4f:30:9e:3e:3e:68:ab:
cc:62:8d:14:92:5a:25:52:96:28:06:73:3d:87:d2:d1:02:95:
d2:6a:ee:4f:b1:a4:86:df:d2:26:89:71:6f:c9:40:da:aa:41:
8c:cd:7d:a5:86:0d:9a:74:81:68:d1:97:4b:7f:4a:14:f6:f7:
07:e7:39:b3:c2:e3:03:1b:1d:f3:80:b6:ae:03:d3:b6:a3:c9:
f6:c9:67:92:ad:2a:99:2e:fb:14:03:b3:95:52:93:80:02:3f:
01:35:7f:8d:c1:52:ab:4b:56:cb:1b:2a:af:24:8a:36:fb:3b:
a2:09:1f:95:ee:a9:5c:75:3d:8c:e3:a3:4b:9f:7c:cf:4b:64:
87:5c:39:aa:c1:fb:c5:b8:bc:9d:8c:49:f8:73:b6:f1:42:e5:
8b:58:3e:50:ea:b6:22:41:ea:c4:0c:33:c9:2a:9f:32:65:dd:
bb:9b:05:43:c5:b9:13:25:00:4e:d8:bb:31:90:e8:b8:df:a6:
d3:06:cb:b9:7d:28:a0:84:eb:11:76:0f:2a:be:3b:ca:03:cf:
fe:37:a7:fe:5a:fb:24:98:9f:49:1d:5e:6c:9d:3a:71:71:33:
5c:fc:43:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+NVNanimpBobHkwaAODjW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzIzMDQ1NjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzRmMmM2NTk3NjIwNzgyZmViZTNmMWJhYTA5ZjQxNmQ1ZTVhN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufRR8kUOTSalQt0YdSf6GXX3wTEQ
spsWW7rR9x2jJLYKDmwDS/R08YksYAKsH07MLIk1qKkD6z7vWwOYCPsEXgQtOWUZ
B4JEsRv2TVk79JHzJmvtY3VG25ljbXq277V/R2OhyYv2RP8DyWABdF8vavK7FXKY
+ntzAG9DqsAa0K3Whyjq4BK3YMaQQMzMVkVvGhlLMjaWGic2Zspd9jGgTpBQOyF7
ySpv1CmP2umQNT6mfotdEiP9rB8aSlofewUPbeU/ExFPFnTOml9E7TCg3mDCq7QN
UiEshE6jQKP/9EEsSsU2bwElnvM9PmDh4geYIg38zheC9+pl18YisO27mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxPLGWXYgeC/r4/G6oJ9BbV5aejMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvdkU4c1paZGlCNEwtdmo4YnFnbjBGdFhscDZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUm08MA0G
CSqGSIb3DQEBCwUAA4IBAQBOPos2beQjSmoIU+lQNM7slVN1o6R1pRPPaNhjYk8w
nj4+aKvMYo0UklolUpYoBnM9h9LRApXSau5PsaSG39ImiXFvyUDaqkGMzX2lhg2a
dIFo0ZdLf0oU9vcH5zmzwuMDGx3zgLauA9O2o8n2yWeSrSqZLvsUA7OVUpOAAj8B
NX+NwVKrS1bLGyqvJIo2+zuiCR+V7qlcdT2M46NLn3zPS2SHXDmqwfvFuLydjEn4
c7bxQuWLWD5Q6rYiQerEDDPJKp8yZd27mwVDxbkTJQBO2LsxkOi436bTBsu5fSig
hOsRdg8qvjvKA8/+N6f+WvskmJ9JHV5snTpxcTNc/ENV
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:22 2026 by rpki-client