Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yS3eSVknRTPGz1oDCv4-NgTDeBQ.roa
File: yS3eSVknRTPGz1oDCv4-NgTDeBQ.roa (raw, json)
Hash identifier: FWymrOeuc2sjiE29JtMo+Rw/VQfcKzdTJ/ib0Uz5hYI=
Subject key identifier: C9:2D:DE:49:59:27:45:33:C6:CF:5A:03:0A:FE:3E:36:04:C3:78:14
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D28B969264EB607D5C2BCA13933E11D6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yS3eSVknRTPGz1oDCv4-NgTDeBQ.roa
Signing time: Thu 24 Sep 2026 08:32:38 +0000
ROA not before: Thu 24 Sep 2026 08:32:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 82.109.151.0/24 maxlen: 24
87.83.2.0/24 maxlen: 24
87.83.46.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.85.232.0/24 maxlen: 24
87.85.255.0/24 maxlen: 24
212.134.17.0/24 maxlen: 24
212.134.37.0/24 maxlen: 24
212.134.41.0/24 maxlen: 24
212.134.48.0/24 maxlen: 24
212.134.51.0/24 maxlen: 24
212.134.56.0/24 maxlen: 24
212.134.123.0/24 maxlen: 24
212.134.140.0/24 maxlen: 24
212.134.142.0/24 maxlen: 24
212.134.148.0/22 maxlen: 24
212.134.152.0/24 maxlen: 24
212.134.170.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.190.0/24 maxlen: 24
212.134.191.0/24 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.205.0/24 maxlen: 24
212.134.218.0/24 maxlen: 24
212.134.228.0/24 maxlen: 24
212.134.239.0/24 maxlen: 24
212.134.248.0/24 maxlen: 24
212.134.249.0/24 maxlen: 24
212.135.27.0/24 maxlen: 24
212.135.28.0/24 maxlen: 24
212.135.145.0/24 maxlen: 24
212.135.151.0/24 maxlen: 24
212.135.156.0/24 maxlen: 24
212.135.160.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
212.135.198.0/24 maxlen: 24
212.135.240.0/24 maxlen: 24
217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:8b:96:92:64:eb:60:7d:5c:2b:ca:13:93:3e:11:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 08:32:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c92dde4959274533c6cf5a030afe3e3604c37814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c5:ef:aa:44:64:89:ba:14:1e:c3:b6:d0:f6:
74:fd:fe:46:24:ef:c7:22:b2:ae:14:13:28:2a:06:
4c:31:2d:e0:5c:23:b7:57:cf:da:cb:6b:e6:d2:93:
f0:d6:fd:a8:59:c6:9e:64:c5:1a:a2:e2:5a:e4:ac:
82:66:1c:3d:44:4e:58:34:7a:6b:66:77:57:c9:69:
36:4f:b4:98:f2:c7:ca:a7:07:79:46:fa:44:8b:c7:
5f:07:e6:26:eb:d4:8a:63:7a:dc:d3:18:06:45:aa:
66:5a:64:4a:d3:13:c4:79:5c:13:72:74:12:7e:b6:
aa:6d:5e:15:62:58:81:a6:e6:d5:42:e3:d4:99:39:
90:6e:2c:4e:41:c5:2a:b1:34:bf:33:44:da:28:48:
86:10:ff:3a:2d:bc:87:36:8d:cd:e6:cd:a7:00:b2:
64:d4:5b:a9:f8:4c:58:69:06:01:af:a6:77:3b:f3:
43:51:d6:bb:18:43:eb:8e:40:e3:dc:32:80:ef:34:
6e:ab:83:75:d8:d7:89:47:31:7b:73:1c:32:5c:81:
24:a3:76:e7:f6:09:d8:29:1b:64:95:59:ca:a4:c8:
79:2e:99:b3:0e:fd:ec:90:61:b6:c1:6a:87:05:f1:
b9:a9:19:cd:15:79:8d:da:2a:4a:50:0c:72:04:06:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:DE:49:59:27:45:33:C6:CF:5A:03:0A:FE:3E:36:04:C3:78:14
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yS3eSVknRTPGz1oDCv4-NgTDeBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.151.0/24
87.83.2.0/24
87.83.46.0/24
87.83.174.0/24
87.84.220.0/24
87.85.232.0/24
87.85.255.0/24
212.134.17.0/24
212.134.37.0/24
212.134.41.0/24
212.134.48.0/24
212.134.51.0/24
212.134.56.0/24
212.134.123.0/24
212.134.140.0/24
212.134.142.0/24
212.134.148.0-212.134.152.255
212.134.170.0/24
212.134.176.0/24
212.134.190.0/23
212.134.199.0/24
212.134.205.0/24
212.134.218.0/24
212.134.228.0/24
212.134.239.0/24
212.134.248.0/23
212.135.27.0-212.135.28.255
212.135.145.0/24
212.135.151.0/24
212.135.156.0/24
212.135.160.0/24
212.135.165.0-212.135.166.255
212.135.170.0/24
212.135.172.0/23
212.135.198.0/24
212.135.240.0/24
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:31:cc:33:12:80:0e:97:c0:5b:51:b5:c8:52:1c:55:8c:3f:
55:b4:8d:6f:c8:c7:ba:7c:b1:0d:a9:dc:ea:fa:8f:ed:98:24:
f0:c8:7e:04:6d:6d:d7:db:f1:1d:b5:fb:27:3e:4f:0b:84:31:
66:00:ff:2f:23:2d:48:52:db:5d:11:96:07:ce:ad:85:5b:5d:
a4:40:81:7a:e6:b4:af:d9:23:1f:c7:3a:cd:83:16:00:fb:a6:
63:74:00:95:ac:76:32:2d:8c:19:23:ab:f1:f7:08:a3:a6:3d:
90:a1:b7:63:41:f3:95:c6:cf:3f:b0:3d:b3:58:19:f7:1d:64:
ee:41:7d:76:69:d6:75:bf:3f:c2:dd:77:20:67:14:43:b1:59:
56:5b:e8:c0:41:92:31:f9:1b:bb:8e:49:fb:c4:1d:d8:f8:2b:
18:da:5a:ab:b6:7c:ac:2e:fb:a2:2e:20:7c:6d:83:5a:06:dc:
d7:da:eb:cc:27:89:d0:73:2e:d4:2f:7e:64:cf:7a:cc:e3:e3:
c2:c5:08:65:b9:62:d1:07:7d:e9:4a:cd:76:b4:5b:83:eb:ca:
18:96:8b:2f:f0:f0:64:c1:43:e6:6e:81:08:48:a7:92:39:16:
fa:f4:58:04:87:60:5d:e8:df:17:38:13:19:24:e6:c6:0b:82:
36:f0:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:49 2026 by rpki-client