Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/fWQwN5A2pk_zpdVGoglnMqrxJhE.roa
File: fWQwN5A2pk_zpdVGoglnMqrxJhE.roa (raw, json)
Hash identifier: AF/+uKeoOpEWcWNlzj3E6bJVrdwq6cPfuT9ci9RsNlI=
Subject key identifier: 7D:64:30:37:90:36:A6:4F:F3:A5:D5:46:A2:09:67:32:AA:F1:26:11
Certificate issuer: /CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Certificate serial: 019F23691608ACD30B2117B822C22817E12D
Authority key identifier: A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/fWQwN5A2pk_zpdVGoglnMqrxJhE.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201058
IP address blocks: 82.213.70.0/23 maxlen: 23
82.213.70.0/24 maxlen: 24
82.213.71.0/24 maxlen: 24
82.213.80.0/22 maxlen: 22
82.213.80.0/24 maxlen: 24
82.213.81.0/24 maxlen: 24
82.213.82.0/24 maxlen: 24
82.213.83.0/24 maxlen: 24
82.213.96.0/22 maxlen: 22
82.213.96.0/24 maxlen: 24
82.213.97.0/24 maxlen: 24
82.213.98.0/24 maxlen: 24
82.213.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:16:08:ac:d3:0b:21:17:b8:22:c2:28:17:e1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d6430379036a64ff3a5d546a2096732aaf12611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:57:37:0b:85:f9:56:d3:d6:c5:ab:b7:6a:
5c:89:d4:49:8d:ad:47:0c:99:a2:6f:07:e9:1e:3b:
9e:4d:c1:ed:c9:b2:24:5e:02:9a:a4:24:09:c1:f1:
f6:39:42:57:c3:ad:50:6d:16:97:34:9f:4c:79:74:
03:27:b5:07:6b:b7:9f:e5:40:a1:17:01:c3:3c:57:
77:5f:4d:5b:7a:c4:8b:11:b9:66:2c:b3:a0:ab:e9:
0c:cb:c8:f3:38:b0:2d:f1:bd:18:f9:fc:28:27:58:
fa:6d:ce:3e:16:24:b2:1c:da:f1:ef:3b:fb:5d:e7:
dc:b0:1f:e2:c4:10:ae:13:fb:4d:7a:0f:ff:e0:57:
8a:ab:5e:a1:67:3b:f6:9c:3e:d4:95:02:09:83:44:
8b:4c:47:14:fe:f9:fd:d0:86:5f:06:96:d7:68:f5:
29:bb:6c:4c:01:0f:a1:25:11:1b:ea:f1:f5:c7:38:
c9:a5:4f:32:89:67:fa:13:05:88:28:cf:e6:e8:8b:
84:38:26:1e:fc:40:22:79:af:1d:49:53:c9:57:4b:
43:4e:cc:4e:ac:c6:c6:59:97:07:e2:1c:c6:d5:9b:
74:0b:4c:b8:9f:4d:19:36:ed:3e:11:87:f7:8b:8b:
7a:3e:55:31:1e:fa:3a:54:26:94:5e:6b:b0:d3:33:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:30:37:90:36:A6:4F:F3:A5:D5:46:A2:09:67:32:AA:F1:26:11
X509v3 Authority Key Identifier:
keyid:A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/fWQwN5A2pk_zpdVGoglnMqrxJhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.213.70.0/23
82.213.80.0/22
82.213.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:7e:dd:f0:d4:9d:21:6b:5e:e3:68:d9:51:44:25:3d:3a:52:
c1:7b:3d:73:20:7e:a3:da:5f:e9:d1:b7:ba:3d:d7:68:d5:69:
cb:41:50:26:b9:91:35:d2:c0:fb:57:4b:af:fb:30:2d:60:29:
86:37:ce:35:99:4e:b7:80:d9:66:5c:b8:76:17:54:b4:27:7b:
da:4c:e9:bc:a1:ec:fd:da:ef:b4:c8:c6:a2:b2:a1:4b:6d:77:
cf:5b:ae:89:29:a7:4a:ba:87:bd:37:21:c6:60:ba:7c:a9:dc:
16:70:d4:7f:a7:fc:08:1d:6b:e4:50:fe:40:9d:72:b9:4f:66:
96:8f:19:64:fd:0c:c4:e4:d6:ef:f4:4a:dc:1a:2e:29:fe:70:
fe:c7:97:21:72:b7:b1:f2:e9:38:8a:35:25:85:bd:9b:48:db:
e4:45:fb:a2:b3:95:84:9f:a4:30:39:bb:0b:35:a6:fc:45:bc:
d1:be:8c:05:88:0e:0f:ff:fb:b6:fd:35:b7:69:58:00:90:6a:
b9:db:e8:9d:3b:6b:37:eb:1e:1e:dc:94:61:70:5b:c6:9b:1d:
61:0e:84:83:98:60:17:f7:54:a6:b9:9d:c7:f8:96:e8:09:42:
ee:af:e4:87:3e:04:ae:06:58:02:b3:2d:2b:77:39:69:82:fc:
f6:ed:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:51 2026 by rpki-client