Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-7OkUT7R8i9BLtRefxwIfcClIUU.roa
File: 1-7OkUT7R8i9BLtRefxwIfcClIUU.roa (raw, json)
Hash identifier: yNqRcXzyvx03yp4ViZKGaljpbVZna3m/euJoAD1Hzvk=
Subject key identifier: FB:B3:A4:51:3E:D1:F2:2F:41:2E:D4:5E:7F:1C:08:7D:C0:A5:21:45
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1156B7925F386AF11A4F8E8B771D23699
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-7OkUT7R8i9BLtRefxwIfcClIUU.roa
Signing time: Wed 07 Oct 2026 08:12:07 +0000
ROA not before: Wed 07 Oct 2026 08:12:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 87.83.174.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.85.255.0/24 maxlen: 24
212.134.148.0/22 maxlen: 24
217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:6b:79:25:f3:86:af:11:a4:f8:e8:b7:71:d2:36:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 7 08:12:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbb3a4513ed1f22f412ed45e7f1c087dc0a52145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:15:56:a1:94:5e:7b:c5:e4:81:67:ac:92:
8a:f4:e4:3a:2e:0c:0e:50:6b:63:8e:fc:90:6e:85:
f7:cf:9a:b2:01:93:db:5f:b7:84:2d:24:e0:e8:f7:
e4:c6:6f:f5:0d:ea:56:27:d2:3c:d1:72:3e:e2:27:
e8:95:9c:ca:25:4d:3c:65:7e:34:ea:c0:a4:7e:99:
a0:eb:62:8a:be:9e:67:76:95:16:fc:a0:3f:ac:2b:
60:ae:af:a9:ac:5f:af:49:8d:85:f5:ea:94:c0:95:
52:09:2b:a3:d8:be:78:65:1a:94:72:aa:f8:9e:af:
ad:be:b1:cb:fb:98:ba:e8:4c:92:42:7b:5b:f6:03:
d0:5e:c0:3b:57:09:b3:df:ca:0e:0c:20:bb:56:89:
67:b3:e2:03:62:1b:f8:65:03:fa:8c:48:67:2b:96:
e2:32:6e:12:bc:e3:9b:25:a3:a8:29:a2:c6:06:41:
bd:82:6c:1d:ef:56:0e:d2:7e:9d:34:7a:f9:ac:4a:
fa:17:17:cc:ca:0a:6f:47:cd:93:00:92:15:22:f1:
c9:56:06:3c:48:f9:82:e8:8f:96:e1:9e:d8:0c:aa:
07:d7:e3:b6:8d:c9:bc:9e:93:5c:ce:4a:02:42:95:
bb:fe:72:84:d2:83:32:17:0e:75:04:d0:de:c1:3d:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B3:A4:51:3E:D1:F2:2F:41:2E:D4:5E:7F:1C:08:7D:C0:A5:21:45
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-7OkUT7R8i9BLtRefxwIfcClIUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.174.0/24
87.84.220.0/24
87.85.255.0/24
212.134.148.0/22
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1b:72:64:03:75:45:46:af:38:06:cb:34:51:ce:15:f8:ad:
b0:a0:cc:33:60:b5:cc:75:79:a0:b6:a2:cf:54:53:03:fb:fa:
ca:89:88:1a:5d:4e:11:b2:45:fc:5c:cc:32:22:89:ab:7e:66:
e3:4e:9d:71:0f:d3:41:f9:6e:e7:7e:eb:56:db:f8:fd:48:e8:
59:b9:82:35:74:81:c9:86:03:0b:67:ca:f0:04:d1:79:a9:77:
3c:77:2a:a0:e6:1a:d9:05:dd:97:af:35:3b:09:80:10:cb:d5:
b3:26:82:ab:7d:a0:82:eb:1b:34:f3:68:f3:6e:0e:49:05:01:
00:c8:af:0a:c3:fb:0e:01:ea:07:86:ff:dd:2f:61:cf:c8:b7:
b2:ef:28:e2:67:41:a0:ca:5b:59:66:0d:a3:3a:ac:aa:80:90:
83:b1:b6:53:47:38:ff:d4:39:45:5d:65:b9:6c:1e:5c:9c:cf:
b6:04:e4:1d:6f:00:02:e1:c2:90:fe:63:23:ba:a7:5e:cc:8d:
b4:fa:8d:5d:ba:ea:00:25:d5:42:e2:96:10:b7:79:f2:9c:cc:
07:31:2d:67:0a:b2:29:be:58:fe:7b:3c:09:8f:10:6f:9f:38:
ad:51:c8:13:42:cd:cd:2b:14:9f:a9:86:14:6c:8e:6c:5a:84:
ef:ad:f6:cf
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAaEVa3kl84avEaT46Ldx0jaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDA3MDgxMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmIzYTQ1MTNlZDFmMjJmNDEyZWQ0NWU3ZjFjMDg3ZGMwYTUyMTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1AVVqGUXnvF5IFnrJKK9OQ6LgwO
UGtjjvyQboX3z5qyAZPbX7eELSTg6Pfkxm/1DepWJ9I80XI+4ifolZzKJU08ZX40
6sCkfpmg62KKvp5ndpUW/KA/rCtgrq+prF+vSY2F9eqUwJVSCSuj2L54ZRqUcqr4
nq+tvrHL+5i66EySQntb9gPQXsA7Vwmz38oODCC7Volns+IDYhv4ZQP6jEhnK5bi
Mm4SvOObJaOoKaLGBkG9gmwd71YO0n6dNHr5rEr6FxfMygpvR82TAJIVIvHJVgY8
SPmC6I+W4Z7YDKoH1+O2jcm8npNczkoCQpW7/nKE0oMyFw51BNDewT26TwIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFPuzpFE+0fIvQS7UXn8cCH3ApSFFMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvMS03T2tVVDdSOGk5Qkx0UmVmeHdJZmNDbElVVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODAvNmI2NjJkLTAyYTEtNDZlNy1iOWNkLTAzNWQ5NzdmNDIx
Ni8xL2ZpQ3dOT0xFbDdHSVJJamU4UWFYSndSMlVDay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBVBggrBgEFBQcBBwEB/wRGMEQwQgQCAAEwPAMEAFdTrgME
AFdU3AMEAFdV/wMEAtSGlAMEANnMCgMEANnMDAMEAdnMDgMEAdnMIAMEANnMIwME
ANnMPDANBgkqhkiG9w0BAQsFAAOCAQEAaRtyZAN1RUavOAbLNFHOFfitsKDMM2C1
zHV5oLaiz1RTA/v6yomIGl1OEbJF/FzMMiKJq35m406dcQ/TQflu537rVtv4/Ujo
WbmCNXSByYYDC2fK8ATReal3PHcqoOYa2QXdl681OwmAEMvVsyaCq32ggusbNPNo
824OSQUBAMivCsP7DgHqB4b/3S9hz8i3su8o4mdBoMpbWWYNozqsqoCQg7G2U0c4
/9Q5RV1luWweXJzPtgTkHW8AAuHCkP5jI7qnXsyNtPqNXbrqACXVQuKWELd58pzM
BzEtZwqyKb5Y/ns8CY8Qb584rVHIE0LNzSsUn6mGFGyObFqE7632zw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:57:33 2026 by rpki-client