Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AIvkvoyevLtzrUkdOUv9NwSVxgA.roa
File: AIvkvoyevLtzrUkdOUv9NwSVxgA.roa (raw, json)
Hash identifier: lW/BjQYAVNVcDXp/LI9uopyaMPrcHAQABNLN77ckvJ4=
Subject key identifier: 00:8B:E4:BE:8C:9E:BC:BB:73:AD:49:1D:39:4B:FD:37:04:95:C6:00
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1499A8E9A02923A4D3AD6AAFD540D35E8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AIvkvoyevLtzrUkdOUv9NwSVxgA.roa
Signing time: Sat 17 Oct 2026 11:23:48 +0000
ROA not before: Sat 17 Oct 2026 11:23:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.34.0.0/24 maxlen: 24
82.108.123.0/24 maxlen: 24
82.110.124.0/22 maxlen: 22
87.84.233.0/24 maxlen: 24
87.85.64.0/24 maxlen: 24
87.86.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:9a:8e:9a:02:92:3a:4d:3a:d6:aa:fd:54:0d:35:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 17 11:23:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=008be4be8c9ebcbb73ad491d394bfd370495c600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:76:2d:de:63:62:cc:36:fe:39:a7:07:95:
73:b9:c0:e8:aa:d6:cf:cc:f4:c1:7c:ce:f6:c7:92:
f4:08:a0:67:aa:ef:c2:73:21:d2:bc:46:9e:f5:ca:
12:92:b9:5c:dc:3b:79:1a:97:c9:62:6b:49:b7:56:
f7:29:a1:02:96:c9:ae:de:a8:d7:6d:7c:3c:ab:fd:
85:32:1a:04:6a:39:b9:49:c1:8b:ef:20:a4:f9:da:
bc:8a:fc:68:45:88:a4:a1:17:f8:85:db:9e:eb:eb:
0b:e7:b9:7c:91:e3:2c:f6:80:01:75:59:c2:e1:15:
95:9b:b7:c0:23:20:50:39:3a:75:8f:17:58:59:fd:
84:60:c6:a0:82:5a:20:a0:90:3f:5d:26:3f:aa:d7:
80:da:a1:2b:df:7e:95:24:12:3a:de:d8:61:7a:6c:
27:d0:3c:ad:f3:e1:a4:e9:60:14:89:8b:60:10:af:
05:a0:ec:a0:dc:59:20:f1:b1:54:a8:58:35:0a:40:
b5:29:81:06:96:8e:68:ee:1b:72:2f:be:99:d5:c5:
55:cc:5f:5e:47:1a:cb:10:94:17:99:67:d1:23:58:
12:fb:e8:58:24:b1:e3:d1:7c:c9:69:ce:94:43:ad:
8c:97:82:8e:cf:2b:52:c6:a1:71:c1:3a:52:54:67:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:E4:BE:8C:9E:BC:BB:73:AD:49:1D:39:4B:FD:37:04:95:C6:00
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AIvkvoyevLtzrUkdOUv9NwSVxgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
82.108.123.0/24
82.110.124.0/22
87.84.233.0/24
87.85.64.0/24
87.86.212.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:d8:e8:92:0f:b7:37:0f:5a:8b:c5:ac:34:96:96:1d:ce:b2:
57:fc:9b:26:07:eb:1f:be:09:e3:be:cf:85:a2:15:c6:48:55:
4a:54:f3:3f:57:29:8b:21:b5:e4:94:95:23:5f:1b:bd:87:7c:
c3:2c:d1:e4:48:24:5f:9a:e0:e0:ed:79:f7:bc:f2:df:ac:bd:
c5:67:ca:16:37:df:1e:85:65:34:ee:74:ce:0d:44:69:00:66:
62:3f:f1:52:de:07:71:d3:e0:8f:07:3f:10:de:f3:55:cc:70:
6b:00:2c:77:82:ae:96:ef:7e:c7:14:e4:19:5b:23:fb:d9:d6:
4d:9e:b1:d6:18:16:e9:d4:6d:38:68:b3:d9:54:15:4b:24:58:
0e:01:cd:7a:49:6c:e5:6a:d5:ca:30:33:a2:e4:04:0e:66:b4:
6a:57:8c:f0:d1:91:e3:fb:69:9b:32:ea:67:ec:b1:3c:38:11:
7d:fa:ab:c9:a3:ae:53:f2:d9:53:52:7b:39:46:6b:2f:1a:41:
2e:75:a0:2e:b4:5a:47:a5:5b:69:b5:96:5e:89:11:3a:0e:61:
6d:d8:90:e1:46:35:f5:ac:4e:30:b9:d3:70:76:36:7e:b9:dd:
0b:01:6e:cc:b2:7b:f8:5f:ef:fd:3c:d1:21:1b:10:01:bc:cf:
aa:f4:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:39 2026 by rpki-client