Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fGJhNeAracmpLY8Ml1i68C3rAsI.roa
File: fGJhNeAracmpLY8Ml1i68C3rAsI.roa (raw, json)
Hash identifier: BrTj9uWHBwuawVRgI9W4ki2CENeArXW5WhTzUw+OaBc=
Subject key identifier: 7C:62:61:35:E0:2B:69:C9:A9:2D:8F:0C:97:58:BA:F0:2D:EB:02:C2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A11C3B8B7872EB071811F8850A532100CB
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fGJhNeAracmpLY8Ml1i68C3rAsI.roa
Signing time: Thu 08 Oct 2026 15:57:06 +0000
ROA not before: Thu 08 Oct 2026 15:57:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30042
IP address blocks: 87.85.168.0/22 maxlen: 24
87.85.172.0/23 maxlen: 24
91.143.184.0/21 maxlen: 24
194.242.144.0/21 maxlen: 24
212.74.8.0/21 maxlen: 24
212.74.16.0/22 maxlen: 24
212.212.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3b:8b:78:72:eb:07:18:11:f8:85:0a:53:21:00:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 8 15:57:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c626135e02b69c9a92d8f0c9758baf02deb02c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:e5:4b:51:3a:2f:32:58:5c:1c:09:11:e4:
0b:aa:65:6f:61:1c:27:e9:b4:46:28:52:af:49:7a:
f2:33:34:e3:cf:16:c6:5f:da:ad:0e:72:88:d1:73:
a8:9e:60:d1:03:2e:64:f2:0c:4d:73:f4:fb:d6:94:
05:d7:73:72:a7:b8:da:64:5f:9f:7c:bb:d0:92:b5:
f1:84:78:31:6c:46:9e:f1:35:57:b6:01:ca:d8:38:
5f:5b:4c:39:bf:39:54:87:f7:90:1b:d5:25:65:22:
ca:c2:a5:a1:3d:a1:8c:6d:3d:65:d2:1c:f1:15:76:
86:8c:6e:4d:20:93:d0:2d:95:8d:50:82:76:8e:83:
3b:69:38:c0:a3:be:d9:b4:11:e6:8a:8a:2d:58:18:
77:6d:96:7e:07:86:14:92:67:0c:89:9b:b8:ce:4d:
35:37:a0:8a:ef:af:83:21:ad:e8:74:ea:d6:bb:4b:
2e:00:3c:76:3d:be:de:5c:bd:db:d1:46:a3:5c:e3:
75:b9:80:6c:e8:0f:0f:a7:cf:3d:68:e1:3f:fb:23:
1a:78:3d:d0:48:c2:22:1c:fe:06:f4:46:83:cf:48:
5b:c5:92:c8:27:cb:d6:4a:1c:f1:07:f6:49:b1:cc:
d8:c2:6c:37:5e:d5:01:b1:54:89:14:e4:44:d9:6d:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:62:61:35:E0:2B:69:C9:A9:2D:8F:0C:97:58:BA:F0:2D:EB:02:C2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fGJhNeAracmpLY8Ml1i68C3rAsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.168.0-87.85.173.255
91.143.184.0/21
194.242.144.0/21
212.74.8.0-212.74.19.255
212.212.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:06:82:04:ac:8d:67:44:d9:44:8c:f9:43:13:99:9f:ab:39:
17:19:e3:25:e2:c2:ee:4c:f5:eb:f6:e3:e8:e2:cc:05:7a:fb:
61:7c:26:50:b2:fe:10:69:ef:96:ed:8e:50:25:fb:d7:8c:0e:
3b:9f:f4:ae:22:d6:ae:12:2c:69:17:70:e8:b7:c1:f8:58:33:
e1:e5:f3:9f:ff:d3:6f:bc:69:48:d3:18:b8:f7:36:3e:16:98:
9d:8e:46:a2:55:0d:8a:90:78:fe:2a:be:67:0a:1d:1c:1e:ac:
f5:cc:48:e9:5d:6d:4d:7d:76:a0:f8:c0:62:69:5d:b6:11:8a:
fb:a8:5c:6b:49:a7:56:5b:8b:60:f0:48:1c:79:68:95:29:e9:
a9:b6:2f:ac:ba:45:24:1a:e0:1b:dc:f1:c1:a9:a0:20:a4:8f:
db:4b:2b:e8:ad:40:3f:e3:d4:a9:9e:f0:c1:0f:17:3a:bb:2f:
52:9b:1d:a1:eb:e4:3e:fe:ed:b6:c3:41:29:f7:07:97:60:c6:
75:30:d6:d7:1e:a4:84:8d:5e:4e:78:68:26:4d:b8:24:7e:00:
24:d2:29:1c:91:a5:d1:26:ce:3f:be:b8:a2:54:3a:49:16:90:
36:c1:26:a0:7f:30:fd:72:fa:26:46:4a:1a:b3:82:9a:c1:bc:
13:7a:de:14
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAaEcO4t4cusHGBH4hQpTIQDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDA4MTU1NzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzYyNjEzNWUwMmI2OWM5YTkyZDhmMGM5NzU4YmFmMDJkZWIwMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut/lS1E6LzJYXBwJEeQLqmVvYRwn
6bRGKFKvSXryMzTjzxbGX9qtDnKI0XOonmDRAy5k8gxNc/T71pQF13Nyp7jaZF+f
fLvQkrXxhHgxbEae8TVXtgHK2DhfW0w5vzlUh/eQG9UlZSLKwqWhPaGMbT1l0hzx
FXaGjG5NIJPQLZWNUIJ2joM7aTjAo77ZtBHmiootWBh3bZZ+B4YUkmcMiZu4zk01
N6CK76+DIa3odOrWu0suADx2Pb7eXL3b0UajXON1uYBs6A8Pp889aOE/+yMaeD3Q
SMIiHP4G9EaDz0hbxZLIJ8vWShzxB/ZJsczYwmw3XtUBsVSJFORE2W2I/wIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFHxiYTXgK2nJqS2PDJdYuvAt6wLCMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZkdKaE5lQXJhY21wTFk4TWwxaTY4QzNyQXNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBANXVagD
BAFXVawDBANbj7gDBAPC8pAwDAMEA9RKCAMEAtRKEAMEAtTUHDANBgkqhkiG9w0B
AQsFAAOCAQEAbgaCBKyNZ0TZRIz5QxOZn6s5FxnjJeLC7kz16/bj6OLMBXr7YXwm
ULL+EGnvlu2OUCX714wOO5/0riLWrhIsaRdw6LfB+Fgz4eXzn//Tb7xpSNMYuPc2
PhaYnY5GolUNipB4/iq+ZwodHB6s9cxI6V1tTX12oPjAYmldthGK+6hca0mnVluL
YPBIHHlolSnpqbYvrLpFJBrgG9zxwamgIKSP20sr6K1AP+PUqZ7wwQ8XOrsvUpsd
oevkPv7ttsNBKfcHl2DGdTDW1x6khI1eTnhoJk24JH4AJNIpHJGl0SbOP764olQ6
SRaQNsEmoH8w/XL6JkZKGrOCmsG8E3reFA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 08:02:53 2026 by rpki-client