Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/7ZzDO0L4h_HbM--eM6qr1KLP3JA.roa
File: 7ZzDO0L4h_HbM--eM6qr1KLP3JA.roa (raw, json)
Hash identifier: TWWh/tldg5M/RJ+euNxnFq8GzhVgnHyB8368Dgmh07Y=
Subject key identifier: ED:9C:C3:3B:42:F8:87:F1:DB:33:EF:9E:33:AA:AB:D4:A2:CF:DC:90
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F2369496BE621EFBCDFDD8A08EF62D9E7
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/7ZzDO0L4h_HbM--eM6qr1KLP3JA.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199967
IP address blocks: 46.151.36.0/24 maxlen: 24
46.151.37.0/24 maxlen: 24
46.151.38.0/24 maxlen: 24
46.151.39.0/24 maxlen: 24
77.36.62.0/24 maxlen: 24
91.245.184.0/24 maxlen: 24
91.245.185.0/24 maxlen: 24
91.245.186.0/24 maxlen: 24
91.245.187.0/24 maxlen: 24
91.246.192.0/24 maxlen: 24
91.246.193.0/24 maxlen: 24
91.246.194.0/24 maxlen: 24
91.246.195.0/24 maxlen: 24
93.120.100.0/24 maxlen: 24
93.120.101.0/24 maxlen: 24
93.120.102.0/24 maxlen: 24
93.120.103.0/24 maxlen: 24
93.120.104.0/24 maxlen: 24
93.120.105.0/24 maxlen: 24
93.120.106.0/24 maxlen: 24
93.120.107.0/24 maxlen: 24
93.120.108.0/24 maxlen: 24
93.120.109.0/24 maxlen: 24
93.120.110.0/24 maxlen: 24
93.120.111.0/24 maxlen: 24
93.120.112.0/24 maxlen: 24
93.120.113.0/24 maxlen: 24
93.120.114.0/24 maxlen: 24
93.120.115.0/24 maxlen: 24
93.120.116.0/24 maxlen: 24
93.120.117.0/24 maxlen: 24
93.120.118.0/24 maxlen: 24
93.120.119.0/24 maxlen: 24
93.120.124.0/24 maxlen: 24
93.120.125.0/24 maxlen: 24
93.120.126.0/24 maxlen: 24
93.120.127.0/24 maxlen: 24
176.96.94.0/24 maxlen: 24
176.113.180.0/24 maxlen: 24
176.113.181.0/24 maxlen: 24
176.113.182.0/24 maxlen: 24
176.113.183.0/24 maxlen: 24
176.113.184.0/24 maxlen: 24
176.113.185.0/24 maxlen: 24
176.113.186.0/24 maxlen: 24
176.113.187.0/24 maxlen: 24
176.113.188.0/24 maxlen: 24
176.113.189.0/24 maxlen: 24
176.113.190.0/24 maxlen: 24
176.113.191.0/24 maxlen: 24
176.116.232.0/24 maxlen: 24
176.116.233.0/24 maxlen: 24
176.116.234.0/24 maxlen: 24
176.116.235.0/24 maxlen: 24
178.212.184.0/24 maxlen: 24
178.212.185.0/24 maxlen: 24
178.212.186.0/24 maxlen: 24
178.212.187.0/24 maxlen: 24
178.212.188.0/24 maxlen: 24
178.212.189.0/24 maxlen: 24
178.212.190.0/24 maxlen: 24
178.212.191.0/24 maxlen: 24
194.33.100.0/24 maxlen: 24
194.33.101.0/24 maxlen: 24
194.33.102.0/24 maxlen: 24
194.33.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:49:6b:e6:21:ef:bc:df:dd:8a:08:ef:62:d9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed9cc33b42f887f1db33ef9e33aaabd4a2cfdc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:aa:df:d9:d9:da:cc:53:d3:f0:dd:57:b0:
a0:0a:df:83:fa:4d:74:62:22:98:10:3d:b3:6e:9b:
6c:cb:b9:08:77:e9:e2:c9:12:78:6a:48:91:17:57:
af:a9:b8:df:d3:a5:15:a7:a6:08:ac:f0:ff:1b:a8:
b5:a7:fa:e7:57:a7:96:6f:ba:4e:87:56:ef:dc:34:
50:8f:da:76:e6:7b:8e:eb:cb:b9:7a:ec:4b:5d:a1:
c0:20:40:fb:df:1e:31:eb:02:81:d1:e4:69:dc:23:
ec:1b:a2:a1:3e:78:80:46:4b:64:24:48:46:eb:e5:
34:33:36:c5:f8:dd:17:04:0d:f5:38:42:13:50:c8:
dc:5c:35:e8:27:3a:5b:da:da:07:09:7d:d3:b4:6c:
49:5f:a1:d2:99:eb:f3:87:6f:1f:4f:b8:12:c4:7c:
bf:59:51:1d:63:06:5e:18:06:49:d9:81:cb:f5:4c:
b8:6d:e4:0d:9b:9d:d7:96:0c:4c:b1:95:a5:15:4d:
0a:fd:3e:bd:bb:00:1e:c2:4e:a5:32:8a:7a:44:52:
5c:01:6e:91:14:19:2a:50:85:d1:59:a9:e5:03:dc:
92:f1:64:ef:d0:85:89:4d:7c:a7:06:04:b3:42:af:
6b:66:68:ae:ef:15:96:28:cb:b1:91:aa:03:e6:0f:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9C:C3:3B:42:F8:87:F1:DB:33:EF:9E:33:AA:AB:D4:A2:CF:DC:90
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/7ZzDO0L4h_HbM--eM6qr1KLP3JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.36.0/22
77.36.62.0/24
91.245.184.0/22
91.246.192.0/22
93.120.100.0-93.120.119.255
93.120.124.0/22
176.96.94.0/24
176.113.180.0-176.113.191.255
176.116.232.0/22
178.212.184.0/21
194.33.100.0/22
Signature Algorithm: sha256WithRSAEncryption
46:be:88:80:1d:2a:46:81:39:44:31:83:fe:4c:77:1a:65:0d:
15:e9:20:52:0a:01:e8:ac:ba:fa:61:fc:c0:9e:66:dc:5f:84:
2d:d0:9e:20:32:c0:1e:6a:0c:08:62:94:5d:34:be:fe:7c:dc:
0a:ae:57:3a:7b:ad:f9:63:59:93:c5:c4:58:a2:48:30:f7:58:
98:23:09:dc:d4:7d:a2:ed:60:ae:4a:29:b4:04:fb:54:5d:c0:
ab:00:9d:20:51:13:c4:98:f2:19:53:3e:9b:ea:26:02:86:30:
d4:25:7d:59:8c:dc:16:fa:8d:5e:71:ac:8e:18:17:9d:0d:f0:
4d:13:7f:e1:e1:2a:5d:9a:47:50:29:04:65:9c:83:db:4f:42:
b2:5e:0c:c9:dd:f4:de:40:ac:ce:9c:f9:00:f6:9e:2d:f5:70:
c7:6d:24:62:84:65:7a:47:e9:07:3d:72:5e:ea:64:00:c3:d0:
5e:62:50:d9:c8:48:90:7b:89:61:8e:97:f2:62:08:d8:77:71:
23:e9:5d:b0:ce:f2:47:7f:e3:24:72:ce:f2:9c:0d:d1:e6:77:
52:03:4e:9d:f0:80:4d:5a:37:9f:98:b5:81:d1:f2:8e:cf:79:
1c:ef:6a:2f:ad:38:1c:0e:2a:c9:59:b8:6a:a1:38:b5:ca:8d:
1f:7d:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:28 2026 by rpki-client