Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-B7Vu3fgn_z9_jsHMuLlWJ8b9to.roa
File: 1-B7Vu3fgn_z9_jsHMuLlWJ8b9to.roa (raw, json)
Hash identifier: jghHwCpTMu42IQOnYLNg4RGXaIaA4bhRIkWxfUD13FQ=
Subject key identifier: F8:1E:D5:BB:77:E0:9F:FC:FD:FE:3B:07:32:E2:E5:58:9F:1B:F6:DA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F3432B1308A064761286127547D5FFFF6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-B7Vu3fgn_z9_jsHMuLlWJ8b9to.roa
Signing time: Sun 05 Jul 2026 21:32:45 +0000
ROA not before: Sun 05 Jul 2026 21:32:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.34.0.0/24 maxlen: 24
87.82.217.0/24 maxlen: 24
212.134.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:34:32:b1:30:8a:06:47:61:28:61:27:54:7d:5f:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 5 21:32:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f81ed5bb77e09ffcfdfe3b0732e2e5589f1bf6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:57:a7:56:fe:fe:95:63:cd:89:04:ee:46:
13:3c:eb:0e:0f:f1:32:f8:d8:66:2c:bb:8a:6c:97:
a9:46:88:b4:24:fe:e5:8d:f5:6d:48:78:26:b7:c9:
5c:5c:78:47:42:7f:fc:55:92:a1:43:fc:04:a4:0e:
70:fe:7a:b8:2a:0f:8a:d5:3a:df:7a:9f:57:47:9b:
71:75:fc:6c:b2:d4:33:e0:2d:e1:c2:54:d5:18:31:
11:17:f2:92:78:99:a4:df:3d:f9:6f:b2:f2:0b:c0:
4d:7a:22:a4:88:f6:73:58:4c:02:6d:83:12:0f:35:
55:0a:a2:6d:2a:e1:8f:10:90:28:80:e1:37:8c:99:
5e:cb:40:dd:36:dc:61:86:41:ca:ce:8a:97:40:63:
28:ff:20:90:4d:cd:73:72:40:cb:cf:02:1d:2b:ac:
ab:dc:df:87:ff:f8:26:c3:53:73:59:fb:a0:cc:e1:
66:5e:23:45:ca:80:9b:fc:3e:cc:09:0c:63:97:07:
64:38:9c:bb:f7:5f:82:ec:60:8f:c6:11:a9:77:35:
b0:08:3a:c4:81:57:a4:71:dd:db:10:ce:d2:53:46:
37:67:03:d4:f3:da:ad:41:9d:09:56:ef:91:7f:57:
32:ee:5f:a5:5d:34:fb:e9:c0:6a:9d:8b:f2:2e:13:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:D5:BB:77:E0:9F:FC:FD:FE:3B:07:32:E2:E5:58:9F:1B:F6:DA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-B7Vu3fgn_z9_jsHMuLlWJ8b9to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
87.82.217.0/24
212.134.144.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a3:48:aa:13:d6:6d:25:fa:91:75:f0:f6:79:84:81:1f:09:
93:37:00:04:e3:8d:1f:89:3d:88:68:c0:f9:89:5d:29:54:bd:
b7:5d:f4:80:3b:28:bc:fa:2c:ca:6d:c3:38:37:c5:7d:2d:73:
98:0e:a4:76:4c:ae:20:73:14:ee:af:89:74:d2:24:14:11:e3:
42:43:0c:a4:af:f0:b9:fb:04:15:ef:71:09:2e:60:44:55:bf:
09:a3:9b:0b:fa:08:fa:ab:d5:26:55:bb:d2:0b:f9:48:86:8e:
54:e0:16:7b:f1:f3:13:37:43:3a:2f:0a:3f:2c:0f:25:63:48:
57:70:8a:7d:5c:b3:b0:90:0f:08:76:77:e6:d7:21:ba:74:de:
ea:9f:ef:eb:4d:c7:eb:06:3f:5c:ea:f1:34:d5:0f:bf:61:4e:
47:fb:0a:43:3c:0c:4a:66:bb:ca:c2:35:36:cc:45:9c:15:18:
71:be:c7:21:16:0d:cb:2c:97:4b:e9:92:74:58:d3:93:4a:4a:
6f:22:8e:bd:60:be:eb:2c:c3:8a:ed:0d:b4:03:ec:06:95:d3:
98:50:58:b4:ac:17:0a:d4:ec:82:77:b8:83:24:ad:2b:7f:55:
f3:1c:bf:91:c9:0c:ac:87:49:80:72:97:3f:9c:79:41:0e:c1:
1e:6b:08:85
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZ80MrEwigZHYShhJ1R9X//2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzA1MjEzMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODFlZDViYjc3ZTA5ZmZjZmRmZTNiMDczMmUyZTU1ODlmMWJmNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLdXp1b+/pVjzYkE7kYTPOsOD/Ey
+NhmLLuKbJepRoi0JP7ljfVtSHgmt8lcXHhHQn/8VZKhQ/wEpA5w/nq4Kg+K1Trf
ep9XR5txdfxsstQz4C3hwlTVGDERF/KSeJmk3z35b7LyC8BNeiKkiPZzWEwCbYMS
DzVVCqJtKuGPEJAogOE3jJley0DdNtxhhkHKzoqXQGMo/yCQTc1zckDLzwIdK6yr
3N+H//gmw1NzWfugzOFmXiNFyoCb/D7MCQxjlwdkOJy791+C7GCPxhGpdzWwCDrE
gVekcd3bEM7SU0Y3ZwPU89qtQZ0JVu+Rf1cy7l+lXTT76cBqnYvyLhPD2wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPge1bt34J/8/f47BzLi5VifG/baMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvMS1CN1Z1M2Znbl96OV9qc0hNdUxsV0o4Yjl0by5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODAvNmI2NjJkLTAyYTEtNDZlNy1iOWNkLTAzNWQ5NzdmNDIx
Ni8xL2ZpQ3dOT0xFbDdHSVJJamU4UWFYSndSMlVDay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC4iAAME
AFdS2QMEAtSGkDANBgkqhkiG9w0BAQsFAAOCAQEACaNIqhPWbSX6kXXw9nmEgR8J
kzcABOONH4k9iGjA+YldKVS9t130gDsovPosym3DODfFfS1zmA6kdkyuIHMU7q+J
dNIkFBHjQkMMpK/wufsEFe9xCS5gRFW/CaObC/oI+qvVJlW70gv5SIaOVOAWe/Hz
EzdDOi8KPywPJWNIV3CKfVyzsJAPCHZ35tchunTe6p/v603H6wY/XOrxNNUPv2FO
R/sKQzwMSma7ysI1NsxFnBUYcb7HIRYNyyyXS+mSdFjTk0pKbyKOvWC+6yzDiu0N
tAPsBpXTmFBYtKwXCtTsgne4gyStK39V8xy/kckMrIdJgHKXP5x5QQ7BHmsIhQ==
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:49 2026 by rpki-client