Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6BGrE5SbNYADf1C281JRvzQS234.roa
File: 6BGrE5SbNYADf1C281JRvzQS234.roa (raw, json)
Hash identifier: S+LvTPFUIHu/xq9abqDbM4JEnG1r3EIEmE2m2CoZwJM=
Subject key identifier: E8:11:AB:13:94:9B:35:80:03:7F:50:B6:F3:52:51:BF:34:12:DB:7E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A060590411BB58B3208380641ABCB5429B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6BGrE5SbNYADf1C281JRvzQS234.roa
Signing time: Wed 02 Sep 2026 04:20:41 +0000
ROA not before: Wed 02 Sep 2026 04:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 78.154.114.0/24 maxlen: 24
78.154.122.0/24 maxlen: 24
78.154.127.0/24 maxlen: 24
80.68.210.0/24 maxlen: 24
80.68.211.0/24 maxlen: 24
82.108.40.0/23 maxlen: 24
82.108.98.0/24 maxlen: 24
82.108.202.0/24 maxlen: 24
82.109.11.0/24 maxlen: 24
82.109.166.0/24 maxlen: 24
82.109.180.0/22 maxlen: 24
82.109.185.0/24 maxlen: 24
82.109.236.0/22 maxlen: 24
82.109.242.0/24 maxlen: 24
82.110.98.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.216.0/23 maxlen: 24
87.83.234.0/23 maxlen: 24
87.84.203.0/24 maxlen: 24
87.84.206.0/24 maxlen: 24
87.84.207.0/24 maxlen: 24
87.85.129.0/24 maxlen: 24
87.85.133.0/24 maxlen: 24
87.86.91.0/24 maxlen: 24
87.86.182.0/24 maxlen: 24
109.204.104.0/21 maxlen: 24
194.242.132.0/24 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.158.0/24 maxlen: 24
212.135.159.0/24 maxlen: 24
212.212.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:59:04:11:bb:58:b3:20:83:80:64:1a:bc:b5:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 2 04:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e811ab13949b3580037f50b6f35251bf3412db7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:a0:7c:a4:cc:fd:11:14:ec:6b:ba:ed:83:
d1:03:c6:e3:bf:9b:97:2a:79:a6:20:3e:ba:5a:7c:
0f:b3:3b:94:17:2e:47:f2:d6:22:a5:ed:ac:c7:55:
73:46:77:ba:bf:43:b7:fc:df:2d:bf:00:7b:64:21:
a7:c4:ac:23:fd:e7:a8:6e:31:1f:4c:c0:d6:6e:ff:
30:46:04:96:1c:00:68:c9:62:61:55:1f:26:e7:33:
e8:36:96:29:0c:87:9f:4c:4c:db:40:c9:5d:cd:db:
e9:31:70:bf:b5:5b:1e:a3:ca:44:b3:7e:37:81:fa:
87:d1:d5:7f:5d:65:63:23:86:75:a2:c5:4d:a9:36:
68:bc:60:87:52:76:4e:f7:ff:55:09:77:d4:49:17:
43:71:07:b6:72:fe:5d:b6:c3:df:e6:4f:3c:92:50:
97:21:2f:6c:d1:3a:f8:c7:7a:51:2e:43:72:50:ec:
8e:87:60:03:d1:07:c2:23:f5:03:72:46:d1:af:a1:
67:c4:ae:b7:12:42:61:e2:c2:6c:cd:f0:00:8c:56:
d3:d8:6b:94:b7:13:6e:c6:34:d1:e0:67:cc:a2:58:
35:10:89:24:42:b9:49:df:f5:f9:37:dd:75:21:2e:
33:d2:bc:f8:17:cb:01:95:1a:78:19:34:c7:83:71:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:11:AB:13:94:9B:35:80:03:7F:50:B6:F3:52:51:BF:34:12:DB:7E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6BGrE5SbNYADf1C281JRvzQS234.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.114.0/24
78.154.122.0/24
78.154.127.0/24
80.68.210.0/23
82.108.40.0/23
82.108.98.0/24
82.108.202.0/24
82.109.11.0/24
82.109.166.0/24
82.109.180.0/22
82.109.185.0/24
82.109.236.0/22
82.109.242.0/24
82.110.98.0/24
87.83.125.0/24
87.83.216.0/23
87.83.234.0/23
87.84.203.0/24
87.84.206.0/23
87.85.129.0/24
87.85.133.0/24
87.86.91.0/24
87.86.182.0/24
109.204.104.0/21
194.242.132.0/24
212.134.38.0/24
212.134.116.0/22
212.134.158.0/24
212.135.159.0/24
212.212.25.0/24
Signature Algorithm: sha256WithRSAEncryption
45:08:9d:c3:9c:93:74:29:10:d6:a7:ec:d2:60:2f:68:f4:8b:
8f:c5:37:40:3f:cd:14:6a:65:df:09:ac:8d:e3:91:a4:f1:ae:
74:c9:20:b8:42:3c:19:df:77:e2:51:8f:2a:a5:9e:36:24:3e:
f9:94:9c:64:38:aa:1d:e2:6d:61:76:90:b6:ee:55:e6:18:2c:
4b:60:43:90:b9:85:4f:57:15:32:2b:cb:0a:bf:da:6d:9c:7a:
f7:5a:51:92:97:48:10:4e:a6:21:58:8f:ff:4d:2c:aa:df:75:
5b:6a:14:0c:d1:14:79:b2:38:d0:4c:b5:3c:54:b2:a1:6c:6a:
87:d1:ae:6a:c7:23:73:a9:5c:53:8a:43:16:75:b7:fd:88:30:
bf:82:41:39:b7:c8:9f:e8:3d:4f:5d:47:01:03:af:e9:ee:6a:
3a:55:e9:84:a5:e5:a8:0a:c3:a2:4f:79:a6:09:f5:b6:a4:3f:
99:bf:a8:d1:84:62:0d:9b:fc:5b:b6:65:40:12:d9:28:a6:42:
ee:21:da:4c:b7:2a:62:0a:1f:fe:e9:59:28:9c:c1:e4:e0:6a:
e4:42:da:15:b2:df:ed:cb:12:4a:cd:dd:9d:34:f6:89:6d:7c:
86:40:2e:a8:5b:a6:1d:41:8b:e5:74:b0:f1:fa:b2:3e:27:ea:
15:5f:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:36 2026 by rpki-client