Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7k84bvEZ7hDDGZ-mkGMXUqExGZc.roa
File: 7k84bvEZ7hDDGZ-mkGMXUqExGZc.roa (raw, json)
Hash identifier: gD+IyA75lRSIGf7ndjXAVvIxB+6cs7Z/kHak1rTavIk=
Subject key identifier: EE:4F:38:6E:F1:19:EE:10:C3:19:9F:A6:90:63:17:52:A1:31:19:97
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F5A9420286277E9F4813F97AE1DE17D09
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7k84bvEZ7hDDGZ-mkGMXUqExGZc.roa
Signing time: Mon 13 Jul 2026 08:24:44 +0000
ROA not before: Mon 13 Jul 2026 08:24:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.34.0.0/24 maxlen: 24
82.110.124.0/22 maxlen: 22
87.82.217.0/24 maxlen: 24
212.134.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:94:20:28:62:77:e9:f4:81:3f:97:ae:1d:e1:7d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 13 08:24:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee4f386ef119ee10c3199fa690631752a1311997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:2c:ba:a7:93:0a:2e:6d:1a:c0:f7:bc:9e:
ad:26:63:1f:5e:1c:2b:df:2b:ce:62:35:75:87:62:
d2:c2:5a:80:89:4f:ca:26:5a:6f:ed:16:56:70:ae:
a3:dc:c2:2a:94:2a:3f:cf:d8:fa:99:2a:2c:fa:66:
11:24:00:c2:cc:e5:a2:ac:af:2b:d8:77:36:5a:d7:
d4:c6:ac:ab:4e:ec:5d:d6:9b:63:e6:dd:79:e6:4f:
08:00:4f:a2:fe:26:72:b9:35:46:bb:36:d3:b9:46:
a3:7d:d8:94:c8:9b:38:4b:8e:56:87:5e:eb:85:cc:
cb:0e:80:47:ed:89:b4:6f:0f:3e:19:22:ed:78:46:
2d:41:16:c5:00:cc:53:1a:93:cb:2d:ca:4e:7e:4a:
89:cf:80:a4:2d:75:98:49:05:f1:c0:10:32:b5:68:
57:ba:d1:92:d5:9e:b3:12:9a:b3:e1:cc:8a:b6:be:
36:dd:0f:90:1b:a6:ed:67:d0:49:97:47:63:d9:b6:
e1:a6:6f:ea:7b:8b:9f:ee:85:9f:22:9d:5f:6b:96:
b0:c6:f0:29:c9:4e:c7:75:ea:24:f2:4d:e2:84:54:
89:51:99:64:9e:ba:5b:99:77:26:f4:b6:8c:36:ce:
74:d0:cf:0d:56:d0:19:45:c5:37:e6:4b:7e:db:6e:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4F:38:6E:F1:19:EE:10:C3:19:9F:A6:90:63:17:52:A1:31:19:97
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7k84bvEZ7hDDGZ-mkGMXUqExGZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
82.110.124.0/22
87.82.217.0/24
212.134.144.0/22
Signature Algorithm: sha256WithRSAEncryption
39:aa:09:e0:0a:e5:20:f1:df:85:52:80:19:12:f0:d9:7b:e2:
7d:41:d3:85:3c:88:fa:29:11:62:8c:ba:48:5d:ea:88:d8:98:
0e:4f:47:e3:28:d8:d6:80:48:36:48:6c:49:3b:40:c4:67:0b:
59:fe:ec:df:9e:06:3d:aa:42:b8:53:71:24:c0:b0:ce:92:e7:
d6:c9:e0:c0:1f:c2:9e:aa:57:41:f8:ea:2d:bc:d4:83:77:ec:
b9:f2:fe:f1:fc:97:8d:dd:21:c2:a6:8d:48:a3:bb:ea:47:56:
7c:dc:65:0c:5b:01:d2:6d:56:05:b6:2a:9d:63:aa:21:a7:2a:
82:a5:73:e3:b9:16:f1:bd:f5:4f:7a:75:d6:b0:80:f4:52:46:
a2:89:4e:dc:0b:fa:df:05:53:50:58:52:4e:d8:ff:53:5d:94:
ec:62:47:61:e4:3b:f3:56:02:fe:ee:34:81:bc:0a:27:a1:2e:
ae:16:c1:b8:1b:e7:b3:2c:19:9c:d9:3c:53:a3:70:09:30:7a:
ce:5f:ef:d6:3a:ee:9d:ca:47:fe:45:e5:93:b9:3d:8b:cf:00:
2f:f5:08:13:24:93:1b:4d:0e:ab:15:4e:bd:59:0e:05:bb:2e:
74:a3:de:13:58:ca:e4:50:b3:31:19:94:f6:f0:a7:9c:ce:b9:
1a:6b:12:f9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ9alCAoYnfp9IE/l64d4X0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzEzMDgyNDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTRmMzg2ZWYxMTllZTEwYzMxOTlmYTY5MDYzMTc1MmExMzExOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu38suqeTCi5tGsD3vJ6tJmMfXhwr
3yvOYjV1h2LSwlqAiU/KJlpv7RZWcK6j3MIqlCo/z9j6mSos+mYRJADCzOWirK8r
2Hc2WtfUxqyrTuxd1ptj5t155k8IAE+i/iZyuTVGuzbTuUajfdiUyJs4S45Wh17r
hczLDoBH7Ym0bw8+GSLteEYtQRbFAMxTGpPLLcpOfkqJz4CkLXWYSQXxwBAytWhX
utGS1Z6zEpqz4cyKtr423Q+QG6btZ9BJl0dj2bbhpm/qe4uf7oWfIp1fa5awxvAp
yU7Hdeok8k3ihFSJUZlknrpbmXcm9LaMNs500M8NVtAZRcU35kt+2254dwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFO5POG7xGe4QwxmfppBjF1KhMRmXMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvN2s4NGJ2RVo3aERER1otbWtHTVhVcUV4R1pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALiIAAwQC
Um58AwQAV1LZAwQC1IaQMA0GCSqGSIb3DQEBCwUAA4IBAQA5qgngCuUg8d+FUoAZ
EvDZe+J9QdOFPIj6KRFijLpIXeqI2JgOT0fjKNjWgEg2SGxJO0DEZwtZ/uzfngY9
qkK4U3EkwLDOkufWyeDAH8KeqldB+OotvNSDd+y58v7x/JeN3SHCpo1Io7vqR1Z8
3GUMWwHSbVYFtiqdY6ohpyqCpXPjuRbxvfVPenXWsID0UkaiiU7cC/rfBVNQWFJO
2P9TXZTsYkdh5DvzVgL+7jSBvAonoS6uFsG4G+ezLBmc2TxTo3AJMHrOX+/WOu6d
ykf+ReWTuT2LzwAv9QgTJJMbTQ6rFU69WQ4Fuy50o94TWMrkULMxGZT28Keczrka
axL5
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client