Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9_KFmiXBSbXU7eC0SJqjdd_UQ5Q.roa
File: 9_KFmiXBSbXU7eC0SJqjdd_UQ5Q.roa (raw, json)
Hash identifier: Qd37Ja49WhBnIUcVWq+4iw9bLbKqaKR6HJFVV/F4L7s=
Subject key identifier: F7:F2:85:9A:25:C1:49:B5:D4:ED:E0:B4:48:9A:A3:75:DF:D4:43:94
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A02D6721B5B2BC876A78C50DF952B7B852
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9_KFmiXBSbXU7eC0SJqjdd_UQ5Q.roa
Signing time: Sun 23 Aug 2026 06:55:28 +0000
ROA not before: Sun 23 Aug 2026 06:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 80.68.209.0/24 maxlen: 24
82.108.208.0/24 maxlen: 24
82.109.152.0/24 maxlen: 24
82.110.51.0/24 maxlen: 24
87.83.115.0/24 maxlen: 24
87.84.211.0/24 maxlen: 24
87.86.188.0/24 maxlen: 24
87.86.208.0/24 maxlen: 24
212.134.97.0/24 maxlen: 24
212.135.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2d:67:21:b5:b2:bc:87:6a:78:c5:0d:f9:52:b7:b8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 23 06:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7f2859a25c149b5d4ede0b4489aa375dfd44394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:42:97:a9:8b:78:8a:7e:44:c6:55:c3:ad:
5b:77:45:77:66:37:bd:9e:1e:a2:60:44:33:1b:37:
4a:86:22:dd:86:3f:ed:0e:2e:46:b3:6f:8e:33:5d:
b0:db:02:a7:b7:56:83:74:d8:5c:1e:5e:d4:d6:6b:
6e:2b:29:e7:88:10:0e:a5:ca:28:e8:18:9e:7b:c1:
a9:2e:61:a4:00:33:b6:f2:16:3f:1c:55:ab:44:d2:
6d:c9:41:7b:96:e3:d1:32:48:a5:fd:04:cc:78:3a:
1f:d9:6a:17:b3:9f:7b:02:14:84:9a:82:84:dc:d6:
e1:2e:a5:cb:5c:57:5a:c4:50:2c:f7:a2:4f:a3:a9:
40:52:25:ad:18:3c:d7:9d:b0:28:86:28:8c:a2:52:
17:df:f8:4a:49:f6:42:9b:48:17:52:1f:09:76:11:
87:bd:57:7f:f9:9a:d7:1e:08:e9:18:59:c8:c5:0c:
a7:3d:c6:27:7d:09:1b:a1:1b:ff:6f:60:2e:27:37:
11:c6:ba:f5:e1:a9:b8:b2:87:df:a2:01:82:98:b3:
aa:ec:a9:b8:cd:ce:83:e9:29:33:8d:c2:9e:d5:bf:
96:21:e3:10:f8:6c:b7:d2:f5:d1:29:69:f6:c4:78:
bd:bd:4d:fc:01:2b:a6:81:39:83:95:0f:c9:87:e9:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F2:85:9A:25:C1:49:B5:D4:ED:E0:B4:48:9A:A3:75:DF:D4:43:94
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9_KFmiXBSbXU7eC0SJqjdd_UQ5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.209.0/24
82.108.208.0/24
82.109.152.0/24
82.110.51.0/24
87.83.115.0/24
87.84.211.0/24
87.86.188.0/24
87.86.208.0/24
212.134.97.0/24
212.135.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f3:86:2c:10:2b:f9:8e:16:90:53:ff:2f:cc:e1:2b:1f:e0:
9a:6c:90:c1:23:63:f5:d5:10:66:94:27:91:a0:08:17:89:b0:
eb:f1:e0:85:ef:d8:c4:9c:c5:3a:89:e2:d5:d1:81:74:8d:e1:
23:33:5c:81:07:46:b9:6e:64:3e:9f:66:bf:a9:cd:7d:c7:60:
07:82:33:ad:2c:b9:0e:3c:15:b8:de:ce:e5:52:80:a4:2b:57:
42:be:f9:cf:68:fa:91:42:64:a7:23:30:c3:68:cc:19:94:ca:
fe:80:b4:83:31:ba:59:f0:d6:bf:a1:ae:d2:5c:f4:01:03:f0:
0e:f3:c1:f0:3f:ea:0e:80:52:06:1b:28:e5:82:48:85:a7:50:
37:38:80:b6:d4:7b:da:74:42:b6:b5:24:d1:d5:e1:b8:be:c8:
a2:f5:f7:c0:50:1b:8d:bc:87:2f:f9:a4:92:5e:05:2e:aa:0d:
8e:b7:6b:0e:c8:fc:26:eb:f4:e0:35:97:f7:d2:69:ad:f3:49:
25:40:19:4f:c0:3c:95:8a:92:0d:e6:99:70:55:6c:5f:30:66:
f6:05:92:f0:a1:c9:90:9a:fb:30:0a:d7:00:ac:64:e6:ec:0b:
44:6a:ac:59:a9:0f:eb:83:ae:e4:84:16:af:e0:f7:0b:8f:7e:
9e:4b:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:45 2026 by rpki-client