Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FP-1bGSXVTVT4OLMyJ8Eynb7kWA.roa
File: FP-1bGSXVTVT4OLMyJ8Eynb7kWA.roa (raw, json)
Hash identifier: 7NVTebd9jY9AcC64p4RWxtIQcu8yM0mH5LPEPNJv7nA=
Subject key identifier: 14:FF:B5:6C:64:97:55:35:53:E0:E2:CC:C8:9F:04:CA:76:FB:91:60
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E8BCA0754CE173DC9286F090F44F3F366
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FP-1bGSXVTVT4OLMyJ8Eynb7kWA.roa
Signing time: Wed 03 Jun 2026 04:42:13 +0000
ROA not before: Wed 03 Jun 2026 04:42:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 82.108.40.0/23 maxlen: 24
82.108.196.0/23 maxlen: 24
82.108.216.0/22 maxlen: 24
82.109.186.0/23 maxlen: 24
82.110.106.0/23 maxlen: 24
87.82.233.0/24 maxlen: 24
87.82.234.0/24 maxlen: 24
87.83.46.0/23 maxlen: 24
87.83.171.0/24 maxlen: 24
87.83.172.0/23 maxlen: 24
87.83.233.0/24 maxlen: 24
87.83.234.0/24 maxlen: 24
87.84.77.0/24 maxlen: 24
87.84.188.0/22 maxlen: 24
87.84.216.0/24 maxlen: 24
87.84.217.0/24 maxlen: 24
87.84.221.0/24 maxlen: 24
87.84.222.0/23 maxlen: 24
87.84.233.0/24 maxlen: 24
87.84.234.0/24 maxlen: 24
87.84.238.0/24 maxlen: 24
87.85.136.0/24 maxlen: 24
87.85.137.0/24 maxlen: 24
87.85.141.0/24 maxlen: 24
87.85.142.0/24 maxlen: 24
87.86.252.0/24 maxlen: 24
109.204.104.0/21 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.158.0/24 maxlen: 24
212.134.160.0/23 maxlen: 24
212.134.192.0/22 maxlen: 24
212.135.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8b:ca:07:54:ce:17:3d:c9:28:6f:09:0f:44:f3:f3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 3 04:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14ffb56c6497553553e0e2ccc89f04ca76fb9160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:41:78:45:44:c1:8a:d0:ba:c6:be:56:b8:
87:61:c9:fe:df:66:3b:c0:e2:93:8d:bf:3c:4b:61:
d6:a4:c9:00:09:48:89:db:ab:6d:d2:ed:94:07:15:
79:d8:c2:cd:e6:c4:5f:82:6f:30:86:c9:4f:d4:b2:
9a:6e:ff:de:db:3c:9f:14:47:3d:3d:e8:21:b0:9b:
67:b8:bd:d8:b2:77:8c:3b:00:2b:be:c9:01:44:73:
1c:b9:b7:60:45:c6:b1:4f:ec:30:6a:6e:96:d0:c9:
97:fb:7e:ac:f6:3b:86:3f:10:00:03:3a:63:6c:5c:
22:0d:7c:4e:28:80:e3:4a:94:dc:a1:af:e7:c3:59:
7c:92:fe:cb:e3:f7:16:97:f7:2b:a1:8a:6a:ca:b1:
a2:94:6b:08:22:71:f2:ad:0b:29:2e:97:c2:d7:97:
7a:74:64:b8:96:0f:b9:d5:44:df:62:c0:47:7f:98:
99:cf:22:ba:7a:da:6c:90:22:8d:d1:a9:24:99:41:
f0:6b:72:ee:8e:52:ae:e9:a3:47:c6:81:4c:1a:a1:
bf:7d:7e:eb:ee:c2:b2:61:cf:1d:30:a4:39:26:70:
21:46:f7:8f:f0:4f:39:f7:ad:66:13:40:f9:d5:4c:
e0:0f:19:49:36:c5:42:ef:75:b9:08:e4:98:c3:b3:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FF:B5:6C:64:97:55:35:53:E0:E2:CC:C8:9F:04:CA:76:FB:91:60
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FP-1bGSXVTVT4OLMyJ8Eynb7kWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.40.0/23
82.108.196.0/23
82.108.216.0/22
82.109.186.0/23
82.110.106.0/23
87.82.233.0-87.82.234.255
87.83.46.0/23
87.83.171.0-87.83.173.255
87.83.233.0-87.83.234.255
87.84.77.0/24
87.84.188.0/22
87.84.216.0/23
87.84.221.0-87.84.223.255
87.84.233.0-87.84.234.255
87.84.238.0/24
87.85.136.0/23
87.85.141.0-87.85.142.255
87.86.252.0/24
109.204.104.0/21
212.134.38.0/24
212.134.59.0/24
212.134.116.0/22
212.134.158.0/24
212.134.160.0/23
212.134.192.0/22
212.135.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:17:01:ba:99:0c:48:68:17:87:8f:98:20:e4:fd:0d:eb:85:
35:38:22:a8:cd:30:84:ee:82:76:99:7a:4f:75:7c:1a:f3:3c:
b1:8e:15:3f:c7:b8:c2:0d:ee:a8:13:97:d0:5d:f1:d8:64:cc:
e0:68:bd:f5:04:74:33:95:e0:b9:87:7e:6e:68:9b:b1:36:af:
ba:12:c4:7d:d1:ca:18:14:ae:2f:78:25:88:d2:49:27:00:cd:
3d:1c:20:28:79:17:1f:4c:2e:0b:61:89:fd:d2:dc:89:ce:9e:
bd:f7:6a:94:3b:3c:96:57:97:f8:52:a8:c8:e2:91:08:da:8c:
d6:23:e5:db:15:69:73:aa:4d:bc:ea:a1:25:92:2e:2b:fb:0d:
91:86:bb:c1:f9:e3:4a:ea:80:68:ff:1b:40:71:cb:65:35:4b:
3e:7f:1e:75:0c:b4:10:d8:4d:3d:ca:cd:e2:15:9c:47:5b:ba:
8e:73:14:52:ed:46:61:0a:c4:5d:c8:6c:6e:52:0e:63:7b:37:
0a:f9:60:f5:77:ce:db:b1:d9:b9:47:58:f6:f4:df:fc:d5:5f:
e6:b9:e5:9d:2c:f6:9d:b8:e6:82:94:e1:28:24:e8:31:8e:f6:
49:b8:87:f0:93:a4:77:0a:3a:02:1e:f2:2d:f9:e6:a7:8e:85:
d0:f4:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:16:16 2026 by rpki-client