Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/H4rgKVVxSqNyB4n__eOTBLnL7CM.roa
File: H4rgKVVxSqNyB4n__eOTBLnL7CM.roa (raw, json)
Hash identifier: 79IvqGX3griip0Wj2KtiTvMi3d8qKxsCXL+SxhjL2Xc=
Subject key identifier: 1F:8A:E0:29:55:71:4A:A3:72:07:89:FF:FD:E3:93:04:B9:CB:EC:23
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0622BED4D63EBC6875997347CC013A603
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/H4rgKVVxSqNyB4n__eOTBLnL7CM.roa
Signing time: Wed 02 Sep 2026 12:50:41 +0000
ROA not before: Wed 02 Sep 2026 12:50:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8447
IP address blocks: 85.189.204.0/22 maxlen: 22
86.53.152.0/22 maxlen: 22
87.86.8.0/22 maxlen: 22
87.86.82.0/23 maxlen: 23
87.86.84.0/23 maxlen: 23
194.6.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:2b:ed:4d:63:eb:c6:87:59:97:34:7c:c0:13:a6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 2 12:50:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f8ae02955714aa3720789fffde39304b9cbec23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:d9:f3:ff:0d:ef:7c:6f:b4:be:03:6f:18:
fd:df:e0:df:e1:74:77:82:a0:75:6b:66:58:36:3f:
54:41:be:4c:12:91:9d:ea:d2:2f:19:51:23:89:7d:
2d:3b:6b:ca:db:44:72:54:f9:29:05:a7:43:93:5b:
c0:c2:8b:55:00:2a:dd:02:d4:62:af:70:e7:ba:b4:
3b:ed:6e:ba:5e:fc:bb:ed:52:fc:47:e4:fb:73:3d:
fb:4a:ba:4f:02:3c:28:c6:1d:27:f1:02:2a:84:a4:
ef:df:ca:ad:cf:c2:fe:b4:12:79:fe:cc:76:a9:7d:
0f:88:eb:8a:93:0d:46:d7:fd:32:ef:92:13:fa:b6:
0d:b6:a6:3d:7d:4a:d5:83:ae:fb:dc:37:1c:d4:fd:
52:2a:ed:ba:bd:e6:f8:13:df:d7:3e:df:b7:65:05:
7e:8c:a3:51:ad:02:8d:65:21:a4:5c:a9:a3:77:da:
cc:56:55:2f:09:82:75:3d:39:2c:02:94:bb:2c:5e:
2f:f7:4e:fe:37:1b:a1:6f:a4:f6:ad:18:05:08:4e:
f6:2e:e0:2f:7f:27:54:e9:9a:0a:de:25:da:3d:20:
8c:bb:3e:8b:0f:de:17:78:bb:f9:f4:ab:7e:3d:67:
21:ae:8a:4f:6a:98:79:bd:75:51:40:02:b6:90:29:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8A:E0:29:55:71:4A:A3:72:07:89:FF:FD:E3:93:04:B9:CB:EC:23
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/H4rgKVVxSqNyB4n__eOTBLnL7CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.204.0/22
86.53.152.0/22
87.86.8.0/22
87.86.82.0-87.86.85.255
194.6.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:b1:7a:89:c4:fa:c8:15:16:7c:7c:3a:a2:94:a6:df:9f:e4:
00:87:ad:73:58:9e:d4:2f:4c:c0:c4:55:6d:ec:41:dc:cc:8e:
95:86:7d:a3:1e:a2:0f:8e:a0:01:27:05:f1:14:0f:04:30:db:
79:e6:86:94:cf:b6:72:54:29:83:e7:f5:bb:a4:8a:53:ae:23:
7a:16:3a:d2:5a:f6:71:59:5f:e8:62:81:61:50:e8:3b:1b:63:
16:15:53:c8:6f:15:73:bd:8a:1c:4a:da:53:74:85:df:49:0f:
c0:6b:7c:0d:49:8d:6e:ce:f7:07:23:38:20:cf:ee:08:b6:ed:
f5:94:1b:48:5e:90:54:29:16:ce:bc:05:c5:f0:72:47:58:bb:
ec:4d:67:2c:02:ad:54:cc:8c:89:4e:71:7b:dc:05:e5:a6:b3:
1c:f9:51:b4:27:f5:b5:9f:1b:62:1a:93:94:5e:a7:ee:22:93:
36:4f:2c:20:54:99:88:ac:49:0f:54:b1:3f:fa:41:a8:f6:92:
5f:c3:09:1b:ee:c5:62:3c:2d:23:d0:db:a7:cc:71:cc:62:28:
9d:fa:e0:a6:56:eb:76:5b:4b:3e:70:e3:82:43:31:5a:cc:09:
f8:bb:a8:31:c0:d9:ac:74:67:49:42:6b:35:1c:9e:b1:1c:1e:
b6:fe:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:40:06 2026 by rpki-client