Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/K_vdSRCUNM9CGXTsoioEplpZLVQ.roa
File: K_vdSRCUNM9CGXTsoioEplpZLVQ.roa (raw, json)
Hash identifier: Tn1DNWBxLfsXN9zswPbCkufWeST6o69OndYnFZxJidg=
Subject key identifier: 2B:FB:DD:49:10:94:34:CF:42:19:74:EC:A2:2A:04:A6:5A:59:2D:54
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F79748FCD5F2F478367CD483D80465CF2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/K_vdSRCUNM9CGXTsoioEplpZLVQ.roa
Signing time: Sun 19 Jul 2026 08:18:29 +0000
ROA not before: Sun 19 Jul 2026 08:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 85.189.16.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.245.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.86.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.161.0/24 maxlen: 24
87.83.163.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.83.192.0/24 maxlen: 24
87.83.216.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.152.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.156.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.84.239.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
217.79.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:74:8f:cd:5f:2f:47:83:67:cd:48:3d:80:46:5c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 19 08:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bfbdd49109434cf421974eca22a04a65a592d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:a0:58:cd:c8:43:6f:d0:72:b7:24:8b:41:
4b:46:05:8a:bb:aa:89:67:0e:85:e8:69:6b:0d:6e:
32:33:d6:0a:c7:c5:e0:82:f3:67:03:d2:bc:91:9a:
19:30:a8:98:93:8a:ce:d5:84:c8:95:4e:74:89:8c:
32:39:13:a2:9b:0d:de:f5:aa:2f:03:80:25:fd:9e:
c9:03:69:fd:6a:7e:e6:fd:4f:28:c2:d0:ef:35:54:
38:f7:12:fa:f4:d2:bb:6f:75:53:cf:b9:80:ef:00:
69:20:70:39:e2:1f:3a:fc:46:f7:7c:ed:9d:f5:2d:
5f:d7:99:b9:7a:89:77:6f:23:20:d6:89:f6:53:04:
bd:da:29:a2:cb:f1:91:95:c4:e4:32:fa:4d:de:9e:
5b:14:bc:15:4d:9f:ac:cf:fb:75:09:d8:5c:d3:fa:
5b:a3:a9:d0:c0:b3:8c:9c:b6:8c:ec:df:8c:7e:26:
3b:a7:be:eb:fd:64:67:f5:6b:41:a9:b3:80:12:c6:
f4:4c:bb:bf:8a:6c:d7:82:03:a5:38:33:0d:4b:ec:
a4:55:98:ab:0c:b5:d2:09:b6:04:fa:4e:13:6d:ab:
91:3e:49:29:24:60:de:b2:36:22:8b:fc:35:b4:69:
d9:3f:a6:ec:63:ea:cb:53:64:55:ea:50:03:af:46:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:DD:49:10:94:34:CF:42:19:74:EC:A2:2A:04:A6:5A:59:2D:54
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/K_vdSRCUNM9CGXTsoioEplpZLVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.16.0/24
85.189.36.0/24
87.82.232.0/24
87.82.240.0/23
87.82.243.0/24
87.82.245.0/24
87.82.247.0/24
87.83.86.0/24
87.83.125.0/24
87.83.161.0/24
87.83.163.0/24
87.83.174.0/24
87.83.192.0/24
87.83.216.0/24
87.84.64.0/24
87.84.76.0/24
87.84.79.0/24
87.84.128.0/24
87.84.130.0/24
87.84.132.0/24
87.84.134.0/24
87.84.152.0/24
87.84.154.0/24
87.84.156.0/24
87.84.158.0/24
87.84.220.0/24
87.84.239.0/24
212.135.143.0/24
217.79.113.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:37:c1:0c:42:e4:33:07:4c:03:c0:ee:ac:3f:8c:9a:4a:ec:
0d:74:f9:08:56:ac:76:c6:2a:86:53:11:7d:a6:90:7f:86:85:
61:6d:4a:a4:35:f0:3b:23:2b:65:cf:50:cb:0c:c3:f3:98:ba:
6b:39:2d:94:9c:6c:74:f4:11:77:e3:1f:a7:5a:eb:94:f6:a5:
7d:c2:ed:8f:d7:2c:1e:fb:d0:1a:e3:24:d9:00:47:32:cb:1d:
45:2e:9d:5b:1c:38:c4:8c:e8:3e:4a:0e:c7:df:7d:72:77:ed:
02:bd:44:2f:f0:b7:98:d1:d9:09:f6:d6:9d:a1:73:26:34:64:
6f:78:e6:fa:09:7a:f4:f1:6d:a9:c5:f7:c0:d2:e6:43:0c:21:
14:19:31:d0:bd:0d:68:ae:f5:12:eb:a6:51:20:22:08:c9:38:
c6:10:04:bc:41:6e:31:c1:e0:3e:3e:1b:d4:e9:03:c4:09:ed:
3b:65:dc:b3:ed:5b:24:84:77:75:63:96:95:11:18:43:e3:e6:
1f:5b:c2:f3:8a:36:ed:03:9d:ad:44:4f:41:ab:e5:01:5b:fe:
58:24:88:62:6e:f4:ca:b4:e1:15:45:f9:c4:f4:7b:03:86:17:
f3:71:32:6e:94:46:dc:45:cb:8e:90:8f:b5:53:5f:48:4a:2f:
b4:e6:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:45 2026 by rpki-client