Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MH4zETfmZ4Zl3bV5qKg4ykcE_3c.roa
File: MH4zETfmZ4Zl3bV5qKg4ykcE_3c.roa (raw, json)
Hash identifier: dSfCaqUo39rZGHI+UFLkA8oltcAPyK8fPNxC2VUOdGo=
Subject key identifier: 30:7E:33:11:37:E6:67:86:65:DD:B5:79:A8:A8:38:CA:47:04:FF:77
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FC61B756C8C2512963584CF170813099F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MH4zETfmZ4Zl3bV5qKg4ykcE_3c.roa
Signing time: Mon 03 Aug 2026 05:31:56 +0000
ROA not before: Mon 03 Aug 2026 05:31:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 46.34.22.0/24 maxlen: 24
79.121.132.0/22 maxlen: 24
79.121.132.0/23 maxlen: 24
79.121.134.0/23 maxlen: 24
79.121.140.0/22 maxlen: 24
79.121.140.0/23 maxlen: 24
79.121.142.0/23 maxlen: 24
79.121.144.0/23 maxlen: 24
79.121.148.0/22 maxlen: 24
79.121.148.0/23 maxlen: 24
79.121.150.0/23 maxlen: 24
79.121.154.0/23 maxlen: 24
79.121.156.0/23 maxlen: 24
79.121.162.0/23 maxlen: 24
79.121.164.0/22 maxlen: 24
79.121.164.0/23 maxlen: 24
79.121.166.0/23 maxlen: 24
79.121.168.0/23 maxlen: 24
79.121.178.0/23 maxlen: 24
79.121.180.0/23 maxlen: 24
79.121.184.0/23 maxlen: 24
79.121.200.0/21 maxlen: 24
79.121.212.0/22 maxlen: 24
79.121.212.0/23 maxlen: 24
79.121.214.0/23 maxlen: 24
79.121.216.0/22 maxlen: 24
79.121.216.0/23 maxlen: 24
79.121.218.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.232.0/22 maxlen: 24
79.121.232.0/23 maxlen: 24
79.121.234.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
82.108.58.0/23 maxlen: 23
82.108.74.0/23 maxlen: 23
82.108.108.0/23 maxlen: 23
82.108.112.0/23 maxlen: 23
82.108.158.0/23 maxlen: 23
82.108.160.0/23 maxlen: 23
82.109.69.0/24 maxlen: 24
82.109.229.0/24 maxlen: 24
87.82.214.0/23 maxlen: 23
87.83.171.0/24 maxlen: 24
92.244.174.0/23 maxlen: 24
92.244.176.0/23 maxlen: 24
92.244.180.0/23 maxlen: 24
92.244.182.0/23 maxlen: 24
92.244.184.0/23 maxlen: 24
92.244.190.0/23 maxlen: 24
93.152.73.0/24 maxlen: 24
93.152.87.0/24 maxlen: 24
95.177.0.0/23 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.20.0/23 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.64.0/23 maxlen: 24
95.177.68.0/22 maxlen: 24
95.177.68.0/23 maxlen: 24
95.177.70.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
95.177.76.0/22 maxlen: 24
95.177.76.0/23 maxlen: 24
95.177.78.0/23 maxlen: 24
95.177.80.0/22 maxlen: 24
95.177.80.0/23 maxlen: 24
95.177.82.0/23 maxlen: 24
95.177.104.0/22 maxlen: 24
95.177.104.0/23 maxlen: 24
95.177.106.0/23 maxlen: 24
95.177.114.0/23 maxlen: 24
95.177.124.0/22 maxlen: 24
95.177.124.0/23 maxlen: 24
95.177.126.0/23 maxlen: 24
109.174.176.0/22 maxlen: 24
109.174.180.0/22 maxlen: 24
109.174.184.0/22 maxlen: 24
109.174.188.0/22 maxlen: 24
109.204.6.0/23 maxlen: 24
109.204.12.0/23 maxlen: 24
109.204.20.0/23 maxlen: 24
109.204.28.0/23 maxlen: 24
109.204.32.0/23 maxlen: 24
109.204.40.0/23 maxlen: 24
109.204.44.0/23 maxlen: 24
109.204.50.0/23 maxlen: 24
109.204.54.0/23 maxlen: 24
109.204.58.0/23 maxlen: 24
109.204.60.0/23 maxlen: 24
109.204.72.0/23 maxlen: 24
109.204.82.0/23 maxlen: 24
109.204.92.0/23 maxlen: 24
109.204.95.0/24 maxlen: 24
109.204.101.0/24 maxlen: 24
109.204.112.0/23 maxlen: 24
109.204.120.0/23 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 23
195.40.26.0/23 maxlen: 24
195.40.28.0/23 maxlen: 23
195.40.30.0/23 maxlen: 24
195.40.86.0/24 maxlen: 24
195.40.100.0/23 maxlen: 24
195.40.114.0/23 maxlen: 24
195.40.116.0/23 maxlen: 23
195.40.118.0/23 maxlen: 24
195.40.162.0/23 maxlen: 23
195.40.166.0/23 maxlen: 24
195.40.180.0/24 maxlen: 24
195.40.188.0/23 maxlen: 23
195.172.98.0/23 maxlen: 23
195.172.102.0/23 maxlen: 24
195.172.110.0/23 maxlen: 24
195.172.112.0/23 maxlen: 24
195.172.124.0/24 maxlen: 24
195.172.134.0/23 maxlen: 23
195.172.204.0/23 maxlen: 24
195.172.212.0/23 maxlen: 23
195.172.214.0/23 maxlen: 24
195.172.216.0/23 maxlen: 24
195.172.218.0/23 maxlen: 24
195.172.220.0/23 maxlen: 24
195.172.222.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.134.65.0/24 maxlen: 24
212.134.72.0/23 maxlen: 23
212.134.78.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 23
212.135.5.0/24 maxlen: 24
212.135.10.0/23 maxlen: 24
212.135.174.0/24 maxlen: 24
212.135.178.0/24 maxlen: 24
212.135.190.0/23 maxlen: 24
212.135.236.0/23 maxlen: 24
217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:1b:75:6c:8c:25:12:96:35:84:cf:17:08:13:09:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 3 05:31:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=307e331137e6678665ddb579a8a838ca4704ff77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:87:50:24:29:18:dc:58:68:be:15:a6:9d:
e9:e0:2f:80:7c:97:be:7b:ac:f9:ca:89:a4:4b:f0:
81:70:60:dc:ef:4e:14:35:5f:7c:bc:59:3a:cd:73:
8c:69:d4:b9:25:9a:81:71:99:7d:94:6e:ef:9c:7a:
f1:b5:5b:4d:20:bf:32:5d:25:34:53:8b:72:f8:d3:
34:c5:21:a6:6e:1c:31:81:61:fb:01:f2:f9:55:80:
b7:e9:5a:4d:3d:ef:5c:c7:45:ca:0c:64:83:49:ae:
9f:71:24:0d:0d:98:bf:e7:0d:22:8b:30:6c:1a:67:
de:87:ea:82:d7:23:05:52:84:58:2c:43:b9:40:1b:
91:8d:16:f7:ea:6e:81:79:ac:f4:e6:e0:b7:de:30:
a5:7e:98:ad:35:45:23:08:42:3a:43:75:0f:17:bd:
49:a4:0b:80:cc:8b:f2:cf:37:95:e1:9a:96:9e:7c:
14:75:16:7c:e6:83:e4:db:22:d4:78:2f:fd:d7:92:
97:ed:06:ff:e3:e8:89:15:dd:a9:6e:90:d1:98:9c:
a4:a9:90:7d:57:5e:0e:ec:62:9e:9a:8e:0a:05:99:
9a:5b:03:4e:37:d6:1f:5f:59:c0:ea:d4:f5:99:2d:
c8:e0:91:6e:6e:c4:33:cc:79:fd:47:e1:1a:a8:67:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7E:33:11:37:E6:67:86:65:DD:B5:79:A8:A8:38:CA:47:04:FF:77
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MH4zETfmZ4Zl3bV5qKg4ykcE_3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.22.0/24
79.121.132.0/22
79.121.140.0-79.121.145.255
79.121.148.0/22
79.121.154.0-79.121.157.255
79.121.162.0-79.121.169.255
79.121.178.0-79.121.181.255
79.121.184.0/23
79.121.200.0/21
79.121.212.0-79.121.219.255
79.121.222.0/23
79.121.226.0/23
79.121.232.0/22
79.121.238.0/23
82.108.58.0/23
82.108.74.0/23
82.108.108.0/23
82.108.112.0/23
82.108.158.0-82.108.161.255
82.109.69.0/24
82.109.229.0/24
87.82.214.0/23
87.83.171.0/24
92.244.174.0-92.244.177.255
92.244.180.0-92.244.185.255
92.244.190.0/23
93.152.73.0/24
93.152.87.0/24
95.177.0.0/23
95.177.8.0/23
95.177.20.0/23
95.177.54.0/23
95.177.64.0/23
95.177.68.0-95.177.73.255
95.177.76.0-95.177.83.255
95.177.104.0/22
95.177.114.0/23
95.177.124.0/22
109.174.176.0/20
109.204.6.0/23
109.204.12.0/23
109.204.20.0/23
109.204.28.0/23
109.204.32.0/23
109.204.40.0/23
109.204.44.0/23
109.204.50.0/23
109.204.54.0/23
109.204.58.0-109.204.61.255
109.204.72.0/23
109.204.82.0/23
109.204.92.0/23
109.204.95.0/24
109.204.101.0/24
109.204.112.0/23
109.204.120.0/23
109.204.124.0/23
195.40.18.0/23
195.40.26.0-195.40.31.255
195.40.86.0/24
195.40.100.0/23
195.40.114.0-195.40.119.255
195.40.162.0/23
195.40.166.0/23
195.40.180.0/24
195.40.188.0/23
195.172.98.0/23
195.172.102.0/23
195.172.110.0-195.172.113.255
195.172.124.0/24
195.172.134.0/23
195.172.204.0/23
195.172.212.0-195.172.223.255
212.134.11.0/24
212.134.65.0/24
212.134.72.0/23
212.134.78.0/24
212.135.0.0/24
212.135.2.0/23
212.135.5.0/24
212.135.10.0/23
212.135.174.0/24
212.135.178.0/24
212.135.190.0/23
212.135.236.0/23
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:9e:0f:99:2e:fe:99:0e:59:52:5a:4a:9b:05:d4:79:a6:d5:
10:5b:e7:dc:33:9c:cb:0e:a6:f3:e9:3f:8b:76:c1:3c:4d:cf:
01:39:0d:cf:bc:5d:cb:9f:bf:c9:bb:10:22:76:4a:11:16:0c:
a2:26:44:dc:20:7e:67:21:69:37:cf:a2:1c:fa:21:c7:0e:6a:
e5:a5:f9:29:1c:14:d1:62:cb:a2:bf:7e:02:8b:46:c5:f0:60:
86:22:e9:42:1d:58:25:f0:d1:78:b3:2b:05:9a:da:6f:a8:5c:
d2:40:8c:de:9b:3f:31:34:83:f8:2d:6d:c3:67:c0:d6:65:62:
01:ae:86:72:58:64:37:b0:dd:98:c7:3a:4e:e1:da:9c:a6:b4:
5c:56:9f:25:81:24:fa:99:db:35:53:b6:53:96:f6:da:2f:26:
eb:e5:97:52:2d:d8:29:42:a4:82:e8:5a:f3:f3:fe:ca:b4:2b:
a0:af:ca:8d:12:45:4a:9f:80:32:92:8d:12:22:a8:52:33:cf:
2f:42:e0:00:be:25:d2:fc:5f:c5:7f:e3:5c:95:3a:81:48:0c:
ef:c7:08:eb:6f:ed:14:d9:c7:f1:53:60:52:23:a7:55:20:6f:
65:f9:19:91:43:bb:ab:d3:02:d7:50:a9:78:5a:ca:34:64:ef:
9d:91:ba:9b
-----BEGIN CERTIFICATE-----
MIIHgzCCBmugAwIBAgISAZ/GG3VsjCUSljWEzxcIEwmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODAzMDUzMTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDdlMzMxMTM3ZTY2Nzg2NjVkZGI1NzlhOGE4MzhjYTQ3MDRmZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUGHUCQpGNxYaL4Vpp3p4C+AfJe+
e6z5yomkS/CBcGDc704UNV98vFk6zXOMadS5JZqBcZl9lG7vnHrxtVtNIL8yXSU0
U4ty+NM0xSGmbhwxgWH7AfL5VYC36VpNPe9cx0XKDGSDSa6fcSQNDZi/5w0iizBs
Gmfeh+qC1yMFUoRYLEO5QBuRjRb36m6Beaz05uC33jClfpitNUUjCEI6Q3UPF71J
pAuAzIvyzzeV4ZqWnnwUdRZ85oPk2yLUeC/915KX7Qb/4+iJFd2pbpDRmJykqZB9
V14O7GKemo4KBZmaWwNON9YfX1nA6tT1mS3I4JFubsQzzHn9R+EaqGerFQIDAQAB
o4IEjzCCBIswHQYDVR0OBBYEFDB+MxE35meGZd21eaioOMpHBP93MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvTUg0ekVUZm1aNFpsM2JWNXFLZzR5a2NFXzNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICowYIKwYBBQUHAQcBAf8EggKSMIICjjCCAooEAgABMIIC
ggMEAC4iFgMEAk95hDAMAwQCT3mMAwQBT3mQAwQCT3mUMAwDBAFPeZoDBAFPeZww
DAMEAU95ogMEAU95qDAMAwQBT3myAwQBT3m0AwQBT3m4AwQDT3nIMAwDBAJPedQD
BAJPedgDBAFPed4DBAFPeeIDBAJPeegDBAFPee4DBAFSbDoDBAFSbEoDBAFSbGwD
BAFSbHAwDAMEAVJsngMEAVJsoAMEAFJtRQMEAFJt5QMEAVdS1gMEAFdTqzAMAwQB
XPSuAwQBXPSwMAwDBAJc9LQDBAFc9LgDBAFc9L4DBABdmEkDBABdmFcDBAFfsQAD
BAFfsQgDBAFfsRQDBAFfsTYDBAFfsUAwDAMEAl+xRAMEAV+xSDAMAwQCX7FMAwQC
X7FQAwQCX7FoAwQBX7FyAwQCX7F8AwQEba6wAwQBbcwGAwQBbcwMAwQBbcwUAwQB
bcwcAwQBbcwgAwQBbcwoAwQBbcwsAwQBbcwyAwQBbcw2MAwDBAFtzDoDBAFtzDwD
BAFtzEgDBAFtzFIDBAFtzFwDBABtzF8DBABtzGUDBAFtzHADBAFtzHgDBAFtzHwD
BAHDKBIwDAMEAcMoGgMEBcMoAAMEAMMoVgMEAcMoZDAMAwQBwyhyAwQDwyhwAwQB
wyiiAwQBwyimAwQAwyi0AwQBwyi8AwQBw6xiAwQBw6xmMAwDBAHDrG4DBAHDrHAD
BADDrHwDBAHDrIYDBAHDrMwwDAMEAsOs1AMEBcOswAMEANSGCwMEANSGQQMEAdSG
SAMEANSGTgMEANSHAAMEAdSHAgMEANSHBQMEAdSHCgMEANSHrgMEANSHsgMEAdSH
vgMEAdSH7AMEAtlPaAMEAtlPdDANBgkqhkiG9w0BAQsFAAOCAQEAbJ4PmS7+mQ5Z
UlpKmwXUeabVEFvn3DOcyw6m8+k/i3bBPE3PATkNz7xdy5+/ybsQInZKERYMoiZE
3CB+ZyFpN8+iHPohxw5q5aX5KRwU0WLLor9+AotGxfBghiLpQh1YJfDReLMrBZra
b6hc0kCM3ps/MTSD+C1tw2fA1mViAa6GclhkN7DdmMc6TuHanKa0XFafJYEk+pnb
NVO2U5b22i8m6+WXUi3YKUKkguha8/P+yrQroK/KjRJFSp+AMpKNEiKoUjPPL0Lg
AL4l0vxfxX/jXJU6gUgM78cI62/tFNnH8VNgUiOnVSBvZfkZkUO7q9MC11CpeFrK
NGTvnZG6mw==
-----END CERTIFICATE-----
Generated at Tue Aug 4 07:39:10 2026 by rpki-client