Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NPFceH7gsmwEQYrIBH3RCqBMZW0.roa
File: NPFceH7gsmwEQYrIBH3RCqBMZW0.roa (raw, json)
Hash identifier: xMNoCIjpim+xbw01ME6UdxLwLvpInU64mImSyix3AxM=
Subject key identifier: 34:F1:5C:78:7E:E0:B2:6C:04:41:8A:C8:04:7D:D1:0A:A0:4C:65:6D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B2883CA290B3F24E13B2CEE8BEAB33E3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NPFceH7gsmwEQYrIBH3RCqBMZW0.roa
Signing time: Fri 18 Sep 2026 03:21:07 +0000
ROA not before: Fri 18 Sep 2026 03:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 79.121.132.0/22 maxlen: 24
79.121.132.0/23 maxlen: 24
79.121.134.0/23 maxlen: 24
79.121.140.0/22 maxlen: 24
79.121.140.0/23 maxlen: 24
79.121.142.0/23 maxlen: 24
79.121.144.0/23 maxlen: 24
79.121.148.0/22 maxlen: 24
79.121.148.0/23 maxlen: 24
79.121.150.0/23 maxlen: 24
79.121.154.0/23 maxlen: 24
79.121.156.0/23 maxlen: 24
79.121.162.0/23 maxlen: 24
79.121.164.0/22 maxlen: 24
79.121.164.0/23 maxlen: 24
79.121.166.0/23 maxlen: 24
79.121.168.0/23 maxlen: 24
79.121.178.0/23 maxlen: 24
79.121.180.0/23 maxlen: 24
79.121.184.0/23 maxlen: 24
79.121.200.0/21 maxlen: 24
79.121.212.0/22 maxlen: 24
79.121.212.0/23 maxlen: 24
79.121.214.0/23 maxlen: 24
79.121.216.0/22 maxlen: 24
79.121.216.0/23 maxlen: 24
79.121.218.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.232.0/22 maxlen: 24
79.121.232.0/23 maxlen: 24
79.121.234.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
82.108.58.0/23 maxlen: 23
82.108.74.0/23 maxlen: 23
82.108.108.0/23 maxlen: 23
82.108.112.0/23 maxlen: 23
82.108.158.0/23 maxlen: 23
82.108.160.0/23 maxlen: 23
82.109.69.0/24 maxlen: 24
82.109.229.0/24 maxlen: 24
82.110.60.0/24 maxlen: 24
87.82.214.0/23 maxlen: 23
87.83.171.0/24 maxlen: 24
87.84.224.0/24 maxlen: 24
87.85.140.0/24 maxlen: 24
92.244.174.0/23 maxlen: 24
92.244.176.0/23 maxlen: 24
92.244.180.0/23 maxlen: 24
92.244.182.0/23 maxlen: 24
92.244.184.0/23 maxlen: 24
92.244.190.0/23 maxlen: 24
93.152.73.0/24 maxlen: 24
93.152.87.0/24 maxlen: 24
95.177.0.0/23 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.20.0/23 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.64.0/23 maxlen: 24
95.177.68.0/22 maxlen: 24
95.177.68.0/23 maxlen: 24
95.177.70.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
95.177.76.0/22 maxlen: 24
95.177.76.0/23 maxlen: 24
95.177.78.0/23 maxlen: 24
95.177.80.0/22 maxlen: 24
95.177.80.0/23 maxlen: 24
95.177.82.0/23 maxlen: 24
95.177.104.0/22 maxlen: 24
95.177.104.0/23 maxlen: 24
95.177.106.0/23 maxlen: 24
95.177.114.0/23 maxlen: 24
95.177.124.0/22 maxlen: 24
95.177.124.0/23 maxlen: 24
95.177.126.0/23 maxlen: 24
109.174.176.0/22 maxlen: 24
109.174.180.0/22 maxlen: 24
109.174.184.0/22 maxlen: 24
109.174.188.0/22 maxlen: 24
109.204.6.0/23 maxlen: 24
109.204.12.0/23 maxlen: 24
109.204.20.0/23 maxlen: 24
109.204.28.0/23 maxlen: 24
109.204.32.0/23 maxlen: 24
109.204.40.0/23 maxlen: 24
109.204.44.0/23 maxlen: 24
109.204.50.0/23 maxlen: 24
109.204.54.0/23 maxlen: 24
109.204.58.0/23 maxlen: 24
109.204.60.0/23 maxlen: 24
109.204.72.0/23 maxlen: 24
109.204.82.0/23 maxlen: 24
109.204.92.0/23 maxlen: 24
109.204.95.0/24 maxlen: 24
109.204.101.0/24 maxlen: 24
109.204.112.0/23 maxlen: 24
109.204.120.0/23 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 23
195.40.26.0/23 maxlen: 24
195.40.28.0/23 maxlen: 23
195.40.30.0/23 maxlen: 24
195.40.86.0/24 maxlen: 24
195.40.100.0/23 maxlen: 24
195.40.114.0/23 maxlen: 24
195.40.116.0/23 maxlen: 23
195.40.118.0/23 maxlen: 24
195.40.162.0/23 maxlen: 23
195.40.166.0/23 maxlen: 24
195.40.180.0/24 maxlen: 24
195.40.188.0/23 maxlen: 23
195.172.98.0/23 maxlen: 23
195.172.102.0/23 maxlen: 24
195.172.110.0/23 maxlen: 24
195.172.112.0/23 maxlen: 24
195.172.124.0/24 maxlen: 24
195.172.134.0/23 maxlen: 23
195.172.204.0/23 maxlen: 24
195.172.212.0/23 maxlen: 23
195.172.214.0/23 maxlen: 24
195.172.216.0/23 maxlen: 24
195.172.218.0/23 maxlen: 24
195.172.220.0/23 maxlen: 24
195.172.222.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.134.65.0/24 maxlen: 24
212.134.72.0/23 maxlen: 23
212.134.78.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 23
212.135.5.0/24 maxlen: 24
212.135.10.0/23 maxlen: 24
212.135.174.0/24 maxlen: 24
212.135.178.0/24 maxlen: 24
212.135.190.0/23 maxlen: 24
212.135.236.0/23 maxlen: 24
217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b2:88:3c:a2:90:b3:f2:4e:13:b2:ce:e8:be:ab:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 03:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34f15c787ee0b26c04418ac8047dd10aa04c656d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:ad:6b:27:a3:50:2f:1d:d1:1d:54:e2:7d:
eb:ed:b5:e8:ec:10:10:43:d3:73:24:30:8f:f2:4a:
a9:d2:e8:51:67:84:20:65:14:dc:1d:bc:c2:99:7b:
f8:57:f7:80:5c:bd:53:21:04:06:37:1a:1e:6a:c9:
bd:83:56:a3:f3:09:6e:5c:2b:35:7a:25:2f:d4:20:
39:63:26:2b:6c:31:4c:d2:07:bd:79:c5:55:d2:63:
80:34:d9:85:46:36:bc:1c:01:35:88:1b:36:d2:5c:
39:d8:5c:e6:0c:c0:17:86:15:23:f7:50:de:3c:2d:
6a:e6:41:bb:0a:11:b0:93:dc:fe:5f:ea:8d:91:bd:
34:95:e8:78:ae:52:e0:93:94:02:73:64:74:91:fa:
d0:89:6e:71:f4:10:ff:8a:14:08:29:99:82:41:54:
30:f1:70:8d:d1:fc:34:15:be:66:69:af:7b:aa:06:
5e:12:20:7b:de:bf:03:fe:38:79:c2:eb:b2:08:1a:
66:00:d2:30:27:23:75:78:d6:2c:27:06:b9:1a:b2:
86:ce:ae:d1:ce:4a:17:21:8a:7c:b2:83:0c:e6:a7:
f0:8e:d9:20:70:87:5b:4b:82:50:79:b3:b0:d6:c4:
d9:f5:f3:61:22:d6:72:94:45:0b:c2:8e:5a:bf:16:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F1:5C:78:7E:E0:B2:6C:04:41:8A:C8:04:7D:D1:0A:A0:4C:65:6D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/NPFceH7gsmwEQYrIBH3RCqBMZW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.132.0/22
79.121.140.0-79.121.145.255
79.121.148.0/22
79.121.154.0-79.121.157.255
79.121.162.0-79.121.169.255
79.121.178.0-79.121.181.255
79.121.184.0/23
79.121.200.0/21
79.121.212.0-79.121.219.255
79.121.222.0/23
79.121.226.0/23
79.121.232.0/22
79.121.238.0/23
82.108.58.0/23
82.108.74.0/23
82.108.108.0/23
82.108.112.0/23
82.108.158.0-82.108.161.255
82.109.69.0/24
82.109.229.0/24
82.110.60.0/24
87.82.214.0/23
87.83.171.0/24
87.84.224.0/24
87.85.140.0/24
92.244.174.0-92.244.177.255
92.244.180.0-92.244.185.255
92.244.190.0/23
93.152.73.0/24
93.152.87.0/24
95.177.0.0/23
95.177.8.0/23
95.177.20.0/23
95.177.54.0/23
95.177.64.0/23
95.177.68.0-95.177.73.255
95.177.76.0-95.177.83.255
95.177.104.0/22
95.177.114.0/23
95.177.124.0/22
109.174.176.0/20
109.204.6.0/23
109.204.12.0/23
109.204.20.0/23
109.204.28.0/23
109.204.32.0/23
109.204.40.0/23
109.204.44.0/23
109.204.50.0/23
109.204.54.0/23
109.204.58.0-109.204.61.255
109.204.72.0/23
109.204.82.0/23
109.204.92.0/23
109.204.95.0/24
109.204.101.0/24
109.204.112.0/23
109.204.120.0/23
109.204.124.0/23
195.40.18.0/23
195.40.26.0-195.40.31.255
195.40.86.0/24
195.40.100.0/23
195.40.114.0-195.40.119.255
195.40.162.0/23
195.40.166.0/23
195.40.180.0/24
195.40.188.0/23
195.172.98.0/23
195.172.102.0/23
195.172.110.0-195.172.113.255
195.172.124.0/24
195.172.134.0/23
195.172.204.0/23
195.172.212.0-195.172.223.255
212.134.11.0/24
212.134.65.0/24
212.134.72.0/23
212.134.78.0/24
212.135.0.0/24
212.135.2.0/23
212.135.5.0/24
212.135.10.0/23
212.135.174.0/24
212.135.178.0/24
212.135.190.0/23
212.135.236.0/23
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
35:bd:35:3c:4b:1f:55:c0:f9:3c:2c:58:2f:1d:28:58:ce:d4:
5e:e4:ce:7f:c5:dd:f0:e9:33:54:a7:c3:85:e6:ac:32:84:ee:
14:79:5d:2d:07:16:58:36:f1:b6:ab:9e:c8:25:31:21:d3:c2:
39:e6:b5:1e:9f:a0:4f:cd:32:ec:9a:c8:5d:02:8f:53:dc:f9:
80:81:c5:53:5c:4f:56:30:7b:84:9d:dc:04:ee:9c:f9:5d:d6:
f6:70:f0:de:65:4a:5e:1d:af:53:2c:a0:c9:54:cd:83:a0:8c:
6a:ef:6c:e5:4f:0e:7e:5a:18:63:0f:61:9b:84:48:d1:9e:df:
0b:fa:37:2a:65:38:90:4c:cc:2e:08:3a:58:89:42:cd:c4:86:
dc:28:02:0c:1a:e9:7b:f5:76:9b:ad:0b:49:da:b5:80:76:da:
42:91:51:38:33:98:52:ff:21:00:6d:4b:9b:fd:75:8c:92:84:
72:7d:75:68:34:d7:9b:d1:3f:42:3d:60:2c:7d:4f:e0:57:8b:
e1:10:4a:43:a6:ec:fc:e3:54:a3:2b:49:f6:7e:b1:b7:d6:c3:
af:cc:bb:b2:90:d0:e9:43:d1:52:41:c5:7a:d0:5c:54:8e:08:
e9:6b:c1:56:a9:7d:d8:dd:fb:a5:47:0a:56:2a:ac:58:e3:ca:
6e:96:4e:7b
-----BEGIN CERTIFICATE-----
MIIHjzCCBnegAwIBAgISAaCyiDyikLPyThOyzui+qzPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTE4MDMyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGYxNWM3ODdlZTBiMjZjMDQ0MThhYzgwNDdkZDEwYWEwNGM2NTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrutayejUC8d0R1U4n3r7bXo7BAQ
Q9NzJDCP8kqp0uhRZ4QgZRTcHbzCmXv4V/eAXL1TIQQGNxoeasm9g1aj8wluXCs1
eiUv1CA5YyYrbDFM0ge9ecVV0mOANNmFRja8HAE1iBs20lw52FzmDMAXhhUj91De
PC1q5kG7ChGwk9z+X+qNkb00leh4rlLgk5QCc2R0kfrQiW5x9BD/ihQIKZmCQVQw
8XCN0fw0Fb5maa97qgZeEiB73r8D/jh5wuuyCBpmANIwJyN1eNYsJwa5GrKGzq7R
zkoXIYp8soMM5qfwjtkgcIdbS4JQebOw1sTZ9fNhItZylEULwo5avxaWJQIDAQAB
o4IEmzCCBJcwHQYDVR0OBBYEFDTxXHh+4LJsBEGKyAR90QqgTGVtMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvTlBGY2VIN2dzbXdFUVlySUJIM1JDcUJNWlcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICrwYIKwYBBQUHAQcBAf8EggKeMIICmjCCApYEAgABMIIC
jgMEAk95hDAMAwQCT3mMAwQBT3mQAwQCT3mUMAwDBAFPeZoDBAFPeZwwDAMEAU95
ogMEAU95qDAMAwQBT3myAwQBT3m0AwQBT3m4AwQDT3nIMAwDBAJPedQDBAJPedgD
BAFPed4DBAFPeeIDBAJPeegDBAFPee4DBAFSbDoDBAFSbEoDBAFSbGwDBAFSbHAw
DAMEAVJsngMEAVJsoAMEAFJtRQMEAFJt5QMEAFJuPAMEAVdS1gMEAFdTqwMEAFdU
4AMEAFdVjDAMAwQBXPSuAwQBXPSwMAwDBAJc9LQDBAFc9LgDBAFc9L4DBABdmEkD
BABdmFcDBAFfsQADBAFfsQgDBAFfsRQDBAFfsTYDBAFfsUAwDAMEAl+xRAMEAV+x
SDAMAwQCX7FMAwQCX7FQAwQCX7FoAwQBX7FyAwQCX7F8AwQEba6wAwQBbcwGAwQB
bcwMAwQBbcwUAwQBbcwcAwQBbcwgAwQBbcwoAwQBbcwsAwQBbcwyAwQBbcw2MAwD
BAFtzDoDBAFtzDwDBAFtzEgDBAFtzFIDBAFtzFwDBABtzF8DBABtzGUDBAFtzHAD
BAFtzHgDBAFtzHwDBAHDKBIwDAMEAcMoGgMEBcMoAAMEAMMoVgMEAcMoZDAMAwQB
wyhyAwQDwyhwAwQBwyiiAwQBwyimAwQAwyi0AwQBwyi8AwQBw6xiAwQBw6xmMAwD
BAHDrG4DBAHDrHADBADDrHwDBAHDrIYDBAHDrMwwDAMEAsOs1AMEBcOswAMEANSG
CwMEANSGQQMEAdSGSAMEANSGTgMEANSHAAMEAdSHAgMEANSHBQMEAdSHCgMEANSH
rgMEANSHsgMEAdSHvgMEAdSH7AMEAtlPaAMEAtlPdDANBgkqhkiG9w0BAQsFAAOC
AQEANb01PEsfVcD5PCxYLx0oWM7UXuTOf8Xd8OkzVKfDheasMoTuFHldLQcWWDbx
tqueyCUxIdPCOea1Hp+gT80y7JrIXQKPU9z5gIHFU1xPVjB7hJ3cBO6c+V3W9nDw
3mVKXh2vUyygyVTNg6CMau9s5U8OfloYYw9hm4RI0Z7fC/o3KmU4kEzMLgg6WIlC
zcSG3CgCDBrpe/V2m60LSdq1gHbaQpFRODOYUv8hAG1Lm/11jJKEcn11aDTXm9E/
Qj1gLH1P4FeL4RBKQ6bs/ONUoytJ9n6xt9bDr8y7spDQ6UPRUkHFetBcVI4I6WvB
Vql92N37pUcKViqsWOPKbpZOew==
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:07:57 2026 by rpki-client