Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Px4equKkJicxIjLIzbwPgd-AOmI.roa
File: Px4equKkJicxIjLIzbwPgd-AOmI.roa (raw, json)
Hash identifier: CMhb4c7cawWWWAWSnucySwOTMCvcv8Aiu8Yrzqpton0=
Subject key identifier: 3F:1E:1E:AA:E2:A4:26:27:31:22:32:C8:CD:BC:0F:81:DF:80:3A:62
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A032A71FF312EE634676CBFD8831B7564F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Px4equKkJicxIjLIzbwPgd-AOmI.roa
Signing time: Mon 24 Aug 2026 07:23:28 +0000
ROA not before: Mon 24 Aug 2026 07:23:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401783
IP address blocks: 86.53.44.0/24 maxlen: 24
86.53.45.0/24 maxlen: 24
86.53.72.0/24 maxlen: 24
86.53.75.0/24 maxlen: 24
212.134.20.0/24 maxlen: 24
213.177.255.0/24 maxlen: 24
217.204.36.0/22 maxlen: 22
217.204.40.0/22 maxlen: 22
217.204.44.0/22 maxlen: 22
217.204.48.0/22 maxlen: 22
217.204.52.0/22 maxlen: 22
217.204.56.0/22 maxlen: 22
217.204.68.0/22 maxlen: 22
217.204.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:a7:1f:f3:12:ee:63:46:76:cb:fd:88:31:b7:56:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 24 07:23:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f1e1eaae2a42627312232c8cdbc0f81df803a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:9c:25:8a:ba:dd:1e:57:cc:71:f5:d5:29:
38:de:08:e4:00:8c:d8:46:a9:bb:48:be:76:c9:55:
42:d4:18:29:f8:70:b6:c9:fe:3e:bc:df:2c:bf:bf:
00:7c:c4:e9:13:f9:0a:40:a8:27:59:39:34:bb:9f:
ca:31:b9:98:04:12:54:92:95:ed:89:bb:46:51:26:
34:8f:96:b6:f4:81:46:2b:82:3f:7b:7b:ff:08:3d:
42:a1:97:0c:87:7d:81:69:46:00:e1:e2:1e:d8:9b:
3b:c7:85:6b:51:45:80:c5:7a:4a:9f:68:7a:55:1d:
f9:24:dc:2a:05:0e:ac:c5:e1:9e:29:7c:be:56:a1:
a4:64:c6:c9:0e:08:86:da:ca:60:f7:95:0a:8c:61:
8d:4a:96:33:2e:9b:d2:0e:ec:9b:3b:ba:65:40:31:
4f:25:f6:d1:54:97:60:e3:12:80:27:cb:44:40:39:
60:0e:8a:61:53:09:27:89:7a:f2:06:ad:5f:38:95:
14:c8:00:24:88:65:dd:c3:ad:b9:e1:35:7a:39:38:
4e:1c:f4:26:55:64:52:41:db:0d:f4:4c:68:2f:f4:
02:d5:dd:94:aa:ed:33:82:e5:7b:3f:95:cc:ed:7b:
70:5e:ea:48:fc:71:2f:ad:07:90:74:22:6b:d8:d8:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:1E:AA:E2:A4:26:27:31:22:32:C8:CD:BC:0F:81:DF:80:3A:62
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Px4equKkJicxIjLIzbwPgd-AOmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.53.44.0/23
86.53.72.0/24
86.53.75.0/24
212.134.20.0/24
213.177.255.0/24
217.204.36.0-217.204.59.255
217.204.68.0-217.204.75.255
Signature Algorithm: sha256WithRSAEncryption
30:ef:b1:6a:4d:55:60:62:cd:78:69:3b:34:bc:3f:fa:8b:ed:
b6:2c:2a:74:bb:fb:56:07:04:45:9e:10:9a:2e:da:d7:34:d9:
44:52:d4:b5:63:3a:10:fe:8f:2b:01:f3:53:1b:4b:76:be:18:
36:d9:26:70:a2:ad:05:0e:fe:9e:c0:3a:3b:e9:ed:e8:c2:9e:
65:0f:72:6a:86:60:0f:8f:90:c8:57:57:58:4b:b1:90:13:8e:
2f:22:9b:fb:f7:74:c2:12:11:fb:96:72:d2:27:8c:2a:84:62:
e9:58:65:2d:26:b5:44:3d:ec:a5:cd:3d:5e:25:15:43:7e:32:
41:72:06:46:03:ca:3c:b8:e5:58:9c:cd:4e:aa:d2:b2:b7:b1:
3c:76:85:aa:b7:b3:8a:89:f4:cc:cd:50:87:ca:b1:b6:b1:50:
e0:76:98:70:f2:00:af:45:50:f6:9d:fb:97:01:74:0b:bc:c1:
f5:d7:48:d5:ab:0d:a4:d8:d2:34:b8:b1:42:cc:2f:7c:89:c9:
1e:b6:93:87:37:14:f1:ef:5d:57:f8:17:1c:61:51:8c:61:56:
f2:58:d0:94:42:3e:36:40:0a:ad:7c:f0:9b:24:7a:4f:1a:fc:
13:88:32:ca:a0:d4:5a:a4:2f:8f:99:ee:ac:a9:b8:56:4e:c6:
87:06:05:54
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAaAypx/zEu5jRnbL/Ygxt1ZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODI0MDcyMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjFlMWVhYWUyYTQyNjI3MzEyMjMyYzhjZGJjMGY4MWRmODAzYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsmcJYq63R5XzHH11Sk43gjkAIzY
Rqm7SL52yVVC1Bgp+HC2yf4+vN8sv78AfMTpE/kKQKgnWTk0u5/KMbmYBBJUkpXt
ibtGUSY0j5a29IFGK4I/e3v/CD1CoZcMh32BaUYA4eIe2Js7x4VrUUWAxXpKn2h6
VR35JNwqBQ6sxeGeKXy+VqGkZMbJDgiG2spg95UKjGGNSpYzLpvSDuybO7plQDFP
JfbRVJdg4xKAJ8tEQDlgDophUwkniXryBq1fOJUUyAAkiGXdw6254TV6OThOHPQm
VWRSQdsN9ExoL/QC1d2Uqu0zguV7P5XM7XtwXupI/HEvrQeQdCJr2NjTowIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFD8eHqripCYnMSIyyM28D4HfgDpiMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvUHg0ZXF1S2tKaWN4SWpMSXpid1BnZC1BT21JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQBVjUsAwQA
VjVIAwQAVjVLAwQA1IYUAwQA1bH/MAwDBALZzCQDBALZzDgwDAMEAtnMRAMEAtnM
SDANBgkqhkiG9w0BAQsFAAOCAQEAMO+xak1VYGLNeGk7NLw/+ovttiwqdLv7VgcE
RZ4Qmi7a1zTZRFLUtWM6EP6PKwHzUxtLdr4YNtkmcKKtBQ7+nsA6O+nt6MKeZQ9y
aoZgD4+QyFdXWEuxkBOOLyKb+/d0whIR+5Zy0ieMKoRi6VhlLSa1RD3spc09XiUV
Q34yQXIGRgPKPLjlWJzNTqrSsrexPHaFqrezion0zM1Qh8qxtrFQ4HaYcPIAr0VQ
9p37lwF0C7zB9ddI1asNpNjSNLixQswvfInJHraThzcU8e9dV/gXHGFRjGFW8ljQ
lEI+NkAKrXzwmyR6Txr8E4gyyqDUWqQvj5nurKm4Vk7GhwYFVA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:20 2026 by rpki-client