Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Qr7me8hfM3oJwRN9mEw3d4wXhK0.roa
File: Qr7me8hfM3oJwRN9mEw3d4wXhK0.roa (raw, json)
Hash identifier: qorLdEC3nXXWRcEUwbVsCLxIJip+GTEOurl47rPEC1Q=
Subject key identifier: 42:BE:E6:7B:C8:5F:33:7A:09:C1:13:7D:98:4C:37:77:8C:17:84:AD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A05C67ADCB27D0A0E75444FC56DE65EDE2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Qr7me8hfM3oJwRN9mEw3d4wXhK0.roa
Signing time: Tue 01 Sep 2026 09:58:13 +0000
ROA not before: Tue 01 Sep 2026 09:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 78.154.108.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
87.82.198.0/24 maxlen: 24
87.83.2.0/24 maxlen: 24
87.83.46.0/24 maxlen: 24
87.83.57.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.84.234.0/24 maxlen: 24
87.85.232.0/24 maxlen: 24
87.85.255.0/24 maxlen: 24
212.134.48.0/24 maxlen: 24
212.134.141.0/24 maxlen: 24
212.134.142.0/24 maxlen: 24
212.134.148.0/22 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.190.0/24 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.203.0/24 maxlen: 24
212.134.205.0/24 maxlen: 24
212.134.228.0/24 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.248.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.27.0/24 maxlen: 24
212.135.100.0/24 maxlen: 24
212.135.110.0/24 maxlen: 24
212.135.151.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.240.0/24 maxlen: 24
212.135.243.0/24 maxlen: 24
217.79.98.0/24 maxlen: 24
217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:67:ad:cb:27:d0:a0:e7:54:44:fc:56:de:65:ed:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 1 09:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42bee67bc85f337a09c1137d984c37778c1784ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:fb:64:b9:d3:7c:c7:83:53:7c:4a:00:e6:
58:6b:ae:b1:60:dd:ba:3d:c3:6e:2d:f9:e5:84:60:
f1:04:a0:c5:41:36:43:66:de:13:b1:a9:9e:23:05:
ac:e5:0a:03:17:6b:09:dd:63:9d:3f:1b:a2:0b:59:
74:02:a8:4d:2e:fc:c6:3b:b0:f9:b8:a7:c1:20:e7:
e3:66:7d:c4:b8:61:0e:fd:55:05:76:07:bb:4f:b2:
27:c5:59:d0:e5:31:e7:b7:10:dc:2a:1e:5a:49:bc:
dd:bb:30:64:34:1d:9e:dd:d0:68:6d:97:ef:85:35:
94:2b:76:57:b8:7a:64:b9:1e:01:aa:7c:1a:9f:36:
fd:c1:1b:c4:88:db:66:17:71:91:6f:34:51:4f:72:
08:b0:82:5a:f1:26:65:f3:c5:87:45:e8:d8:2c:e5:
dd:36:17:96:a5:59:9f:6c:28:23:e5:2c:58:60:d2:
a9:76:5c:0b:f5:81:47:50:18:76:90:2d:59:52:88:
7b:24:71:52:89:3a:eb:45:99:a3:4f:50:f0:62:1d:
ca:55:21:1d:d8:d0:82:ae:5b:a9:06:c8:40:3a:f6:
bc:d8:11:b5:0d:f8:37:b0:1e:1a:9d:55:a1:2e:46:
ab:a8:5e:0b:5f:60:c0:e1:20:60:7e:42:81:7e:c8:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BE:E6:7B:C8:5F:33:7A:09:C1:13:7D:98:4C:37:77:8C:17:84:AD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Qr7me8hfM3oJwRN9mEw3d4wXhK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.108.0/24
82.109.151.0/24
87.82.198.0/24
87.83.2.0/24
87.83.46.0/24
87.83.57.0/24
87.83.174.0/24
87.84.220.0/24
87.84.234.0/24
87.85.232.0/24
87.85.255.0/24
212.134.48.0/24
212.134.141.0-212.134.142.255
212.134.148.0/22
212.134.176.0/24
212.134.190.0/24
212.134.199.0/24
212.134.203.0/24
212.134.205.0/24
212.134.228.0/24
212.134.232.0/24
212.134.248.0/24
212.135.21.0/24
212.135.27.0/24
212.135.100.0/24
212.135.110.0/24
212.135.151.0/24
212.135.165.0-212.135.166.255
212.135.170.0/24
212.135.240.0/24
212.135.243.0/24
217.79.98.0/24
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:8e:ee:c7:45:d8:63:d7:3a:d1:0e:61:24:8f:ee:3f:10:50:
4c:08:fb:2f:75:76:ac:48:d6:7d:c9:14:98:0e:06:92:c1:21:
4e:95:82:75:32:e6:9a:0c:59:41:e6:c0:a5:62:36:00:dc:57:
dc:b9:03:72:1d:31:ef:1a:75:b9:57:ab:aa:f1:54:37:5a:96:
38:ab:a5:99:38:5f:0d:24:f6:59:81:2b:fd:3a:57:35:c9:c6:
59:69:e3:df:fa:fc:8e:b8:27:f8:4d:8d:96:1e:1a:5c:15:aa:
dc:5e:9c:2e:ca:89:34:06:b6:ca:0f:2d:ef:2f:7c:1d:c6:77:
97:54:a8:2f:ca:86:86:3d:4a:ff:4d:8e:3c:bf:03:87:98:c7:
24:dc:17:cb:3d:d6:ba:b6:89:b7:14:97:0e:ba:36:dc:f9:17:
3f:50:24:dc:c2:37:c0:1f:48:bd:06:a8:83:95:f2:9e:75:b3:
ff:35:42:51:ce:2b:d7:a0:5e:ce:29:8a:b3:55:69:cc:1c:56:
eb:35:a1:50:ad:21:aa:eb:d4:f3:ed:e7:16:12:00:5a:9f:64:
6d:60:90:a0:4a:5c:c1:88:f9:7e:f4:a1:18:f0:59:21:12:24:
78:a3:66:77:52:85:85:a5:64:7c:4b:1b:7d:b5:1f:e1:7f:03:
0d:1d:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:43 2026 by rpki-client