Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WIj_tqe863dHupsuDZUE4nwMlvA.roa
File: WIj_tqe863dHupsuDZUE4nwMlvA.roa (raw, json)
Hash identifier: A5yOJT3l0llTidVZoGi0mZ2M9s6skRUIn64fMzvKhQQ=
Subject key identifier: 58:88:FF:B6:A7:BC:EB:77:47:BA:9B:2E:0D:95:04:E2:7C:0C:96:F0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FDC8FFE4BC925BD7E3A0D611A1B1FCF5B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WIj_tqe863dHupsuDZUE4nwMlvA.roa
Signing time: Fri 07 Aug 2026 14:10:51 +0000
ROA not before: Fri 07 Aug 2026 14:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 46.34.4.0/22 maxlen: 24
46.34.8.0/22 maxlen: 24
80.68.212.0/22 maxlen: 24
82.109.208.0/20 maxlen: 24
82.110.240.0/20 maxlen: 24
85.189.32.0/22 maxlen: 24
87.84.240.0/20 maxlen: 24
87.85.80.0/20 maxlen: 24
87.85.112.0/20 maxlen: 24
87.85.144.0/20 maxlen: 24
87.85.176.0/20 maxlen: 24
87.86.64.0/20 maxlen: 24
87.86.112.0/20 maxlen: 24
87.86.128.0/19 maxlen: 24
87.86.192.0/20 maxlen: 24
91.143.176.0/22 maxlen: 24
194.6.100.0/22 maxlen: 24
194.6.112.0/20 maxlen: 24
194.242.152.0/22 maxlen: 24
195.72.160.0/22 maxlen: 24
212.74.0.0/22 maxlen: 24
212.134.94.0/24 maxlen: 24
212.134.172.0/23 maxlen: 24
212.135.76.0/23 maxlen: 24
212.135.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:8f:fe:4b:c9:25:bd:7e:3a:0d:61:1a:1b:1f:cf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 7 14:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5888ffb6a7bceb7747ba9b2e0d9504e27c0c96f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:76:83:78:64:16:18:b8:9a:9d:35:d6:28:
eb:af:f1:95:ff:cf:76:8c:e0:73:fb:8f:67:58:35:
58:db:c7:18:f5:c7:28:77:04:86:c4:5e:2f:8c:8d:
1c:97:95:a1:12:e2:9c:dd:98:3f:2b:7a:3e:0c:e2:
ea:0e:69:37:9c:dc:8d:f9:29:55:73:f7:87:1f:4d:
8e:4e:36:2d:77:c4:3a:66:11:74:e2:aa:b7:6b:18:
7a:f6:c8:15:32:00:d6:60:5f:10:4c:f6:91:05:7f:
6c:f3:25:0c:f3:9b:25:1f:02:02:e2:8c:0c:cc:79:
7d:ba:b9:52:d8:f8:72:85:90:b8:10:73:aa:e8:c1:
7c:bf:80:7e:3b:0d:f5:8c:9b:a0:de:84:3f:1c:ec:
bc:76:8d:2b:0e:4d:0c:df:00:c9:be:ac:5f:4b:d5:
a3:df:1d:73:57:de:6f:fe:28:77:8a:62:72:4a:7e:
81:61:1d:91:a3:60:a0:57:db:fb:72:53:9c:69:0f:
bb:ba:27:5b:4f:63:c5:15:05:4b:ae:1e:dc:f0:69:
d1:66:75:b2:dc:94:39:3b:47:a8:54:7a:43:f3:b1:
27:4e:3a:09:63:76:ad:b3:0e:78:cf:51:76:97:67:
2c:03:02:1c:17:1b:82:fe:b0:a0:48:5b:27:b8:7a:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:88:FF:B6:A7:BC:EB:77:47:BA:9B:2E:0D:95:04:E2:7C:0C:96:F0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WIj_tqe863dHupsuDZUE4nwMlvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.4.0-46.34.11.255
80.68.212.0/22
82.109.208.0/20
82.110.240.0/20
85.189.32.0/22
87.84.240.0/20
87.85.80.0/20
87.85.112.0/20
87.85.144.0/20
87.85.176.0/20
87.86.64.0/20
87.86.112.0-87.86.159.255
87.86.192.0/20
91.143.176.0/22
194.6.100.0/22
194.6.112.0/20
194.242.152.0/22
195.72.160.0/22
212.74.0.0/22
212.134.94.0/24
212.134.172.0/23
212.135.76.0/23
212.135.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:35:a3:4e:c3:03:20:10:5e:59:4a:38:6b:01:ba:59:3e:a9:
cd:10:14:a6:70:36:95:3a:f5:b0:9b:40:d0:5e:9b:94:8b:c7:
2d:a0:a7:2c:30:f4:58:48:2b:64:76:90:5e:1d:90:99:9d:b0:
f2:df:84:e8:b5:8b:81:10:0b:b5:92:dd:81:1f:05:ce:f7:3a:
53:78:5c:a8:2f:de:62:34:a2:6f:8a:cd:9e:6d:0f:76:87:74:
c6:5d:20:63:57:f4:70:f1:f6:c0:1e:ab:68:ae:83:e6:33:f6:
4b:17:1d:02:6b:06:76:ee:82:70:15:b9:61:a0:e7:1d:3a:27:
8c:64:fd:cb:17:b0:e6:be:b5:c6:32:cd:03:a8:21:0b:7e:d2:
15:d6:a6:31:9a:89:44:dc:55:23:eb:4c:c6:d1:4f:ff:f4:e9:
56:51:98:c0:db:4d:0e:20:9c:73:6a:a3:6b:a7:88:95:2d:84:
b4:f6:8c:9a:15:ed:3f:37:b6:ae:3c:41:85:f4:99:53:dd:4e:
a9:79:c7:15:0f:fb:f2:ad:0c:f9:35:45:7e:97:74:c5:9f:cc:
b6:7a:2b:5c:88:a7:89:ff:a8:9d:b3:97:2a:a6:eb:27:5d:81:
e3:5e:6f:e7:42:2d:02:1a:ed:2b:a1:71:3e:c7:4a:de:9e:6f:
46:aa:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:47 2026 by rpki-client