Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZQJ2VxKdRBTAHW1CiK0Q81FI534.roa
File: ZQJ2VxKdRBTAHW1CiK0Q81FI534.roa (raw, json)
Hash identifier: nVk+PuQwRqiFL4Fzag7BLAXUuKZpBIl9jENxQ+sjeT0=
Subject key identifier: 65:02:76:57:12:9D:44:14:C0:1D:6D:42:88:AD:10:F3:51:48:E7:7E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A07B4B82BD254D03C882477F1FE09EAAB3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZQJ2VxKdRBTAHW1CiK0Q81FI534.roa
Signing time: Mon 07 Sep 2026 09:55:41 +0000
ROA not before: Mon 07 Sep 2026 09:55:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 82.109.151.0/24 maxlen: 24
87.83.47.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
212.134.16.0/24 maxlen: 24
212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.99.0/24 maxlen: 24
212.134.104.0/24 maxlen: 24
212.134.110.0/24 maxlen: 24
212.134.120.0/24 maxlen: 24
212.134.134.0/24 maxlen: 24
212.134.136.0/24 maxlen: 24
212.134.143.0/24 maxlen: 24
212.134.160.0/24 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.181.0/24 maxlen: 24
212.134.184.0/24 maxlen: 24
212.134.185.0/24 maxlen: 24
212.134.202.0/24 maxlen: 24
212.134.219.0/24 maxlen: 24
212.134.233.0/24 maxlen: 24
212.134.234.0/24 maxlen: 24
212.134.237.0/24 maxlen: 24
212.134.238.0/24 maxlen: 24
212.134.244.0/24 maxlen: 24
212.134.246.0/24 maxlen: 24
212.134.251.0/24 maxlen: 24
212.135.66.0/24 maxlen: 24
212.135.98.0/24 maxlen: 24
212.135.140.0/24 maxlen: 24
212.135.141.0/24 maxlen: 24
212.135.150.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.168.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.204.0/24 maxlen: 24
212.135.242.0/24 maxlen: 24
212.135.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:4b:82:bd:25:4d:03:c8:82:47:7f:1f:e0:9e:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 7 09:55:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65027657129d4414c01d6d4288ad10f35148e77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:17:17:4a:32:24:a7:2a:74:75:37:c8:03:
13:9d:8e:d0:76:a6:05:1a:ab:bc:95:ac:9d:08:71:
c6:b7:5d:ff:9a:7d:8d:33:b2:f3:81:cc:cc:8f:a0:
e3:7b:55:1e:54:b3:e2:5b:e9:6e:92:f7:47:58:06:
9b:20:64:08:83:6c:17:78:fa:0d:81:8d:1e:fc:c6:
06:99:bc:b8:d7:24:2e:fe:d9:1e:55:cb:45:a8:3a:
40:4a:d0:9b:61:c7:22:5e:5c:a8:87:fb:1f:1b:a5:
3b:5f:31:48:1c:2c:b5:6d:e4:06:62:c4:16:96:68:
b1:0b:33:5b:78:90:8c:29:a6:bd:14:a2:0d:eb:fb:
cf:c0:1e:53:61:a1:77:63:97:55:ee:78:75:65:bd:
17:47:56:e2:8b:6e:ef:b2:cf:78:fb:15:ca:63:bb:
78:e8:39:63:76:bb:f9:81:0e:4d:3f:ba:fa:60:98:
6d:41:8e:f5:71:92:1f:d3:3b:01:19:0b:2e:5a:40:
82:8a:f2:6a:4f:ba:03:a6:d5:c8:e7:91:95:ec:57:
c5:72:f9:9c:88:06:56:5c:66:f3:62:3a:a7:34:8f:
4d:6e:a7:92:1c:f9:d9:29:0a:65:15:21:7c:80:59:
cb:54:6e:cf:34:aa:2a:a1:3c:ce:f1:c6:a3:df:0d:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:02:76:57:12:9D:44:14:C0:1D:6D:42:88:AD:10:F3:51:48:E7:7E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZQJ2VxKdRBTAHW1CiK0Q81FI534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.151.0/24
87.83.47.0/24
87.84.64.0/24
212.134.16.0/24
212.134.18.0/23
212.134.22.0/24
212.134.24.0/24
212.134.58.0/23
212.134.80.0/24
212.134.83.0/24
212.134.99.0/24
212.134.104.0/24
212.134.110.0/24
212.134.120.0/24
212.134.134.0/24
212.134.136.0/24
212.134.143.0/24
212.134.160.0/24
212.134.171.0/24
212.134.175.0-212.134.176.255
212.134.181.0/24
212.134.184.0/23
212.134.202.0/24
212.134.219.0/24
212.134.233.0-212.134.234.255
212.134.237.0-212.134.238.255
212.134.244.0/24
212.134.246.0/24
212.134.251.0/24
212.135.66.0/24
212.135.98.0/24
212.135.140.0/23
212.135.150.0/24
212.135.158.0/24
212.135.168.0/24
212.135.171.0/24
212.135.204.0/24
212.135.242.0/24
212.135.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:54:4c:b8:46:31:11:74:ac:c7:8d:37:55:90:5d:63:8c:a8:
8c:03:96:51:e1:c1:01:cd:05:df:fe:29:12:ee:26:b9:fe:18:
d4:d0:09:a5:50:87:32:c1:fe:20:58:4a:d3:e7:af:84:20:24:
e6:41:67:06:ce:67:5e:19:13:3f:dc:bc:3e:08:ef:ad:bf:1f:
8b:1b:94:59:71:9d:31:27:aa:c4:fa:57:55:f7:ab:da:0c:94:
19:79:4c:67:34:6f:b5:a2:80:b9:e4:04:c1:56:78:2d:0c:de:
00:df:47:ef:a5:28:06:a2:04:29:c1:a8:90:5f:31:9e:c1:bc:
b1:ac:16:ea:08:4e:31:c1:e1:30:c2:7c:78:b4:71:53:d3:a2:
8b:9f:52:b0:69:4b:b6:16:21:d4:33:51:1b:42:96:7b:19:82:
fd:d1:1c:6f:b0:9d:bc:3d:08:ad:c1:be:6e:98:fd:9e:49:92:
27:6d:04:43:c0:05:06:1a:21:49:22:58:3f:d0:b3:a7:52:a2:
de:a2:2e:df:6f:e3:73:bf:24:93:86:91:6e:e6:6a:11:5a:21:
49:d2:f8:8e:c6:ac:da:96:68:94:2c:3f:b4:31:50:cf:0f:bc:
07:98:79:8a:c8:96:eb:16:c4:01:0f:a6:57:f5:6b:64:36:99:
68:4c:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:29:53 2026 by rpki-client