Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_s2y1Nx1RtHwmzQBdV0gLfymMfI.roa
File: _s2y1Nx1RtHwmzQBdV0gLfymMfI.roa (raw, json)
Hash identifier: KQDRnOyeubp28QYwSlzeUXGX3CxlK69nLOTT+c6VqI8=
Subject key identifier: FE:CD:B2:D4:DC:75:46:D1:F0:9B:34:01:75:5D:20:2D:FC:A6:31:F2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F78C8369C795EFCC16126E3C15FC2FE2F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_s2y1Nx1RtHwmzQBdV0gLfymMfI.roa
Signing time: Sun 19 Jul 2026 05:10:14 +0000
ROA not before: Sun 19 Jul 2026 05:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 46.34.29.0/24 maxlen: 24
82.108.173.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
85.189.17.0/24 maxlen: 24
87.82.233.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.84.188.0/24 maxlen: 24
87.84.206.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
87.85.97.0/24 maxlen: 24
87.85.129.0/24 maxlen: 24
87.85.133.0/24 maxlen: 24
195.72.169.0/24 maxlen: 24
212.135.19.0/24 maxlen: 24
217.79.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:78:c8:36:9c:79:5e:fc:c1:61:26:e3:c1:5f:c2:fe:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 19 05:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fecdb2d4dc7546d1f09b3401755d202dfca631f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:c7:e5:00:64:3e:e7:8e:f8:fc:cd:71:dd:
f1:e9:78:f6:2a:95:8b:9c:dc:2e:3c:56:5f:52:ef:
6b:4f:ba:ef:e5:d4:6d:56:6e:49:30:22:d5:ce:6c:
d9:9a:c7:af:2e:9b:75:6d:05:9a:d1:5f:30:a8:93:
95:21:71:de:b1:2c:38:e0:d3:a1:f1:37:b0:a6:73:
ae:c8:16:bf:14:3a:1d:b7:2a:cf:5c:d3:f0:7e:da:
6b:17:0a:c9:bb:08:36:6f:d5:f6:ac:b7:90:e3:6d:
0f:f3:b5:e8:c7:83:ff:5c:b1:41:0f:6e:9e:39:cd:
df:f2:42:a1:62:3f:27:35:9e:df:cb:b5:2a:2f:0a:
93:ba:cc:52:03:cf:8f:f2:c4:16:2d:d0:e4:6a:5e:
80:de:fc:e6:56:64:e4:43:78:ad:a4:98:c0:bd:f4:
cc:b1:7e:be:67:49:12:88:e1:b1:b4:ef:ec:ac:71:
a7:59:c0:ba:d1:34:e9:9c:ae:73:0d:1e:fe:b8:59:
25:5d:97:5c:96:b1:cd:7a:ca:ea:5c:e8:01:49:47:
c5:4d:47:ae:60:28:81:81:71:ed:c3:63:30:5d:c3:
fa:78:ac:59:7c:29:a6:90:b8:a8:72:ec:da:db:b2:
b6:6f:f6:85:10:5b:2c:45:b5:0b:c3:62:6c:c2:df:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:B2:D4:DC:75:46:D1:F0:9B:34:01:75:5D:20:2D:FC:A6:31:F2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_s2y1Nx1RtHwmzQBdV0gLfymMfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.29.0/24
82.108.173.0/24
82.109.98.0/24
82.109.151.0/24
85.189.17.0/24
87.82.233.0/24
87.83.232.0/24
87.84.188.0/24
87.84.206.0/24
87.84.232.0/24
87.85.97.0/24
87.85.129.0/24
87.85.133.0/24
195.72.169.0/24
212.135.19.0/24
217.79.112.0/24
Signature Algorithm: sha256WithRSAEncryption
41:bd:ba:46:29:cb:bc:0e:c5:8f:8c:bd:2a:12:a5:64:60:64:
94:1e:b3:e4:ae:ac:f5:e2:29:57:43:32:b2:77:bf:39:30:c1:
16:88:d2:a8:76:52:2d:a9:70:d0:4d:b8:10:d1:3e:ff:77:34:
02:c1:db:0e:e6:44:75:76:53:0c:47:31:93:5c:c0:4d:46:38:
9f:99:4a:b4:39:17:68:96:75:7b:c7:cb:74:b3:7a:ea:58:dd:
54:21:30:3f:9a:a0:60:49:35:a8:e2:62:6a:b4:e5:b2:e5:0a:
72:59:bf:96:05:43:d1:9c:0d:19:78:06:bd:e5:bf:6e:36:fc:
d4:7f:34:3a:8a:b8:ae:ed:92:30:2a:f1:82:81:13:8a:21:40:
51:ab:72:97:fe:5a:cb:d0:e5:6f:98:a1:fa:00:0f:97:25:65:
47:f2:3f:1b:94:17:61:1b:94:54:2f:b6:04:f9:3e:2d:4d:81:
2c:8a:d0:23:e6:0f:54:fa:f2:6e:ec:78:26:de:dd:42:0b:2c:
97:23:0d:30:7c:1b:ee:48:27:71:96:d9:86:7f:a9:aa:c5:c1:
3d:1f:59:5a:ff:40:05:16:ef:91:94:f1:d9:eb:89:08:52:34:
3c:1d:8e:73:49:ff:e2:98:a8:42:ab:57:8d:f8:24:d8:42:8e:
ab:9c:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client