Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aFTxd1AaUw6GJASbA4HQeZmlhi0.roa
File: aFTxd1AaUw6GJASbA4HQeZmlhi0.roa (raw, json)
Hash identifier: /ztvQ23Y32GIHTXhSCT1IOHOEEdtbXho4T4PS3VB4XM=
Subject key identifier: 68:54:F1:77:50:1A:53:0E:86:24:04:9B:03:81:D0:79:99:A5:86:2D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0147812D9B78C550C70CF608C728F18AE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aFTxd1AaUw6GJASbA4HQeZmlhi0.roa
Signing time: Tue 18 Aug 2026 10:43:28 +0000
ROA not before: Tue 18 Aug 2026 10:43:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.34.0.0/24 maxlen: 24
82.110.124.0/22 maxlen: 22
87.82.217.0/24 maxlen: 24
87.84.233.0/24 maxlen: 24
87.86.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:78:12:d9:b7:8c:55:0c:70:cf:60:8c:72:8f:18:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 18 10:43:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6854f177501a530e8624049b0381d07999a5862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:9d:25:54:46:48:fd:3f:9e:40:99:f3:5a:
70:15:1f:60:1e:00:4b:68:53:96:39:aa:81:dd:90:
9f:bb:02:fe:79:96:54:0c:f5:d3:be:87:40:da:d7:
de:c2:67:0f:55:af:7e:ab:dd:42:31:77:c4:8c:0b:
63:c6:64:fa:a0:0b:1a:06:bf:e1:a7:48:9a:1f:a0:
44:3d:ff:30:d8:1c:48:36:58:9d:59:59:c5:2b:6f:
64:5c:dd:30:75:a9:91:6d:d3:3c:77:ca:db:08:79:
82:d9:68:d4:8e:f9:91:47:86:9c:c5:bc:42:e3:9b:
66:4a:c3:60:b2:19:47:80:ec:63:96:22:93:bc:ee:
d2:f6:98:37:26:2b:49:56:52:d2:12:61:8b:4c:d9:
37:ea:e1:de:91:36:e3:ac:5a:cd:ae:46:fb:97:ed:
13:04:1c:a0:e6:5d:7b:0f:df:a6:49:b4:44:a4:10:
17:aa:22:9c:cf:ca:9b:c5:c2:c5:ce:bc:06:76:66:
fb:ea:29:e5:d8:e0:cd:04:3b:c6:0c:91:68:1e:1d:
0b:11:6e:23:c3:c6:47:31:6e:3c:20:ec:bb:0c:20:
ad:57:41:f2:1c:8c:70:f1:24:ef:6d:48:b9:8c:c6:
32:08:85:ab:10:e8:93:30:59:63:c3:61:9d:e9:be:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:54:F1:77:50:1A:53:0E:86:24:04:9B:03:81:D0:79:99:A5:86:2D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aFTxd1AaUw6GJASbA4HQeZmlhi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
82.110.124.0/22
87.82.217.0/24
87.84.233.0/24
87.86.212.0/23
Signature Algorithm: sha256WithRSAEncryption
41:e1:cb:94:65:40:ac:aa:b7:dd:82:48:83:1d:b8:e2:aa:fa:
87:56:2f:1a:bc:50:f0:99:08:42:8c:04:70:6c:68:fe:38:49:
94:27:e9:4b:b2:14:5a:39:d2:37:75:13:b4:c2:03:a8:fb:42:
d2:db:59:73:f7:62:8d:27:a2:b7:93:67:b8:bc:c9:28:6b:c8:
6e:f5:b4:59:12:85:d4:6e:2b:15:aa:50:68:8f:a6:10:60:d7:
37:21:ef:cd:69:a4:a1:c5:54:c1:79:40:73:34:2d:9e:87:f1:
f3:d6:09:ca:71:da:46:00:ec:9e:55:0b:dd:8b:e1:04:19:e0:
00:6d:35:7e:1e:a6:01:d4:0e:4c:af:09:12:85:9b:05:65:2a:
43:60:0b:c9:76:64:2e:10:8a:a7:8b:a6:e4:a5:0f:1f:c4:02:
3a:ea:0a:c9:49:0b:41:03:10:c6:e2:ed:03:52:9b:9e:06:bf:
49:41:28:88:40:5e:7a:4b:d8:ab:2b:5b:a7:1f:36:2b:fb:9e:
d6:d8:90:7b:22:e2:f3:dc:89:79:60:ec:d6:4c:6a:54:18:23:
e3:87:c2:4a:c7:5b:f3:a9:c5:fe:f3:c0:cd:53:7f:fc:af:ad:
26:cb:a2:4e:e5:75:f7:35:c6:1b:60:1b:95:41:86:61:d0:ba:
af:4d:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:07 2026 by rpki-client