Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fr6Mocqiq3h2_pjXIPQeZs_EkFY.roa
File: fr6Mocqiq3h2_pjXIPQeZs_EkFY.roa (raw, json)
Hash identifier: rcMpVWc2fQ+jIoZNKZwt3jZAW7w5j2fhsjIx/Es9+Ks=
Subject key identifier: 7E:BE:8C:A1:CA:A2:AB:78:76:FE:98:D7:20:F4:1E:66:CF:C4:90:56
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FDC8FFEF74DC5AD58503F8C079C77B09B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fr6Mocqiq3h2_pjXIPQeZs_EkFY.roa
Signing time: Fri 07 Aug 2026 14:10:52 +0000
ROA not before: Fri 07 Aug 2026 14:10:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54004
IP address blocks: 46.34.4.0/22 maxlen: 24
46.34.8.0/22 maxlen: 24
80.68.212.0/22 maxlen: 24
82.109.208.0/20 maxlen: 24
82.110.240.0/20 maxlen: 24
85.189.32.0/22 maxlen: 24
87.84.240.0/20 maxlen: 24
87.85.80.0/20 maxlen: 24
87.85.112.0/20 maxlen: 24
87.85.144.0/20 maxlen: 24
87.85.176.0/20 maxlen: 24
87.86.64.0/20 maxlen: 24
87.86.112.0/20 maxlen: 24
87.86.128.0/19 maxlen: 24
87.86.192.0/20 maxlen: 24
91.143.176.0/22 maxlen: 24
194.6.100.0/22 maxlen: 24
194.6.112.0/20 maxlen: 24
194.242.152.0/22 maxlen: 24
195.72.160.0/22 maxlen: 24
212.74.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:8f:fe:f7:4d:c5:ad:58:50:3f:8c:07:9c:77:b0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 7 14:10:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ebe8ca1caa2ab7876fe98d720f41e66cfc49056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:aa:ac:4d:bf:78:b8:cb:76:e5:c9:4e:bb:
79:e4:4c:b4:2b:7e:4a:e2:00:1b:66:ad:33:08:d0:
96:3e:ca:64:31:3c:f3:71:51:86:a6:2e:5a:5f:23:
f5:c4:73:fe:ab:9a:91:f7:d9:e2:04:78:e0:8b:64:
8e:00:a8:0f:39:00:e1:a8:40:72:8b:69:a6:b7:d2:
c7:ce:2b:8e:0e:b5:9f:00:42:a0:6d:52:a3:1e:6e:
70:35:f7:4a:dc:c5:a1:e7:a5:80:25:01:42:d4:93:
fa:1b:98:04:66:3b:3b:11:a6:d7:7b:7a:ce:b9:76:
94:de:c6:87:60:46:cb:e4:86:42:c4:03:81:26:f0:
a8:6e:ab:23:62:e5:45:9e:c2:af:92:49:8a:f8:73:
29:a6:5a:c9:d5:8f:48:0d:28:71:b0:6e:b5:7c:90:
33:2f:03:36:6e:9c:3d:9f:a2:27:c8:22:04:bb:47:
76:28:85:de:15:8f:e3:ee:48:35:d6:f6:4e:fd:cf:
bc:66:30:3e:2e:37:68:c5:dc:00:5d:bf:f7:44:0e:
e7:60:06:3b:87:39:47:9f:44:e1:fe:73:11:c9:59:
e6:52:60:14:ee:60:ce:d7:db:bb:9e:7f:af:cf:4e:
e7:7a:e5:bf:b9:96:f5:ce:f8:6e:db:83:39:03:5a:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BE:8C:A1:CA:A2:AB:78:76:FE:98:D7:20:F4:1E:66:CF:C4:90:56
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fr6Mocqiq3h2_pjXIPQeZs_EkFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.4.0-46.34.11.255
80.68.212.0/22
82.109.208.0/20
82.110.240.0/20
85.189.32.0/22
87.84.240.0/20
87.85.80.0/20
87.85.112.0/20
87.85.144.0/20
87.85.176.0/20
87.86.64.0/20
87.86.112.0-87.86.159.255
87.86.192.0/20
91.143.176.0/22
194.6.100.0/22
194.6.112.0/20
194.242.152.0/22
195.72.160.0/22
212.74.0.0/22
Signature Algorithm: sha256WithRSAEncryption
59:45:74:5a:35:77:2d:5f:60:18:f4:b7:fe:0b:1c:e5:75:ce:
6e:b3:84:ef:76:db:b8:7c:03:16:4d:21:3d:16:f6:1c:74:dd:
57:d7:78:90:44:6f:3e:47:4c:3a:fe:03:3d:15:3c:15:f5:19:
9b:39:fe:fd:1f:fd:a3:6f:62:50:7f:8b:84:85:83:0e:61:69:
0c:1a:ea:e3:d1:3a:98:c8:0b:b1:b0:79:4b:a0:b9:54:fb:0e:
47:c2:7e:a4:16:7d:0c:fb:f8:b3:4d:c7:d9:b9:c3:19:52:7a:
c2:eb:27:c8:81:13:3f:22:db:6e:ae:8e:d7:21:67:b3:eb:fa:
7a:e5:0d:e1:50:57:e0:e9:e2:84:22:08:c3:33:29:33:8b:0a:
17:ff:5a:e2:92:a2:e8:99:53:68:90:cf:55:fa:a4:48:3a:97:
c5:f9:4d:7a:69:bd:90:99:b2:71:5a:53:70:b9:4b:92:9b:66:
60:41:37:8a:15:41:1e:b4:34:48:dc:79:cb:e3:38:a3:39:21:
1e:63:31:a9:ca:bc:83:24:0f:77:30:3e:ba:f5:68:22:8d:6e:
d5:65:6c:09:07:bb:3a:ef:0e:cd:2f:f2:ad:77:0c:e7:3e:cf:
e0:c8:a5:f4:db:fc:35:2e:b6:2a:9e:5b:3a:3d:79:bf:d0:1c:
c8:c0:3e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:13 2026 by rpki-client