Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lVSc4LbN_bDWngcP0aDgjKDMfoE.roa
File: lVSc4LbN_bDWngcP0aDgjKDMfoE.roa (raw, json)
Hash identifier: Tdr7CzHKA6UwnWOQc23XdBsiu5y0/CaoN3rL7/9AJwk=
Subject key identifier: 95:54:9C:E0:B6:CD:FD:B0:D6:9E:07:0F:D1:A0:E0:8C:A0:CC:7E:81
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A03D1B357CECD93A70941BBA8726D40C78
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lVSc4LbN_bDWngcP0aDgjKDMfoE.roa
Signing time: Wed 26 Aug 2026 08:06:28 +0000
ROA not before: Wed 26 Aug 2026 08:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 46.34.4.0/22 maxlen: 24
46.34.8.0/22 maxlen: 24
80.68.212.0/22 maxlen: 24
82.109.208.0/20 maxlen: 24
82.110.240.0/20 maxlen: 24
83.148.137.0/24 maxlen: 24
83.148.149.0/24 maxlen: 24
85.189.32.0/22 maxlen: 24
87.84.201.0/24 maxlen: 24
87.84.205.0/24 maxlen: 24
87.84.240.0/20 maxlen: 24
87.85.80.0/20 maxlen: 24
87.85.96.0/24 maxlen: 24
87.85.112.0/20 maxlen: 24
87.85.134.0/24 maxlen: 24
87.85.144.0/20 maxlen: 24
87.85.175.0/24 maxlen: 24
87.85.176.0/20 maxlen: 24
87.86.64.0/20 maxlen: 24
87.86.112.0/20 maxlen: 24
87.86.128.0/19 maxlen: 24
87.86.164.0/22 maxlen: 24
87.86.192.0/20 maxlen: 24
87.86.243.0/24 maxlen: 24
91.143.176.0/22 maxlen: 24
194.6.100.0/22 maxlen: 24
194.6.112.0/20 maxlen: 24
194.242.134.0/24 maxlen: 24
194.242.152.0/22 maxlen: 24
195.72.160.0/22 maxlen: 24
212.74.0.0/22 maxlen: 24
212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.94.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.172.0/23 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.134.229.0/24 maxlen: 24
212.135.76.0/23 maxlen: 24
212.135.138.0/24 maxlen: 24
212.135.139.0/24 maxlen: 24
212.135.175.0/24 maxlen: 24
217.204.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:1b:35:7c:ec:d9:3a:70:94:1b:ba:87:26:d4:0c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 26 08:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95549ce0b6cdfdb0d69e070fd1a0e08ca0cc7e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:81:78:26:16:d0:c0:90:44:af:95:c0:ed:
e8:0a:b0:6e:bb:82:44:cc:68:fc:95:7b:11:30:91:
10:be:15:b7:f5:b9:ab:80:4c:e5:ef:b5:e7:7c:d1:
83:89:fc:89:02:87:2a:ca:67:26:4b:51:9a:19:a9:
61:16:1d:ae:15:33:7b:ed:50:09:5f:b7:64:df:69:
bd:1f:e7:5e:c9:2a:0c:69:d4:57:94:c5:19:ac:7d:
9b:95:70:ac:83:12:36:84:cd:5e:90:64:a9:79:eb:
8e:15:f9:52:cb:07:2b:63:d9:72:3a:5d:8b:9c:17:
0c:f7:7c:aa:8c:94:b6:38:f2:c5:30:bc:93:e9:8d:
74:88:89:c9:7b:44:18:14:60:ca:d7:c0:ea:fd:c1:
ce:dc:26:75:2e:4e:98:09:a4:23:d4:b3:4c:eb:af:
75:fa:91:67:96:60:6d:ad:b0:a2:89:8d:0b:2f:0f:
8a:54:39:53:bb:90:52:82:c4:c0:4f:cc:f0:9e:a4:
2d:7e:9a:ef:43:04:59:99:83:de:40:c8:41:6c:5d:
e6:c7:85:0a:fe:6a:94:cf:d0:00:a1:ea:51:a8:63:
93:d6:ad:22:1a:97:54:0b:4d:17:57:34:17:cf:db:
a6:ee:36:8e:63:c7:ff:12:68:50:d7:7e:3f:da:11:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:54:9C:E0:B6:CD:FD:B0:D6:9E:07:0F:D1:A0:E0:8C:A0:CC:7E:81
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lVSc4LbN_bDWngcP0aDgjKDMfoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.4.0-46.34.11.255
80.68.212.0/22
82.109.208.0/20
82.110.240.0/20
83.148.137.0/24
83.148.149.0/24
85.189.32.0/22
87.84.201.0/24
87.84.205.0/24
87.84.240.0/20
87.85.80.0-87.85.96.255
87.85.112.0/20
87.85.134.0/24
87.85.144.0/20
87.85.175.0-87.85.191.255
87.86.64.0/20
87.86.112.0-87.86.159.255
87.86.164.0/22
87.86.192.0/20
87.86.243.0/24
91.143.176.0/22
194.6.100.0/22
194.6.112.0/20
194.242.134.0/24
194.242.152.0/22
195.72.160.0/22
212.74.0.0/22
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.94.0/24
212.134.124.0/22
212.134.164.0/22
212.134.172.0/23
212.134.208.0/22
212.134.224.0/22
212.134.229.0/24
212.135.76.0/23
212.135.138.0/23
212.135.175.0/24
217.204.128.0/22
Signature Algorithm: sha256WithRSAEncryption
af:91:f1:4f:e3:16:cf:05:79:4c:d8:40:76:78:8a:7c:8b:e7:
bf:73:43:b2:0e:a0:10:67:dd:05:70:09:ef:4f:56:3f:b4:2c:
64:f5:9d:d9:21:1b:da:17:fc:4b:ad:e0:f7:47:ab:4e:ed:85:
d9:05:1d:a8:f0:d9:4f:e9:c8:30:77:8c:1f:af:d3:4b:04:d0:
5f:0a:98:b4:04:b1:8f:e6:c6:29:ee:bf:1d:6c:d1:53:34:66:
8e:fc:f0:77:4d:29:31:0e:59:5f:26:87:71:42:37:4b:72:63:
28:16:1d:99:80:77:62:1c:e2:70:65:86:40:27:02:97:86:d3:
ad:e9:40:6c:10:e4:23:d9:3c:9f:07:00:2f:2f:43:e0:27:ce:
f6:7f:68:12:2c:67:a2:78:58:c8:35:65:76:17:86:d7:76:ef:
0d:06:b3:e6:be:54:58:66:4e:c1:08:b9:83:90:f2:02:68:fd:
c8:11:0a:93:ea:45:00:4f:27:39:fb:ea:fb:c8:89:a1:b3:21:
e4:ef:6e:aa:f7:7b:ac:54:36:c8:4c:d4:6f:5b:4e:43:0b:d4:
cb:b9:01:b5:f9:e4:11:bb:73:ef:1b:f8:21:8a:95:2b:2f:63:
a9:bc:ad:35:76:78:b9:e0:7a:b5:6e:32:4e:26:31:09:73:ef:
4a:0d:06:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:59 2026 by rpki-client