Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mGDSTPLBgVHYO3tZBvhTpgCOoLc.roa
File: mGDSTPLBgVHYO3tZBvhTpgCOoLc.roa (raw, json)
Hash identifier: kGNWuB+pzITd2fJv+vQVCOAlCfHxElBvE59w7PLI+9w=
Subject key identifier: 98:60:D2:4C:F2:C1:81:51:D8:3B:7B:59:06:F8:53:A6:00:8E:A0:B7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EC72D405839BF2D5880040D758B9CF2BF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mGDSTPLBgVHYO3tZBvhTpgCOoLc.roa
Signing time: Sun 14 Jun 2026 17:28:12 +0000
ROA not before: Sun 14 Jun 2026 17:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 46.34.12.0/23 maxlen: 24
93.152.68.0/24 maxlen: 24
93.152.74.0/24 maxlen: 24
93.152.78.0/24 maxlen: 24
93.152.82.0/24 maxlen: 24
93.152.88.0/24 maxlen: 24
93.152.105.0/24 maxlen: 24
93.152.108.0/24 maxlen: 24
93.152.111.0/24 maxlen: 24
93.152.123.0/24 maxlen: 24
93.152.126.0/24 maxlen: 24
109.174.236.0/22 maxlen: 22
195.172.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:2d:40:58:39:bf:2d:58:80:04:0d:75:8b:9c:f2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 14 17:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9860d24cf2c18151d83b7b5906f853a6008ea0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:83:6a:45:62:e8:b3:66:9c:8e:8c:c8:c1:
81:33:a8:ef:48:1a:bf:b1:6f:6e:a3:5f:68:bf:54:
f0:7a:7d:0d:5e:95:ea:08:82:d2:2e:1b:ee:c3:7a:
90:cc:57:1b:6f:50:3b:9a:73:59:67:45:81:e0:63:
64:4a:50:8e:b5:ae:dc:c3:2e:53:d6:6f:44:7e:d9:
67:08:25:e7:8a:03:bc:1c:18:ff:97:b5:f1:c9:b2:
ae:75:e6:42:fc:c6:18:51:2d:5e:cf:e6:c4:00:f0:
85:57:c0:83:e7:6b:1c:01:0f:10:86:68:06:ac:1a:
1b:5b:79:9d:3d:36:be:fb:5e:b1:d5:d9:18:30:d4:
94:f5:d0:86:84:26:fc:e7:9f:5c:67:33:c6:b2:e5:
86:95:20:14:47:e2:34:46:6e:e3:e9:86:9c:95:9b:
00:90:0a:6f:f5:94:cc:e1:7e:53:ca:47:e7:1d:67:
de:e6:3f:c0:79:ae:45:6d:2b:d1:ba:af:45:41:8e:
ea:cc:97:2d:30:35:cd:44:2a:b9:bf:62:d4:83:53:
86:6c:ce:77:d2:b5:1a:d9:f5:bc:04:46:a1:8c:90:
bb:fa:f3:61:da:f4:b4:26:a4:fa:90:bc:9a:bc:b1:
e7:2f:55:8e:2c:61:97:dd:13:95:a5:59:bf:42:4a:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:D2:4C:F2:C1:81:51:D8:3B:7B:59:06:F8:53:A6:00:8E:A0:B7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mGDSTPLBgVHYO3tZBvhTpgCOoLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.12.0/23
93.152.68.0/24
93.152.74.0/24
93.152.78.0/24
93.152.82.0/24
93.152.88.0/24
93.152.105.0/24
93.152.108.0/24
93.152.111.0/24
93.152.123.0/24
93.152.126.0/24
109.174.236.0/22
195.172.206.0/23
Signature Algorithm: sha256WithRSAEncryption
54:17:f1:02:f6:eb:42:b0:9d:d1:18:fd:84:b2:2f:b1:3b:05:
2b:46:43:2d:37:41:08:1f:cb:8e:87:05:23:60:71:e8:6a:31:
ef:58:27:e8:48:13:3b:90:16:0e:76:d2:87:71:ac:23:6d:7b:
51:b6:51:94:34:e2:ca:22:e1:8e:db:a0:02:64:4a:db:25:83:
07:2f:28:a7:90:75:aa:0b:0e:ae:3e:c4:e0:b6:29:eb:ae:e3:
fc:29:53:35:43:34:d1:60:46:d7:02:17:fc:39:c6:7b:7a:4c:
21:62:45:c3:ae:87:34:fa:cc:75:ab:06:14:de:cb:73:4b:f0:
73:25:4b:16:76:e1:87:a0:03:0a:4c:93:67:e8:ad:85:f9:d4:
96:d8:ec:3a:86:f8:06:73:54:a0:e0:43:ce:b3:c3:4d:8d:2a:
97:00:7e:de:1e:df:98:9a:3b:78:ba:9c:f2:3e:91:e0:0c:b6:
1e:ba:89:7d:4c:62:25:cb:fe:43:d3:f1:e0:60:bd:e1:a6:f5:
8e:26:fe:e0:96:33:35:88:4a:5d:6c:18:d7:97:6c:f5:e5:5e:
91:b3:86:ae:8c:5a:f1:77:3f:f9:95:0c:d2:44:93:11:5a:f3:
c9:62:16:06:a5:8e:d7:b8:76:7c:c9:36:68:04:aa:a2:60:31:
3b:9d:c1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:01 2026 by rpki-client