Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/makBCIgb5AAmJt9ibvKQSu-q8lU.roa
File: makBCIgb5AAmJt9ibvKQSu-q8lU.roa (raw, json)
Hash identifier: b+tTrJkNebXgrL8MiqgNeVoCeNz+fueDMSzj8LkKKjE=
Subject key identifier: 99:A9:01:08:88:1B:E4:00:26:26:DF:62:6E:F2:90:4A:EF:AA:F2:55
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A10754F6F4B8FD417182463B1F4AB7FE75
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/makBCIgb5AAmJt9ibvKQSu-q8lU.roa
Signing time: Sun 04 Oct 2026 14:32:51 +0000
ROA not before: Sun 04 Oct 2026 14:32:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.34.0.0/24 maxlen: 24
82.108.123.0/24 maxlen: 24
82.110.54.0/23 maxlen: 24
82.110.124.0/22 maxlen: 22
87.84.233.0/24 maxlen: 24
87.85.64.0/24 maxlen: 24
87.86.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:54:f6:f4:b8:fd:41:71:82:46:3b:1f:4a:b7:fe:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 4 14:32:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99a90108881be4002626df626ef2904aefaaf255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:76:2c:fa:21:30:18:62:e8:b9:ca:88:dd:
09:24:f5:0d:b1:34:a1:54:a3:47:1b:db:e7:ab:43:
0d:15:f5:e4:f8:6f:23:6f:c5:d6:43:e6:cf:53:88:
51:dc:d2:06:1f:a5:d7:d9:e5:b9:60:a3:dc:2f:2c:
da:42:5a:b7:a7:6d:42:d6:e9:11:ad:b0:db:a4:1b:
d2:dc:fe:d2:53:52:90:0e:53:6e:02:ff:a5:d7:98:
1a:05:6b:23:41:57:99:30:97:48:44:6a:0b:41:ee:
24:72:63:c5:f3:e1:fb:f4:42:62:d6:bd:f9:0c:69:
6c:5c:b4:f9:2a:86:f9:c3:21:dd:ba:bf:48:cc:f2:
8f:c5:3b:86:b3:fe:3b:2d:bb:83:1d:cd:af:88:31:
d5:60:bf:17:82:48:9e:2a:0e:80:12:66:20:c4:30:
81:79:14:a9:33:b6:01:a2:a6:78:c0:bd:c4:fb:35:
f2:89:49:e0:bd:b6:4e:f5:c3:49:1e:50:08:25:dc:
fe:05:30:26:00:05:4c:2c:3c:42:0c:19:b5:6e:17:
c5:4e:fd:76:df:35:5a:f6:7c:21:6a:67:47:71:1e:
b5:6c:d4:25:75:11:c9:c2:ef:b3:00:9c:ef:d0:90:
06:7d:49:99:1c:76:9d:18:77:16:fd:49:0d:c4:a3:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:01:08:88:1B:E4:00:26:26:DF:62:6E:F2:90:4A:EF:AA:F2:55
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/makBCIgb5AAmJt9ibvKQSu-q8lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
82.108.123.0/24
82.110.54.0/23
82.110.124.0/22
87.84.233.0/24
87.85.64.0/24
87.86.212.0/23
Signature Algorithm: sha256WithRSAEncryption
20:35:42:02:49:75:89:af:6f:85:29:35:72:57:e0:e2:df:87:
b7:e7:c3:ad:0c:af:ec:d3:b9:e9:4c:b5:f4:97:8c:de:00:8c:
1c:3e:c4:df:fa:da:d5:c6:8e:9f:77:5a:72:c4:c8:12:46:84:
fc:d5:fd:9d:a3:9d:e1:8b:0a:1d:b7:19:4b:76:22:07:16:76:
91:ed:17:cc:f6:ec:f5:21:03:44:3e:ae:49:90:bb:d2:66:1f:
28:ae:cf:58:fa:4e:db:08:9d:88:1c:46:b0:9a:8e:5c:7b:d5:
7b:22:c6:b3:59:4d:bb:2e:4a:ce:a7:9c:8e:b6:b6:78:35:98:
5d:e3:1f:73:f0:4f:cb:03:02:4e:26:9b:a3:b2:ff:66:57:6b:
91:cf:cc:3f:4e:97:38:69:36:9c:ef:14:d0:11:9d:01:b9:59:
82:12:70:8d:32:dc:3d:4d:be:22:ae:3a:be:1d:a5:04:b0:a3:
b7:6e:72:42:6f:57:a7:f4:4e:1d:22:7a:cb:88:cf:17:bf:cb:
c1:05:99:bd:77:7c:7d:5e:38:af:ba:21:b5:06:6f:26:ed:d8:
ee:5b:80:71:2f:61:97:e6:86:9b:3b:da:04:2a:ec:a2:d7:1a:
54:a8:d6:5a:0e:d9:88:ff:51:8a:75:e6:f4:a7:b2:16:db:97:
9c:8b:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:50 2026 by rpki-client