Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/p3ONMqbsecK_UlHxpdIhe5JXvCo.roa
File: p3ONMqbsecK_UlHxpdIhe5JXvCo.roa (raw, json)
Hash identifier: hCaPimjN6Ehs92MOoTCI7LHgj3qpQ5TdRk0SoY8UwgI=
Subject key identifier: A7:73:8D:32:A6:EC:79:C2:BF:52:51:F1:A5:D2:21:7B:92:57:BC:2A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F796447BF3019C9DE5A2920E3B2E09058
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/p3ONMqbsecK_UlHxpdIhe5JXvCo.roa
Signing time: Sun 19 Jul 2026 08:00:42 +0000
ROA not before: Sun 19 Jul 2026 08:00:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 85.189.16.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.245.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.86.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.161.0/24 maxlen: 24
87.83.163.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.83.192.0/24 maxlen: 24
87.83.216.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.152.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.156.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.84.239.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
217.79.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:64:47:bf:30:19:c9:de:5a:29:20:e3:b2:e0:90:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 19 08:00:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7738d32a6ec79c2bf5251f1a5d2217b9257bc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:9f:09:29:71:89:38:b2:a8:6c:c2:6e:2f:
43:31:a2:45:3e:1c:e7:44:53:ae:90:94:bb:7a:e5:
0b:de:18:ab:78:26:c3:66:d6:e5:af:34:6d:1a:84:
0b:73:3b:f8:fd:3c:aa:31:67:e7:21:17:7b:32:4d:
bb:c0:f2:98:0b:20:56:0d:02:54:33:b0:fe:95:ad:
4e:34:fc:d6:e3:67:ba:04:4d:ad:03:b2:4b:00:7d:
89:06:53:1c:d6:26:0c:de:84:b5:8c:86:d4:85:90:
1c:31:ae:9b:63:1a:ca:1c:c7:4e:3a:53:4f:03:6e:
df:4b:75:4c:c8:68:fa:d6:59:80:7e:96:b2:91:d4:
38:d2:9f:3e:f0:36:a1:7c:c5:6d:b1:c2:45:fe:97:
5f:75:13:51:a4:d2:4c:91:eb:eb:b4:01:7a:a8:aa:
fc:59:55:9f:df:a7:f2:c9:ed:a5:09:53:c6:07:c4:
2b:74:db:82:6c:dd:9c:23:1b:82:50:96:7d:4f:12:
4e:c2:0c:17:6b:41:0c:4c:d3:ba:a6:b8:63:fb:29:
b7:1f:86:f4:96:33:d1:ba:a4:10:c4:59:d6:9e:e1:
38:ea:06:de:e6:03:02:7d:51:86:c5:2d:9e:c6:0e:
2c:74:37:35:46:fb:cb:64:2e:5a:fb:5e:66:56:da:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:73:8D:32:A6:EC:79:C2:BF:52:51:F1:A5:D2:21:7B:92:57:BC:2A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/p3ONMqbsecK_UlHxpdIhe5JXvCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.16.0/24
85.189.36.0/24
87.82.232.0/24
87.82.240.0/23
87.82.243.0/24
87.82.245.0/24
87.82.247.0/24
87.83.86.0/24
87.83.125.0/24
87.83.161.0/24
87.83.163.0/24
87.83.174.0/24
87.83.192.0/24
87.83.216.0/24
87.84.64.0/24
87.84.76.0/24
87.84.79.0/24
87.84.128.0/24
87.84.130.0/24
87.84.132.0/24
87.84.134.0/24
87.84.152.0/24
87.84.154.0/24
87.84.156.0/24
87.84.158.0/24
87.84.220.0/24
87.84.239.0/24
212.135.143.0/24
217.79.113.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:59:97:3f:cb:de:96:89:72:b2:88:dc:37:cd:5c:d1:c7:48:
81:21:bb:b1:5b:c4:dd:90:cf:e7:e9:96:09:f2:fd:68:3c:70:
76:81:61:73:c9:66:aa:8e:9b:10:dd:2c:03:8c:dd:a3:f1:26:
6c:22:c3:e7:77:91:c3:f6:fb:01:c0:88:3e:24:fc:89:56:0d:
da:e8:6c:40:b6:26:3f:38:a7:2d:69:82:9d:c8:86:80:ad:ec:
5d:6b:05:1f:45:8f:cd:a6:4c:cb:95:2b:21:f1:82:2d:e4:a3:
1a:1b:a6:62:00:9a:1b:c1:4e:85:ea:2b:fc:a5:4b:73:1a:80:
9f:d5:87:f5:5c:0f:e8:1d:af:a7:63:e4:06:be:76:cb:80:f6:
8e:ae:3e:2a:9c:6f:55:92:fb:56:b5:2f:7a:24:9f:30:87:39:
2b:d0:da:44:d9:5c:c9:79:2e:39:84:91:88:cd:cf:62:16:0a:
e6:75:74:5e:5b:e0:db:87:97:87:af:7b:d2:e0:bc:c3:76:18:
3c:bb:ff:65:c8:78:fb:f1:6b:c6:1c:8f:40:8e:48:e4:db:c6:
1c:fa:6b:09:36:cd:98:f7:00:3e:cd:b1:e3:97:c7:4c:87:d6:
ee:f0:30:d1:e5:05:7b:ab:93:f5:37:ff:97:a5:ed:ed:24:29:
78:41:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:00 2026 by rpki-client