Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/r0_P4eOYs_RouplxcXFp644_38k.roa
File: r0_P4eOYs_RouplxcXFp644_38k.roa (raw, json)
Hash identifier: xpl7QqGSglRGn4g1I09F9X7tHclJOAHJ1GRc65ZDAUQ=
Subject key identifier: AF:4F:CF:E1:E3:98:B3:F4:68:BA:99:71:71:71:69:EB:8E:3F:DF:C9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F1A30F89B3474B34F59790FDB3D50CA04
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/r0_P4eOYs_RouplxcXFp644_38k.roa
Signing time: Tue 30 Jun 2026 20:20:44 +0000
ROA not before: Tue 30 Jun 2026 20:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 82.110.120.0/22 maxlen: 24
87.84.201.0/24 maxlen: 24
87.84.205.0/24 maxlen: 24
87.85.96.0/24 maxlen: 24
87.85.134.0/24 maxlen: 24
87.85.175.0/24 maxlen: 24
87.86.164.0/22 maxlen: 24
87.86.243.0/24 maxlen: 24
194.242.134.0/24 maxlen: 24
212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.94.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.172.0/23 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.135.76.0/23 maxlen: 24
212.135.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:30:f8:9b:34:74:b3:4f:59:79:0f:db:3d:50:ca:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 30 20:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af4fcfe1e398b3f468ba9971717169eb8e3fdfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:f4:32:b9:fe:7b:e4:73:c0:90:cb:43:68:
42:3c:a0:cb:52:cc:1b:c2:62:41:e3:8b:46:3c:6c:
c1:03:f2:4a:5d:a3:cf:0e:f7:ed:e3:2c:5c:a0:4a:
b8:09:28:b8:38:43:48:14:39:d4:67:90:ef:93:da:
6c:32:b0:cf:89:86:e6:a6:9c:ae:35:a3:a8:91:c5:
34:c5:2c:cd:ac:0e:fb:74:d1:2b:7b:a4:ce:31:7d:
64:44:06:df:e2:ab:2a:23:56:5d:2d:61:00:1c:6b:
34:2d:1a:9e:9e:47:90:10:05:6c:e6:99:14:05:47:
f5:4b:e8:71:7f:98:85:f8:69:0b:31:ac:8f:7b:bd:
ee:45:d1:1c:d4:7c:45:c3:3a:b2:48:a0:3c:d5:c3:
ad:7b:ef:b6:de:f9:34:2a:f3:e3:a1:cb:6b:fd:1d:
ca:aa:c6:81:c6:32:20:cf:9e:7a:1f:c6:72:32:0f:
f8:fe:86:9c:a1:ef:c4:8b:77:c6:fd:2c:22:3f:a4:
24:86:7a:c4:e1:54:ea:64:08:f5:60:07:18:a4:a7:
bd:08:61:d0:b4:37:7e:ab:f7:ba:d8:f9:3d:ed:4b:
a5:3b:c9:ba:63:00:21:dc:7f:2a:a7:1e:75:13:d0:
cd:cb:b8:2f:87:18:fe:e1:66:65:95:f6:59:0c:57:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:CF:E1:E3:98:B3:F4:68:BA:99:71:71:71:69:EB:8E:3F:DF:C9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/r0_P4eOYs_RouplxcXFp644_38k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.120.0/22
87.84.201.0/24
87.84.205.0/24
87.85.96.0/24
87.85.134.0/24
87.85.175.0/24
87.86.164.0/22
87.86.243.0/24
194.242.134.0/24
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.94.0/24
212.134.124.0/22
212.134.164.0/22
212.134.172.0/23
212.134.208.0/22
212.134.224.0/22
212.135.76.0/23
212.135.175.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ad:48:72:47:ed:ee:22:48:a3:de:ec:28:4b:81:ef:7d:a1:
56:72:1e:8c:97:14:b1:e4:4e:8f:a5:02:28:36:00:37:79:28:
4c:79:95:a3:0e:2c:33:09:9c:18:32:dd:45:ab:49:3f:a6:49:
03:7c:6b:0e:01:97:a6:88:5b:80:67:dc:66:32:5d:27:15:47:
8e:a7:50:af:f2:73:d6:dc:80:bb:9b:fc:bd:eb:75:1a:56:74:
9e:e5:33:49:e9:f5:0b:db:1a:c3:8e:76:1b:dd:62:24:7a:b1:
cf:c8:10:6e:d1:47:ce:c8:b4:f1:a8:e1:15:0a:0a:13:d4:9a:
14:bd:83:62:44:5e:92:ef:b1:7f:85:da:8b:58:6a:7d:8a:cf:
aa:ff:85:f2:35:e3:68:6f:f9:34:7f:85:80:ba:6c:50:1a:4e:
2c:fc:63:bc:22:03:bd:be:1a:df:b9:e0:e2:0b:91:f2:37:51:
1a:f6:8e:09:a9:52:d5:74:48:f8:88:d2:f9:d9:53:51:1b:36:
79:cb:96:36:16:dc:93:4b:3d:ca:a2:ad:6b:3c:73:11:38:34:
3b:9a:30:40:8c:1d:a3:16:ef:1c:39:0f:1e:e0:a4:24:98:71:
b3:8d:1b:b1:0d:21:36:3d:56:8a:a4:81:e6:89:83:86:8d:49:
b9:42:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:45 2026 by rpki-client