Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rgAK4V4jKTamKUcPzOfxFAUlPmE.roa
File: rgAK4V4jKTamKUcPzOfxFAUlPmE.roa (raw, json)
Hash identifier: 1Rhk8ez4uVsxcG4dPo7ZvM0qSLMXar0SNXGnDPuzj38=
Subject key identifier: AE:00:0A:E1:5E:23:29:36:A6:29:47:0F:CC:E7:F1:14:05:25:3E:61
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A050EDBE3A07108EFBA7F1F2D54A5F3B13
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rgAK4V4jKTamKUcPzOfxFAUlPmE.roa
Signing time: Sun 30 Aug 2026 04:29:13 +0000
ROA not before: Sun 30 Aug 2026 04:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 82.109.151.0/24 maxlen: 24
87.83.47.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
212.134.18.0/24 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.104.0/24 maxlen: 24
212.134.143.0/24 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.181.0/24 maxlen: 24
212.134.184.0/24 maxlen: 24
212.134.202.0/24 maxlen: 24
212.134.233.0/24 maxlen: 24
212.134.234.0/24 maxlen: 24
212.134.238.0/24 maxlen: 24
212.134.251.0/24 maxlen: 24
212.135.66.0/24 maxlen: 24
212.135.98.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:50:ed:be:3a:07:10:8e:fb:a7:f1:f2:d5:4a:5f:3b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 30 04:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae000ae15e232936a629470fcce7f11405253e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:f6:9e:bc:4f:ab:ab:78:3c:c7:c5:73:97:
a3:92:bc:40:ba:13:46:54:4b:6a:d8:78:4e:fc:03:
c1:e4:ab:81:71:81:08:76:b7:c3:38:c9:0b:8c:85:
f0:27:83:23:30:d0:75:87:22:ec:fa:b3:40:8a:fd:
3d:89:55:b9:dd:9f:c2:41:d8:a9:9e:af:0f:02:e3:
3d:48:79:a1:75:7b:2c:7d:a0:bb:48:ee:ff:79:ff:
7b:f0:09:91:f0:64:e9:bc:42:de:79:65:16:8d:e7:
cd:46:4b:ba:d2:b1:f0:27:f0:16:7f:20:2e:88:36:
0b:cd:de:4e:9d:3c:f4:3e:a0:76:69:77:5e:0d:83:
c9:43:6f:02:af:26:f4:b4:b9:99:86:d7:b1:a0:31:
08:c2:7a:00:de:5c:7d:b4:74:de:5a:c2:a2:75:e4:
c5:ed:a3:56:b4:af:ca:9d:45:21:f5:f8:48:01:85:
3e:af:56:be:30:a5:1f:6c:22:5b:5f:f7:fc:04:62:
92:02:94:5b:2f:72:96:5f:60:59:1d:bc:c4:a3:74:
4c:d8:f0:50:f0:eb:a3:38:ac:5b:0a:30:18:1b:f6:
98:6e:4c:54:0c:6e:86:07:ac:ec:54:f5:51:07:89:
40:fe:dc:67:02:90:3a:71:c1:11:1a:6d:9e:84:2b:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:00:0A:E1:5E:23:29:36:A6:29:47:0F:CC:E7:F1:14:05:25:3E:61
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rgAK4V4jKTamKUcPzOfxFAUlPmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.151.0/24
87.83.47.0/24
87.84.64.0/24
212.134.18.0/24
212.134.58.0/23
212.134.104.0/24
212.134.143.0/24
212.134.171.0/24
212.134.176.0/24
212.134.181.0/24
212.134.184.0/24
212.134.202.0/24
212.134.233.0-212.134.234.255
212.134.238.0/24
212.134.251.0/24
212.135.66.0/24
212.135.98.0/24
212.135.158.0/24
212.135.204.0/24
Signature Algorithm: sha256WithRSAEncryption
59:09:a8:5c:f3:6d:11:74:ea:ed:88:8b:db:5a:fa:81:97:96:
49:9a:9d:ba:04:11:c3:51:b0:16:81:f5:e1:87:a2:1f:b6:1e:
f0:da:01:93:e8:31:d6:80:4c:47:ed:80:f0:c7:57:7d:ef:31:
02:81:5c:a4:b0:86:c7:33:1d:a1:0f:32:6c:40:52:75:6b:50:
50:0b:f2:9d:da:ed:0d:e0:94:d5:ef:ce:33:c0:1b:38:7e:d8:
fb:f1:ee:6c:2d:b4:f5:a9:99:a8:2e:1b:14:96:dc:07:a3:0f:
3d:05:14:10:0d:9a:b5:7f:10:16:79:82:4d:e6:33:4b:f7:b4:
6f:17:75:19:d7:76:b5:2c:fc:31:08:2f:0a:5c:15:48:23:fb:
c3:b1:8b:a9:aa:14:b0:0d:a0:0a:10:58:0f:fe:b7:e3:c1:51:
87:6f:7c:0e:b6:ac:7d:91:9a:85:44:ab:1f:4d:83:72:46:0a:
5c:a3:b4:2b:3a:0a:24:fb:a9:f5:70:0d:27:28:51:eb:87:bc:
07:8a:d5:db:b7:ae:1c:43:fd:d8:85:44:4c:01:6f:1d:51:2a:
24:b4:42:d8:e9:16:93:d5:46:1d:62:75:ca:77:bd:f7:7d:bd:
b5:e4:f1:f8:3e:43:8c:30:fa:7b:0f:7e:d0:e8:cf:22:f2:ed:
43:02:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:12 2026 by rpki-client