Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rkbz03zcTF-Sxj2Xzwpy12_HbZo.roa
File: rkbz03zcTF-Sxj2Xzwpy12_HbZo.roa (raw, json)
Hash identifier: uz5ciGH1H/ix6EOkxiGr8uZjOlYfXwXFpzCO6iCU5mw=
Subject key identifier: AE:46:F3:D3:7C:DC:4C:5F:92:C6:3D:97:CF:0A:72:D7:6F:C7:6D:9A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A01478138A03D017EDAF5C59725AF68510
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rkbz03zcTF-Sxj2Xzwpy12_HbZo.roa
Signing time: Tue 18 Aug 2026 10:43:28 +0000
ROA not before: Tue 18 Aug 2026 10:43:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 46.34.0.0/24 maxlen: 24
82.110.124.0/22 maxlen: 22
87.82.217.0/24 maxlen: 24
87.84.233.0/24 maxlen: 24
87.86.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:78:13:8a:03:d0:17:ed:af:5c:59:72:5a:f6:85:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 18 10:43:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae46f3d37cdc4c5f92c63d97cf0a72d76fc76d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:fa:7e:2a:dc:7e:51:70:2d:9a:1c:f1:77:
c4:f3:15:cf:94:a5:70:7e:8e:07:1e:eb:48:b7:18:
77:38:9d:30:6a:a2:b2:9b:87:9e:04:1f:90:e0:ce:
8e:16:65:28:27:6c:fa:06:3e:70:81:88:ea:72:7d:
6b:79:81:9c:f1:52:a0:41:39:9f:44:c6:14:ef:90:
6f:f3:dd:6e:04:17:ff:ee:83:9e:44:2f:f8:29:ff:
45:59:96:48:e8:00:2f:3e:9d:25:fe:5e:13:cd:18:
e0:d7:25:af:72:3a:28:9f:f0:b6:ac:6f:c5:7e:1b:
5a:e2:09:16:ea:a4:7a:f8:08:0b:ef:77:20:de:c6:
48:bd:cb:0c:9d:37:40:f5:b1:eb:e0:99:09:e0:42:
f2:d8:f6:de:99:33:44:d6:62:0c:dd:30:50:7f:fd:
b4:62:33:48:d5:54:32:17:c4:cb:27:c8:04:2c:29:
a8:05:81:3c:60:57:1b:36:8d:ef:74:98:b5:94:aa:
11:16:60:cf:5d:74:ff:b9:e4:5a:ed:94:65:0b:21:
9a:4f:21:2f:3b:2b:e7:6e:fc:a7:78:1b:b7:b9:6d:
09:47:0b:14:81:c6:a1:a7:22:55:9b:23:10:e4:04:
d3:c0:11:14:38:46:90:62:98:b5:c1:f6:d8:3e:80:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:F3:D3:7C:DC:4C:5F:92:C6:3D:97:CF:0A:72:D7:6F:C7:6D:9A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rkbz03zcTF-Sxj2Xzwpy12_HbZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
82.110.124.0/22
87.82.217.0/24
87.84.233.0/24
87.86.212.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:54:62:6d:25:82:33:e3:5e:91:bb:6c:cd:7c:a9:7b:14:59:
82:72:6d:e5:ed:50:4e:33:59:b7:4f:4e:ec:fb:b9:8b:d5:9d:
14:b9:08:c0:d6:23:85:1f:df:4d:fc:b1:5b:9a:d0:f3:5e:8e:
3d:63:ea:eb:14:b7:32:12:37:66:f0:5f:77:e0:b0:60:1a:96:
77:b8:3f:3a:e1:fd:6c:c5:19:ad:38:7f:e4:bb:07:8a:95:9c:
1b:44:21:c3:bb:90:3a:c1:7e:cf:33:c2:59:21:41:87:8f:86:
be:f9:33:02:63:7d:f6:4d:39:2f:82:af:c1:36:60:ce:6b:58:
6b:94:d1:e3:d0:9e:ac:03:55:e1:37:42:e9:1d:22:bf:fb:b3:
57:63:f9:d3:91:8b:e2:c5:2c:8c:6f:11:20:4b:0c:da:42:26:
76:fe:64:de:76:35:03:fb:ae:0e:fb:c5:2e:99:85:bd:1e:cd:
00:2f:f2:1f:34:d1:fc:93:b9:e2:d4:b9:d8:78:03:ac:4b:2d:
4d:7d:89:12:29:1f:d5:ba:ed:ad:08:3a:2b:61:8b:5b:53:b5:
30:63:0b:95:02:aa:a4:f6:18:ed:b7:38:b2:cf:39:c5:d2:79:
6c:19:29:5a:df:b1:06:62:51:25:2b:e5:a9:35:30:bd:7a:86:
45:8d:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:53 2026 by rpki-client