Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/s0xVmVkkg0sV9HSOBSTBFMv42AE.roa
File: s0xVmVkkg0sV9HSOBSTBFMv42AE.roa (raw, json)
Hash identifier: Z7G2GvqNhiHjVBln1vY8TE9d4pca0xREdNHco8LdfBI=
Subject key identifier: B3:4C:55:99:59:24:83:4B:15:F4:74:8E:05:24:C1:14:CB:F8:D8:01
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F7C85DCA3E18A5150A5AD8A1B4EE03948
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/s0xVmVkkg0sV9HSOBSTBFMv42AE.roa
Signing time: Sun 19 Jul 2026 22:36:15 +0000
ROA not before: Sun 19 Jul 2026 22:36:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 80.68.210.0/24 maxlen: 24
80.68.211.0/24 maxlen: 24
217.79.101.0/24 maxlen: 24
217.79.110.0/24 maxlen: 24
217.79.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7c:85:dc:a3:e1:8a:51:50:a5:ad:8a:1b:4e:e0:39:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 19 22:36:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b34c55995924834b15f4748e0524c114cbf8d801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:56:06:0d:1c:b2:c8:47:98:05:3b:25:9e:
81:f5:e8:b1:bc:1a:56:a6:55:b0:43:f4:92:a9:ac:
5e:ab:07:67:24:21:5d:31:64:82:ea:60:19:88:32:
72:06:08:fc:a5:01:be:b0:6c:a1:55:12:8d:c5:15:
a2:3f:ae:b8:d8:0d:87:52:f8:66:3d:9d:b1:53:3f:
2b:92:0f:e5:e1:e8:ef:80:e9:ad:e1:57:51:b9:23:
3f:43:d4:85:c2:15:09:e6:96:70:cb:95:e1:08:d1:
b8:b2:98:23:96:42:ed:85:81:c2:59:86:36:9a:50:
63:c6:40:b9:7d:4d:9f:24:96:98:43:02:4c:9f:ea:
bb:d1:f4:2d:d7:b0:a6:5a:6c:e9:77:10:92:04:90:
5a:5e:ee:65:62:e0:50:70:fa:c0:e8:b5:64:a3:32:
ac:d3:50:0b:64:a2:b9:3f:eb:01:2e:40:b3:7d:f9:
74:ab:91:6b:82:d8:74:70:9c:5b:42:8d:8a:30:3b:
37:58:d0:86:22:66:0b:a6:aa:15:37:cd:04:1e:b6:
71:1b:65:e6:57:31:7f:44:a2:7f:12:f8:d5:f0:dc:
5b:15:e0:b8:46:ea:32:5a:e9:e7:51:72:d4:a4:9e:
35:bd:a7:3b:6e:0c:91:94:4d:51:0f:a6:77:07:31:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4C:55:99:59:24:83:4B:15:F4:74:8E:05:24:C1:14:CB:F8:D8:01
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/s0xVmVkkg0sV9HSOBSTBFMv42AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.210.0/23
217.79.101.0/24
217.79.110.0/24
217.79.114.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1e:cb:c2:68:3f:42:9d:23:43:69:c4:d9:1b:53:53:ef:c9:
92:d5:2a:64:4e:19:57:a8:a0:08:50:8e:4e:03:64:ba:73:30:
2e:6d:a0:06:21:d7:67:76:3d:36:1a:4c:37:5e:69:89:e7:75:
66:98:88:b9:c3:4f:ab:30:a4:17:46:a7:ef:f4:a7:5a:ad:7c:
82:69:6a:ab:3a:65:4c:d2:00:f6:bf:d3:89:65:26:80:11:46:
ae:84:96:ca:f6:b0:6d:fa:1c:4b:ae:46:62:91:77:97:2d:c3:
82:fd:58:a7:ef:92:16:b9:78:6d:6e:68:6d:13:c0:7e:ed:6b:
eb:98:e2:58:a7:55:ce:52:f0:db:7a:8b:8e:9c:95:71:fb:e8:
3f:34:3b:e4:36:bd:3d:8b:bb:69:dd:6c:11:e6:32:ae:ef:fc:
84:5e:bb:1c:93:c9:4a:19:d8:78:12:82:78:f5:a9:48:8b:5a:
81:f4:2f:8e:39:ea:e5:d6:60:80:ba:3a:9a:75:e6:8d:18:de:
15:56:b7:b9:24:38:db:13:76:c1:89:09:1d:26:80:fc:96:e3:
23:b8:b3:69:58:f1:05:3e:22:57:cb:ed:15:70:76:26:45:68:
25:76:27:2b:eb:6e:6b:6a:0f:4b:32:e4:0a:41:81:bf:c6:e3:
3b:ae:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:00 2026 by rpki-client