Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zQ4bjs8yPxGnp3DKIk5_xYIAJOc.roa
File: zQ4bjs8yPxGnp3DKIk5_xYIAJOc.roa (raw, json)
Hash identifier: AzoRuE+RbbbwmWdGURMfrEeLP72mtn0GBVtmVkbjjAE=
Subject key identifier: CD:0E:1B:8E:CF:32:3F:11:A7:A7:70:CA:22:4E:7F:C5:82:00:24:E7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E8D628FDABDFF7B455CA86A98655F7321
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zQ4bjs8yPxGnp3DKIk5_xYIAJOc.roa
Signing time: Wed 03 Jun 2026 12:08:27 +0000
ROA not before: Wed 03 Jun 2026 12:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 79.121.200.0/21 maxlen: 21
82.110.32.0/20 maxlen: 20
85.189.72.0/21 maxlen: 24
86.53.152.0/21 maxlen: 24
86.53.160.0/22 maxlen: 24
86.53.180.0/22 maxlen: 24
86.53.184.0/21 maxlen: 24
87.86.48.0/20 maxlen: 24
95.177.63.0/24 maxlen: 24
95.177.67.0/24 maxlen: 24
95.177.74.0/24 maxlen: 24
95.177.85.0/24 maxlen: 24
194.6.104.0/21 maxlen: 24
195.40.22.0/23 maxlen: 23
195.40.24.0/23 maxlen: 23
195.72.176.0/21 maxlen: 24
212.134.20.0/24 maxlen: 24
212.134.27.0/24 maxlen: 24
212.135.6.0/23 maxlen: 23
212.135.68.0/22 maxlen: 22
213.177.226.0/23 maxlen: 24
213.177.230.0/23 maxlen: 24
213.177.234.0/23 maxlen: 24
213.177.238.0/23 maxlen: 24
213.177.242.0/23 maxlen: 24
213.177.246.0/23 maxlen: 24
213.177.250.0/23 maxlen: 24
213.177.252.0/24 maxlen: 24
213.177.253.0/24 maxlen: 24
213.177.254.0/24 maxlen: 24
213.177.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:62:8f:da:bd:ff:7b:45:5c:a8:6a:98:65:5f:73:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 3 12:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd0e1b8ecf323f11a7a770ca224e7fc5820024e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ad:1a:95:1e:5c:98:92:21:85:3f:a0:fb:a8:
9d:65:3d:5e:2d:b4:08:66:3c:ae:99:7d:03:af:7b:
65:f4:e4:31:f3:06:e4:35:8b:f8:64:ab:8f:f4:03:
bd:d8:77:0e:36:e0:90:b2:64:4c:79:74:c1:62:67:
7e:8a:a2:93:c4:06:89:43:f0:be:e8:17:2e:4b:e4:
ce:dc:e5:87:ce:ed:05:d4:97:78:59:27:ee:ca:50:
98:ad:87:41:bc:ac:81:73:a9:85:16:aa:98:d7:95:
c5:fb:ef:db:a9:65:e9:11:13:6e:91:ca:dd:72:ec:
80:bb:5c:b3:a2:a0:9e:46:ef:31:d2:c7:59:a3:74:
d8:99:5c:02:62:51:2e:89:92:98:a9:f2:6b:56:4b:
06:62:d9:b9:f4:93:4f:d0:54:2f:31:8c:c1:8d:bd:
bc:bf:03:a3:99:ff:45:cc:bd:82:10:1d:f6:8e:a6:
7c:7b:63:ef:e7:4a:85:f0:4b:0d:51:1d:48:c4:01:
1c:53:0e:9d:28:71:c1:59:d4:4c:47:aa:59:e3:80:
63:19:2c:85:1a:07:32:bc:ec:7f:87:9d:8d:6f:7b:
19:1e:be:f7:86:a6:67:c1:6b:cd:bb:aa:2e:6d:bd:
f4:af:17:0a:4a:a9:15:e9:6b:ab:91:57:71:82:bb:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:1B:8E:CF:32:3F:11:A7:A7:70:CA:22:4E:7F:C5:82:00:24:E7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zQ4bjs8yPxGnp3DKIk5_xYIAJOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.200.0/21
82.110.32.0/20
85.189.72.0/21
86.53.152.0-86.53.163.255
86.53.180.0-86.53.191.255
87.86.48.0/20
95.177.63.0/24
95.177.67.0/24
95.177.74.0/24
95.177.85.0/24
194.6.104.0/21
195.40.22.0-195.40.25.255
195.72.176.0/21
212.134.20.0/24
212.134.27.0/24
212.135.6.0/23
212.135.68.0/22
213.177.226.0/23
213.177.230.0/23
213.177.234.0/23
213.177.238.0/23
213.177.242.0/23
213.177.246.0/23
213.177.250.0-213.177.255.255
Signature Algorithm: sha256WithRSAEncryption
80:9b:b7:1c:46:8a:60:9e:06:c7:c2:d7:45:38:34:1f:0b:c9:
3e:2a:b3:95:b0:59:bd:ff:f4:39:af:46:58:d0:03:fe:e1:66:
6d:26:dc:bf:7b:b6:88:62:fc:6a:9d:c4:a2:fa:82:ed:fa:e3:
43:47:62:01:63:36:cd:21:db:72:59:9a:04:ae:6d:aa:b8:3d:
5e:42:86:00:86:15:6a:6b:ae:26:29:e8:fa:28:a0:20:3d:7d:
b8:fd:cd:15:a9:5c:02:af:7b:fd:13:76:77:48:b0:cf:7d:99:
84:17:64:0d:b2:39:bf:7b:31:a2:72:24:d7:72:13:96:51:fc:
4e:86:e5:b0:eb:f4:5c:48:09:db:32:a5:02:b2:e0:87:a7:18:
e6:b5:96:3d:01:18:7e:42:4d:f8:21:af:a6:5e:95:fa:31:8a:
83:c2:89:4a:df:c5:27:68:1c:18:ad:93:87:fe:76:e3:fd:0e:
f3:e8:62:35:32:1e:d5:15:65:a4:05:dc:9f:7f:e7:e5:ac:f4:
68:00:63:86:68:ae:12:e0:da:db:85:9a:15:c0:d1:1b:9c:57:
56:b0:ea:ef:f1:70:34:08:a3:bf:3a:40:7c:5b:1a:6e:08:c3:
02:e8:60:9c:21:d2:b3:b5:90:89:35:51:f7:ce:db:a1:97:43:
4c:80:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:44 2026 by rpki-client