Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/i7Ud6u-6Dd-DmiP4CLHc51MWu6k.roa
File: i7Ud6u-6Dd-DmiP4CLHc51MWu6k.roa (raw, json)
Hash identifier: LRfxy8qZCK5mJtQWCzYJ5JW0etDxI8hymSltI2DorrM=
Subject key identifier: 8B:B5:1D:EA:EF:BA:0D:DF:83:9A:23:F8:08:B1:DC:E7:53:16:BB:A9
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 019FB71293AE437C53723D5597B04071D2DE
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/i7Ud6u-6Dd-DmiP4CLHc51MWu6k.roa
Signing time: Fri 31 Jul 2026 07:27:55 +0000
ROA not before: Fri 31 Jul 2026 07:27:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 86.104.215.0/24 maxlen: 24
89.32.200.0/24 maxlen: 24
89.32.204.0/24 maxlen: 24
89.33.83.0/24 maxlen: 24
89.47.34.0/24 maxlen: 24
103.47.52.0/22 maxlen: 22
162.218.158.0/24 maxlen: 24
188.215.5.0/24 maxlen: 24
194.26.149.0/24 maxlen: 24
212.102.116.0/24 maxlen: 24
2a07:4a80::/32 maxlen: 32
2a07:4a82::/32 maxlen: 32
2a07:4a84::/32 maxlen: 32
2a07:4a85::/32 maxlen: 32
2a07:4a86::/32 maxlen: 32
2a0a:eb00::/32 maxlen: 32
2a0a:eb01::/32 maxlen: 32
2a0a:eb02::/32 maxlen: 32
2a0a:eb03::/32 maxlen: 32
2a0a:eb04::/32 maxlen: 32
2a0a:eb05::/32 maxlen: 32
2a0a:eb06::/32 maxlen: 32
2a0a:eb07::/32 maxlen: 32
2a0f:c840::/32 maxlen: 32
2a0f:c841::/32 maxlen: 32
2a0f:c842::/32 maxlen: 32
2a0f:c843::/32 maxlen: 32
2a0f:c844::/32 maxlen: 32
2a0f:c845::/32 maxlen: 32
2a0f:c846::/32 maxlen: 32
2a0f:c847::/32 maxlen: 32
2a11:3bc0::/29 maxlen: 29
2a11:3bc0::/32 maxlen: 32
2a11:3bc1::/32 maxlen: 32
2a11:3bc2::/32 maxlen: 32
2a11:3bc3::/32 maxlen: 32
2a11:3bc4::/32 maxlen: 32
2a11:3bc5::/32 maxlen: 32
2a11:3bc6::/32 maxlen: 32
2a11:3bc7::/32 maxlen: 32
2a12:7700::/32 maxlen: 32
2a12:7701::/32 maxlen: 32
2a12:7702::/32 maxlen: 32
2a12:7703::/32 maxlen: 32
2a12:7704::/32 maxlen: 32
2a12:7705::/32 maxlen: 32
2a12:7706::/32 maxlen: 32
2a12:7707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:12:93:ae:43:7c:53:72:3d:55:97:b0:40:71:d2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jul 31 07:27:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bb51deaefba0ddf839a23f808b1dce75316bba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:83:d7:71:0b:66:4a:75:9e:5a:63:a7:c4:
d7:15:bf:65:ea:58:ba:a0:cc:f5:d7:99:31:5e:24:
cd:5c:f8:f4:a2:ff:ac:18:25:16:15:36:1f:00:52:
8a:60:f4:f2:2e:b1:2a:a6:5e:54:6b:59:e2:2e:c4:
f2:f0:c4:ed:05:63:03:95:12:aa:5c:a2:21:41:08:
da:84:f0:32:79:1c:97:13:d1:e4:48:bf:c0:4c:7f:
ca:9b:18:f4:26:c7:7d:0c:7c:df:bf:a3:5d:99:48:
8a:1a:8c:3a:e8:40:c4:5e:d0:07:c6:4d:49:33:30:
6e:74:de:6d:eb:2f:f0:34:49:fb:35:d0:57:57:67:
d9:27:c9:03:4e:3d:94:08:d4:d6:f0:a8:97:60:dd:
64:7e:05:16:91:df:52:57:07:e1:44:ee:89:19:08:
94:1a:1c:07:25:8f:78:a4:0f:96:1c:7c:38:e2:1f:
a0:d8:f6:4f:ca:3f:70:e1:e3:29:df:68:46:5c:68:
eb:cd:da:3b:ef:63:1f:d7:2e:65:a6:d2:ae:17:80:
0b:c0:50:78:e8:81:33:5b:ba:b0:91:b3:eb:6c:bd:
3c:e3:bb:de:5f:c9:51:b3:4f:48:7b:05:87:1f:27:
a9:b2:45:f0:e3:75:c4:01:bb:0a:98:fa:a6:5e:93:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B5:1D:EA:EF:BA:0D:DF:83:9A:23:F8:08:B1:DC:E7:53:16:BB:A9
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/i7Ud6u-6Dd-DmiP4CLHc51MWu6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.215.0/24
89.32.200.0/24
89.32.204.0/24
89.33.83.0/24
89.47.34.0/24
103.47.52.0/22
162.218.158.0/24
188.215.5.0/24
194.26.149.0/24
212.102.116.0/24
IPv6:
2a07:4a80::/32
2a07:4a82::/32
2a07:4a84::-2a07:4a86:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:eb00::/29
2a0f:c840::/29
2a11:3bc0::/29
2a12:7700::/29
Signature Algorithm: sha256WithRSAEncryption
3c:a6:30:77:5e:5f:7b:59:e7:98:d3:5f:c5:e0:7b:3b:9f:db:
3d:68:18:74:93:c9:1d:97:b9:5c:cd:c7:72:d9:d2:2a:6a:d6:
d2:ef:bd:5a:ed:a9:84:c0:9c:0c:32:61:22:3f:ee:36:eb:61:
4c:66:15:b9:2b:67:f8:93:8f:73:02:f1:29:16:ec:6e:26:ee:
34:1f:ae:f6:f3:36:2d:59:f3:87:4f:94:e3:c3:bc:a0:6c:c9:
a0:23:75:09:d4:61:16:39:da:98:82:8a:a3:cc:1d:ad:e6:0c:
a6:85:a3:7d:45:1d:18:4a:27:9d:cf:d3:4e:9f:39:f3:da:66:
1c:c8:81:0d:aa:26:97:7c:4e:01:03:33:a3:f4:16:18:0f:a6:
0e:d0:14:c5:06:2f:25:5e:4f:50:cf:15:08:18:25:37:bc:3b:
95:92:da:fc:52:ab:77:11:82:81:46:11:08:11:0c:09:34:ae:
7c:b5:e8:52:11:5c:23:b0:15:77:a7:07:81:b0:82:81:12:c2:
ec:d1:5c:70:11:e3:ec:83:3a:a0:e6:a8:27:28:a9:a7:81:ab:
25:59:30:0d:da:8e:ca:fd:0e:95:e6:64:97:aa:7b:c9:1f:06:
bb:eb:1e:78:bf:93:9d:67:f1:cd:16:e7:d2:15:d1:06:e9:d8:
12:36:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:39:15 2026 by rpki-client