Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x7ZRB1Xtl7tGJ2fB8tYyY4IKI_8.roa
File: x7ZRB1Xtl7tGJ2fB8tYyY4IKI_8.roa (raw, json)
Hash identifier: ozLKFVtJJ6qfDRA+BLLyI2Q33JH5iZhqR+3BY2aZdV4=
Subject key identifier: C7:B6:51:07:55:ED:97:BB:46:27:67:C1:F2:D6:32:63:82:0A:23:FF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D447B3525298B4641E5CA1ED0F624EEB6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x7ZRB1Xtl7tGJ2fB8tYyY4IKI_8.roa
Signing time: Tue 31 Mar 2026 15:20:18 +0000
ROA not before: Tue 31 Mar 2026 15:20:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 77.93.133.0/24 maxlen: 24
77.93.136.0/24 maxlen: 24
77.93.138.0/23 maxlen: 24
77.107.95.0/24 maxlen: 24
81.168.58.0/24 maxlen: 24
81.168.63.0/24 maxlen: 24
81.168.65.0/24 maxlen: 24
81.168.87.0/24 maxlen: 24
81.168.96.0/24 maxlen: 24
81.168.99.0/24 maxlen: 24
81.168.105.0/24 maxlen: 24
81.168.109.0/24 maxlen: 24
81.168.116.0/24 maxlen: 24
81.168.122.0/24 maxlen: 24
81.168.125.0/24 maxlen: 24
82.152.1.0/24 maxlen: 24
82.152.11.0/24 maxlen: 24
82.152.102.0/24 maxlen: 24
82.152.117.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
89.213.128.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
109.176.91.0/24 maxlen: 24
212.38.81.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
213.210.11.0/24 maxlen: 24
213.210.48.0/23 maxlen: 24
217.144.145.0/24 maxlen: 24
217.144.156.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 20:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:7b:35:25:29:8b:46:41:e5:ca:1e:d0:f6:24:ee:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 31 15:20:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7b6510755ed97bb462767c1f2d63263820a23ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:e4:21:b4:50:19:de:fb:d5:06:fa:c6:60:
e9:d9:ec:c0:b5:24:1b:54:20:68:05:94:0f:cd:6a:
d5:c4:92:4b:b4:8d:ad:56:6c:aa:ec:f3:a4:6a:60:
a7:f7:35:03:d0:c0:ac:80:a3:e5:2f:d8:da:ad:28:
3b:17:0f:d9:fc:e4:a6:4e:a5:03:1c:7d:09:8f:21:
20:82:ec:b0:c9:4a:8b:29:54:9c:94:98:42:49:e3:
ea:a3:49:5d:10:13:83:95:94:ee:31:f2:1e:be:f8:
12:a3:b5:e3:40:95:e8:06:da:6d:0a:2d:3f:b3:f3:
d3:56:68:96:d1:cf:37:9b:6a:29:5d:cf:a7:a8:69:
4e:32:e5:14:fd:e6:b6:2d:7a:15:90:0c:4e:c0:3e:
95:d1:23:f8:1a:11:5f:6c:af:a8:01:ea:2e:68:9e:
dd:0d:93:04:6a:3f:ab:94:15:06:b0:8c:e4:5d:c4:
e1:2e:11:bf:fc:5c:32:df:1e:a7:9e:0d:c3:b3:40:
91:ac:fd:40:79:15:ca:0a:5b:29:c3:f8:99:93:74:
7e:2f:59:aa:0c:3c:51:06:13:30:8a:8a:13:07:95:
ab:80:2c:7c:e8:3a:4f:6c:02:59:b4:bc:42:30:ec:
c0:37:fd:f5:a2:b2:a1:3d:ff:21:e3:49:14:17:73:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B6:51:07:55:ED:97:BB:46:27:67:C1:F2:D6:32:63:82:0A:23:FF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x7ZRB1Xtl7tGJ2fB8tYyY4IKI_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.133.0/24
77.93.136.0/24
77.93.138.0/23
77.107.95.0/24
81.168.58.0/24
81.168.63.0/24
81.168.65.0/24
81.168.87.0/24
81.168.96.0/24
81.168.99.0/24
81.168.105.0/24
81.168.109.0/24
81.168.116.0/24
81.168.122.0/24
81.168.125.0/24
82.152.1.0/24
82.152.11.0/24
82.152.102.0/24
82.152.117.0-82.152.118.255
89.213.128.0/24
89.213.169.0/24
89.213.176.0/24
109.176.91.0/24
212.38.81.0/24
213.130.138.0/24
213.210.11.0/24
213.210.48.0/23
217.144.145.0/24
217.144.156.0/24
217.145.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9d:40:ea:19:6d:d2:16:47:a2:22:de:f8:82:c4:84:cc:7c:
99:7e:3a:b1:74:d0:2f:19:89:df:f8:3d:a4:11:87:3c:b9:d8:
70:3c:d7:33:0b:79:9e:bb:6d:9f:7b:e7:bb:98:6a:dd:db:4c:
65:a5:32:ae:24:8f:b3:21:5a:cd:25:b3:06:b2:57:d6:a8:c0:
f1:f0:2b:d7:08:dd:1b:3d:f6:c2:c3:c0:7c:b8:07:6c:45:bb:
c2:5e:26:6e:30:5c:3f:23:7d:23:1d:09:82:47:c8:63:4e:e6:
1a:64:2c:69:71:ee:53:b1:63:b6:1a:ac:da:45:6a:e2:e3:c1:
ae:ee:aa:88:de:55:ad:cd:f1:21:c5:76:d3:d4:13:c7:f2:db:
b2:09:07:db:43:16:eb:cb:84:22:be:59:0e:7f:9f:a7:ec:c2:
2c:bd:ee:d8:44:5c:61:28:f6:f8:bc:ca:d2:7b:ea:28:de:1c:
14:5b:f1:29:89:ab:ac:53:4e:e9:d8:16:71:8b:b2:39:00:e6:
47:f5:2b:84:20:66:ee:bc:ca:78:b3:51:7c:1d:bb:88:c8:6b:
f6:ae:33:7e:a4:30:1b:38:9a:55:6a:6a:19:ab:9e:96:60:ea:
16:39:6c:55:ae:be:c7:8c:49:f2:b4:83:e0:95:c7:76:da:40:
ba:96:38:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 05:19:15 2026 by rpki-client