Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/e7Wb8-7yMlbVemGNFyi8RKlEbpM.roa
File: e7Wb8-7yMlbVemGNFyi8RKlEbpM.roa (raw, json)
Hash identifier: 9xbRAe9uQK8nICP8ebZsP8lh4/Kn1wGtLCCTRX+Cud0=
Subject key identifier: 7B:B5:9B:F3:EE:F2:32:56:D5:7A:61:8D:17:28:BC:44:A9:44:6E:93
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019EA5C6329F3008C280A55881C02F80B864
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/e7Wb8-7yMlbVemGNFyi8RKlEbpM.roa
Signing time: Mon 08 Jun 2026 05:48:10 +0000
ROA not before: Mon 08 Jun 2026 05:48:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39543
IP address blocks: 86.106.81.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.120.0/24 maxlen: 24
89.47.122.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
188.241.3.0/24 maxlen: 24
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:c6:32:9f:30:08:c2:80:a5:58:81:c0:2f:80:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 8 05:48:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bb59bf3eef23256d57a618d1728bc44a9446e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:0e:90:86:17:55:14:1a:85:40:8b:6c:bd:
c5:d9:3c:aa:8c:0e:43:fd:1c:30:ce:55:dd:6f:40:
56:ac:79:65:6d:d8:90:c6:9f:94:45:ca:b9:85:02:
62:13:d1:08:cf:3e:a5:ce:b3:e7:17:43:78:14:db:
72:57:4b:30:3c:ee:d7:45:24:ec:9a:46:45:d3:93:
ea:98:a5:49:de:cf:95:14:cd:f3:87:b6:c7:9c:da:
86:d0:08:10:a7:9b:7c:63:b1:5f:a0:03:97:9b:98:
1b:51:e6:27:22:6e:2b:8a:6f:1c:03:19:85:01:c4:
1d:c3:36:c1:e2:e1:99:de:81:b9:55:46:8b:3f:da:
fb:bd:77:53:09:37:c4:c3:6b:40:be:4e:4d:34:b1:
3b:e1:de:6b:79:5e:41:4f:9e:15:86:a4:30:78:11:
11:db:10:1f:15:2b:7a:57:82:39:71:29:df:e2:f7:
77:cc:a5:a7:cb:e4:f3:71:e9:52:a7:72:21:8c:08:
df:f5:98:35:00:f2:72:99:44:8f:70:23:6a:6f:e6:
48:bd:42:fa:48:7d:37:b7:e3:e2:5f:c5:d3:a9:1b:
54:51:5d:a5:ad:dd:b8:35:95:c3:b8:b6:61:d5:1b:
fd:4b:e8:3e:5b:9f:9e:eb:5f:63:1a:f9:f5:66:dc:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B5:9B:F3:EE:F2:32:56:D5:7A:61:8D:17:28:BC:44:A9:44:6E:93
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/e7Wb8-7yMlbVemGNFyi8RKlEbpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.81.0/24
89.34.27.0/24
89.35.158.0/24
89.39.111.0/24
89.40.67.0/24
89.45.164.0/24
89.47.96.0-89.47.98.255
89.47.101.0-89.47.111.255
89.47.120.0/24
89.47.122.0/24
93.113.204.0/24
93.114.194.0/24
188.241.3.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
5e:4c:ad:de:ff:7c:da:91:cf:3d:1e:42:db:dd:3f:60:d2:c0:
fb:57:ea:e5:a5:43:95:c0:69:80:6a:ff:cc:b0:e8:84:65:79:
8a:55:26:2b:5e:d0:9c:de:44:13:07:60:ce:6d:1a:a1:fd:94:
f9:d1:e5:15:39:39:e3:42:7b:f6:cd:d6:10:f1:8f:f1:34:89:
19:87:d3:a2:02:6d:d5:14:3c:c4:f8:7e:d1:e4:33:1e:75:db:
2e:bb:03:bf:a1:bf:33:82:a3:3d:03:70:9c:fd:22:2c:50:af:
94:12:7e:99:6b:dc:a1:c8:d9:f3:9c:d1:d3:e6:71:f8:6d:3d:
e3:86:05:5f:7a:e3:da:5a:9d:bc:49:36:46:68:d8:66:73:ce:
5a:14:4c:d6:16:2c:41:0b:77:ba:ac:49:ec:9f:a5:e6:ed:6c:
f7:8f:1e:a3:cb:69:48:5a:dc:07:73:7b:b7:72:f4:23:0b:b3:
61:0a:98:13:43:69:89:7a:fe:95:e3:90:9d:13:ea:b4:35:3c:
ff:9e:e4:fd:0a:e2:cc:69:61:34:70:06:bd:25:3b:c0:58:05:
6d:72:43:fd:79:57:6b:51:c8:35:01:b2:a6:9c:9f:28:d4:a6:
5a:68:22:9d:9a:0b:ce:76:d0:68:b5:8b:1f:bb:83:09:d7:b1:
1d:6d:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:32:26 2026 by rpki-client