Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1--ZxHZu1-th8uBbAShtnvxOniJY.roa
File: 1--ZxHZu1-th8uBbAShtnvxOniJY.roa (raw, json)
Hash identifier: VmXq9UFaygYZEM/QFVj+oNbU9CHeyeC/v6+Ourc4oAg=
Subject key identifier: FB:E6:71:1D:9B:B5:FA:D8:7C:B8:16:C0:4A:1B:67:BF:13:A7:88:96
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F892781D5760C600A5080EE69AEA8F461
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1--ZxHZu1-th8uBbAShtnvxOniJY.roa
Signing time: Wed 22 Jul 2026 09:28:15 +0000
ROA not before: Wed 22 Jul 2026 09:28:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 82.108.156.0/24 maxlen: 24
85.189.5.0/24 maxlen: 24
85.189.11.0/24 maxlen: 24
212.135.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:27:81:d5:76:0c:60:0a:50:80:ee:69:ae:a8:f4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 22 09:28:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbe6711d9bb5fad87cb816c04a1b67bf13a78896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:fa:5f:ec:79:ba:4a:c9:f8:47:fe:44:76:
23:a8:5e:7e:8f:d4:99:d3:c8:2c:6f:4b:cc:ed:fe:
09:3f:69:bd:85:7a:2a:33:c9:39:c4:cb:03:1a:cd:
64:f4:e6:af:dc:5b:38:0d:0b:6d:e9:74:81:4a:06:
53:de:41:0d:62:14:98:94:ce:ec:d6:cb:33:bf:0c:
26:04:e4:e6:1e:7a:9a:6f:df:28:aa:65:b6:78:5b:
bb:1f:2b:c7:d4:5d:79:c7:29:f9:c2:3a:48:3f:03:
46:9b:49:c5:e9:26:30:f1:9b:d0:3c:6f:c7:f4:a2:
e7:6a:33:7d:51:9e:a7:36:af:32:fd:c2:3f:b6:59:
57:93:48:03:bd:37:83:2d:c9:2a:90:10:e6:3c:ef:
82:e5:f9:6c:ab:a4:8e:fc:83:92:f1:34:d2:84:df:
27:5b:f9:aa:64:b7:65:e7:59:97:ac:d4:cf:36:5c:
cb:37:bd:22:43:0b:de:77:65:2e:43:48:01:80:76:
0e:13:a1:a2:6d:01:0e:d5:ba:46:c7:76:76:63:73:
46:02:20:12:e9:3a:a1:0b:b5:f3:0a:2e:02:21:84:
c6:50:84:31:28:ef:a4:61:6b:71:45:61:2b:bf:2a:
68:c6:d5:a3:db:55:b7:23:dd:ac:9c:41:08:7d:9b:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:71:1D:9B:B5:FA:D8:7C:B8:16:C0:4A:1B:67:BF:13:A7:88:96
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1--ZxHZu1-th8uBbAShtnvxOniJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.156.0/24
85.189.5.0/24
85.189.11.0/24
212.135.30.0/24
Signature Algorithm: sha256WithRSAEncryption
42:87:9a:4b:a6:e6:10:c4:43:5d:99:cf:b9:38:bf:54:ec:1e:
04:aa:cc:8e:0d:5d:18:a8:e7:f8:a2:bf:47:83:25:ff:ff:65:
56:34:f0:18:d8:f8:cc:cf:35:76:46:e5:7d:fc:bf:66:a0:c8:
c7:d3:94:aa:6c:e0:0f:c2:1b:e8:68:56:c4:f0:08:94:25:00:
ae:2d:d6:8b:41:5b:30:26:81:18:89:57:6e:d5:9b:fc:32:d2:
f0:a9:83:2d:0f:79:26:a8:e8:b7:6a:28:0c:77:2b:a1:ad:f0:
88:1c:2c:6b:53:37:1f:be:84:45:63:68:66:2c:65:f2:33:07:
54:1b:77:68:eb:c6:67:fa:09:dc:cf:f6:e3:3d:13:f7:8c:10:
8c:dc:ac:ef:15:97:d2:73:20:42:af:36:89:2e:8f:bc:cd:2c:
c4:61:4a:b0:d8:44:69:a6:67:ac:a4:86:c8:2f:87:9c:ac:00:
45:15:a4:22:52:97:82:b2:d6:33:d7:ca:72:7d:10:e3:92:e4:
50:a6:21:9c:17:f9:42:0c:2a:7c:99:ff:c3:86:7d:24:cb:b3:
8a:6c:46:55:6f:62:b0:70:1d:ac:90:e1:19:a4:c1:49:2f:e0:
18:8d:ce:0f:bd:99:da:56:26:35:4e:e6:22:3b:67:95:0f:7d:
e4:4c:3e:5e
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZ+JJ4HVdgxgClCA7mmuqPRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzIyMDkyODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmU2NzExZDliYjVmYWQ4N2NiODE2YzA0YTFiNjdiZjEzYTc4ODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvv6X+x5ukrJ+Ef+RHYjqF5+j9SZ
08gsb0vM7f4JP2m9hXoqM8k5xMsDGs1k9Oav3Fs4DQtt6XSBSgZT3kENYhSYlM7s
1sszvwwmBOTmHnqab98oqmW2eFu7HyvH1F15xyn5wjpIPwNGm0nF6SYw8ZvQPG/H
9KLnajN9UZ6nNq8y/cI/tllXk0gDvTeDLckqkBDmPO+C5flsq6SO/IOS8TTShN8n
W/mqZLdl51mXrNTPNlzLN70iQwved2UuQ0gBgHYOE6GibQEO1bpGx3Z2Y3NGAiAS
6TqhC7XzCi4CIYTGUIQxKO+kYWtxRWErvypoxtWj21W3I92snEEIfZutSQIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFPvmcR2btfrYfLgWwEobZ78Tp4iWMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvMS0tWnhIWnUxLXRoOHVCYkFTaHRudnhPbmlKWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODAvNmI2NjJkLTAyYTEtNDZlNy1iOWNkLTAzNWQ5NzdmNDIx
Ni8xL2ZpQ3dOT0xFbDdHSVJJamU4UWFYSndSMlVDay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFJsnAME
AFW9BQMEAFW9CwMEANSHHjANBgkqhkiG9w0BAQsFAAOCAQEAQoeaS6bmEMRDXZnP
uTi/VOweBKrMjg1dGKjn+KK/R4Ml//9lVjTwGNj4zM81dkblffy/ZqDIx9OUqmzg
D8Ib6GhWxPAIlCUAri3Wi0FbMCaBGIlXbtWb/DLS8KmDLQ95Jqjot2ooDHcroa3w
iBwsa1M3H76ERWNoZixl8jMHVBt3aOvGZ/oJ3M/24z0T94wQjNys7xWX0nMgQq82
iS6PvM0sxGFKsNhEaaZnrKSGyC+HnKwARRWkIlKXgrLWM9fKcn0Q45LkUKYhnBf5
QgwqfJn/w4Z9JMuzimxGVW9isHAdrJDhGaTBSS/gGI3OD72Z2lYmNU7mIjtnlQ99
5Ew+Xg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:55 2026 by rpki-client