Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5_Bd6GGf9WP-9hJPPCE-gAd5KGA.roa
File: 5_Bd6GGf9WP-9hJPPCE-gAd5KGA.roa (raw, json)
Hash identifier: L0eFF6GABKn4bdSo8wHuuXiltemZjENc3ZiVaB6scQk=
Subject key identifier: E7:F0:5D:E8:61:9F:F5:63:FE:F6:12:4F:3C:21:3E:80:07:79:28:60
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1CF267250F2696159276FF68ADA3346CB
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5_Bd6GGf9WP-9hJPPCE-gAd5KGA.roa
Signing time: Thu 12 Nov 2026 09:46:05 +0000
ROA not before: Thu 12 Nov 2026 09:46:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 46.34.16.0/24 maxlen: 24
82.108.110.0/24 maxlen: 24
185.3.74.0/24 maxlen: 24
217.207.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:26:72:50:f2:69:61:59:27:6f:f6:8a:da:33:46:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 12 09:46:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7f05de8619ff563fef6124f3c213e8007792860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:58:e7:11:61:e4:d0:71:b3:eb:f1:b3:1c:
14:fd:50:0b:52:f1:31:67:ba:c6:13:37:ba:b7:55:
32:68:e4:ea:eb:5c:0d:39:41:15:40:75:7b:b5:69:
d1:69:58:c2:12:33:82:3b:08:15:41:eb:09:ec:76:
86:93:0b:d3:3c:4e:a8:75:a2:18:b9:9c:61:01:2b:
3c:8b:d6:3e:7d:3e:1d:ed:84:5d:64:90:a9:44:57:
ca:f0:86:36:76:8d:ff:36:fa:85:60:ef:ea:1d:30:
1e:65:fd:d4:c4:fa:7c:6f:1f:ab:0b:dc:d8:a1:ba:
4e:f7:6c:b8:9d:28:73:28:d4:b6:b3:fe:ca:7f:f7:
59:c8:8a:7e:90:7d:81:67:4c:8a:52:9b:4e:70:3f:
1a:a6:3d:57:17:45:a2:6c:bf:17:a0:c9:65:60:6e:
ee:39:53:ef:dc:4f:86:6d:3a:59:63:da:0a:f5:5c:
29:a2:12:27:88:99:61:05:88:71:cd:f9:a4:68:4b:
7c:02:36:72:e2:0a:68:a8:13:2a:17:a1:f8:b4:48:
de:a9:95:4d:c2:d2:2d:d9:4d:51:3f:a1:22:b6:63:
fb:cf:68:bf:8b:06:bc:b9:a1:ca:ed:1f:18:42:9f:
80:ca:2c:7c:70:36:98:95:57:f5:1d:8f:c8:a6:e6:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F0:5D:E8:61:9F:F5:63:FE:F6:12:4F:3C:21:3E:80:07:79:28:60
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5_Bd6GGf9WP-9hJPPCE-gAd5KGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.16.0/24
82.108.110.0/24
185.3.74.0/24
217.207.208.0/23
Signature Algorithm: sha256WithRSAEncryption
64:27:64:94:f7:73:90:57:36:d8:97:0e:b9:ea:ef:d1:d2:dc:
1e:46:75:77:cd:c5:96:3b:30:9b:83:e4:d3:dd:ff:13:b6:2b:
02:69:71:80:3d:86:1b:36:f1:a6:f9:a7:36:5d:94:5c:4d:b1:
87:de:17:ef:4a:d4:9a:11:fe:d6:e6:35:8b:6c:a9:1f:b2:48:
bb:8a:16:a0:80:e5:bc:2d:f8:ec:54:ed:32:bf:e5:b9:66:12:
11:9a:75:c1:f1:9d:53:20:66:95:ac:81:16:28:34:ee:f9:8b:
08:ef:fd:e0:75:42:08:62:4a:df:82:9b:83:ac:d9:e5:bb:17:
29:8c:81:40:88:6f:c8:48:1e:50:4e:93:82:92:c9:53:48:64:
37:23:a6:9a:09:6e:15:cc:56:52:4a:08:80:cb:0a:f8:22:3f:
45:c0:7a:ee:24:37:2e:30:e2:d7:53:5e:7d:e9:07:74:21:e7:
14:7e:29:7e:12:55:d4:a9:5a:1a:35:48:54:2f:c8:9b:41:f3:
8f:38:c8:8a:c7:fe:ce:e4:3e:1e:c5:0f:8e:15:c9:f6:5f:5c:
ac:f7:aa:03:46:12:1f:40:20:e4:28:bd:88:c0:df:0c:41:ee:
6a:b8:58:52:0c:c2:78:90:23:c4:9a:35:61:f5:bb:f7:2d:4f:
54:fb:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:16 2026 by rpki-client