Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7KuGkX29iWj3wE4GHE90bSyyWsA.roa
File: 7KuGkX29iWj3wE4GHE90bSyyWsA.roa (raw, json)
Hash identifier: xqJDs9fyhPWZdiJSSMsT4cC9GneSKJgYi6IAN1QOHv4=
Subject key identifier: EC:AB:86:91:7D:BD:89:68:F7:C0:4E:06:1C:4F:74:6D:2C:B2:5A:C0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A18AC5A1C615844DEEE2059C71867DCE68
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7KuGkX29iWj3wE4GHE90bSyyWsA.roa
Signing time: Fri 30 Oct 2026 03:06:10 +0000
ROA not before: Fri 30 Oct 2026 03:06:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 46.34.4.0/22 maxlen: 24
46.34.8.0/22 maxlen: 24
80.68.212.0/22 maxlen: 24
82.109.208.0/20 maxlen: 24
82.110.240.0/20 maxlen: 24
83.148.137.0/24 maxlen: 24
83.148.149.0/24 maxlen: 24
85.189.32.0/22 maxlen: 24
87.84.201.0/24 maxlen: 24
87.84.205.0/24 maxlen: 24
87.84.240.0/20 maxlen: 24
87.85.80.0/20 maxlen: 24
87.85.96.0/24 maxlen: 24
87.85.112.0/20 maxlen: 24
87.85.134.0/24 maxlen: 24
87.85.144.0/20 maxlen: 24
87.85.175.0/24 maxlen: 24
87.85.176.0/20 maxlen: 24
87.85.236.0/22 maxlen: 24
87.86.64.0/20 maxlen: 24
87.86.112.0/20 maxlen: 24
87.86.128.0/19 maxlen: 24
87.86.192.0/20 maxlen: 24
87.86.243.0/24 maxlen: 24
91.143.176.0/22 maxlen: 24
194.6.100.0/22 maxlen: 24
194.6.112.0/20 maxlen: 24
194.242.134.0/24 maxlen: 24
194.242.152.0/22 maxlen: 24
195.72.160.0/22 maxlen: 24
212.74.0.0/22 maxlen: 24
212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.94.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.172.0/23 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.134.229.0/24 maxlen: 24
212.135.76.0/23 maxlen: 24
212.135.138.0/24 maxlen: 24
212.135.139.0/24 maxlen: 24
212.135.175.0/24 maxlen: 24
217.204.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:c5:a1:c6:15:84:4d:ee:e2:05:9c:71:86:7d:ce:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 30 03:06:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecab86917dbd8968f7c04e061c4f746d2cb25ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:dd:89:c4:25:d7:8c:2e:54:18:3c:02:12:
c0:f0:b0:57:c6:18:9f:2a:02:4c:6e:0c:7f:05:ba:
00:89:7e:a7:4e:15:3a:da:6a:9e:b9:f6:54:99:5e:
23:cf:18:0e:d4:4e:2a:1b:c8:9c:bc:c5:32:ff:de:
f5:9f:de:32:2e:b3:4d:12:4d:f6:54:e1:b9:14:96:
96:4a:5d:9f:06:38:7e:0e:23:4e:cb:3a:03:89:2b:
51:48:45:e6:90:f6:c6:17:27:4b:e8:cb:9b:03:7d:
6f:14:e9:35:10:30:9a:ec:99:99:25:0b:6c:10:d1:
08:93:57:05:51:b9:ce:7c:34:bc:53:2c:d3:8c:65:
63:6d:96:46:25:cb:70:23:d6:f7:c3:e9:55:31:b3:
34:7c:bc:d0:0b:21:3e:14:01:3b:b0:16:17:e1:6c:
59:a6:3e:e8:1a:0d:b6:80:3e:5b:9d:03:db:d0:59:
1f:3e:21:23:3d:9b:b3:65:0e:45:7d:eb:fa:49:28:
01:2a:57:36:b8:af:60:98:4c:81:f0:eb:82:e0:ea:
ed:f3:9c:cd:2c:4e:9d:41:25:32:00:c1:55:31:c6:
57:f4:9d:86:d0:55:95:58:1d:79:94:20:fb:14:ea:
69:20:2a:c3:37:86:38:6a:f9:87:a6:e0:94:96:6e:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AB:86:91:7D:BD:89:68:F7:C0:4E:06:1C:4F:74:6D:2C:B2:5A:C0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7KuGkX29iWj3wE4GHE90bSyyWsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.4.0-46.34.11.255
80.68.212.0/22
82.109.208.0/20
82.110.240.0/20
83.148.137.0/24
83.148.149.0/24
85.189.32.0/22
87.84.201.0/24
87.84.205.0/24
87.84.240.0/20
87.85.80.0-87.85.96.255
87.85.112.0/20
87.85.134.0/24
87.85.144.0/20
87.85.175.0-87.85.191.255
87.85.236.0/22
87.86.64.0/20
87.86.112.0-87.86.159.255
87.86.192.0/20
87.86.243.0/24
91.143.176.0/22
194.6.100.0/22
194.6.112.0/20
194.242.134.0/24
194.242.152.0/22
195.72.160.0/22
212.74.0.0/22
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.94.0/24
212.134.124.0/22
212.134.164.0/22
212.134.172.0/23
212.134.208.0/22
212.134.224.0/22
212.134.229.0/24
212.135.76.0/23
212.135.138.0/23
212.135.175.0/24
217.204.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:30:8f:37:9e:57:48:30:80:44:c5:db:a8:60:14:4b:b6:94:
9d:99:35:e0:ef:92:db:cb:3e:4d:df:63:ea:69:04:7b:38:aa:
01:b5:93:cf:c4:aa:2d:f1:73:19:17:70:a5:e2:e5:eb:29:00:
1c:40:3b:6f:ad:5f:65:1a:3a:27:d9:4d:47:fa:2c:22:04:06:
73:eb:31:3d:1c:20:39:6a:2f:22:74:9f:8d:a6:d0:94:3d:0d:
b9:2f:95:4a:38:a6:4b:79:a6:a4:46:45:10:28:8f:7c:64:04:
b0:7a:d8:df:3e:78:5a:11:1a:99:f3:57:e1:c1:27:32:83:bd:
80:0a:48:4b:fd:c3:1b:52:13:de:e4:50:31:19:7d:c3:95:44:
eb:96:69:5d:e8:5f:f0:27:64:7b:63:07:a4:41:58:69:a7:f3:
d4:c6:60:b0:b4:e0:4f:18:08:5e:2d:6c:c1:12:31:e4:65:57:
60:88:b6:41:2d:af:e3:6e:f1:56:58:10:48:2b:aa:c9:d6:9e:
80:36:d5:0d:62:97:39:c0:3c:db:6f:03:ad:c8:a6:cb:54:3a:
3d:65:b2:94:ad:c1:57:d9:d3:a9:43:1b:3f:96:6e:41:d5:e2:
ed:58:4b:00:06:1c:c1:15:d6:99:08:ae:3a:3e:cd:0b:d9:8b:
2a:15:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:23:58 2026 by rpki-client