Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7b6Q5AZmy3QJg1H6Q5VcnH-w8T4.roa
File: 7b6Q5AZmy3QJg1H6Q5VcnH-w8T4.roa (raw, json)
Hash identifier: XRX6fUGwoXEaLm1fG6ZaH1oLy6pYTEGd8oMIJHPVsXU=
Subject key identifier: ED:BE:90:E4:06:66:CB:74:09:83:51:FA:43:95:5C:9C:7F:B0:F1:3E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D41A1A53FDFFEFCE215A0AFD343216F0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7b6Q5AZmy3QJg1H6Q5VcnH-w8T4.roa
Signing time: Thu 24 Sep 2026 15:47:55 +0000
ROA not before: Thu 24 Sep 2026 15:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 79.121.188.0/23 maxlen: 24
79.121.194.0/23 maxlen: 24
79.121.208.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
92.244.162.0/23 maxlen: 24
92.244.164.0/23 maxlen: 24
92.244.166.0/23 maxlen: 24
92.244.168.0/23 maxlen: 24
92.244.170.0/23 maxlen: 24
92.244.172.0/23 maxlen: 24
93.152.0.0/23 maxlen: 24
93.152.10.0/23 maxlen: 24
93.152.12.0/22 maxlen: 24
93.152.18.0/24 maxlen: 24
93.152.21.0/24 maxlen: 24
93.152.48.0/22 maxlen: 24
93.152.64.0/22 maxlen: 24
93.152.92.0/24 maxlen: 24
93.152.116.0/22 maxlen: 24
94.185.130.0/23 maxlen: 24
94.185.132.0/23 maxlen: 24
94.185.136.0/23 maxlen: 24
94.185.142.0/23 maxlen: 24
94.185.148.0/23 maxlen: 24
94.185.152.0/22 maxlen: 24
94.185.152.0/23 maxlen: 24
94.185.154.0/23 maxlen: 24
94.185.168.0/22 maxlen: 24
94.185.168.0/23 maxlen: 24
94.185.170.0/23 maxlen: 24
94.185.172.0/23 maxlen: 24
94.185.180.0/23 maxlen: 24
94.185.186.0/23 maxlen: 24
94.185.192.0/22 maxlen: 24
94.185.192.0/23 maxlen: 24
94.185.194.0/23 maxlen: 24
94.185.196.0/23 maxlen: 24
94.185.200.0/22 maxlen: 24
94.185.200.0/23 maxlen: 24
94.185.202.0/23 maxlen: 24
94.185.204.0/23 maxlen: 24
94.185.214.0/23 maxlen: 24
94.185.216.0/23 maxlen: 24
94.185.220.0/22 maxlen: 24
94.185.220.0/23 maxlen: 24
94.185.222.0/23 maxlen: 24
94.185.230.0/23 maxlen: 24
94.185.232.0/23 maxlen: 24
95.177.3.0/24 maxlen: 24
95.177.5.0/24 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.13.0/24 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
109.174.128.0/22 maxlen: 24
109.174.128.0/23 maxlen: 24
109.174.130.0/23 maxlen: 24
109.174.134.0/23 maxlen: 24
109.174.136.0/23 maxlen: 24
109.174.140.0/22 maxlen: 24
109.174.140.0/23 maxlen: 24
109.174.142.0/23 maxlen: 24
109.174.152.0/23 maxlen: 24
109.174.160.0/22 maxlen: 24
109.174.160.0/23 maxlen: 24
109.174.162.0/23 maxlen: 24
109.174.168.0/23 maxlen: 24
109.174.172.0/23 maxlen: 24
109.174.250.0/23 maxlen: 24
109.174.252.0/23 maxlen: 24
109.174.254.0/23 maxlen: 24
109.204.0.0/22 maxlen: 24
109.204.16.0/22 maxlen: 24
109.204.21.0/24 maxlen: 24
109.204.24.0/22 maxlen: 24
109.204.29.0/24 maxlen: 24
109.204.41.0/24 maxlen: 24
109.204.45.0/24 maxlen: 24
109.204.51.0/24 maxlen: 24
109.204.54.0/24 maxlen: 24
109.204.58.0/24 maxlen: 24
109.204.96.0/22 maxlen: 24
109.204.112.0/24 maxlen: 24
109.204.117.0/24 maxlen: 24
109.204.118.0/24 maxlen: 24
109.204.121.0/24 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 24
195.40.28.0/23 maxlen: 24
195.40.96.0/23 maxlen: 24
195.40.108.0/23 maxlen: 24
195.40.162.0/23 maxlen: 24
195.172.96.0/23 maxlen: 24
195.172.100.0/23 maxlen: 24
195.172.104.0/23 maxlen: 24
195.172.192.0/23 maxlen: 24
195.172.198.0/23 maxlen: 24
195.172.202.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:1a:1a:53:fd:ff:ef:ce:21:5a:0a:fd:34:32:16:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 15:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edbe90e40666cb74098351fa43955c9c7fb0f13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:ca:57:e9:62:3e:07:9b:e8:f5:7d:fd:ba:
46:c5:1a:80:ad:b0:e3:6b:26:69:f4:cc:3f:62:6f:
b7:4b:9f:25:e5:07:2c:d3:42:24:c5:96:32:57:69:
d6:a8:cd:4f:82:46:5d:ba:a0:14:5c:3e:90:56:b8:
7b:4f:08:76:2d:7c:a3:ac:ad:48:6b:fb:74:ee:a2:
e3:f2:14:08:7f:75:7a:5f:e2:cc:70:fa:46:a8:0a:
a5:d8:79:1b:8d:99:2e:bb:a6:b2:3e:71:b3:75:47:
fb:b9:ca:57:88:af:2c:05:91:27:9f:ad:fe:2d:91:
57:92:62:a0:59:af:2a:7c:b7:95:2b:21:d3:c7:e8:
e9:bc:5c:27:fc:ae:e0:c6:af:c0:22:3b:aa:c9:dd:
72:11:86:d6:62:bc:f0:95:20:53:15:b6:42:66:24:
38:a8:cc:23:96:9c:7f:5c:54:c6:8a:d5:56:5f:4e:
b2:cb:ba:b5:bf:73:8a:6c:72:50:65:37:99:9e:0f:
f9:67:bc:f7:59:41:8e:d8:fb:48:4d:15:90:61:a7:
a8:50:84:df:9f:0f:ec:ba:a2:e2:97:ad:96:14:e2:
5e:bc:07:39:20:6f:a6:da:fd:fa:9c:1d:5a:8c:7e:
1f:1e:bd:83:81:0a:10:ee:56:fa:8e:b7:b6:f2:83:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BE:90:E4:06:66:CB:74:09:83:51:FA:43:95:5C:9C:7F:B0:F1:3E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7b6Q5AZmy3QJg1H6Q5VcnH-w8T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.188.0/23
79.121.194.0/23
79.121.208.0/23
79.121.222.0/23
79.121.226.0/23
79.121.238.0/23
92.244.162.0-92.244.173.255
93.152.0.0/23
93.152.10.0-93.152.15.255
93.152.18.0/24
93.152.21.0/24
93.152.48.0/22
93.152.64.0/22
93.152.92.0/24
93.152.116.0/22
94.185.130.0-94.185.133.255
94.185.136.0/23
94.185.142.0/23
94.185.148.0/23
94.185.152.0/22
94.185.168.0-94.185.173.255
94.185.180.0/23
94.185.186.0/23
94.185.192.0-94.185.197.255
94.185.200.0-94.185.205.255
94.185.214.0-94.185.217.255
94.185.220.0/22
94.185.230.0-94.185.233.255
95.177.3.0/24
95.177.5.0/24
95.177.8.0/23
95.177.13.0/24
95.177.54.0/23
95.177.72.0/23
109.174.128.0/22
109.174.134.0-109.174.137.255
109.174.140.0/22
109.174.152.0/23
109.174.160.0/22
109.174.168.0/23
109.174.172.0/23
109.174.250.0-109.174.255.255
109.204.0.0/22
109.204.16.0/22
109.204.21.0/24
109.204.24.0/22
109.204.29.0/24
109.204.41.0/24
109.204.45.0/24
109.204.51.0/24
109.204.54.0/24
109.204.58.0/24
109.204.96.0/22
109.204.112.0/24
109.204.117.0-109.204.118.255
109.204.121.0/24
109.204.124.0/23
195.40.18.0/23
195.40.28.0/23
195.40.96.0/23
195.40.108.0/23
195.40.162.0/23
195.172.96.0/23
195.172.100.0/23
195.172.104.0/23
195.172.192.0/23
195.172.198.0/23
195.172.202.0/23
212.134.11.0/24
212.135.0.0/24
212.135.2.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:cf:7d:93:ee:2b:27:6b:b8:14:c7:04:0d:82:17:82:bd:27:
8e:ff:31:16:94:9f:58:1f:49:c5:f1:6a:01:9b:f1:23:65:34:
8d:ec:a8:0e:f0:7e:5c:b5:97:a8:21:ae:80:61:de:86:63:4b:
c1:cf:0e:56:4b:1c:c4:38:26:81:48:db:8f:8a:56:20:ec:11:
1e:1b:6e:0f:5a:d4:15:23:9a:b9:bd:5c:4c:14:b7:b8:1b:29:
19:5d:88:5a:dd:3d:ff:df:02:e6:7f:bc:7a:6c:78:00:82:7f:
6d:b0:db:01:67:28:2b:22:53:33:10:4e:de:02:04:9f:0a:01:
c7:6e:6a:56:b1:53:8c:30:58:54:ea:2d:57:eb:01:9f:f5:84:
ef:68:b1:ad:68:e5:5f:8d:77:de:92:f9:06:66:1b:e4:bc:8a:
2c:ba:04:89:d2:3f:64:a6:44:2b:18:95:53:64:9f:59:b6:60:
6e:ad:5f:f2:38:a1:92:58:ee:97:0f:f7:ec:38:a1:19:f6:bb:
cd:1f:ac:4f:ec:b0:4d:e5:fe:f0:3a:8d:e2:d5:d2:fa:55:5e:
fb:68:cf:27:71:29:5b:f5:6c:9e:fe:e2:f0:41:dd:be:86:56:
ce:ac:43:b3:ff:9b:06:26:01:ab:8a:69:20:a4:04:5b:9c:6b:
71:f9:43:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:45 2026 by rpki-client