Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/F5i4Gv0Mabhw-GoijZFOhfDi3kQ.roa
File: F5i4Gv0Mabhw-GoijZFOhfDi3kQ.roa (raw, json)
Hash identifier: n7U6qRf4+/Ngr0Nl5kWLv4fXu99VxyeuBHEuV88nGPs=
Subject key identifier: 17:98:B8:1A:FD:0C:69:B8:70:F8:6A:22:8D:91:4E:85:F0:E2:DE:44
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8FE45A98248D28B93568300572F81C74
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/F5i4Gv0Mabhw-GoijZFOhfDi3kQ.roa
Signing time: Thu 23 Jul 2026 16:52:15 +0000
ROA not before: Thu 23 Jul 2026 16:52:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 46.34.29.0/24 maxlen: 24
78.154.127.0/24 maxlen: 24
82.108.173.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
82.109.166.0/24 maxlen: 24
85.189.17.0/24 maxlen: 24
87.82.233.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.84.188.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
194.242.132.0/24 maxlen: 24
195.72.169.0/24 maxlen: 24
217.79.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:e4:5a:98:24:8d:28:b9:35:68:30:05:72:f8:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 16:52:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1798b81afd0c69b870f86a228d914e85f0e2de44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:c8:e7:33:b1:b5:a1:46:cb:e5:a1:7b:fd:
f5:c1:e8:87:fa:f1:3d:8c:f6:32:07:d1:8c:7d:c7:
85:2e:e9:a1:f2:6f:48:e7:a8:c3:a4:c2:66:f6:44:
34:92:21:39:55:6f:b9:9e:70:05:f1:ac:1f:c4:e5:
fe:21:48:4b:fc:a0:4b:9e:0e:73:21:80:c5:e7:77:
7f:2f:ce:cd:c9:6c:17:88:28:f0:ab:77:a9:3b:6a:
7b:f1:a3:7a:78:c5:fe:84:2c:93:45:c1:f0:ee:ab:
54:ae:b2:db:1c:c2:7d:4d:64:cf:c6:71:e6:99:06:
35:41:2c:d1:78:25:9a:fa:c8:a3:26:87:de:1a:f3:
2f:45:3a:e7:44:22:e1:97:7f:28:ce:c6:3e:5a:5f:
22:5d:85:fe:70:d7:8e:8f:f5:14:13:9a:26:bb:9b:
f1:54:a4:77:b3:c4:a2:1d:a9:2a:73:78:e8:11:75:
aa:85:8f:fb:3c:68:d5:27:8b:a2:ad:4a:30:12:6e:
42:49:22:f9:7d:cc:89:3f:60:fc:f9:cf:86:5d:8c:
d6:13:cc:89:1a:d8:fd:43:2d:ad:32:48:69:0c:f2:
64:83:cc:b0:85:0f:76:64:ce:bb:80:2c:8d:9e:09:
af:b1:80:ae:b5:75:ae:c8:61:6a:f2:bb:4c:4b:82:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:98:B8:1A:FD:0C:69:B8:70:F8:6A:22:8D:91:4E:85:F0:E2:DE:44
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/F5i4Gv0Mabhw-GoijZFOhfDi3kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.29.0/24
78.154.127.0/24
82.108.173.0/24
82.109.98.0/24
82.109.151.0/24
82.109.166.0/24
85.189.17.0/24
87.82.233.0/24
87.83.232.0/24
87.84.188.0/24
87.84.232.0/24
194.242.132.0/24
195.72.169.0/24
217.79.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:16:80:cf:f5:5d:33:7d:16:a8:1c:cc:2e:4d:de:5d:e8:5d:
70:e4:ad:d2:2a:40:1d:7c:cc:52:ba:3b:f8:8a:31:e9:07:e4:
76:a6:11:42:ab:11:35:14:98:88:93:19:cb:45:f1:2e:77:29:
1a:e5:8d:89:96:5e:f8:98:cc:81:94:d4:6d:2b:61:ed:49:b5:
74:a9:7c:3d:56:fa:26:27:21:16:e2:88:ac:b1:96:fc:88:15:
92:c6:25:6a:ec:8a:2c:34:92:d6:c0:10:b0:a5:03:7e:3a:16:
14:3e:25:02:51:9d:96:27:80:cc:28:ff:40:e4:28:61:fc:4a:
8f:95:3c:37:6a:1a:7c:67:0c:07:ca:65:38:e9:2a:2d:66:47:
96:9e:71:a0:c3:0e:52:d8:fa:72:cd:9a:74:3d:df:e8:af:10:
ce:23:8a:f7:32:41:54:89:8b:54:ab:66:c6:d9:f1:86:83:ff:
07:35:3e:03:41:bc:e7:5c:02:b7:98:c7:5b:2f:60:fe:31:5a:
66:84:ff:91:70:eb:ce:ce:5e:ba:bc:cc:f7:e8:a4:4e:c2:2d:
47:6f:96:a4:db:93:af:20:fe:0b:00:3d:83:e3:77:b5:7b:35:
32:c7:9f:f0:42:2c:97:fc:48:6e:3b:3b:22:1b:e4:a7:57:d8:
bc:a0:f1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:29:51 2026 by rpki-client