Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hZZn3bA_OfIlGxcXHsUWH2UBfiA.roa
File: hZZn3bA_OfIlGxcXHsUWH2UBfiA.roa (raw, json)
Hash identifier: DE8xrtuewyUirZXet9x4HABekk7WaLIQL4ltXgKZBpo=
Subject key identifier: 85:96:67:DD:B0:3F:39:F2:25:1B:17:17:1E:C5:16:1F:65:01:7E:20
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D1EBDF68BFDCD545B5988C2522C646BA9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hZZn3bA_OfIlGxcXHsUWH2UBfiA.roa
Signing time: Tue 24 Mar 2026 07:27:39 +0000
ROA not before: Tue 24 Mar 2026 07:27:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48266
IP address blocks: 82.151.236.0/22 maxlen: 24
82.151.248.0/22 maxlen: 24
212.135.32.0/20 maxlen: 24
212.135.32.0/24 maxlen: 24
212.135.33.0/24 maxlen: 24
212.135.34.0/24 maxlen: 24
212.135.35.0/24 maxlen: 24
212.135.36.0/24 maxlen: 24
212.135.37.0/24 maxlen: 24
212.135.38.0/24 maxlen: 24
212.135.39.0/24 maxlen: 24
212.135.40.0/24 maxlen: 24
212.135.41.0/24 maxlen: 24
212.135.42.0/24 maxlen: 24
212.135.43.0/24 maxlen: 24
212.135.44.0/24 maxlen: 24
212.135.45.0/24 maxlen: 24
212.135.46.0/24 maxlen: 24
212.135.47.0/24 maxlen: 24
212.135.112.0/20 maxlen: 24
212.135.112.0/24 maxlen: 24
212.135.113.0/24 maxlen: 24
212.135.114.0/24 maxlen: 24
212.135.115.0/24 maxlen: 24
212.135.116.0/24 maxlen: 24
212.135.117.0/24 maxlen: 24
212.135.118.0/24 maxlen: 24
212.135.119.0/24 maxlen: 24
212.135.120.0/24 maxlen: 24
212.135.121.0/24 maxlen: 24
212.135.122.0/24 maxlen: 24
212.135.123.0/24 maxlen: 24
212.135.124.0/24 maxlen: 24
212.135.125.0/24 maxlen: 24
212.135.126.0/24 maxlen: 24
212.135.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:bd:f6:8b:fd:cd:54:5b:59:88:c2:52:2c:64:6b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 24 07:27:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=859667ddb03f39f2251b17171ec5161f65017e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:2a:31:19:a4:6b:f6:b7:d1:59:e8:c4:b0:
26:c0:c8:28:12:23:0a:b8:0a:b0:07:11:38:11:cc:
ac:c9:69:59:67:ed:59:fc:1d:6e:d0:d1:d0:4c:e6:
94:80:1b:a0:05:89:de:78:e8:bf:8d:33:40:12:7a:
fc:7e:64:8c:f8:10:3f:1a:27:75:fe:95:68:ff:48:
db:a5:96:e2:89:92:78:2a:a2:cd:1d:b5:44:26:61:
b3:3b:37:20:d0:c5:b4:a1:8d:02:58:0e:0a:d9:ca:
ec:ae:37:2d:f6:69:6c:5e:47:43:8f:57:9c:85:15:
40:5a:72:60:d5:f7:4d:ef:bd:6b:84:12:0d:71:2b:
29:d8:84:23:74:bf:d5:18:5e:43:2e:cd:0e:b9:b5:
3c:23:80:dc:79:fa:67:07:3b:36:20:87:5e:0e:24:
5c:38:ce:6f:20:33:e9:72:7d:e0:0e:8f:61:9c:7e:
f4:f4:7b:82:83:70:89:8b:c4:e3:02:18:54:0d:aa:
2b:ca:7a:86:11:38:dc:a1:47:98:62:4a:ec:9f:fa:
7d:1c:a9:37:88:ca:b8:96:18:91:be:e0:5c:03:2c:
1a:dc:45:5f:c7:6b:b1:1e:e8:89:43:cb:1e:3e:07:
c3:99:8a:73:2f:f6:a7:9c:e3:19:de:81:82:27:52:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:67:DD:B0:3F:39:F2:25:1B:17:17:1E:C5:16:1F:65:01:7E:20
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hZZn3bA_OfIlGxcXHsUWH2UBfiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.151.236.0/22
82.151.248.0/22
212.135.32.0/20
212.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
96:33:29:24:d1:b4:f5:c3:30:0b:5b:50:2c:03:27:44:b8:47:
86:a6:99:3b:54:02:9f:aa:d1:aa:7f:55:a1:4d:53:4e:22:26:
6f:0a:3d:ac:da:bc:87:43:81:e1:64:61:81:08:be:8a:14:8d:
49:b3:b0:ec:83:17:4c:69:68:ca:2f:5e:18:09:8c:c3:40:6a:
b1:b6:f7:db:70:be:e2:27:44:b7:41:9e:82:50:d3:9b:20:0f:
78:ba:10:5e:9c:68:54:f7:ce:3f:59:d9:d7:16:5a:1b:fb:88:
ba:75:16:14:e1:74:ab:d4:9e:74:26:13:da:f0:59:3d:9d:4f:
2f:3a:43:64:8f:22:9a:20:cc:a7:cc:9f:62:9d:0a:af:fa:f0:
45:35:dc:1e:2e:29:8c:db:1f:7f:bf:6a:75:4f:c8:1f:df:7f:
e5:dc:df:32:91:23:dc:fa:de:4e:29:0b:d7:05:83:1a:ab:0e:
b9:d7:26:bb:bb:5b:38:9c:b3:42:11:15:f7:31:dd:d0:3c:74:
e8:4b:07:8d:55:e0:f1:14:d5:2d:4e:39:aa:1d:2e:60:57:f6:
29:62:0f:95:68:0e:d0:4b:a0:8e:9d:ca:13:ee:ac:a5:6d:e1:
3c:7e:45:b5:3d:eb:4f:16:81:c5:88:65:b5:84:22:28:7d:0f:
bc:cd:28:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:21 2026 by rpki-client