Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n-lGGZP-hu55HWMYWgqN2D5eF9I.roa
File: n-lGGZP-hu55HWMYWgqN2D5eF9I.roa (raw, json)
Hash identifier: 8nrd2mgnYV65BtvdpoyKIWFbT2+m6sW/kDxAPfyc8SM=
Subject key identifier: 9F:E9:46:19:93:FE:86:EE:79:1D:63:18:5A:0A:8D:D8:3E:5E:17:D2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C8764155F77D6F7EECE07FF7ADDA9E5F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n-lGGZP-hu55HWMYWgqN2D5eF9I.roa
Signing time: Tue 22 Sep 2026 09:33:08 +0000
ROA not before: Tue 22 Sep 2026 09:33:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 46.34.0.0/24 maxlen: 24
82.108.123.0/24 maxlen: 24
82.108.210.0/24 maxlen: 24
82.110.54.0/23 maxlen: 24
82.110.124.0/22 maxlen: 22
87.82.217.0/24 maxlen: 24
87.84.233.0/24 maxlen: 24
87.85.64.0/24 maxlen: 24
87.85.227.0/24 maxlen: 24
87.86.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:76:41:55:f7:7d:6f:7e:ec:e0:7f:f7:ad:da:9e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 09:33:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fe9461993fe86ee791d63185a0a8dd83e5e17d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:7f:29:3b:dc:e3:45:0e:6f:ce:b9:ae:bd:
48:3d:dc:8d:55:00:73:86:a6:88:82:55:b4:07:28:
c2:7c:1a:a9:fb:d7:3e:47:fd:d4:9a:4d:fd:14:0e:
ad:0c:a6:61:b6:af:31:05:6b:8f:8b:0d:cf:cf:1e:
c2:d2:9f:61:87:9c:75:31:84:8a:a9:1a:06:85:d1:
05:06:1d:ac:f7:67:1a:b2:ee:5a:34:ac:72:89:b0:
46:e2:b3:ca:bf:58:15:73:21:4d:ef:1e:c8:2e:45:
d6:32:27:34:87:69:5c:73:ad:f0:c1:83:fc:59:f0:
e1:8a:38:f1:a1:3a:d6:91:d6:6e:65:f4:7b:50:ae:
a4:c3:2f:30:02:11:ac:fb:aa:46:ae:70:4d:b4:28:
c5:fb:da:b6:13:03:c4:30:11:eb:74:33:1f:48:d6:
d5:d5:ae:0b:63:ec:30:5d:eb:f4:1d:31:37:99:6a:
78:4d:54:ae:25:e4:e2:7c:ea:27:16:ec:ba:54:7e:
27:6c:5f:87:a6:d1:08:b2:1b:b4:66:9f:44:e7:4f:
1f:ce:d5:08:f0:7a:66:f0:0d:50:47:51:40:d0:37:
5e:e1:a5:c2:67:45:0e:e5:d1:13:89:95:fd:cd:dd:
34:30:50:29:f2:38:9a:e4:83:e1:0d:55:c7:1b:4b:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:46:19:93:FE:86:EE:79:1D:63:18:5A:0A:8D:D8:3E:5E:17:D2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/n-lGGZP-hu55HWMYWgqN2D5eF9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
82.108.123.0/24
82.108.210.0/24
82.110.54.0/23
82.110.124.0/22
87.82.217.0/24
87.84.233.0/24
87.85.64.0/24
87.85.227.0/24
87.86.212.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:09:ef:ab:d5:c8:a9:fa:0d:ac:9f:ad:9d:a2:03:a8:91:ec:
40:29:2b:3a:b2:5c:1b:01:ae:ca:2e:2c:97:19:23:58:5d:97:
31:c1:c1:5a:f4:64:98:c2:8e:68:ec:ff:7e:df:f4:49:c2:b2:
c1:4d:cc:39:cd:c3:bd:e0:5a:23:b8:f6:42:0e:df:78:d5:21:
49:2e:0a:55:9d:51:c6:08:34:e7:b5:cf:c2:c8:19:16:a9:13:
39:82:17:20:d5:01:a7:2f:5c:c2:a0:6b:4f:8e:cb:fd:1e:73:
eb:e7:3a:0a:08:a1:67:83:e1:0f:48:cd:50:8e:26:a1:4c:1d:
21:04:5f:31:b5:eb:80:cb:bd:a6:f6:4c:7f:98:1c:13:41:0a:
8a:c1:b4:33:14:84:b7:58:c0:2f:c6:ce:16:51:c5:be:ba:7f:
40:11:20:e6:d4:f5:75:af:f8:97:8b:b5:8d:b9:c8:b7:31:e4:
67:6d:8e:86:03:95:81:12:f1:93:31:67:be:b9:72:af:77:05:
9e:53:a5:e0:d6:d7:d5:d3:8b:71:f1:4d:45:f3:9a:4e:db:2a:
fc:e2:c4:fe:4f:b2:d8:47:cc:2e:0c:68:0e:83:dd:86:0b:e2:
91:ae:d9:ab:b5:c6:50:7f:33:34:d5:35:48:80:54:01:97:86:
d1:3a:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:50:20 2026 by rpki-client