Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nfVi2fmB8KuWVqw9Z9C3OgXSAPY.roa
File: nfVi2fmB8KuWVqw9Z9C3OgXSAPY.roa (raw, json)
Hash identifier: 0RJPsFoolDj91u4ueFW/0fneYpc7R2T90Uw/TYUuVpI=
Subject key identifier: 9D:F5:62:D9:F9:81:F0:AB:96:56:AC:3D:67:D0:B7:3A:05:D2:00:F6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C49A66FDD37333A726489D3F6C27878A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nfVi2fmB8KuWVqw9Z9C3OgXSAPY.roa
Signing time: Mon 21 Sep 2026 15:34:08 +0000
ROA not before: Mon 21 Sep 2026 15:34:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 78.154.108.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
87.83.2.0/24 maxlen: 24
87.83.46.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.85.232.0/24 maxlen: 24
87.85.255.0/24 maxlen: 24
212.134.17.0/24 maxlen: 24
212.134.37.0/24 maxlen: 24
212.134.41.0/24 maxlen: 24
212.134.48.0/24 maxlen: 24
212.134.51.0/24 maxlen: 24
212.134.56.0/24 maxlen: 24
212.134.123.0/24 maxlen: 24
212.134.140.0/24 maxlen: 24
212.134.142.0/24 maxlen: 24
212.134.148.0/22 maxlen: 24
212.134.152.0/24 maxlen: 24
212.134.170.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.190.0/24 maxlen: 24
212.134.191.0/24 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.205.0/24 maxlen: 24
212.134.218.0/24 maxlen: 24
212.134.228.0/24 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.239.0/24 maxlen: 24
212.134.248.0/24 maxlen: 24
212.134.249.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.27.0/24 maxlen: 24
212.135.28.0/24 maxlen: 24
212.135.145.0/24 maxlen: 24
212.135.151.0/24 maxlen: 24
212.135.156.0/24 maxlen: 24
212.135.160.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
212.135.198.0/24 maxlen: 24
212.135.240.0/24 maxlen: 24
217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:9a:66:fd:d3:73:33:a7:26:48:9d:3f:6c:27:87:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 21 15:34:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9df562d9f981f0ab9656ac3d67d0b73a05d200f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:e5:8e:70:8e:7e:76:bf:b1:33:34:34:74:
bf:8b:c1:e0:50:9c:56:e8:1f:ec:5e:1b:89:7b:cb:
c3:ae:96:9c:6e:2e:64:34:3a:48:44:84:e4:7e:5f:
a7:0f:3d:c4:5b:cf:1d:d5:8a:27:24:e5:ee:53:66:
3f:57:3e:2d:48:d2:1f:bf:a6:9e:6b:c6:90:84:28:
c3:13:76:d7:19:be:21:98:86:eb:3c:a6:c8:72:ba:
0e:d6:2c:8e:61:2a:e7:44:1c:f6:a5:9b:ee:34:e6:
55:e2:d8:d7:43:19:fd:d1:b6:66:66:a6:b0:c3:a6:
af:46:86:c7:62:a0:ba:c5:ac:29:56:9a:d1:5d:f3:
9b:82:eb:55:e7:2f:b3:bc:22:e6:97:3f:0f:92:04:
c5:0b:3e:2e:fc:6b:7f:d9:c9:91:11:ee:dd:7b:16:
2e:8f:83:07:dd:16:8c:30:7f:3c:27:bd:77:d9:88:
05:50:ef:a0:b5:ad:e0:30:2a:70:7f:bb:4e:21:59:
1c:e1:af:d8:11:c0:1c:18:ef:7c:04:17:74:93:87:
72:a0:ae:a1:9b:6f:95:0c:dc:3b:02:fd:0b:dd:92:
6f:1b:67:c9:75:9b:c4:25:ed:b0:9f:d4:f0:41:f4:
17:8b:da:12:b5:f3:d8:e6:79:43:59:41:32:8f:19:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F5:62:D9:F9:81:F0:AB:96:56:AC:3D:67:D0:B7:3A:05:D2:00:F6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nfVi2fmB8KuWVqw9Z9C3OgXSAPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.108.0/24
82.109.151.0/24
87.83.2.0/24
87.83.46.0/24
87.83.174.0/24
87.84.220.0/24
87.85.232.0/24
87.85.255.0/24
212.134.17.0/24
212.134.37.0/24
212.134.41.0/24
212.134.48.0/24
212.134.51.0/24
212.134.56.0/24
212.134.123.0/24
212.134.140.0/24
212.134.142.0/24
212.134.148.0-212.134.152.255
212.134.170.0/24
212.134.176.0/24
212.134.190.0/23
212.134.199.0/24
212.134.205.0/24
212.134.218.0/24
212.134.228.0/24
212.134.232.0/24
212.134.239.0/24
212.134.248.0/23
212.135.21.0/24
212.135.27.0-212.135.28.255
212.135.145.0/24
212.135.151.0/24
212.135.156.0/24
212.135.160.0/24
212.135.165.0-212.135.166.255
212.135.170.0/24
212.135.172.0/23
212.135.198.0/24
212.135.240.0/24
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:f4:fb:03:ad:c5:1e:d2:12:4b:a0:a2:50:2b:25:fd:9d:6d:
95:bd:7b:43:7c:17:70:bb:4f:b6:4b:2f:57:33:49:8c:7f:ad:
bf:b2:8f:1b:1e:d5:01:16:f0:b6:f7:8c:6d:e6:f8:48:86:85:
53:3a:56:c9:75:52:dd:a9:37:48:2f:56:7c:db:1b:22:da:8d:
11:fb:3e:d6:1f:67:e4:9e:8e:56:2e:25:d3:73:c3:3f:46:be:
f2:6c:af:a5:f1:10:ba:12:b7:2b:ff:a8:f8:55:8f:d2:e1:39:
1b:49:e1:e8:97:e6:d1:b2:8e:ee:11:d3:dc:62:6d:11:ab:73:
be:92:3b:2a:17:24:9e:da:44:cb:cd:6e:08:87:08:36:ca:a2:
1b:98:ac:a9:21:c4:2f:a1:c3:db:d6:22:8d:ea:35:41:c5:fd:
79:7a:e7:2e:c7:eb:ea:e2:21:0a:5c:ba:bf:b1:30:2f:e9:ea:
e1:f2:e3:f1:59:71:84:e2:b9:5c:e4:d3:7b:5f:82:61:1f:9d:
10:54:21:c1:9f:6d:00:9b:e5:90:c2:0c:e9:79:9f:ef:28:40:
7b:2f:64:3a:3a:5f:24:1c:50:41:79:28:c2:b3:2a:d2:9c:00:
80:41:58:f0:81:e2:80:a6:8a:7b:c3:0d:06:0e:6c:ba:6d:8f:
6f:1b:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:34:23 2026 by rpki-client