Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ydvH1dbi55En8fe7r5an6vmAgfA.roa
File: ydvH1dbi55En8fe7r5an6vmAgfA.roa (raw, json)
Hash identifier: ZjHAGrAoTYpJ47RT+cQBJGQZc4ZxdR/+9Ca4LJ47dsY=
Subject key identifier: C9:DB:C7:D5:D6:E2:E7:91:27:F1:F7:BB:AF:96:A7:EA:F9:80:81:F0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C99DF73C862AEB0D1D82FD01079C224C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ydvH1dbi55En8fe7r5an6vmAgfA.roa
Signing time: Tue 22 Sep 2026 14:56:07 +0000
ROA not before: Tue 22 Sep 2026 14:56:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 82.109.151.0/24 maxlen: 24
87.82.62.0/24 maxlen: 24
87.83.47.0/24 maxlen: 24
87.83.115.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
212.134.16.0/24 maxlen: 24
212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.99.0/24 maxlen: 24
212.134.104.0/24 maxlen: 24
212.134.110.0/24 maxlen: 24
212.134.120.0/24 maxlen: 24
212.134.134.0/24 maxlen: 24
212.134.136.0/24 maxlen: 24
212.134.143.0/24 maxlen: 24
212.134.160.0/24 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.181.0/24 maxlen: 24
212.134.185.0/24 maxlen: 24
212.134.202.0/24 maxlen: 24
212.134.219.0/24 maxlen: 24
212.134.233.0/24 maxlen: 24
212.134.234.0/24 maxlen: 24
212.134.237.0/24 maxlen: 24
212.134.238.0/24 maxlen: 24
212.134.244.0/24 maxlen: 24
212.134.246.0/24 maxlen: 24
212.134.251.0/24 maxlen: 24
212.135.140.0/24 maxlen: 24
212.135.141.0/24 maxlen: 24
212.135.150.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.168.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.242.0/24 maxlen: 24
212.135.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:9d:f7:3c:86:2a:eb:0d:1d:82:fd:01:07:9c:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 14:56:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9dbc7d5d6e2e79127f1f7bbaf96a7eaf98081f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:8d:cd:74:3e:60:55:40:85:71:8c:39:fb:
37:3a:91:08:25:5c:61:58:f4:50:d7:92:f7:e3:e0:
9b:30:47:44:3f:45:85:1e:61:d9:64:77:22:a8:e2:
0e:33:2d:39:6b:a9:bd:92:83:f8:db:1c:71:13:c7:
5f:62:5b:1c:41:ef:93:5a:17:06:65:25:92:3c:4c:
ac:60:31:7d:4e:91:e7:c5:ad:11:6b:c0:e9:79:c2:
69:42:66:86:9d:39:b6:67:6f:bd:60:1e:30:32:e4:
4f:4a:52:30:79:4f:9d:68:07:7a:8d:cd:c5:ac:42:
0b:2e:29:3c:c4:4c:19:25:e8:e2:7a:e3:55:3a:75:
34:01:76:36:e3:ea:a7:ef:94:12:7d:24:1b:04:72:
35:6e:84:48:84:09:1c:c7:25:27:b0:6e:b9:5d:2f:
92:a4:7f:3c:b6:ea:31:45:31:38:66:e4:5e:85:29:
e9:b5:18:10:ef:ef:e3:d4:b8:77:6f:4d:7d:86:5c:
71:82:b0:30:bc:4d:f9:68:f5:d0:43:27:51:1f:3a:
52:ed:fa:6a:e2:a8:4c:72:d7:0b:6b:05:f8:53:8c:
a7:d8:38:78:48:1c:37:78:40:0f:e3:ff:e3:66:01:
d8:8d:31:ac:15:b9:28:31:a5:94:ba:f2:63:59:7e:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DB:C7:D5:D6:E2:E7:91:27:F1:F7:BB:AF:96:A7:EA:F9:80:81:F0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ydvH1dbi55En8fe7r5an6vmAgfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.151.0/24
87.82.62.0/24
87.83.47.0/24
87.83.115.0/24
87.84.64.0/24
212.134.16.0/24
212.134.18.0/23
212.134.22.0/24
212.134.24.0/24
212.134.58.0/23
212.134.80.0/24
212.134.83.0/24
212.134.99.0/24
212.134.104.0/24
212.134.110.0/24
212.134.120.0/24
212.134.134.0/24
212.134.136.0/24
212.134.143.0/24
212.134.160.0/24
212.134.171.0/24
212.134.175.0-212.134.176.255
212.134.181.0/24
212.134.185.0/24
212.134.202.0/24
212.134.219.0/24
212.134.233.0-212.134.234.255
212.134.237.0-212.134.238.255
212.134.244.0/24
212.134.246.0/24
212.134.251.0/24
212.135.140.0/23
212.135.150.0/24
212.135.158.0/24
212.135.168.0/24
212.135.171.0/24
212.135.242.0/24
212.135.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c7:de:cb:19:ad:b0:5c:46:72:73:ce:e6:a8:ba:74:1f:15:
c8:7d:d8:4a:15:a5:57:c4:e0:98:b2:39:85:47:24:49:cf:cb:
ad:74:eb:a2:d1:65:0c:ff:14:5a:39:4d:3f:85:77:ea:3b:c9:
e1:33:39:0c:8a:f8:fc:fb:df:66:84:cc:56:a3:47:0a:d0:e0:
c5:9a:3b:a7:0a:26:72:2e:21:69:b6:2b:f8:f5:7f:6a:40:44:
88:66:a1:a0:9f:b3:3b:53:06:8f:7f:f1:6b:57:7c:09:9a:07:
85:13:db:a5:50:54:11:a2:14:e5:f9:a8:45:91:0d:ff:ea:5d:
c9:1f:25:f8:7a:2f:d9:44:d7:c2:41:fd:17:65:aa:34:67:4b:
e6:4c:49:ad:b6:bc:2d:ec:fd:fd:aa:9e:13:71:0a:7a:4d:8a:
bb:36:e5:75:32:b1:80:54:5f:46:48:6d:e7:65:29:2e:cc:c5:
c7:0f:c6:17:8f:79:37:fb:0e:2a:5e:7b:1f:c1:f5:f4:7f:93:
05:62:11:ad:70:44:cd:50:04:e4:54:11:94:08:e2:d7:ef:60:
e7:9e:eb:55:11:70:83:3a:74:3d:c8:7f:d3:99:f7:d5:66:f4:
67:62:fd:f1:1f:17:a0:29:47:82:ea:33:13:6c:e3:41:fc:5d:
82:82:64:fd
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISAaDJnfc8hirrDR2C/QEHnCJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTIyMTQ1NjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWRiYzdkNWQ2ZTJlNzkxMjdmMWY3YmJhZjk2YTdlYWY5ODA4MWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZCNzXQ+YFVAhXGMOfs3OpEIJVxh
WPRQ15L34+CbMEdEP0WFHmHZZHciqOIOMy05a6m9koP42xxxE8dfYlscQe+TWhcG
ZSWSPEysYDF9TpHnxa0Ra8DpecJpQmaGnTm2Z2+9YB4wMuRPSlIweU+daAd6jc3F
rEILLik8xEwZJejieuNVOnU0AXY24+qn75QSfSQbBHI1boRIhAkcxyUnsG65XS+S
pH88tuoxRTE4ZuRehSnptRgQ7+/j1Lh3b019hlxxgrAwvE35aPXQQydRHzpS7fpq
4qhMctcLawX4U4yn2Dh4SBw3eEAP4//jZgHYjTGsFbkoMaWUuvJjWX6yiwIDAQAB
o4IDCDCCAwQwHQYDVR0OBBYEFMnbx9XW4ueRJ/H3u6+Wp+r5gIHwMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEveWR2SDFkYmk1NUVuOGZlN3I1YW42dm1BZ2ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCCAQMEAgABMIH8
AwQAUm2XAwQAV1I+AwQAV1MvAwQAV1NzAwQAV1RAAwQA1IYQAwQB1IYSAwQA1IYW
AwQA1IYYAwQB1IY6AwQA1IZQAwQA1IZTAwQA1IZjAwQA1IZoAwQA1IZuAwQA1IZ4
AwQA1IaGAwQA1IaIAwQA1IaPAwQA1IagAwQA1IarMAwDBADUhq8DBADUhrADBADU
hrUDBADUhrkDBADUhsoDBADUhtswDAMEANSG6QMEANSG6jAMAwQA1IbtAwQA1Ibu
AwQA1Ib0AwQA1Ib2AwQA1Ib7AwQB1IeMAwQA1IeWAwQA1IeeAwQA1IeoAwQA1Ier
AwQA1IfyAwQA1If6MA0GCSqGSIb3DQEBCwUAA4IBAQBbx97LGa2wXEZyc87mqLp0
HxXIfdhKFaVXxOCYsjmFRyRJz8utdOui0WUM/xRaOU0/hXfqO8nhMzkMivj8+99m
hMxWo0cK0ODFmjunCiZyLiFptiv49X9qQESIZqGgn7M7UwaPf/FrV3wJmgeFE9ul
UFQRohTl+ahFkQ3/6l3JHyX4ei/ZRNfCQf0XZao0Z0vmTEmttrwt7P39qp4TcQp6
TYq7NuV1MrGAVF9GSG3nZSkuzMXHD8YXj3k3+w4qXnsfwfX0f5MFYhGtcETNUATk
VBGUCOLX72DnnutVEXCDOnQ9yH/TmffVZvRnYv3xHxegKUeC6jMTbONB/F2CgmT9
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:08:50 2026 by rpki-client