Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9DUfkcs7MQoktVExK6zVXEDafyc.roa
File: 9DUfkcs7MQoktVExK6zVXEDafyc.roa (raw, json)
Hash identifier: WDf/FHeuSTtP/LjlZtBtGcmi4XKHeIxKguNb+VFQfCU=
Subject key identifier: F4:35:1F:91:CB:3B:31:0A:24:B5:51:31:2B:AC:D5:5C:40:DA:7F:27
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E92DB0FD45C4B83F8EF891D0BDA3349B4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9DUfkcs7MQoktVExK6zVXEDafyc.roa
Signing time: Thu 04 Jun 2026 13:38:10 +0000
ROA not before: Thu 04 Jun 2026 13:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 46.34.22.0/24 maxlen: 24
79.121.132.0/22 maxlen: 24
79.121.132.0/23 maxlen: 24
79.121.134.0/23 maxlen: 24
79.121.140.0/22 maxlen: 24
79.121.140.0/23 maxlen: 24
79.121.142.0/23 maxlen: 24
79.121.144.0/23 maxlen: 24
79.121.148.0/22 maxlen: 24
79.121.148.0/23 maxlen: 24
79.121.150.0/23 maxlen: 24
79.121.154.0/23 maxlen: 24
79.121.156.0/23 maxlen: 24
79.121.162.0/23 maxlen: 24
79.121.164.0/22 maxlen: 24
79.121.164.0/23 maxlen: 24
79.121.166.0/23 maxlen: 24
79.121.168.0/23 maxlen: 24
79.121.178.0/23 maxlen: 24
79.121.180.0/23 maxlen: 24
79.121.184.0/23 maxlen: 24
79.121.200.0/21 maxlen: 24
79.121.212.0/22 maxlen: 24
79.121.212.0/23 maxlen: 24
79.121.214.0/23 maxlen: 24
79.121.216.0/22 maxlen: 24
79.121.216.0/23 maxlen: 24
79.121.218.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.232.0/22 maxlen: 24
79.121.232.0/23 maxlen: 24
79.121.234.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
82.108.58.0/23 maxlen: 23
82.108.74.0/23 maxlen: 23
82.108.108.0/23 maxlen: 23
82.108.112.0/23 maxlen: 23
82.108.158.0/23 maxlen: 23
82.108.160.0/23 maxlen: 23
87.82.214.0/23 maxlen: 23
92.244.174.0/23 maxlen: 24
92.244.176.0/23 maxlen: 24
92.244.180.0/23 maxlen: 24
92.244.182.0/23 maxlen: 24
92.244.184.0/23 maxlen: 24
92.244.190.0/23 maxlen: 24
93.152.73.0/24 maxlen: 24
93.152.87.0/24 maxlen: 24
95.177.0.0/23 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.20.0/23 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.64.0/23 maxlen: 24
95.177.68.0/22 maxlen: 24
95.177.68.0/23 maxlen: 24
95.177.70.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
95.177.76.0/22 maxlen: 24
95.177.76.0/23 maxlen: 24
95.177.78.0/23 maxlen: 24
95.177.80.0/22 maxlen: 24
95.177.80.0/23 maxlen: 24
95.177.82.0/23 maxlen: 24
95.177.104.0/22 maxlen: 24
95.177.104.0/23 maxlen: 24
95.177.106.0/23 maxlen: 24
95.177.114.0/23 maxlen: 24
95.177.124.0/22 maxlen: 24
95.177.124.0/23 maxlen: 24
95.177.126.0/23 maxlen: 24
109.174.176.0/22 maxlen: 24
109.174.180.0/22 maxlen: 24
109.174.184.0/22 maxlen: 24
109.174.188.0/22 maxlen: 24
109.204.6.0/23 maxlen: 24
109.204.12.0/23 maxlen: 24
109.204.20.0/23 maxlen: 24
109.204.28.0/23 maxlen: 24
109.204.32.0/23 maxlen: 24
109.204.40.0/23 maxlen: 24
109.204.44.0/23 maxlen: 24
109.204.50.0/23 maxlen: 24
109.204.54.0/23 maxlen: 24
109.204.58.0/23 maxlen: 24
109.204.60.0/23 maxlen: 24
109.204.72.0/23 maxlen: 24
109.204.82.0/23 maxlen: 24
109.204.92.0/23 maxlen: 24
109.204.95.0/24 maxlen: 24
109.204.101.0/24 maxlen: 24
109.204.112.0/23 maxlen: 24
109.204.120.0/23 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 23
195.40.26.0/23 maxlen: 24
195.40.28.0/23 maxlen: 23
195.40.30.0/23 maxlen: 24
195.40.86.0/24 maxlen: 24
195.40.100.0/23 maxlen: 24
195.40.114.0/23 maxlen: 24
195.40.116.0/23 maxlen: 23
195.40.118.0/23 maxlen: 24
195.40.162.0/23 maxlen: 23
195.40.166.0/23 maxlen: 24
195.40.180.0/24 maxlen: 24
195.40.188.0/23 maxlen: 23
195.172.98.0/23 maxlen: 23
195.172.102.0/23 maxlen: 24
195.172.110.0/23 maxlen: 24
195.172.112.0/23 maxlen: 24
195.172.124.0/24 maxlen: 24
195.172.134.0/23 maxlen: 23
195.172.204.0/23 maxlen: 24
195.172.212.0/23 maxlen: 23
195.172.214.0/23 maxlen: 24
195.172.216.0/23 maxlen: 24
195.172.218.0/23 maxlen: 24
195.172.220.0/23 maxlen: 24
195.172.222.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.134.65.0/24 maxlen: 24
212.134.72.0/23 maxlen: 23
212.134.78.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 23
212.135.5.0/24 maxlen: 24
212.135.10.0/23 maxlen: 24
212.135.174.0/24 maxlen: 24
212.135.178.0/24 maxlen: 24
212.135.190.0/23 maxlen: 24
212.135.236.0/23 maxlen: 24
217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:db:0f:d4:5c:4b:83:f8:ef:89:1d:0b:da:33:49:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 4 13:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4351f91cb3b310a24b551312bacd55c40da7f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:62:de:13:fc:95:be:6d:3e:1d:be:54:56:
1a:3e:d4:25:de:72:c8:f6:1c:9b:8e:7a:31:fd:24:
b7:82:27:15:68:e6:02:13:47:f0:e5:4f:3a:19:6f:
47:82:c2:89:8b:8d:51:e5:a3:d2:87:b9:aa:1e:a3:
5c:07:f3:b5:2d:b1:af:53:4e:a1:8c:12:63:3c:95:
e1:9a:eb:5f:89:e9:c8:3b:13:d1:a5:35:06:4d:ef:
3f:e5:c3:46:58:20:cd:05:16:3c:47:aa:fd:55:8e:
02:14:4d:02:79:c5:c5:ba:d6:86:c7:87:7b:f5:64:
c5:00:f7:5e:48:2a:37:2b:5d:cd:72:ea:f1:83:34:
ac:16:20:9d:c4:6e:b9:13:39:2c:08:98:28:c7:84:
33:79:af:69:48:c0:19:14:ab:39:71:ff:60:b0:f0:
4e:15:20:6a:12:3e:ae:10:0a:33:0b:a5:27:d7:e2:
51:9b:4a:ee:8d:cf:6c:b4:9e:e9:69:47:5f:e4:4b:
98:48:83:39:56:b1:04:bf:2b:60:1a:8d:23:cb:16:
fb:7c:1a:c4:64:d9:84:4f:77:cc:c4:1e:c6:c8:af:
c5:82:f2:59:f8:95:99:90:51:de:42:ec:f0:a4:88:
b2:33:f7:f8:99:ec:55:46:22:e7:e1:d1:80:85:23:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:35:1F:91:CB:3B:31:0A:24:B5:51:31:2B:AC:D5:5C:40:DA:7F:27
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9DUfkcs7MQoktVExK6zVXEDafyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.22.0/24
79.121.132.0/22
79.121.140.0-79.121.145.255
79.121.148.0/22
79.121.154.0-79.121.157.255
79.121.162.0-79.121.169.255
79.121.178.0-79.121.181.255
79.121.184.0/23
79.121.200.0/21
79.121.212.0-79.121.219.255
79.121.222.0/23
79.121.226.0/23
79.121.232.0/22
79.121.238.0/23
82.108.58.0/23
82.108.74.0/23
82.108.108.0/23
82.108.112.0/23
82.108.158.0-82.108.161.255
87.82.214.0/23
92.244.174.0-92.244.177.255
92.244.180.0-92.244.185.255
92.244.190.0/23
93.152.73.0/24
93.152.87.0/24
95.177.0.0/23
95.177.8.0/23
95.177.20.0/23
95.177.54.0/23
95.177.64.0/23
95.177.68.0-95.177.73.255
95.177.76.0-95.177.83.255
95.177.104.0/22
95.177.114.0/23
95.177.124.0/22
109.174.176.0/20
109.204.6.0/23
109.204.12.0/23
109.204.20.0/23
109.204.28.0/23
109.204.32.0/23
109.204.40.0/23
109.204.44.0/23
109.204.50.0/23
109.204.54.0/23
109.204.58.0-109.204.61.255
109.204.72.0/23
109.204.82.0/23
109.204.92.0/23
109.204.95.0/24
109.204.101.0/24
109.204.112.0/23
109.204.120.0/23
109.204.124.0/23
195.40.18.0/23
195.40.26.0-195.40.31.255
195.40.86.0/24
195.40.100.0/23
195.40.114.0-195.40.119.255
195.40.162.0/23
195.40.166.0/23
195.40.180.0/24
195.40.188.0/23
195.172.98.0/23
195.172.102.0/23
195.172.110.0-195.172.113.255
195.172.124.0/24
195.172.134.0/23
195.172.204.0/23
195.172.212.0-195.172.223.255
212.134.11.0/24
212.134.65.0/24
212.134.72.0/23
212.134.78.0/24
212.135.0.0/24
212.135.2.0/23
212.135.5.0/24
212.135.10.0/23
212.135.174.0/24
212.135.178.0/24
212.135.190.0/23
212.135.236.0/23
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:ee:ae:05:b6:c9:7e:05:bf:ad:71:63:69:6d:70:46:bc:c4:
a5:3b:53:1d:0f:9c:dc:06:50:58:ea:fd:30:30:a0:ac:6b:b8:
b6:5b:ba:b5:05:f1:09:c1:a0:28:b0:be:69:80:df:e3:3d:70:
a3:1b:34:6d:ff:7f:0f:6f:a1:c8:c0:92:74:f8:9a:01:06:41:
ec:39:33:8c:a9:bf:8f:d7:12:f8:e5:24:79:9f:c5:cb:ca:ca:
4b:4e:fb:a2:5d:72:d8:21:68:64:bf:52:2e:52:e3:f7:89:23:
ae:b2:2b:30:78:9a:f3:46:91:04:de:6a:eb:1d:bd:6f:b8:50:
a0:c3:d4:d9:ae:33:36:50:6a:b0:7e:12:2e:6c:31:39:3a:57:
18:ff:e4:c6:b3:54:a1:74:78:b9:27:22:34:bb:13:18:23:d8:
da:43:9d:16:3c:9f:bf:ec:64:e3:86:31:b5:66:ac:16:9f:08:
bd:b4:7d:72:ec:48:ab:54:18:3b:1f:97:77:b6:43:e7:af:0b:
eb:9a:a4:59:5c:f5:fb:99:55:14:1a:fa:e6:e9:43:57:bf:d7:
6d:d1:68:1c:27:49:e8:0b:f5:cc:24:08:55:6a:3d:f6:f9:fe:
79:f1:9c:4d:f9:d4:ea:d7:26:3d:5a:ec:6c:84:ae:ad:a3:1d:
82:da:82:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:28 2026 by rpki-client