Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/A8_x8QE5BwSfzFY0jpu65OgM9Uw.roa
File: A8_x8QE5BwSfzFY0jpu65OgM9Uw.roa (raw, json)
Hash identifier: uPcLyZWGgNrsoFaHZec30uHkPWJD/vuZkhzXLcyKA+E=
Subject key identifier: 03:CF:F1:F1:01:39:07:04:9F:CC:56:34:8E:9B:BA:E4:E8:0C:F5:4C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E92B6710F8A7A7D767C32B04B09370F58
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/A8_x8QE5BwSfzFY0jpu65OgM9Uw.roa
Signing time: Thu 04 Jun 2026 12:58:10 +0000
ROA not before: Thu 04 Jun 2026 12:58:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.34.0.0/24 maxlen: 24
212.134.134.0/23 maxlen: 24
212.134.144.0/22 maxlen: 22
212.134.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:b6:71:0f:8a:7a:7d:76:7c:32:b0:4b:09:37:0f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 4 12:58:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03cff1f1013907049fcc56348e9bbae4e80cf54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:68:ba:06:3a:a8:f4:68:b7:74:07:c4:45:
c9:1c:d3:c5:6e:71:d0:71:73:cc:f3:da:58:49:d5:
f4:91:d0:56:8d:2c:96:c5:8f:5e:4a:d7:20:27:d4:
1d:02:58:ad:30:30:8a:07:7d:af:53:82:ef:c9:bb:
15:ae:28:4a:ff:1f:dc:8e:82:11:4f:75:89:f4:95:
52:c1:54:02:31:36:8a:dc:c7:87:1b:33:7b:40:9a:
80:33:4a:ca:7d:b7:a1:b0:e0:c5:d2:c4:e0:58:8a:
23:a4:80:92:89:5a:00:c6:0d:31:b4:2b:66:b8:df:
bc:4c:39:f1:d4:9a:b9:a0:ac:08:93:3f:95:ce:d8:
ea:ed:bb:0e:ba:3f:35:0e:20:8e:13:29:e9:11:78:
ae:db:30:b6:bb:95:d2:99:fc:1b:ab:d2:61:78:92:
bd:36:e5:6c:14:6c:12:a4:00:f7:19:bb:f8:22:35:
76:b5:e6:47:1c:e7:f3:6a:6a:0f:97:c6:12:3c:14:
4a:d6:59:30:e4:86:58:06:24:d4:30:b4:00:db:4c:
3a:be:cf:f7:da:6b:f3:12:11:98:45:07:3a:c6:2a:
d4:90:34:b9:66:d8:8f:a0:f9:ad:7c:34:ce:6f:1b:
d8:07:d0:cd:6e:be:fb:e4:e0:c1:99:50:47:bd:8d:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:F1:F1:01:39:07:04:9F:CC:56:34:8E:9B:BA:E4:E8:0C:F5:4C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/A8_x8QE5BwSfzFY0jpu65OgM9Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
212.134.134.0/23
212.134.144.0/22
212.134.180.0/23
Signature Algorithm: sha256WithRSAEncryption
48:a5:33:e9:ca:9e:8b:5d:15:49:24:47:32:cd:4a:38:96:76:
3a:11:04:db:0e:e6:b9:e0:d2:ad:d7:8c:e5:7b:b4:29:ab:ba:
f8:c4:b3:cb:e7:bb:f2:4a:92:a1:3a:3f:4b:0a:e7:73:26:32:
5f:b1:86:6b:cf:a7:94:d8:91:aa:10:af:73:19:dd:c2:07:6e:
98:64:88:4f:04:f0:2f:8f:24:03:92:24:da:c5:4f:e9:83:25:
01:49:62:67:db:cd:78:bd:f1:e7:18:b7:90:34:92:84:6c:80:
27:c0:d0:16:17:10:a2:17:d4:3d:5a:d0:21:a4:c1:f5:88:03:
f7:cb:d0:30:49:ae:51:56:e2:db:0c:af:51:5b:df:98:81:b9:
9c:91:d5:65:9e:90:e4:1a:79:9c:d5:6a:11:0e:75:ac:6a:86:
ad:e3:17:6b:14:9d:25:5a:e8:3a:45:04:08:79:55:9f:e5:c9:
69:93:82:db:3b:c1:ed:c4:bb:3f:11:c3:73:44:a7:76:7e:f4:
8f:ce:8a:de:f0:23:8d:1e:75:5b:e6:c2:71:92:ac:fe:76:7c:
52:89:2d:a4:50:72:ac:06:5b:8b:4a:ed:f1:d2:94:2e:a5:55:
ce:3c:74:31:bd:0c:a6:a1:d0:90:d4:b6:f4:7c:3c:e8:92:b1:
2d:2e:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:21:28 2026 by rpki-client