Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/D3OM_STnrqDOerWA1_VBXsX2fPg.roa
File: D3OM_STnrqDOerWA1_VBXsX2fPg.roa (raw, json)
Hash identifier: xLHcaLtA9XX88ZOPmOq3EXDHU2YVQVrEm74Bl1j8lic=
Subject key identifier: 0F:73:8C:FD:24:E7:AE:A0:CE:7A:B5:80:D7:F5:41:5E:C5:F6:7C:F8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EA60BC8EA030F40DC7E31A29D3D57339D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/D3OM_STnrqDOerWA1_VBXsX2fPg.roa
Signing time: Mon 08 Jun 2026 07:04:10 +0000
ROA not before: Mon 08 Jun 2026 07:04:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 46.34.3.0/24 maxlen: 24
46.34.16.0/24 maxlen: 24
46.34.29.0/24 maxlen: 24
82.108.40.0/23 maxlen: 24
82.108.196.0/23 maxlen: 24
82.108.216.0/22 maxlen: 24
82.109.12.0/22 maxlen: 24
82.109.62.0/23 maxlen: 24
82.109.70.0/23 maxlen: 24
82.109.160.0/22 maxlen: 24
82.109.186.0/23 maxlen: 24
82.109.190.0/23 maxlen: 24
82.109.204.0/23 maxlen: 24
82.109.224.0/22 maxlen: 24
82.110.56.0/22 maxlen: 24
82.110.96.0/23 maxlen: 24
82.110.106.0/23 maxlen: 24
82.110.114.0/23 maxlen: 24
82.110.236.0/22 maxlen: 24
87.82.233.0/24 maxlen: 24
87.82.234.0/24 maxlen: 24
87.83.46.0/23 maxlen: 24
87.83.92.0/22 maxlen: 24
87.83.171.0/24 maxlen: 24
87.83.172.0/23 maxlen: 24
87.83.233.0/24 maxlen: 24
87.83.234.0/24 maxlen: 24
87.84.77.0/24 maxlen: 24
87.84.140.0/22 maxlen: 24
87.84.176.0/22 maxlen: 24
87.84.188.0/22 maxlen: 24
87.84.216.0/24 maxlen: 24
87.84.217.0/24 maxlen: 24
87.84.221.0/24 maxlen: 24
87.84.222.0/23 maxlen: 24
87.84.233.0/24 maxlen: 24
87.84.234.0/24 maxlen: 24
87.84.238.0/24 maxlen: 24
87.85.136.0/24 maxlen: 24
87.85.137.0/24 maxlen: 24
87.85.141.0/24 maxlen: 24
87.85.142.0/24 maxlen: 24
87.86.96.0/22 maxlen: 24
87.86.252.0/24 maxlen: 24
109.204.104.0/21 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.158.0/24 maxlen: 24
212.134.160.0/23 maxlen: 24
212.134.192.0/22 maxlen: 24
212.134.216.0/22 maxlen: 24
212.135.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:0b:c8:ea:03:0f:40:dc:7e:31:a2:9d:3d:57:33:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 8 07:04:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f738cfd24e7aea0ce7ab580d7f5415ec5f67cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:21:57:72:b6:e6:9d:4a:4d:13:0c:b9:a4:
1b:5f:71:fb:c5:04:68:35:68:ae:c7:18:ab:c9:80:
0b:0c:9a:36:a7:6b:7b:14:a9:22:e2:b6:76:af:c4:
d3:f3:4a:18:a2:da:12:b0:bc:71:36:e9:65:c1:5e:
bf:70:ee:3f:5f:c2:25:13:0e:11:01:3b:de:95:1b:
a6:2a:0f:77:e2:93:0b:d3:ae:11:00:de:2f:3d:dd:
2c:6a:8a:b2:c7:37:02:7c:79:42:77:c4:1f:13:39:
c3:60:b9:15:85:83:f9:68:44:08:92:9c:59:fc:bf:
41:80:03:73:27:73:9a:7a:06:e8:7e:d4:6c:40:13:
4e:cf:55:12:61:22:a3:04:23:39:bd:74:fc:9b:ab:
80:59:d6:b1:98:a2:25:46:bc:51:86:91:7c:a2:f2:
0e:cb:4f:6a:80:05:b7:21:48:ff:6a:63:11:ed:63:
b4:e3:4f:f5:0d:2a:15:43:59:34:8d:6c:9d:57:5f:
59:f5:cf:5d:6d:48:f9:e4:06:1c:5b:58:19:74:b2:
4c:4f:2b:c6:98:3f:63:63:fb:26:e2:4c:19:40:b3:
b1:4f:bb:4c:b3:79:f3:f0:ed:55:e8:46:42:8c:e9:
25:5e:45:99:f7:c2:75:b1:0a:92:a1:1c:10:6f:55:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:73:8C:FD:24:E7:AE:A0:CE:7A:B5:80:D7:F5:41:5E:C5:F6:7C:F8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/D3OM_STnrqDOerWA1_VBXsX2fPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.3.0/24
46.34.16.0/24
46.34.29.0/24
82.108.40.0/23
82.108.196.0/23
82.108.216.0/22
82.109.12.0/22
82.109.62.0/23
82.109.70.0/23
82.109.160.0/22
82.109.186.0/23
82.109.190.0/23
82.109.204.0/23
82.109.224.0/22
82.110.56.0/22
82.110.96.0/23
82.110.106.0/23
82.110.114.0/23
82.110.236.0/22
87.82.233.0-87.82.234.255
87.83.46.0/23
87.83.92.0/22
87.83.171.0-87.83.173.255
87.83.233.0-87.83.234.255
87.84.77.0/24
87.84.140.0/22
87.84.176.0/22
87.84.188.0/22
87.84.216.0/23
87.84.221.0-87.84.223.255
87.84.233.0-87.84.234.255
87.84.238.0/24
87.85.136.0/23
87.85.141.0-87.85.142.255
87.86.96.0/22
87.86.252.0/24
109.204.104.0/21
212.134.38.0/24
212.134.59.0/24
212.134.116.0/22
212.134.158.0/24
212.134.160.0/23
212.134.192.0/22
212.134.216.0/22
212.135.159.0/24
Signature Algorithm: sha256WithRSAEncryption
89:cd:04:ed:a2:63:3c:4b:ea:23:66:70:cf:a6:1c:f6:76:ac:
8c:ec:4f:81:96:66:ba:30:d3:b2:d0:b4:f5:e6:54:7f:05:fa:
e8:36:1b:d9:6f:3a:2b:7b:5c:c1:58:ef:6e:5d:2b:1a:0b:3d:
b0:dd:d2:a1:b9:e3:5c:98:fd:1c:cb:7b:a8:46:57:33:2b:aa:
bd:f1:95:ab:8d:0c:53:8e:78:f6:ca:a9:30:a7:79:e8:09:f7:
32:32:19:9e:71:59:6a:17:b5:63:3e:76:08:a2:2c:ba:a2:a9:
9a:23:de:d6:d6:e2:13:22:04:bb:3c:11:b3:f2:6a:d1:b0:8e:
1f:14:51:34:d0:72:a6:19:c6:46:ae:1a:7a:69:7b:68:38:ab:
72:ea:7d:7b:17:62:21:2b:98:72:d6:37:23:96:50:c6:e4:57:
c4:d4:4d:82:95:cb:0f:13:f7:22:dc:5a:c8:e7:1f:31:fb:d2:
fd:45:d7:a6:66:f1:73:19:c5:67:cf:5b:a1:89:65:3c:0c:96:
2b:12:45:1e:4d:e2:ce:c2:3b:64:98:84:fa:83:5f:67:5c:a9:
d5:61:05:d9:62:3d:3a:ce:be:23:59:b5:54:d6:c8:ca:4a:ba:
01:79:7d:93:ad:49:c4:9a:57:4a:a4:89:4a:55:3a:f1:5c:70:
0e:c7:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:16 2026 by rpki-client