Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T8IA3MY0GIBMQhHMW9McABQAgpw.roa
File: T8IA3MY0GIBMQhHMW9McABQAgpw.roa (raw, json)
Hash identifier: xeWhSYoe1ysqDIZ+bylU7RdiCN4Sp+ZJpwqyDJPhYR0=
Subject key identifier: 4F:C2:00:DC:C6:34:18:80:4C:42:11:CC:5B:D3:1C:00:14:00:82:9C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EB5EE93F0EF01DDD49D0294BE49B9DF20
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T8IA3MY0GIBMQhHMW9McABQAgpw.roa
Signing time: Thu 11 Jun 2026 09:06:12 +0000
ROA not before: Thu 11 Jun 2026 09:06:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 79.121.200.0/21 maxlen: 21
82.110.32.0/20 maxlen: 20
85.189.72.0/21 maxlen: 24
86.53.152.0/21 maxlen: 24
86.53.160.0/22 maxlen: 24
86.53.180.0/22 maxlen: 24
86.53.184.0/21 maxlen: 24
87.86.48.0/20 maxlen: 24
87.86.190.0/24 maxlen: 24
95.177.63.0/24 maxlen: 24
95.177.67.0/24 maxlen: 24
95.177.74.0/24 maxlen: 24
95.177.85.0/24 maxlen: 24
194.6.104.0/21 maxlen: 24
195.40.22.0/23 maxlen: 23
195.40.24.0/23 maxlen: 23
195.72.176.0/21 maxlen: 24
212.134.20.0/24 maxlen: 24
212.134.27.0/24 maxlen: 24
212.135.6.0/23 maxlen: 23
212.135.68.0/22 maxlen: 22
213.177.226.0/23 maxlen: 24
213.177.230.0/23 maxlen: 24
213.177.234.0/23 maxlen: 24
213.177.238.0/23 maxlen: 24
213.177.242.0/23 maxlen: 24
213.177.246.0/23 maxlen: 24
213.177.250.0/23 maxlen: 24
213.177.252.0/24 maxlen: 24
213.177.253.0/24 maxlen: 24
213.177.254.0/24 maxlen: 24
213.177.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:ee:93:f0:ef:01:dd:d4:9d:02:94:be:49:b9:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 11 09:06:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fc200dcc63418804c4211cc5bd31c001400829c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:eb:e6:a1:4a:27:17:73:1d:03:2c:d4:60:
77:e3:9e:12:c4:15:48:91:b2:ae:f1:31:b4:51:38:
a8:73:26:64:3b:07:c6:31:a5:82:09:66:0c:e2:6f:
06:92:80:d3:bd:a8:71:64:08:83:51:5a:09:8d:80:
ae:12:11:2f:9b:d0:2e:79:40:40:70:8f:57:92:2f:
b6:50:dc:b3:40:3d:2b:eb:0a:48:7e:f9:13:6c:08:
57:40:24:a5:8b:0c:54:b1:38:53:35:75:a5:03:1e:
43:26:57:b2:ad:bf:f7:d6:c9:7f:99:6d:b6:cd:0e:
02:a3:71:92:4c:25:a0:c3:02:73:33:e7:0c:ae:ef:
26:d9:4f:b6:f0:a6:fe:6f:32:6d:7b:6b:13:73:63:
a9:90:1a:e5:a3:40:69:18:7a:be:aa:10:f4:be:36:
ea:29:67:f5:0f:de:a5:ac:b6:41:ed:c4:e6:bb:2f:
f9:be:37:9b:39:9d:3b:df:82:9e:51:5c:cd:d0:18:
1a:70:0e:ca:a3:11:eb:5f:06:43:c1:f7:11:b2:89:
37:9d:a2:5c:8f:1e:c2:d2:5e:d4:62:58:4b:45:2c:
97:00:2f:40:cd:75:3f:c8:81:b1:ee:bd:cb:85:b9:
23:a6:ef:b0:5d:4e:e4:f5:e8:9d:4b:0f:fb:0f:2a:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:00:DC:C6:34:18:80:4C:42:11:CC:5B:D3:1C:00:14:00:82:9C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T8IA3MY0GIBMQhHMW9McABQAgpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.200.0/21
82.110.32.0/20
85.189.72.0/21
86.53.152.0-86.53.163.255
86.53.180.0-86.53.191.255
87.86.48.0/20
87.86.190.0/24
95.177.63.0/24
95.177.67.0/24
95.177.74.0/24
95.177.85.0/24
194.6.104.0/21
195.40.22.0-195.40.25.255
195.72.176.0/21
212.134.20.0/24
212.134.27.0/24
212.135.6.0/23
212.135.68.0/22
213.177.226.0/23
213.177.230.0/23
213.177.234.0/23
213.177.238.0/23
213.177.242.0/23
213.177.246.0/23
213.177.250.0-213.177.255.255
Signature Algorithm: sha256WithRSAEncryption
3f:20:65:e4:62:b0:06:97:ec:a4:6c:f9:9f:27:3c:54:53:56:
36:07:ed:60:de:88:b2:56:1e:ba:d2:7f:e3:15:17:26:89:f6:
8b:8f:c1:ea:31:d7:f5:36:3c:1d:e3:63:44:e8:99:42:1a:a7:
a6:27:62:c5:12:ce:68:4d:6e:33:37:f8:fa:91:27:42:f7:ef:
c6:b1:bf:02:f2:d8:14:7d:85:06:81:ff:d5:b8:68:62:a2:eb:
8c:b0:75:c2:d0:1b:44:66:50:5c:2c:4f:e4:08:85:9b:73:43:
59:fa:15:30:38:60:95:9b:cf:ba:fd:35:43:7a:d6:a4:62:14:
c5:2e:04:52:04:ff:aa:5a:6f:3c:0f:e4:b3:39:c4:77:40:c8:
7a:bc:4f:37:01:8f:e1:77:21:c8:1f:ab:cd:d8:07:99:3c:50:
fe:3d:0a:f4:ce:62:78:6a:3e:5c:f1:14:2a:55:dd:ee:41:cd:
4c:1a:bb:69:b1:f4:5f:49:10:f5:63:42:cc:44:67:c2:ba:c4:
6d:58:72:a0:16:94:b0:0f:45:60:b6:4d:fa:a3:2d:68:f3:16:
92:c2:25:82:69:4d:42:73:dd:aa:82:c6:25:34:a1:8c:61:3c:
eb:9e:9f:74:a6:c3:0c:4f:04:1c:1d:be:d8:06:e3:b4:05:6d:
8d:28:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:29 2026 by rpki-client