Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aSdtZMwzd3jmsClZ83AUmDkkP9Q.roa
File: aSdtZMwzd3jmsClZ83AUmDkkP9Q.roa (raw, json)
Hash identifier: RHm3b5eXlp33vTbRP3N1rIePgWXzPpUOEW/RjOLBykY=
Subject key identifier: 69:27:6D:64:CC:33:77:78:E6:B0:29:59:F3:70:14:98:39:24:3F:D4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0AF1DEBBF97795B6CD39558B67CB52040
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aSdtZMwzd3jmsClZ83AUmDkkP9Q.roa
Signing time: Thu 17 Sep 2026 11:26:08 +0000
ROA not before: Thu 17 Sep 2026 11:26:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.34.0.0/24 maxlen: 24
82.108.123.0/24 maxlen: 24
82.108.210.0/24 maxlen: 24
82.110.54.0/23 maxlen: 24
82.110.124.0/22 maxlen: 22
87.82.217.0/24 maxlen: 24
87.84.233.0/24 maxlen: 24
87.85.227.0/24 maxlen: 24
87.86.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:1d:eb:bf:97:79:5b:6c:d3:95:58:b6:7c:b5:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 17 11:26:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69276d64cc337778e6b02959f370149839243fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:05:d6:c2:c4:cf:b4:2a:a2:bf:42:67:5e:
41:3e:4d:c4:d3:54:f1:60:46:37:cc:d4:41:0c:f5:
68:74:3c:f3:ba:ca:da:4a:ba:18:27:a6:78:92:85:
d6:f8:08:14:d5:43:d3:b2:10:26:53:4d:56:59:24:
4c:eb:55:a6:fe:9b:80:bb:17:07:fe:e3:22:ac:fb:
3f:f9:87:4a:cf:54:0c:56:9c:08:3f:92:7f:b5:d7:
71:ef:a2:92:f9:87:94:24:51:e7:7d:a1:0e:81:0d:
f6:a6:59:a5:2f:24:69:b7:31:80:3c:58:e8:a4:76:
f8:c0:7e:18:82:ff:3a:02:e7:86:93:69:e3:4a:4d:
eb:3a:bb:87:53:3a:ca:8d:e7:db:cf:a9:1f:3e:a9:
33:08:42:b2:42:08:c4:78:19:2d:73:6d:10:db:69:
68:dd:46:44:64:af:94:b4:c4:a3:79:d9:38:44:ad:
bf:cb:af:a5:64:2e:4d:e0:98:24:3b:fc:49:16:d2:
52:7e:59:87:a6:c1:91:e5:04:1a:bc:5d:13:c5:99:
5a:37:ee:0a:2a:00:6f:bc:91:16:d8:23:1f:e4:09:
43:44:cf:e5:08:83:2c:2b:18:5f:6c:69:9a:64:a2:
6d:72:9b:0b:d7:18:91:c0:01:9f:78:ab:4d:2f:70:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:27:6D:64:CC:33:77:78:E6:B0:29:59:F3:70:14:98:39:24:3F:D4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aSdtZMwzd3jmsClZ83AUmDkkP9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
82.108.123.0/24
82.108.210.0/24
82.110.54.0/23
82.110.124.0/22
87.82.217.0/24
87.84.233.0/24
87.85.227.0/24
87.86.212.0/23
Signature Algorithm: sha256WithRSAEncryption
23:11:d3:0c:7a:bc:4a:3c:9c:ac:b5:8a:96:e4:cd:a6:21:07:
b5:7d:53:dc:e8:9d:cc:63:19:b4:28:d3:b6:28:3b:99:21:f4:
c7:6a:00:ed:7e:bc:49:de:04:82:c6:fd:bd:9a:a5:6b:ae:92:
40:67:8b:14:53:8b:71:c9:d8:9c:97:8f:8c:69:14:ae:c5:16:
54:21:86:34:4a:ec:88:ed:bc:ac:89:8b:38:0e:15:46:f3:8a:
e0:34:a2:6f:71:16:60:15:cd:cb:4d:fc:35:e7:fe:8b:b2:6b:
e9:37:20:05:5e:56:cf:92:ee:73:87:00:d4:c5:f9:75:2b:46:
26:21:22:cf:00:e0:b8:c7:c9:1f:75:75:c3:3d:49:f3:6e:5f:
d7:41:cb:f5:15:fc:06:cd:3d:34:11:12:b4:75:7d:8a:47:f1:
95:1b:32:a0:81:a3:c8:9c:38:dc:8d:2f:6a:f9:18:7a:c0:93:
56:bf:f7:de:9e:c6:53:7a:8c:33:44:94:34:6e:b1:f6:fa:e1:
4a:da:74:3e:b7:c1:dc:5e:56:5b:d4:7a:4d:d8:9f:51:15:2a:
27:86:7b:1a:56:86:38:6a:2d:b1:1b:16:ca:ec:3a:0e:8d:e5:
6c:6c:5a:c8:0b:a9:c6:38:00:f0:a8:17:3d:4f:7b:8a:93:22:
4a:74:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:37 2026 by rpki-client