Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i50dYGQR2HuVkYX-KRctJW0x0aE.roa
File: i50dYGQR2HuVkYX-KRctJW0x0aE.roa (raw, json)
Hash identifier: Pxs7fCknyjxl/69RRb+o0Fs/vmdgFz/CHH4szHwAytA=
Subject key identifier: 8B:9D:1D:60:64:11:D8:7B:95:91:85:FE:29:17:2D:25:6D:31:D1:A1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0988C537E3E73E957B85F868B0A49A6B5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i50dYGQR2HuVkYX-KRctJW0x0aE.roa
Signing time: Sun 13 Sep 2026 02:15:28 +0000
ROA not before: Sun 13 Sep 2026 02:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61112
IP address blocks: 87.85.99.0/24 maxlen: 24
194.242.135.0/24 maxlen: 24
212.135.32.0/20 maxlen: 24
212.135.32.0/24 maxlen: 24
212.135.33.0/24 maxlen: 24
212.135.34.0/24 maxlen: 24
212.135.35.0/24 maxlen: 24
212.135.36.0/24 maxlen: 24
212.135.37.0/24 maxlen: 24
212.135.38.0/24 maxlen: 24
212.135.39.0/24 maxlen: 24
212.135.40.0/24 maxlen: 24
212.135.41.0/24 maxlen: 24
212.135.42.0/24 maxlen: 24
212.135.43.0/24 maxlen: 24
212.135.44.0/24 maxlen: 24
212.135.45.0/24 maxlen: 24
212.135.46.0/24 maxlen: 24
212.135.47.0/24 maxlen: 24
212.135.112.0/20 maxlen: 24
212.135.112.0/24 maxlen: 24
212.135.113.0/24 maxlen: 24
212.135.114.0/24 maxlen: 24
212.135.115.0/24 maxlen: 24
212.135.116.0/24 maxlen: 24
212.135.117.0/24 maxlen: 24
212.135.118.0/24 maxlen: 24
212.135.119.0/24 maxlen: 24
212.135.120.0/24 maxlen: 24
212.135.121.0/24 maxlen: 24
212.135.122.0/24 maxlen: 24
212.135.123.0/24 maxlen: 24
212.135.124.0/24 maxlen: 24
212.135.125.0/24 maxlen: 24
212.135.126.0/24 maxlen: 24
212.135.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:98:8c:53:7e:3e:73:e9:57:b8:5f:86:8b:0a:49:a6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 13 02:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b9d1d606411d87b959185fe29172d256d31d1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:52:57:5e:db:0f:7d:e1:9e:46:ac:bf:72:
b4:7f:b1:2e:5d:94:c5:e7:2d:84:54:a2:2c:ca:b3:
5c:d9:a4:95:f2:ae:7b:95:01:90:58:8e:7a:53:8f:
a5:24:6c:1d:60:dc:a3:01:c8:42:20:89:85:11:68:
34:ae:d8:cd:32:42:98:b8:6c:48:fd:24:c9:1c:1b:
76:84:96:d4:b5:9b:07:69:6c:b3:a9:c2:26:1c:d3:
ec:34:1c:58:67:c9:5b:f5:33:a0:91:b9:7a:dc:20:
00:ba:88:dc:aa:40:ba:2f:98:25:bd:f4:0c:78:cb:
e8:0a:74:66:2f:14:0d:a6:e9:39:ac:ab:b2:66:03:
ce:e0:f6:53:c4:22:e3:1c:d6:ea:c7:a3:3e:f1:f2:
50:0c:46:b5:c5:6f:d4:74:4a:25:49:6a:cc:c6:53:
80:77:00:e4:8e:9b:d0:91:58:21:b8:ca:05:86:23:
bb:c4:a4:d3:c8:fb:74:1a:c4:67:e8:65:f3:4c:01:
83:c7:31:d4:5a:48:d5:e1:fe:11:d6:d4:08:eb:7e:
bc:b1:56:12:32:a4:27:65:4f:38:fe:d6:8f:39:f2:
a2:aa:ef:53:d0:d2:b8:15:2c:e4:82:27:92:9f:e9:
23:51:d8:d6:b1:27:c1:f6:8c:d9:43:ae:d7:2d:95:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9D:1D:60:64:11:D8:7B:95:91:85:FE:29:17:2D:25:6D:31:D1:A1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i50dYGQR2HuVkYX-KRctJW0x0aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.99.0/24
194.242.135.0/24
212.135.32.0/20
212.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:39:df:0d:06:cf:91:e0:65:e1:be:20:db:13:c7:02:3c:c9:
ca:9e:84:27:c4:c5:d6:6b:41:cb:77:5e:27:7d:ac:fe:97:a0:
6b:2c:19:3c:2a:d1:4a:da:79:41:b1:14:09:45:c0:55:e5:14:
b6:02:54:30:eb:eb:0d:f9:88:1c:a1:ca:c9:30:43:31:85:7c:
ce:bb:9f:df:75:af:31:a6:e6:89:54:6b:2e:31:a7:c8:1c:8b:
a8:c6:6f:2e:ce:ff:e2:ef:60:f3:83:e0:a1:97:93:2d:77:79:
18:5c:6b:97:ef:5b:df:2e:1e:35:b1:0c:01:8f:84:72:3e:ac:
75:5a:a2:33:0e:11:98:0d:36:20:6a:82:4b:b7:34:c4:12:1f:
36:5d:fc:61:35:f9:cc:9a:e2:c7:06:4a:5b:af:cf:b5:17:51:
b7:de:3a:de:c4:c0:8d:75:50:80:d4:6b:3e:bd:d4:5c:a6:d0:
94:a9:14:ec:3e:91:42:39:6f:43:8a:61:87:79:92:54:a5:8b:
ca:81:7e:6b:31:ed:08:e9:76:a0:ba:d6:a1:7f:ed:63:a2:1c:
88:ea:df:ac:2d:32:f7:81:19:40:4a:09:2d:8a:97:86:31:fe:
84:97:dd:8d:28:9a:5d:af:a1:ea:41:1d:8d:ef:1b:0e:6d:9c:
cd:24:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:42 2026 by rpki-client