Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rnGydg9YFTM_kTzSfvdvzQQjD4U.roa
File: rnGydg9YFTM_kTzSfvdvzQQjD4U.roa (raw, json)
Hash identifier: 7pzKV0No8ksXMT995BoIU2QUTN2C8/KWulvFWj1nhRU=
Subject key identifier: AE:71:B2:76:0F:58:15:33:3F:91:3C:D2:7E:F7:6F:CD:04:23:0F:85
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B4DF5BED0D038F0F28F3C66CFC2A618C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rnGydg9YFTM_kTzSfvdvzQQjD4U.roa
Signing time: Fri 18 Sep 2026 14:15:31 +0000
ROA not before: Fri 18 Sep 2026 14:15:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 83.148.150.0/24 maxlen: 24
83.148.153.0/24 maxlen: 24
83.148.154.0/23 maxlen: 23
83.148.184.0/22 maxlen: 22
85.189.216.0/22 maxlen: 22
109.204.102.0/24 maxlen: 24
109.204.104.0/21 maxlen: 21
109.204.114.0/24 maxlen: 24
109.204.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:df:5b:ed:0d:03:8f:0f:28:f3:c6:6c:fc:2a:61:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 14:15:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae71b2760f5815333f913cd27ef76fcd04230f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:a0:bf:c6:0d:d6:bf:4a:20:87:ae:d5:56:
ce:03:81:01:77:e1:d7:37:db:50:4d:7f:c6:86:35:
fa:0d:76:0b:2f:86:46:0c:84:4a:c1:3b:48:c5:97:
5a:71:6b:b5:d5:d5:9e:c2:f8:4a:a2:af:2b:44:ff:
86:a2:93:ad:17:6c:e1:70:dd:3e:73:bc:b5:97:41:
a2:49:53:5d:98:12:28:9e:61:14:15:4e:a8:50:91:
df:89:1a:f9:ec:56:06:3c:84:b7:a1:5d:17:31:38:
c9:b3:08:f8:12:d7:47:4f:f6:e9:77:09:80:1c:de:
c1:07:76:54:d8:5d:09:71:f3:be:5d:27:7f:b5:78:
40:29:6c:ab:41:77:48:bc:a6:e3:59:45:64:73:ee:
4f:44:22:d4:23:76:1c:59:62:8d:37:c3:f0:e2:df:
5d:bb:55:24:44:b0:f4:e4:bc:98:f6:25:ac:dd:58:
e2:3b:a5:bd:be:79:a3:66:f9:da:e3:83:ab:71:97:
77:dc:09:52:25:66:f7:7d:86:51:36:bb:7f:41:4c:
0a:a8:e0:0f:ab:d7:8d:b3:58:ce:ee:16:54:2e:ad:
cf:b2:6c:6f:8a:e5:61:26:64:ed:59:da:de:1a:c2:
da:63:9d:04:77:d2:5c:7b:b8:7c:01:3f:4a:25:70:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:B2:76:0F:58:15:33:3F:91:3C:D2:7E:F7:6F:CD:04:23:0F:85
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rnGydg9YFTM_kTzSfvdvzQQjD4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.148.150.0/24
83.148.153.0-83.148.155.255
83.148.184.0/22
85.189.216.0/22
109.204.102.0/24
109.204.104.0/21
109.204.114.0/24
109.204.127.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:75:81:25:35:26:8f:28:79:7c:3e:9f:b1:59:9d:12:e0:8d:
27:76:29:9d:f1:f1:e3:fa:08:4c:91:35:2b:39:b0:e9:dd:b3:
b5:0b:30:6a:07:9b:87:69:5d:d3:be:f2:da:53:1d:04:5d:b7:
c2:e8:06:73:22:a8:6d:69:a9:4b:d2:67:01:22:a1:d3:12:da:
27:40:69:32:e8:65:99:aa:ec:11:ac:89:b5:82:05:e4:79:2b:
a8:37:b2:b8:56:95:ff:d2:43:97:ae:a6:01:23:23:c7:28:b6:
d0:db:cb:c2:6b:e4:71:78:7e:52:da:db:54:fb:2f:59:ac:3f:
3d:56:bb:cd:16:ab:32:ac:b5:a8:19:1c:9e:d4:47:35:f0:1e:
23:5e:f8:23:35:39:bb:a0:2c:68:05:31:07:74:65:b5:31:95:
91:d2:a7:6c:ec:95:1a:5f:e5:2a:64:65:e2:4e:12:2a:cc:24:
13:9f:a1:96:30:d8:d6:99:27:ad:e6:f2:19:98:44:d9:be:45:
9d:39:66:78:f0:21:0e:4c:11:49:b4:67:26:4a:c4:2d:56:58:
6d:96:6d:b5:cf:14:43:98:59:10:0c:34:fd:af:34:35:ba:ee:
3e:be:11:61:06:86:2b:5c:7b:27:8a:89:ab:87:a8:8c:3a:ec:
45:9a:4c:cd
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAaC031vtDQOPDyjzxmz8KmGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTE4MTQxNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTcxYjI3NjBmNTgxNTMzM2Y5MTNjZDI3ZWY3NmZjZDA0MjMwZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvmgv8YN1r9KIIeu1VbOA4EBd+HX
N9tQTX/GhjX6DXYLL4ZGDIRKwTtIxZdacWu11dWewvhKoq8rRP+GopOtF2zhcN0+
c7y1l0GiSVNdmBIonmEUFU6oUJHfiRr57FYGPIS3oV0XMTjJswj4EtdHT/bpdwmA
HN7BB3ZU2F0JcfO+XSd/tXhAKWyrQXdIvKbjWUVkc+5PRCLUI3YcWWKNN8Pw4t9d
u1UkRLD05LyY9iWs3VjiO6W9vnmjZvna44OrcZd33AlSJWb3fYZRNrt/QUwKqOAP
q9eNs1jO7hZULq3PsmxviuVhJmTtWdreGsLaY50Ed9Jce7h8AT9KJXAqywIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFK5xsnYPWBUzP5E80n73b80EIw+FMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvcm5HeWRnOVlGVE1fa1R6U2Z2ZHZ6UVFqRDRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAU5SWMAwD
BABTlJkDBAJTlJgDBAJTlLgDBAJVvdgDBABtzGYDBANtzGgDBABtzHIDBABtzH8w
DQYJKoZIhvcNAQELBQADggEBANd1gSU1Jo8oeXw+n7FZnRLgjSd2KZ3x8eP6CEyR
NSs5sOnds7ULMGoHm4dpXdO+8tpTHQRdt8LoBnMiqG1pqUvSZwEiodMS2idAaTLo
ZZmq7BGsibWCBeR5K6g3srhWlf/SQ5eupgEjI8cottDby8Jr5HF4flLa21T7L1ms
Pz1Wu80WqzKstagZHJ7URzXwHiNe+CM1ObugLGgFMQd0ZbUxlZHSp2zslRpf5Spk
ZeJOEirMJBOfoZYw2NaZJ63m8hmYRNm+RZ05ZnjwIQ5MEUm0ZyZKxC1WWG2WbbXP
FEOYWRAMNP2vNDW67j6+EWEGhitceyeKiauHqIw67EWaTM0=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:36:11 2026 by rpki-client