Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tt04ogt4qfZrFr7mRD0c7BkaLSQ.roa
File: tt04ogt4qfZrFr7mRD0c7BkaLSQ.roa (raw, json)
Hash identifier: 9YNRWUMJkQTttws+FmT2uFkll/Iu/hrW3nWNs2Sfz6Q=
Subject key identifier: B6:DD:38:A2:0B:78:A9:F6:6B:16:BE:E6:44:3D:1C:EC:19:1A:2D:24
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019C4CA082040EF4C8A0D95AC1250C486985
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tt04ogt4qfZrFr7mRD0c7BkaLSQ.roa
Signing time: Wed 11 Feb 2026 12:15:13 +0000
ROA not before: Wed 11 Feb 2026 12:15:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 92.244.161.0/24 maxlen: 24
92.244.186.0/23 maxlen: 24
195.40.86.0/24 maxlen: 24
195.40.104.0/23 maxlen: 24
195.40.112.0/23 maxlen: 24
195.40.116.0/23 maxlen: 24
195.40.188.0/23 maxlen: 24
195.172.98.0/23 maxlen: 24
195.172.106.0/23 maxlen: 24
195.172.194.0/23 maxlen: 24
195.172.212.0/23 maxlen: 24
212.134.72.0/23 maxlen: 24
212.134.76.0/23 maxlen: 24
212.135.5.0/24 maxlen: 24
212.135.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:a0:82:04:0e:f4:c8:a0:d9:5a:c1:25:0c:48:69:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Feb 11 12:15:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6dd38a20b78a9f66b16bee6443d1cec191a2d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:22:2b:ba:f5:5f:e4:2b:15:4a:89:04:66:
32:f1:ff:32:9e:b9:a1:21:99:cb:85:0b:6b:c4:2f:
24:a8:f1:63:a8:53:65:d6:b6:56:40:d3:99:63:1d:
39:75:ce:84:1c:43:62:37:52:65:b3:90:6a:cb:08:
70:64:74:c0:c2:90:80:7b:19:9d:70:c2:78:d0:f6:
6f:e7:ab:cd:ba:03:03:94:79:64:83:c4:30:a0:e2:
7e:03:92:50:56:85:f9:89:d6:26:ed:8b:53:55:33:
01:69:18:87:a4:3c:f4:0c:c3:98:f9:f5:78:26:0a:
24:7d:c2:33:be:23:dc:48:7d:5a:fd:d6:b1:27:a2:
c3:96:5b:3c:65:0b:4d:85:bc:a6:44:52:ec:77:84:
b4:db:93:02:ae:c0:26:d5:82:3e:54:d5:db:aa:b2:
f4:ef:6d:18:e4:76:1d:a8:65:1c:06:0b:96:c5:0d:
54:26:93:e6:7b:bf:97:ad:f7:34:27:12:d6:07:af:
98:17:f9:d6:69:4b:9a:e4:6f:1a:3d:a1:23:ca:ce:
51:7f:36:c2:6d:32:0f:54:82:00:75:45:f9:df:9e:
eb:d6:01:ee:b2:b1:fa:f7:ec:21:ad:18:83:28:2f:
7b:37:b9:ad:bb:9f:90:94:bd:0b:05:77:8f:4a:b5:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DD:38:A2:0B:78:A9:F6:6B:16:BE:E6:44:3D:1C:EC:19:1A:2D:24
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tt04ogt4qfZrFr7mRD0c7BkaLSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.244.161.0/24
92.244.186.0/23
195.40.86.0/24
195.40.104.0/23
195.40.112.0/23
195.40.116.0/23
195.40.188.0/23
195.172.98.0/23
195.172.106.0/23
195.172.194.0/23
195.172.212.0/23
212.134.72.0/23
212.134.76.0/23
212.135.5.0/24
212.135.218.0/24
Signature Algorithm: sha256WithRSAEncryption
09:67:7d:78:2f:25:e5:de:76:76:aa:98:9d:d7:95:21:48:1c:
67:79:62:ad:c4:35:32:3a:62:97:a4:69:4c:2c:cf:97:c3:ef:
cb:98:f7:5c:60:a4:c9:41:9a:24:d2:50:cd:64:50:6c:d6:23:
9c:90:52:a1:a9:08:d9:54:ed:35:7b:9d:15:8a:ae:a2:15:30:
3c:5e:37:b8:29:73:31:70:79:1c:5f:57:52:35:90:56:b4:d5:
1c:17:d0:04:e1:f9:d1:05:ae:25:c5:bd:cf:7c:f6:51:c2:ef:
c5:d3:75:bd:b1:9d:f9:d6:65:6c:2a:a9:15:20:e0:dc:f6:e0:
3f:f2:2c:bf:37:b2:9d:80:11:c0:e8:65:72:c2:ba:c1:a8:ec:
e2:03:c5:78:e6:88:84:72:db:7b:b0:e8:64:99:14:51:43:57:
e9:5b:55:c6:b1:eb:b6:e8:77:bd:07:e0:6a:e2:20:9c:b7:a4:
cb:c7:ec:e6:7a:48:01:5d:32:c8:30:2a:9d:af:cb:84:8b:48:
98:aa:d3:c2:cf:4f:82:56:89:68:9e:85:2a:5e:c7:49:d6:bd:
9e:9e:e4:d1:03:00:68:73:13:07:eb:e6:03:27:a3:ed:71:d2:
ed:fd:6c:3b:4f:4d:94:d5:6c:e4:7a:59:ac:99:aa:34:43:a4:
08:66:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:51 2026 by rpki-client