Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zxHvxotMiPy-XdR1MsvbLF3tn-A.roa
File: zxHvxotMiPy-XdR1MsvbLF3tn-A.roa (raw, json)
Hash identifier: WeU1xHj6KYLhc+IggFM/osyVxw73O9/UPlF0DNV2yjw=
Subject key identifier: CF:11:EF:C6:8B:4C:88:FC:BE:5D:D4:75:32:CB:DB:2C:5D:ED:9F:E0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A15BC7F9A99B51D6368DABF4065C5A37F6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zxHvxotMiPy-XdR1MsvbLF3tn-A.roa
Signing time: Wed 21 Oct 2026 00:06:34 +0000
ROA not before: Wed 21 Oct 2026 00:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61112
IP address blocks: 87.85.99.0/24 maxlen: 24
212.135.32.0/20 maxlen: 24
212.135.32.0/24 maxlen: 24
212.135.33.0/24 maxlen: 24
212.135.34.0/24 maxlen: 24
212.135.35.0/24 maxlen: 24
212.135.36.0/24 maxlen: 24
212.135.37.0/24 maxlen: 24
212.135.38.0/24 maxlen: 24
212.135.39.0/24 maxlen: 24
212.135.40.0/24 maxlen: 24
212.135.41.0/24 maxlen: 24
212.135.42.0/24 maxlen: 24
212.135.43.0/24 maxlen: 24
212.135.44.0/24 maxlen: 24
212.135.45.0/24 maxlen: 24
212.135.46.0/24 maxlen: 24
212.135.47.0/24 maxlen: 24
212.135.112.0/20 maxlen: 24
212.135.112.0/24 maxlen: 24
212.135.113.0/24 maxlen: 24
212.135.114.0/24 maxlen: 24
212.135.115.0/24 maxlen: 24
212.135.116.0/24 maxlen: 24
212.135.117.0/24 maxlen: 24
212.135.118.0/24 maxlen: 24
212.135.119.0/24 maxlen: 24
212.135.120.0/24 maxlen: 24
212.135.121.0/24 maxlen: 24
212.135.122.0/24 maxlen: 24
212.135.123.0/24 maxlen: 24
212.135.124.0/24 maxlen: 24
212.135.125.0/24 maxlen: 24
212.135.126.0/24 maxlen: 24
212.135.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:c7:f9:a9:9b:51:d6:36:8d:ab:f4:06:5c:5a:37:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 21 00:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf11efc68b4c88fcbe5dd47532cbdb2c5ded9fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:57:4f:cc:ff:d7:b0:b3:6c:b3:93:0b:48:
65:f4:53:a6:f5:f9:f5:4a:40:52:3d:e4:7b:ca:14:
4c:07:c0:8f:c6:4a:1d:3c:af:c6:2b:22:bf:31:5f:
62:21:e2:93:4d:c0:ed:03:c8:b5:cc:c3:7d:42:21:
63:5e:f7:07:c8:26:ba:e1:07:50:5f:79:cf:ee:e8:
80:94:39:ec:0b:e6:fc:18:41:e9:30:cc:1c:ba:66:
6b:9a:3c:ff:5a:0b:34:e9:a8:2a:9d:e8:df:33:04:
dc:5c:9d:ea:41:94:ce:f3:ff:8d:88:50:06:34:2b:
d3:ee:ab:6e:5b:04:c1:90:c3:46:15:96:fc:39:8e:
fa:a0:44:bf:20:05:78:9f:20:89:c0:5f:29:8e:e4:
e8:78:38:2b:ea:c2:7b:55:b3:aa:b2:84:00:d9:a0:
d5:15:66:47:2a:c0:c3:80:60:e7:94:1a:20:6b:d8:
ad:2d:76:67:8c:96:05:cd:a7:63:d8:f5:5b:3a:d6:
0a:bc:00:fd:49:8d:ec:e4:a8:57:0c:5f:6e:94:0e:
03:b1:64:66:0a:34:fd:2e:fc:c8:9a:31:e3:e4:00:
33:e9:a3:b2:95:5f:72:74:2a:e0:8f:4e:21:a3:ad:
b6:3c:ad:4e:d4:74:db:69:24:15:e8:92:06:b6:ac:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:EF:C6:8B:4C:88:FC:BE:5D:D4:75:32:CB:DB:2C:5D:ED:9F:E0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zxHvxotMiPy-XdR1MsvbLF3tn-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.99.0/24
212.135.32.0/20
212.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:c9:c9:2e:bd:8d:6b:86:be:54:b3:3d:c8:0b:77:b4:28:22:
41:fc:cd:89:86:f0:93:bb:f8:1c:69:ae:0c:16:9a:d2:7f:95:
7b:79:88:fb:4e:ee:e5:c0:86:66:5c:9d:b7:1f:7d:31:94:99:
b4:bb:c5:e9:a6:7c:01:a7:e1:70:54:24:df:88:3f:f6:ca:f1:
1d:7f:b7:27:c9:f0:8a:2a:36:10:5a:f0:29:8b:d3:f9:7e:4b:
a9:2e:e3:cd:57:1b:bf:31:0d:b5:9a:7b:e9:cd:58:1d:e6:b3:
26:67:e6:6f:cb:bf:fb:a5:3a:7e:33:0a:ac:8b:36:2d:03:f5:
23:f5:82:74:f9:3c:18:be:a1:7a:29:a8:d6:2c:8c:3c:1a:f5:
d8:f7:dd:cf:00:07:bf:eb:4a:a2:29:27:82:5d:66:5a:d0:fc:
be:46:c1:72:52:c4:17:9a:6d:72:7f:d5:3f:01:e5:13:fd:4a:
82:ca:51:87:54:ee:f0:82:ab:d6:5e:80:40:07:75:c1:19:bd:
dc:37:15:08:7e:2a:aa:87:dd:e4:d6:16:20:fc:f3:4d:e2:35:
ae:cb:4c:32:be:86:1d:15:9c:2e:7e:d4:f5:a9:5c:ce:19:45:
ba:a8:e6:8d:9a:cf:dc:43:4b:ce:43:14:6a:ea:7b:dd:43:fd:
59:ba:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 00:12:33 2026 by rpki-client