Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/Ru7VlT0b9J1DKUMExNiZxw9qA84.roa
File: Ru7VlT0b9J1DKUMExNiZxw9qA84.roa (raw, json)
Hash identifier: 3Cbt8asHHjBRZWkoqcTYK6pN14HVidOBZm3l9xX+Aww=
Subject key identifier: 46:EE:D5:95:3D:1B:F4:9D:43:29:43:04:C4:D8:99:C7:0F:6A:03:CE
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 019EADC381FB92E598FAD5B7B3480D7973C6
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/Ru7VlT0b9J1DKUMExNiZxw9qA84.roa
Signing time: Tue 09 Jun 2026 19:02:11 +0000
ROA not before: Tue 09 Jun 2026 19:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 45.94.14.0/24 maxlen: 24
45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.6.0/23 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/22 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.26.0/23 maxlen: 24
212.26.28.0/23 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 25
212.26.37.0/24 maxlen: 25
212.26.38.0/24 maxlen: 24
212.26.39.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/23 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.50.0/23 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.72.0/24 maxlen: 25
212.26.74.0/24 maxlen: 25
212.26.76.0/24 maxlen: 24
212.26.78.0/24 maxlen: 24
212.138.41.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/23 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/21 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 24
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.132.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.147.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 24
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.192.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.210.0/24 maxlen: 24
212.138.210.0/28 maxlen: 28
212.138.250.0/24 maxlen: 24
212.138.251.0/24 maxlen: 24
212.138.252.0/24 maxlen: 24
212.138.253.0/24 maxlen: 24
2001:1490::/48 maxlen: 48
2001:1490:1::/48 maxlen: 48
2001:1490:100::/48 maxlen: 48
2001:1490:101::/48 maxlen: 48
2001:1490:102::/48 maxlen: 48
2001:1490:103::/48 maxlen: 49
2001:1490:106::/48 maxlen: 48
2001:1490:108::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1490:112::/48 maxlen: 48
2001:1490:113::/48 maxlen: 48
2001:1490:114::/48 maxlen: 48
2001:1490:115::/48 maxlen: 50
2001:1490:116::/48 maxlen: 48
2001:1490:117::/48 maxlen: 49
2001:1497:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:c3:81:fb:92:e5:98:fa:d5:b7:b3:48:0d:79:73:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jun 9 19:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46eed5953d1bf49d43294304c4d899c70f6a03ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:7a:6f:d3:22:cb:e0:76:ca:24:06:c4:df:
11:5e:3f:fd:ed:7d:7d:63:9f:06:75:39:88:4c:cf:
71:d0:30:fc:7a:70:cf:1f:02:c1:a9:09:a0:99:f6:
8b:16:bc:61:16:f0:e3:85:cd:a7:9b:db:43:a2:37:
83:c5:08:c9:41:d8:14:4b:be:07:b4:af:15:47:d5:
33:68:e0:d9:99:57:6c:41:1a:87:2a:06:36:63:a3:
b8:23:f4:3c:c1:cc:3c:15:ce:76:05:4a:fc:78:ee:
9f:d3:73:84:2a:0d:67:27:8e:f0:da:66:e6:39:ad:
8e:de:c4:02:cc:a8:8f:a1:72:66:dd:cb:b3:01:78:
7e:07:ed:de:f3:86:94:99:12:0c:bf:58:70:01:fb:
35:38:94:02:8e:7f:f5:d9:f7:be:8c:96:66:3c:9f:
51:05:7c:e0:d8:11:69:1d:18:c2:eb:8a:85:5d:fa:
46:f0:b8:57:2b:67:b4:40:c7:6c:83:29:8d:67:da:
b1:9e:d6:b1:98:10:ac:f6:dd:6c:ef:19:16:fc:d2:
da:c2:9c:83:d8:ed:c8:ea:f9:71:cc:d7:3c:bf:9a:
68:51:fa:56:94:ed:f1:ab:43:a6:63:4c:2c:47:4a:
43:d5:5b:6d:a4:c7:ef:ba:50:3d:df:33:bb:e9:3d:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EE:D5:95:3D:1B:F4:9D:43:29:43:04:C4:D8:99:C7:0F:6A:03:CE
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/Ru7VlT0b9J1DKUMExNiZxw9qA84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.14.0/23
91.229.52.0/22
212.26.6.0-212.26.11.255
212.26.16.0-212.26.32.255
212.26.36.0-212.26.48.255
212.26.50.0-212.26.54.255
212.26.56.0/24
212.26.58.0/24
212.26.60.0/24
212.26.63.0/24
212.26.68.0/23
212.26.71.0-212.26.72.255
212.26.74.0/24
212.26.76.0/24
212.26.78.0/24
212.138.41.0/24
212.138.52.0-212.138.67.255
212.138.70.0-212.138.85.255
212.138.88.0/24
212.138.92.0/24
212.138.94.0/24
212.138.96.0-212.138.104.255
212.138.108.0/24
212.138.115.0-212.138.121.255
212.138.125.0-212.138.128.255
212.138.130.0/24
212.138.132.0/24
212.138.134.0/24
212.138.139.0/24
212.138.147.0/24
212.138.150.0/24
212.138.153.0/24
212.138.155.0/24
212.138.157.0/24
212.138.160.0/24
212.138.162.0/24
212.138.164.0/24
212.138.166.0/24
212.138.168.0/24
212.138.170.0/24
212.138.172.0/24
212.138.175.0-212.138.177.255
212.138.180.0/23
212.138.183.0/24
212.138.185.0/24
212.138.188.0/24
212.138.192.0/24
212.138.194.0/24
212.138.196.0/24
212.138.201.0-212.138.203.255
212.138.210.0/24
212.138.250.0-212.138.253.255
IPv6:
2001:1490::/47
2001:1490:100::/46
2001:1490:106::/48
2001:1490:108::/48
2001:1490:110::/45
2001:1497:2::/48
Signature Algorithm: sha256WithRSAEncryption
1c:7d:e3:a6:35:dd:48:74:4c:e5:d3:7b:4b:36:c7:6b:fd:24:
9f:6c:0e:e1:89:8d:30:24:4a:73:ef:b4:81:37:6f:50:63:a9:
0e:a4:76:2b:49:2f:3c:2d:81:47:e1:0a:97:b4:9d:77:86:7d:
5d:23:69:97:5c:ca:e4:11:e9:12:a9:1d:43:71:e0:51:73:36:
14:32:bb:9b:29:3b:c7:68:2e:05:5f:52:89:5b:f6:e9:bf:7c:
f1:43:fe:77:5a:40:89:ed:0f:49:e5:81:07:d2:60:c4:34:60:
94:de:54:2a:ed:60:ca:cc:0d:8e:5b:a1:7c:bd:8c:3f:67:1a:
31:23:9f:81:47:7c:8d:e9:71:b9:35:e0:7d:ea:fa:ea:06:e1:
54:bb:1a:30:2d:93:27:52:cb:84:81:a2:4c:e8:32:31:72:fb:
23:f1:9b:03:0c:0f:ce:21:e8:25:d6:d5:6f:91:21:5f:2a:c6:
8c:a9:9d:c8:ad:df:f7:8f:65:78:fb:42:58:38:79:2f:38:89:
0b:d2:13:30:fd:88:4c:e8:50:ef:67:c2:69:bf:06:bd:8e:72:
ee:be:e6:01:30:87:1d:c8:14:55:5e:d4:e0:63:a3:76:00:2e:
1a:81:f5:21:b2:6c:85:6b:d5:6e:c3:a2:3a:d8:43:0e:40:c2:
78:82:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:38 2026 by rpki-client