Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1WLLhRLZsdKFXGW1MXvXPYX0z2M.roa
File: 1WLLhRLZsdKFXGW1MXvXPYX0z2M.roa (raw, json)
Hash identifier: O+Fzb9zKXg796VBQr6CJ3OQPpObddVnqLp7XDsmDRTA=
Subject key identifier: D5:62:CB:85:12:D9:B1:D2:85:5C:65:B5:31:7B:D7:3D:85:F4:CF:63
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019F762920CCA1ED019FC8E359223C132FD4
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1WLLhRLZsdKFXGW1MXvXPYX0z2M.roa
Signing time: Sat 18 Jul 2026 16:57:14 +0000
ROA not before: Sat 18 Jul 2026 16:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34450
IP address blocks: 86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:29:20:cc:a1:ed:01:9f:c8:e3:59:22:3c:13:2f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 18 16:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d562cb8512d9b1d2855c65b5317bd73d85f4cf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a7:30:0e:11:dc:af:c5:47:46:67:c0:70:60:
13:60:8b:d8:13:c8:6b:ba:54:d1:a5:f2:b5:cb:69:
94:6b:e1:15:2c:72:3c:28:50:fa:b6:eb:8e:33:e9:
7f:36:74:5d:84:c8:22:97:29:51:0d:53:8c:81:2c:
5d:aa:6e:a4:bc:2b:f6:9a:6f:c5:21:e4:39:0a:a9:
37:f4:37:97:c4:23:68:96:3f:a0:5f:c1:cc:c4:fd:
25:2a:08:a1:15:0c:4c:a3:d5:39:3c:8a:02:0d:23:
0d:80:36:87:04:06:77:b2:a8:4a:46:e0:33:94:55:
e1:70:a3:52:b4:d4:0f:6f:f0:b8:02:a2:dd:8a:85:
a6:e0:29:cc:dc:b1:ba:8f:92:42:7b:c2:7b:db:c6:
a9:d4:d0:63:ec:4c:52:48:92:7c:af:97:be:75:f3:
50:50:4a:e9:e5:88:bc:74:63:14:e7:71:fa:a4:9e:
8d:ae:3a:3c:71:5a:57:01:e1:d7:68:90:1c:ed:d4:
f2:58:b2:33:a0:a4:9e:77:6f:71:ad:b3:c7:58:20:
eb:9a:04:c5:c4:43:a6:f6:5e:84:5e:02:d8:6c:da:
9e:d3:d4:37:ef:49:70:64:2f:ad:91:c2:31:5b:04:
a0:30:a4:35:81:ac:fc:62:14:93:63:b4:b0:8d:a8:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:CB:85:12:D9:B1:D2:85:5C:65:B5:31:7B:D7:3D:85:F4:CF:63
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1WLLhRLZsdKFXGW1MXvXPYX0z2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.46.0/24
89.44.209.0/24
89.45.34.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.95.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
7f:d0:5e:41:3d:92:55:4c:ee:45:81:ad:ab:6f:cf:ff:10:e6:
ca:b6:bf:76:fe:dc:e9:28:26:af:77:3b:5e:35:82:7d:62:06:
1d:9a:fe:9b:dd:c2:cd:0b:53:80:bd:eb:b3:e9:56:36:23:49:
2f:d8:f1:d3:dd:8c:c4:3e:4d:7e:e9:a0:aa:1f:0b:c9:1d:4d:
a3:9c:07:2e:3a:cf:7c:54:14:9a:d3:a7:88:b1:4b:51:6e:46:
9b:5f:bd:8d:32:c1:f6:1b:a2:19:ff:73:a6:31:ea:da:10:db:
31:16:ed:65:b3:64:be:4b:cc:61:dd:62:3e:85:23:b4:8c:d9:
ea:95:c3:59:6c:00:6b:4d:e1:79:f5:5e:e4:22:c7:67:86:fa:
4e:62:53:40:f1:2c:a8:0a:2c:21:69:9c:2f:6b:45:ac:53:6d:
2a:b3:63:17:9c:1e:f3:0e:2a:9e:14:2b:45:7b:29:b2:aa:2b:
30:7c:bd:90:ff:d8:43:5a:1b:3b:b8:af:86:b2:31:81:fb:69:
c3:b8:97:24:4d:01:c0:34:79:e1:5e:e1:15:ee:d3:cf:4f:04:
76:f2:92:a1:fe:7b:f3:3b:1c:c1:46:94:64:ff:45:50:f0:7c:
54:1a:81:c3:19:13:67:f8:9b:e4:dc:19:35:f2:e6:3a:e0:7a:
0b:bf:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:55 2026 by rpki-client