Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/I6k45of6oz10Qn9UjtcQMPko0nc.roa
File: I6k45of6oz10Qn9UjtcQMPko0nc.roa (raw, json)
Hash identifier: RUlj2/RupvNMAoFSgcXPwyCSegNW7AJREtWTglAdmdE=
Subject key identifier: 23:A9:38:E6:87:FA:A3:3D:74:42:7F:54:8E:D7:10:30:F9:28:D2:77
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 019F046C91CA529F4C1187A41E20CFDB39FF
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/I6k45of6oz10Qn9UjtcQMPko0nc.roa
Signing time: Fri 26 Jun 2026 14:54:11 +0000
ROA not before: Fri 26 Jun 2026 14:54:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 2.59.132.0/22 maxlen: 24
45.145.40.0/22 maxlen: 24
45.157.232.0/22 maxlen: 24
62.192.153.0/24 maxlen: 24
89.124.251.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
104.167.24.0/24 maxlen: 24
176.96.136.0/22 maxlen: 24
185.94.29.0/24 maxlen: 24
185.219.84.0/24 maxlen: 24
185.229.207.0/24 maxlen: 24
185.254.96.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
193.148.253.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
194.107.126.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
2a0c:4ac0::/29 maxlen: 40
2a0c:4ac0:1300::/40 maxlen: 40
2a0d:1180::/29 maxlen: 29
2a0d:5940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:6c:91:ca:52:9f:4c:11:87:a4:1e:20:cf:db:39:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Jun 26 14:54:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23a938e687faa33d74427f548ed71030f928d277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:67:70:a0:95:66:60:50:23:20:43:58:d9:
3f:46:97:92:64:3b:f6:c2:98:af:f2:b5:9d:8c:f2:
60:60:00:77:fa:16:89:db:06:4d:be:3d:fb:bc:8d:
64:4c:81:52:1b:64:b4:82:6e:73:de:29:7d:ce:f1:
99:da:00:5d:c0:c3:dc:1b:79:5f:e8:96:1a:79:ae:
e1:78:b7:51:13:9a:d3:6f:96:17:d3:b3:3c:16:c6:
cb:67:3e:7f:87:0f:30:57:97:56:d9:c5:89:81:2c:
fa:d1:23:10:d6:c2:88:87:a8:b3:1c:6d:82:f5:01:
09:cf:0d:19:6f:b1:56:7a:e5:8a:f3:b0:25:8e:57:
5b:56:91:75:cc:46:2d:be:44:c9:cf:ee:e1:6e:c7:
e4:21:97:a4:01:e4:c3:00:56:8f:e5:41:90:a0:d5:
73:27:66:42:14:b1:bd:76:a2:c4:d5:91:08:ea:30:
cc:3a:d0:b6:ff:ad:33:ab:8e:7d:bd:32:33:cc:37:
14:ca:f0:8d:46:3f:9b:3c:a3:f5:2c:ea:54:e7:2f:
59:91:7c:8f:c1:f6:6b:63:d5:5f:d0:37:ab:b7:2d:
01:40:b0:e9:c2:44:2c:70:cf:89:12:97:cb:a6:88:
7d:c0:bf:fa:c0:ec:d1:a2:e5:61:14:3f:2c:21:ed:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A9:38:E6:87:FA:A3:3D:74:42:7F:54:8E:D7:10:30:F9:28:D2:77
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/I6k45of6oz10Qn9UjtcQMPko0nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.145.40.0/22
45.157.232.0/22
62.192.153.0/24
89.124.251.0/24
93.123.85.0/24
94.143.231.0/24
104.167.24.0/24
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.229.207.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
193.148.253.0/24
194.48.217.0/24
194.107.126.0/24
194.238.79.0/24
212.87.204.0/24
IPv6:
2a0c:4ac0::/29
2a0d:1180::/29
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
3c:8b:2d:f0:32:7d:a6:ac:48:97:9f:52:ca:fe:79:9c:25:c8:
6c:d2:22:db:76:f9:6c:ca:f6:d4:b2:f7:fc:b9:50:1c:7d:84:
c4:36:7f:64:40:59:e1:82:b8:1e:b7:47:93:3e:f1:83:c1:af:
0f:d3:ee:c9:03:bf:1b:70:2a:5b:e8:30:5e:ee:bd:71:7c:4e:
9c:64:f2:75:2b:58:01:7a:20:b3:e8:86:45:64:17:96:f8:5a:
fc:2f:ee:94:86:4f:50:4c:63:ef:1c:7b:df:a5:8b:61:d6:6e:
58:5b:1a:cb:11:a1:c8:3c:61:c4:f0:1b:69:dd:49:87:58:cc:
4b:d0:84:58:04:0e:a9:7b:17:b9:53:28:19:92:49:4b:fb:df:
61:d1:4f:df:ac:d5:c5:e5:32:2f:91:3e:b7:a1:d6:80:52:e1:
9b:75:5f:83:d6:2f:db:a2:7b:5b:9f:d3:8b:14:25:cd:c5:f2:
cc:de:f0:df:2c:95:37:81:4c:53:2c:80:50:5f:0f:78:00:53:
96:2b:1d:fa:15:c1:cd:93:f6:30:1c:10:31:51:fa:7a:db:6a:
63:d1:a2:eb:bf:a8:46:3a:ef:36:dd:24:65:f9:e4:e3:8f:86:
c3:46:fa:06:76:fb:7c:e9:2d:39:a8:7f:61:e2:f6:cb:24:16:
ec:6d:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:19 2026 by rpki-client