Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/1-Jdb9MOi2OCF-p6jh4Zq96r-xPA.roa
File: 1-Jdb9MOi2OCF-p6jh4Zq96r-xPA.roa (raw, json)
Hash identifier: 62VCCuvgTiReatvA5wQmGjPCyOeu1mdSWJmbcsT6fPM=
Subject key identifier: F8:97:5B:F4:C3:A2:D8:E0:85:FA:9E:A3:87:86:6A:F7:AA:FE:C4:F0
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 019F17E88F20C93FA0C10C8B6877FC1EB2ED
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/1-Jdb9MOi2OCF-p6jh4Zq96r-xPA.roa
Signing time: Tue 30 Jun 2026 09:42:24 +0000
ROA not before: Tue 30 Jun 2026 09:42:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 81.92.80.0/24 maxlen: 24
81.92.81.0/24 maxlen: 24
81.92.84.0/24 maxlen: 24
81.92.85.0/24 maxlen: 24
81.92.86.0/24 maxlen: 24
81.92.87.0/24 maxlen: 24
81.92.88.0/24 maxlen: 24
81.92.89.0/24 maxlen: 24
81.92.90.0/24 maxlen: 24
81.92.91.0/24 maxlen: 24
81.92.94.0/24 maxlen: 24
81.92.95.0/24 maxlen: 24
152.89.172.0/24 maxlen: 24
152.89.173.0/24 maxlen: 24
152.89.174.0/24 maxlen: 24
152.89.175.0/24 maxlen: 24
185.65.56.0/24 maxlen: 24
185.65.57.0/24 maxlen: 24
185.65.58.0/24 maxlen: 24
185.65.59.0/24 maxlen: 24
2a01:c8::/48 maxlen: 48
2a01:c8:1::/48 maxlen: 48
2a01:c8:2::/48 maxlen: 48
2a01:c8:100::/48 maxlen: 48
2a01:c8:101::/48 maxlen: 48
2a01:c8:200::/48 maxlen: 48
2a01:c8:300::/48 maxlen: 48
2a01:c8:ff00::/48 maxlen: 48
2a09:35c0:102::/48 maxlen: 48
2a09:35c0:203::/48 maxlen: 48
2a09:35c0:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:e8:8f:20:c9:3f:a0:c1:0c:8b:68:77:fc:1e:b2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Jun 30 09:42:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8975bf4c3a2d8e085fa9ea387866af7aafec4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:58:e5:71:e1:cd:f9:32:d0:5b:9c:f0:b8:
e6:5a:7e:04:5e:44:82:22:8d:ab:86:18:dd:58:da:
a6:45:46:b2:c7:60:08:8f:d9:70:f4:82:2b:4d:b4:
40:ef:ac:ba:86:d3:af:83:bf:1a:76:61:a7:e2:65:
5e:4c:61:d7:9c:cf:96:27:11:e0:5d:b9:ef:83:0c:
7d:b3:3f:7f:08:51:8d:ca:5b:32:05:66:c1:08:b9:
ed:4d:56:6a:37:eb:56:b2:59:fe:ef:28:44:d1:08:
6b:fc:f7:26:4a:8e:63:54:c7:c1:1a:17:04:95:1d:
cb:bb:16:bc:04:92:d3:c4:08:fb:ce:fc:63:c9:3f:
a0:d4:60:a1:c2:27:cd:c0:6a:4d:89:c7:d0:cd:85:
05:43:0b:69:6e:df:8d:a8:34:a2:b3:6c:aa:4b:a4:
14:80:52:b8:e6:b5:74:14:0b:de:28:ef:6e:00:30:
5c:b1:77:51:d2:c4:e8:48:74:e5:b0:d3:b1:91:c7:
24:db:10:38:aa:ac:a2:37:22:ce:71:ee:fa:29:8f:
a8:1a:e3:27:9a:72:4a:cc:bf:9d:52:91:5f:3f:b0:
26:6e:60:10:1a:a2:43:b6:94:e2:ba:8a:1a:1c:4b:
a4:ac:bd:f5:13:51:d2:22:d6:5e:a7:59:59:ac:ae:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:5B:F4:C3:A2:D8:E0:85:FA:9E:A3:87:86:6A:F7:AA:FE:C4:F0
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/1-Jdb9MOi2OCF-p6jh4Zq96r-xPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.80.0/23
81.92.84.0-81.92.91.255
81.92.94.0/23
152.89.172.0/22
185.65.56.0/22
IPv6:
2a01:c8::-2a01:c8:2:ffff:ffff:ffff:ffff:ffff
2a01:c8:100::/47
2a01:c8:200::/48
2a01:c8:300::/48
2a01:c8:ff00::/48
2a09:35c0:102::/48
2a09:35c0:203::/48
2a09:35c0:400::/48
Signature Algorithm: sha256WithRSAEncryption
a0:dd:c7:70:db:7b:ea:c4:c0:67:30:92:d4:7d:9a:59:17:48:
a3:a2:4b:8a:55:84:7e:2f:2e:1e:98:03:1f:ad:2f:e9:31:4e:
32:40:85:4b:ef:60:29:14:45:f9:39:d0:9f:94:4c:32:1f:f6:
6a:20:e8:16:a1:5a:87:c4:92:aa:ee:59:d7:cf:4b:78:b3:6d:
88:76:05:19:71:94:d4:51:c6:98:31:14:a5:c4:b1:7a:42:47:
63:fd:35:99:8f:d7:e4:d8:93:d1:c2:a0:27:03:6f:4a:77:b3:
08:f9:b5:6f:01:3b:a4:82:c1:1f:ea:14:86:87:41:9a:e6:b0:
14:ad:6b:b8:c4:e2:bc:eb:78:82:9c:68:22:a3:5b:64:65:58:
55:2c:0b:a4:23:53:9f:31:41:ec:a5:f2:93:ed:d4:1f:95:93:
a1:74:0b:fc:85:c9:3e:fb:94:f0:50:bb:7b:79:70:5b:9f:ab:
31:ed:16:f9:6c:d2:c9:49:65:3d:b3:c3:cf:f8:6a:0d:34:9e:
0e:0a:fe:cf:c0:9b:d9:a9:97:fc:01:46:6f:d4:98:4c:1c:4d:
fa:31:dd:90:5c:88:02:5e:43:36:1a:94:98:c0:88:08:fc:a4:
9e:38:7a:f1:9c:c4:14:50:e8:f5:c0:60:f4:f0:b7:89:ef:4b:
9c:26:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:51 2026 by rpki-client