Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1mJTRaCV1XFHW9TAUEyCY56Up84.roa
File: 1mJTRaCV1XFHW9TAUEyCY56Up84.roa (raw, json)
Hash identifier: YOGX+Kdl7sPKa3VNkaTaXQWsMf0IW3iCNzcwdWovEzg=
Subject key identifier: D6:62:53:45:A0:95:D5:71:47:5B:D4:C0:50:4C:82:63:9E:94:A7:CE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0E7E84AFADE1754BC057548E77C238218
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1mJTRaCV1XFHW9TAUEyCY56Up84.roa
Signing time: Mon 28 Sep 2026 12:05:55 +0000
ROA not before: Mon 28 Sep 2026 12:05:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54103
IP address blocks: 5.10.193.0/24 maxlen: 24
5.10.195.0/24 maxlen: 24
5.10.197.0/24 maxlen: 24
5.10.199.0/24 maxlen: 24
45.134.129.0/24 maxlen: 24
45.134.131.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
62.197.129.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
89.31.218.0/24 maxlen: 24
89.35.114.0/24 maxlen: 24
89.35.154.0/23 maxlen: 24
89.37.137.0/24 maxlen: 24
89.40.76.0/24 maxlen: 24
93.113.221.0/24 maxlen: 24
93.115.109.0/24 maxlen: 24
178.239.197.0/24 maxlen: 24
185.67.137.0/24 maxlen: 24
185.67.139.0/24 maxlen: 24
185.160.80.0/24 maxlen: 24
185.163.208.0/22 maxlen: 22
185.216.1.0/24 maxlen: 24
185.216.3.0/24 maxlen: 24
185.244.220.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.232.0/23 maxlen: 24
188.241.110.0/24 maxlen: 24
188.241.242.0/23 maxlen: 24
193.26.112.0/23 maxlen: 24
193.84.134.0/24 maxlen: 24
194.76.132.0/23 maxlen: 24
203.159.85.0/24 maxlen: 24
203.159.87.0/24 maxlen: 24
203.159.89.0/24 maxlen: 24
203.159.91.0/24 maxlen: 24
223.27.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:4a:fa:de:17:54:bc:05:75:48:e7:7c:23:82:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 28 12:05:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6625345a095d571475bd4c0504c82639e94a7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:d3:c7:4a:0b:a0:68:e7:c6:c9:c1:69:68:
bd:d7:d1:09:bf:f0:62:1d:eb:97:ba:2b:25:d5:8b:
ef:48:63:da:50:18:c4:90:eb:02:21:c0:a9:0a:44:
81:c2:d3:53:f1:53:0a:b5:4b:6d:4a:0f:b3:67:89:
64:6e:06:0d:4c:a9:b3:ab:39:31:9a:ec:62:6e:1f:
a1:2e:4f:a7:72:8b:14:97:61:a0:02:a4:5e:81:91:
16:7b:e2:88:ca:ee:26:b5:fe:6c:aa:71:f9:3d:1e:
b5:10:35:53:7a:fc:29:49:83:f3:e6:55:37:c4:02:
11:02:60:73:e8:82:33:4c:e1:14:85:17:95:cb:f7:
35:36:8b:74:fc:a5:11:eb:36:7f:c4:f9:44:57:56:
be:8e:3f:a5:0e:05:05:61:31:72:18:60:80:53:48:
ec:7e:fb:f4:ba:ba:a8:29:59:5f:99:60:99:de:90:
4e:cb:63:e3:d4:d4:be:b8:e1:89:12:e8:15:14:25:
87:24:11:12:fc:e8:df:71:7c:9f:06:e2:5a:7a:44:
3f:b9:c2:98:6a:44:d4:1d:ba:d7:cf:25:1f:e6:9f:
83:91:57:34:e2:4e:82:d7:2c:c6:3e:22:c5:a5:cc:
65:22:55:db:8a:f2:63:2a:b5:13:da:e2:a2:8c:8a:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:62:53:45:A0:95:D5:71:47:5B:D4:C0:50:4C:82:63:9E:94:A7:CE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1mJTRaCV1XFHW9TAUEyCY56Up84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.193.0/24
5.10.195.0/24
5.10.197.0/24
5.10.199.0/24
45.134.129.0/24
45.134.131.0/24
46.102.176.0/24
62.197.129.0/24
86.107.107.0/24
89.31.218.0/24
89.35.114.0/24
89.35.154.0/23
89.37.137.0/24
89.40.76.0/24
93.113.221.0/24
93.115.109.0/24
178.239.197.0/24
185.67.137.0/24
185.67.139.0/24
185.160.80.0/24
185.163.208.0/22
185.216.1.0/24
185.216.3.0/24
185.244.220.0/24
188.240.230.0/24
188.240.232.0/23
188.241.110.0/24
188.241.242.0/23
193.26.112.0/23
193.84.134.0/24
194.76.132.0/23
203.159.85.0/24
203.159.87.0/24
203.159.89.0/24
203.159.91.0/24
223.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b6:49:a2:bd:8d:2a:2b:74:14:d3:a8:6a:f6:72:f2:ae:8e:
b1:c5:48:7b:63:5d:5d:be:4a:76:68:e9:87:80:a8:ed:41:a0:
c6:68:94:c2:a3:61:c1:ae:ec:f4:2f:0e:f2:27:70:52:ac:79:
15:54:91:b4:ce:07:de:5e:1c:f9:ac:5c:f3:fd:13:17:8e:59:
9d:a0:f4:e9:bc:ce:b6:d0:ec:e9:3c:13:5d:ed:35:bf:7f:14:
01:1e:ba:09:07:db:7b:46:a7:e0:57:eb:f5:60:60:af:23:d7:
ff:66:3a:17:13:eb:48:98:54:f6:9e:08:6c:3f:b0:f5:0c:6b:
94:6b:16:da:78:02:3f:82:62:b9:bf:63:e3:ab:f3:11:32:92:
02:d1:39:ab:cc:99:44:1d:27:f7:04:da:07:87:38:b7:78:d4:
b4:23:b1:1d:ca:00:03:75:8c:0f:0e:f9:0d:d8:79:78:dd:de:
95:01:0b:3d:18:e1:3a:4d:c7:3d:14:3c:09:1e:ab:3e:f3:d6:
56:9f:7c:8e:b5:79:aa:2f:92:c4:b5:94:55:2e:91:e1:46:c0:
c2:9d:69:3f:ee:89:35:bf:5e:a6:1f:6c:a8:81:4c:f1:35:27:
f8:ec:23:72:20:20:dc:bc:75:52:1c:85:b8:49:8d:6a:b1:54:
d1:99:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:42:16 2026 by rpki-client