Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/IDbm4BTVJkr2LGXzbqOrz6EVNx4.roa
File: IDbm4BTVJkr2LGXzbqOrz6EVNx4.roa (raw, json)
Hash identifier: 6Be3sqYYXs7RhhAxfXcGlT5hWEPDQQflddEPFI3kouc=
Subject key identifier: 20:36:E6:E0:14:D5:26:4A:F6:2C:65:F3:6E:A3:AB:CF:A1:15:37:1E
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019F045F35312CE21C1CCD64364681DF5459
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/IDbm4BTVJkr2LGXzbqOrz6EVNx4.roa
Signing time: Fri 26 Jun 2026 14:39:36 +0000
ROA not before: Fri 26 Jun 2026 14:39:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41653
IP address blocks: 45.141.172.0/22 maxlen: 22
85.8.203.0/24 maxlen: 24
91.199.0.0/24 maxlen: 24
95.128.40.0/21 maxlen: 24
176.121.248.0/22 maxlen: 22
178.212.228.0/24 maxlen: 24
185.66.232.0/22 maxlen: 24
194.105.152.0/23 maxlen: 23
195.14.22.0/24 maxlen: 24
2a02:ec0::/32 maxlen: 48
2a0e:cec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:5f:35:31:2c:e2:1c:1c:cd:64:36:46:81:df:54:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Jun 26 14:39:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2036e6e014d5264af62c65f36ea3abcfa115371e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:44:91:b7:75:9d:66:4d:48:9c:60:5b:f6:
0e:4f:e6:bb:ac:41:c7:3a:06:20:1f:a6:44:c3:fc:
e0:2a:30:11:73:e7:ae:2d:7a:97:0d:a1:36:1b:78:
26:9e:b9:57:d9:51:6b:85:63:57:6c:bd:bf:e8:dd:
8f:16:b1:6d:1d:c3:92:ac:66:1a:92:8f:9d:a2:64:
cc:3d:58:c7:66:50:79:64:b7:5b:ab:d8:36:f5:36:
ee:4b:90:97:59:19:df:d9:10:3a:42:a7:e5:6c:d2:
d6:95:0f:d3:ed:99:15:ae:e0:1d:69:74:06:f9:f8:
f9:70:bb:cd:b8:46:5a:60:76:14:e6:7a:a4:f8:f0:
1e:e8:7b:09:6b:9e:ed:26:50:2a:56:58:a9:d5:0d:
79:dc:14:01:15:5e:79:f9:cf:4c:86:29:b7:a0:39:
8d:07:a2:f2:e3:36:15:61:b5:72:3b:d7:d7:5d:2a:
47:cd:c4:2f:31:68:21:1a:d4:0f:80:b8:3a:2a:fa:
a4:9c:9d:d3:21:ee:63:03:9d:c7:e8:ab:76:42:7e:
42:e0:7b:48:2d:8c:06:33:b0:a3:33:49:f7:bf:4f:
27:16:d8:ed:97:9c:28:6c:af:2b:f3:72:ba:69:af:
8d:5a:b1:76:de:36:46:e0:ed:69:2a:ad:b4:d4:f2:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:E6:E0:14:D5:26:4A:F6:2C:65:F3:6E:A3:AB:CF:A1:15:37:1E
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/IDbm4BTVJkr2LGXzbqOrz6EVNx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.172.0/22
85.8.203.0/24
91.199.0.0/24
95.128.40.0/21
176.121.248.0/22
178.212.228.0/24
185.66.232.0/22
194.105.152.0/23
195.14.22.0/24
IPv6:
2a02:ec0::/32
2a0e:cec0::/29
Signature Algorithm: sha256WithRSAEncryption
84:4f:c7:21:2f:97:90:f8:3b:c3:e8:e6:8f:99:4e:32:2b:79:
d9:53:f0:4b:bf:89:f5:4a:49:f0:78:ab:4b:1a:f0:56:18:e5:
a8:d3:0e:ba:47:71:ff:da:38:b2:98:a6:5f:dd:2d:db:c5:61:
5a:e0:bb:96:87:0f:18:b4:80:f0:42:06:d8:9f:cc:fd:10:ba:
d1:00:13:94:31:20:87:4b:98:9c:e2:dd:63:81:9d:9f:c1:77:
fb:3b:f5:32:2b:78:96:67:fb:1c:fc:0d:09:0c:9e:07:a3:7e:
81:9f:f8:38:04:41:c8:39:93:cb:19:a8:db:db:f0:65:fe:22:
f5:fb:be:f8:b1:16:70:76:f4:2a:8e:0c:4f:03:e3:64:de:58:
60:dc:73:ef:15:99:b0:04:91:14:a8:50:fc:f6:7b:a5:dd:d4:
c1:d3:c5:f4:6c:90:79:3d:2c:93:70:0b:0b:27:c4:c8:07:97:
8a:58:49:7f:6a:fa:c8:05:96:63:8d:22:14:53:8f:2a:d6:cc:
0d:bc:f5:c0:27:10:a3:55:cc:42:ec:39:61:52:87:6c:ba:38:
4c:ed:8a:2c:9b:eb:06:51:3d:f7:3c:54:6c:7c:26:e5:96:b9:
af:47:5f:ed:58:8c:bd:cd:c1:79:3a:0b:15:16:21:8b:1c:5e:
4c:41:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:37 2026 by rpki-client