Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/b_pGUsHHf8VO2UAw3eUGPo4pNEs.roa
File: b_pGUsHHf8VO2UAw3eUGPo4pNEs.roa (raw, json)
Hash identifier: iz2jvJmBvAf+UDPBsTyAqmEHI79kkXh1ddpfxaPdHWw=
Subject key identifier: 6F:FA:46:52:C1:C7:7F:C5:4E:D9:40:30:DD:E5:06:3E:8E:29:34:4B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019F70D7C10AD39DA80128CB90679A9A08F5
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/b_pGUsHHf8VO2UAw3eUGPo4pNEs.roa
Signing time: Fri 17 Jul 2026 16:10:15 +0000
ROA not before: Fri 17 Jul 2026 16:10:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 147.45.34.0/24 maxlen: 24
147.45.36.0/24 maxlen: 24
147.45.64.0/24 maxlen: 24
147.45.192.0/24 maxlen: 24
147.45.207.0/24 maxlen: 24
193.233.30.0/24 maxlen: 24
193.233.61.0/24 maxlen: 24
193.233.112.0/23 maxlen: 23
193.233.197.0/24 maxlen: 24
193.233.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:d7:c1:0a:d3:9d:a8:01:28:cb:90:67:9a:9a:08:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 17 16:10:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ffa4652c1c77fc54ed94030dde5063e8e29344b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:5f:a6:47:17:22:b1:9a:77:59:0d:a6:d4:
f7:db:90:7a:0c:85:19:a2:ff:63:14:8f:a1:0c:52:
a0:ec:f1:21:b6:b8:a2:46:e5:fb:51:a6:62:c2:76:
c0:a4:a5:89:85:54:d4:ea:cc:68:fd:5c:07:81:28:
7e:2f:fb:27:79:d8:1b:25:c8:51:0e:c0:56:74:c5:
64:2a:f1:71:d0:f1:78:59:5f:98:3f:65:b2:e3:de:
3d:26:79:d5:86:a0:40:b9:d1:f4:e8:82:19:3a:63:
08:2f:83:65:55:8c:c3:bd:cb:35:b7:70:e5:5e:ba:
85:c6:d2:b1:bf:3e:1b:8b:bc:d2:22:c1:0f:48:db:
e9:6c:3a:1b:fb:cc:cb:2b:c5:b8:a5:47:41:51:7c:
14:70:e2:cf:57:28:8f:2a:eb:5c:30:1f:3d:30:ce:
a7:f5:b0:23:34:1c:98:6d:bd:7f:ca:86:00:73:c3:
92:b7:b9:9b:18:8c:b6:5a:bb:12:ba:22:f0:7a:5f:
c9:c8:7a:98:69:5c:2b:3c:54:d1:e9:3c:02:c0:74:
2e:62:bd:ce:c7:82:c6:28:51:c4:05:b6:5c:4e:b9:
e2:36:92:db:c0:a5:cd:42:87:6b:55:df:d4:f4:6a:
8d:bd:00:cd:e2:2d:08:2d:a5:74:d0:ed:58:91:75:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:46:52:C1:C7:7F:C5:4E:D9:40:30:DD:E5:06:3E:8E:29:34:4B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/b_pGUsHHf8VO2UAw3eUGPo4pNEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.34.0/24
147.45.36.0/24
147.45.64.0/24
147.45.192.0/24
147.45.207.0/24
193.233.30.0/24
193.233.61.0/24
193.233.112.0/23
193.233.197.0/24
193.233.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:4b:70:96:87:17:fc:16:ae:c8:fb:cb:0b:b1:c8:bc:70:9b:
70:a8:c0:7f:29:22:33:47:8f:cf:d1:45:28:c4:78:fa:46:d4:
6e:73:b2:b0:32:25:81:78:81:e3:06:08:3c:07:74:4c:77:14:
d2:0d:52:61:dc:e0:62:ed:97:cf:bc:8d:76:76:70:cd:63:a7:
0b:ea:68:89:3e:ff:05:1d:54:18:9e:32:fb:c8:89:99:73:25:
42:1f:82:19:1b:65:fe:dd:b9:70:76:29:09:cc:51:13:5c:b0:
d3:9b:d1:dc:2a:2e:a2:d1:52:41:f9:75:b6:79:cb:f5:47:8c:
fd:66:bb:0d:d1:3c:f3:1c:da:7b:c2:98:3b:9d:e6:11:68:54:
d0:84:c4:4f:cc:87:1b:24:4b:16:d8:63:c9:fd:c9:5f:03:15:
15:9a:33:84:fe:f3:73:ea:83:19:0c:b5:5f:dc:08:16:c4:76:
5c:c4:e2:0c:42:9b:80:f5:c2:08:ca:a3:80:33:5b:fa:13:ce:
4a:d5:f6:ab:71:ce:73:f8:9d:13:98:07:cd:e2:b5:0a:44:d9:
5a:28:89:1b:0c:6e:01:a0:74:2b:4a:60:53:8e:e2:7a:d2:d7:
94:af:ab:a4:73:d8:cd:14:0c:6c:78:f9:7d:5a:90:25:9e:c0:
09:20:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:38:02 2026 by rpki-client