Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-LE4-7F3eevuhnxNB2AMZoa4GR4.roa
File: 1-LE4-7F3eevuhnxNB2AMZoa4GR4.roa (raw, json)
Hash identifier: xUvynmfVhmdIiz62YtFDAbKqRPQ2x3xTMYUW+W9FOOE=
Subject key identifier: F8:B1:38:FB:B1:77:79:EB:EE:86:7C:4D:07:60:0C:66:86:B8:19:1E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A136155AA1305DD9A8AED8E5B2C83F0E94
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-LE4-7F3eevuhnxNB2AMZoa4GR4.roa
Signing time: Tue 13 Oct 2026 16:25:31 +0000
ROA not before: Tue 13 Oct 2026 16:25:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205463
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:15:5a:a1:30:5d:d9:a8:ae:d8:e5:b2:c8:3f:0e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 13 16:25:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8b138fbb17779ebee867c4d07600c6686b8191e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:4d:f6:2e:60:4d:68:b0:71:b0:a9:bc:f0:
5d:8e:a0:9e:ab:f2:23:bf:06:40:e0:0c:c6:af:32:
7f:38:ff:d9:af:f5:81:9b:67:fe:95:cf:6d:0e:b3:
dd:8b:7d:9c:f6:83:8f:fb:8e:eb:51:c6:97:4b:28:
ef:30:b3:12:91:6c:4a:09:d9:e4:0b:7d:59:e4:65:
dc:a8:94:ab:97:d9:63:90:53:4a:bb:17:4a:62:1b:
fe:52:18:46:12:19:6f:64:ec:2d:cd:f6:b5:06:c9:
f4:b4:79:fa:1c:0b:b0:76:90:7a:20:b8:88:3d:15:
c0:48:b9:a4:e8:b6:27:c3:9b:11:78:58:18:7d:66:
c4:c2:e7:49:a3:c2:c7:44:99:23:0d:91:d3:7e:6e:
86:d1:8a:df:33:a3:85:73:34:29:65:3b:35:f1:b4:
b4:b8:96:82:30:ae:d1:fe:04:20:44:3c:d2:c1:ec:
88:5e:6d:a0:3e:6a:8a:ee:58:65:c0:5b:60:b7:5d:
50:38:0b:c0:f0:7c:da:ac:8e:52:91:01:53:d0:63:
4f:21:3e:97:e0:96:45:f2:dc:62:d5:70:74:09:27:
42:a5:d9:6a:18:1e:24:36:f3:6f:da:fb:90:8e:2e:
d3:02:34:a5:52:12:11:1a:e1:8c:d3:c6:f6:de:e9:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:38:FB:B1:77:79:EB:EE:86:7C:4D:07:60:0C:66:86:B8:19:1E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-LE4-7F3eevuhnxNB2AMZoa4GR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.132.181.0/24
45.151.2.0/24
85.209.120.0/24
193.57.41.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b6:8a:f9:b4:80:0e:2f:30:e2:7f:8c:89:ae:54:6b:4d:a4:
f5:bd:84:55:cb:7b:6a:54:4d:f3:ba:5c:2e:8a:10:ec:4c:c7:
4f:8a:60:b2:eb:5e:f5:93:ce:21:c7:93:71:5d:f1:85:d1:e8:
57:35:26:7c:fb:af:80:96:60:98:ef:53:a0:d7:c8:6f:eb:3f:
e3:b9:71:35:2c:64:5e:c8:23:9d:9c:3f:1d:08:b8:35:c9:f6:
ff:ad:c2:06:af:84:e1:d1:20:3f:be:d3:f2:f1:a6:10:e8:75:
aa:da:1f:46:70:14:b8:26:c2:72:80:ab:e7:c1:5c:fb:a2:b7:
d9:5c:9c:de:71:f0:f0:92:27:b5:4b:e0:fd:e7:98:fc:7b:db:
ac:8b:28:6f:22:85:a2:26:5f:37:b1:a7:3c:be:3b:33:0a:bf:
bb:e1:a2:7c:af:c2:d2:f7:49:51:c6:f3:b1:c9:bd:da:d5:e7:
df:2d:6f:68:43:38:49:9b:26:72:49:10:0b:09:d2:54:d5:f9:
86:8c:4e:51:af:65:c7:d2:f7:75:a2:5e:a1:de:83:d7:a0:46:
3e:7e:e4:16:df:a3:40:43:d6:aa:61:5f:0b:ec:ba:b9:f3:30:
c9:31:58:9c:40:0b:bd:9b:f2:05:fc:b7:36:2b:9b:ea:85:2c:
41:23:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:47:23 2026 by rpki-client