Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/H_RuJgXeANpszZyia52Wo7sdh08.roa
File: H_RuJgXeANpszZyia52Wo7sdh08.roa (raw, json)
Hash identifier: Me+FBZjUo7CXDRd69YqFu/GLVac9FOtOpaHE2i1Pcfw=
Subject key identifier: 1F:F4:6E:26:05:DE:00:DA:6C:CD:9C:A2:6B:9D:96:A3:BB:1D:87:4F
Certificate issuer: /CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Certificate serial: 019F6AD18F95081CE81C7402A2AFBBE47D1F
Authority key identifier: B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/H_RuJgXeANpszZyia52Wo7sdh08.roa
Signing time: Thu 16 Jul 2026 12:05:46 +0000
ROA not before: Thu 16 Jul 2026 12:05:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215628
IP address blocks: 66.203.252.0/24 maxlen: 24
66.228.90.0/24 maxlen: 24
66.228.91.0/24 maxlen: 24
94.156.245.0/24 maxlen: 24
109.175.234.0/24 maxlen: 24
194.62.113.0/24 maxlen: 24
203.32.197.0/24 maxlen: 24
203.56.45.0/24 maxlen: 24
217.13.99.0/24 maxlen: 24
2a0d:6c00::/31 maxlen: 31
2a0d:6c02::/31 maxlen: 31
2a0d:6c04::/31 maxlen: 31
2a0d:6c06::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:d1:8f:95:08:1c:e8:1c:74:02:a2:af:bb:e4:7d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Validity
Not Before: Jul 16 12:05:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ff46e2605de00da6ccd9ca26b9d96a3bb1d874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:40:41:40:f9:71:e4:ec:e4:80:c6:1c:82:
b5:1d:be:59:1f:ba:40:47:40:e2:66:98:16:e3:ae:
e1:f2:76:53:b4:e7:c1:75:2b:6c:6e:4a:f1:c8:cc:
40:7e:8d:ef:d1:b7:96:80:0a:65:4a:10:45:f3:d8:
ca:0d:b3:14:af:86:d5:0f:08:d6:a3:44:3c:df:a7:
ba:60:3c:48:15:0e:c2:b4:66:13:56:1d:c4:25:ac:
1d:c1:0b:d2:47:cb:a1:60:95:09:96:0c:8d:11:e0:
36:9d:ad:f8:92:b5:24:31:20:71:14:fc:aa:f7:d5:
13:1e:ce:10:cc:6a:ee:f8:f5:3c:3b:62:ef:c9:36:
fb:60:77:5f:5c:26:4d:b7:7e:9c:e1:f1:f9:33:7c:
87:d8:8c:e5:4a:cf:43:83:65:a9:e1:fc:5b:8e:19:
c8:fb:03:bd:ca:0d:5e:5d:a8:89:0d:e9:e2:77:96:
89:54:4e:ea:b2:4d:fd:63:52:19:be:72:bb:00:c6:
03:a5:40:15:9f:a5:37:d9:3c:fd:c9:ee:6d:06:ed:
70:1a:1f:3c:88:d8:90:c5:4a:70:c3:40:78:96:ab:
01:36:d2:6b:12:4c:45:b7:98:12:d8:c4:e8:a8:a8:
20:aa:cb:6f:90:84:f4:62:82:03:10:df:df:2d:56:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F4:6E:26:05:DE:00:DA:6C:CD:9C:A2:6B:9D:96:A3:BB:1D:87:4F
X509v3 Authority Key Identifier:
keyid:B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/H_RuJgXeANpszZyia52Wo7sdh08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.203.252.0/24
66.228.90.0/23
94.156.245.0/24
109.175.234.0/24
194.62.113.0/24
203.32.197.0/24
203.56.45.0/24
217.13.99.0/24
IPv6:
2a0d:6c00::/29
Signature Algorithm: sha256WithRSAEncryption
84:f8:15:57:fc:e1:9f:7e:80:be:ef:d0:47:eb:19:23:bb:56:
7f:ff:6e:b4:78:90:23:db:2c:d6:30:dc:48:95:07:86:1a:8f:
69:78:10:0c:7c:86:92:b0:6b:44:58:cf:42:8e:72:a4:a1:38:
9c:ce:f3:9e:a3:6d:3d:3a:3a:03:9f:79:93:39:11:bb:cf:b1:
46:d4:7c:7c:b1:e4:6a:1e:04:eb:01:c1:57:cd:fe:1f:cb:d9:
24:60:fb:96:3b:99:3f:99:fb:0e:1e:e9:da:84:0e:13:0b:7f:
0b:2c:4b:00:60:bc:17:df:9f:56:d6:4d:aa:b9:62:9f:eb:ef:
57:5d:11:7a:b8:c3:2c:e1:f4:1f:b1:e6:91:3e:ad:52:13:8c:
42:23:3d:b6:76:a7:e4:c3:9d:63:cf:f9:3d:13:af:ee:9d:97:
f5:cb:df:27:99:99:af:2d:fe:a6:71:2b:0c:b3:54:89:ed:b4:
87:bf:7d:3f:51:f0:87:ce:4e:6c:a3:d5:b2:a0:7e:72:f5:79:
8c:00:c6:4f:22:54:19:fd:9f:26:52:3f:a3:35:23:de:fd:c9:
5c:0f:04:0b:11:4e:33:33:aa:0e:3b:c7:94:93:87:41:ea:67:
27:f7:ac:1c:82:a6:f5:89:02:65:ec:64:fd:d4:ae:f6:b7:f2:
42:e7:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:27:01 2026 by rpki-client