Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/23b1GxAkx6SlT8B87VEfAb179pI.roa
File: 23b1GxAkx6SlT8B87VEfAb179pI.roa (raw, json)
Hash identifier: PzxZHqUVSrdDOl1wRbQdBoBcAcqW4sVZmWjqBbc+I0w=
Subject key identifier: DB:76:F5:1B:10:24:C7:A4:A5:4F:C0:7C:ED:51:1F:01:BD:7B:F6:92
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F23687DAB3C6E016DD5E0E71B8911EE5B
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/23b1GxAkx6SlT8B87VEfAb179pI.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212921
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.152.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
45.142.152.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
91.204.224.0/22 maxlen: 22
91.204.225.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
194.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7d:ab:3c:6e:01:6d:d5:e0:e7:1b:89:11:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db76f51b1024c7a4a54fc07ced511f01bd7bf692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:1d:ec:c8:f2:a5:d5:7f:de:a6:13:e3:3b:ab:
1c:5c:0a:db:79:1e:bd:a9:0a:53:44:12:c6:6c:01:
72:79:61:a2:e4:ad:7b:ed:57:07:77:58:f2:13:b4:
f6:c4:67:e1:c0:98:98:cc:aa:b7:e5:5a:5e:0f:7c:
a3:20:92:68:c5:c5:ea:34:15:83:23:22:83:4a:d3:
3e:05:ec:b1:08:bf:cb:c9:9e:e3:03:df:ee:58:24:
c5:bc:cd:25:aa:55:2d:0e:fe:44:cb:c9:47:91:9e:
8d:69:f4:3a:29:ff:e7:5e:6a:ba:e4:e0:03:91:4d:
86:f9:6f:15:ae:28:bd:46:8c:54:13:5a:32:f3:9f:
67:45:c5:9f:d3:05:94:87:de:68:39:83:b4:56:32:
f1:97:11:48:84:ea:26:6a:eb:91:30:a1:51:43:38:
e1:23:30:f2:6f:71:44:f0:8b:46:91:a9:0c:48:28:
3c:17:f0:07:c5:1f:34:5d:f5:90:c2:01:fa:4d:ac:
16:39:6e:15:f7:69:8a:da:53:10:3d:9b:cb:af:df:
ec:20:13:0c:c7:94:a7:de:49:f1:7f:c0:14:13:7d:
a5:0f:63:85:1b:12:ee:38:76:89:b5:c4:e9:b3:14:
49:c0:a8:29:e5:d0:8b:64:6f:76:56:7c:79:45:59:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:76:F5:1B:10:24:C7:A4:A5:4F:C0:7C:ED:51:1F:01:BD:7B:F6:92
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/23b1GxAkx6SlT8B87VEfAb179pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ee:7a:ea:77:de:aa:63:23:92:f4:b2:95:1b:0c:2f:d8:9c:
91:69:6b:67:f4:f7:11:a6:c0:93:ef:62:bb:9c:6f:57:28:09:
a3:9c:64:b5:f5:9f:af:52:a9:9a:a0:7c:36:6a:aa:b2:00:61:
d2:00:5d:23:89:34:c0:db:55:2a:cc:1e:56:c9:24:a3:3c:f2:
85:78:c4:2c:cc:64:ba:4d:43:bb:da:01:8f:15:69:37:bc:37:
93:f4:33:5d:12:2f:6a:8e:eb:16:1f:20:35:75:42:a6:c5:44:
be:83:84:25:d6:51:08:37:ea:a4:ea:ff:d8:69:81:aa:9b:8a:
cd:be:d1:48:2f:85:71:be:8a:d4:a7:fc:a2:d9:36:11:92:b4:
4b:dd:3b:ad:e7:4b:19:71:1e:89:f9:a0:9a:b9:09:96:f2:4a:
22:08:3c:7a:09:ef:2c:74:43:be:5f:25:50:ff:60:39:0d:16:
d5:91:07:27:9b:bc:28:10:6d:06:51:6a:79:17:46:df:3e:a9:
e7:00:69:15:24:9f:85:4b:8e:29:c4:39:9d:d0:68:11:05:0e:
ab:c7:09:69:b2:35:02:ff:52:b3:03:ba:a5:55:e2:79:2b:4e:
fc:98:17:6b:c7:82:10:56:cb:d3:5c:42:01:9a:16:6f:ab:71:
6e:fb:ed:cd
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ8jaH2rPG4BbdXg5xuJEe5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDQ1NmUxMWI3N2JmMmU0ODIwZGZiNjk1NDFkNGJlMGVh
OTRlN2MwHhcNMjYwNzAyMTUxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjc2ZjUxYjEwMjRjN2E0YTU0ZmMwN2NlZDUxMWYwMWJkN2JmNjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+x3syPKl1X/ephPjO6scXArbeR69
qQpTRBLGbAFyeWGi5K177VcHd1jyE7T2xGfhwJiYzKq35VpeD3yjIJJoxcXqNBWD
IyKDStM+BeyxCL/LyZ7jA9/uWCTFvM0lqlUtDv5Ey8lHkZ6NafQ6Kf/nXmq65OAD
kU2G+W8Vrii9RoxUE1oy859nRcWf0wWUh95oOYO0VjLxlxFIhOomauuRMKFRQzjh
IzDyb3FE8ItGkakMSCg8F/AHxR80XfWQwgH6TawWOW4V92mK2lMQPZvLr9/sIBMM
x5Sn3knxf8AUE32lD2OFGxLuOHaJtcTpsxRJwKgp5dCLZG92Vnx5RVke6QIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFNt29RsQJMekpU/AfO1RHwG9e/aSMB8GA1UdIwQY
MBaAFNNEVuEbd78uSCDftpVB1L4OqU58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvMjNiMUd4QWt4NlNsVDhCODdWRWZBYjE3OXBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCAjuYAwQC
LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7KAwQAwn7XAwQA
wn7bAwQAwn7jMA0GCSqGSIb3DQEBCwUAA4IBAQCf7nrqd96qYyOS9LKVGwwv2JyR
aWtn9PcRpsCT72K7nG9XKAmjnGS19Z+vUqmaoHw2aqqyAGHSAF0jiTTA21UqzB5W
ySSjPPKFeMQszGS6TUO72gGPFWk3vDeT9DNdEi9qjusWHyA1dUKmxUS+g4Ql1lEI
N+qk6v/YaYGqm4rNvtFIL4VxvorUp/yi2TYRkrRL3Tut50sZcR6J+aCauQmW8koi
CDx6Ce8sdEO+XyVQ/2A5DRbVkQcnm7woEG0GUWp5F0bfPqnnAGkVJJ+FS44pxDmd
0GgRBQ6rxwlpsjUC/1KzA7qlVeJ5K078mBdrx4IQVsvTXEIBmhZvq3Fu++3N
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:46:17 2026 by rpki-client