Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/pDRIopyB0aSWt_m47SzM4eW5HO4.roa
File: pDRIopyB0aSWt_m47SzM4eW5HO4.roa (raw, json)
Hash identifier: JY0MxaOvqvLImMqUcRXAjoUGTeQz7Uip6aTmhOzTY4U=
Subject key identifier: A4:34:48:A2:9C:81:D1:A4:96:B7:F9:B8:ED:2C:CC:E1:E5:B9:1C:EE
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F23687B2C289BF0D05F1DB3E98DEC3219
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/pDRIopyB0aSWt_m47SzM4eW5HO4.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136038
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.152.0/24 maxlen: 24
2.59.154.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
45.142.152.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
91.204.224.0/22 maxlen: 22
91.204.225.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
185.202.103.0/24 maxlen: 24
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
194.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7b:2c:28:9b:f0:d0:5f:1d:b3:e9:8d:ec:32:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a43448a29c81d1a496b7f9b8ed2ccce1e5b91cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:8e:27:2b:b2:92:b1:3b:b0:67:70:c3:78:
21:67:24:20:4a:30:ed:3c:cb:93:3d:fb:fb:e3:b6:
aa:04:56:c6:97:11:f7:f6:6a:dc:2f:b9:f8:a5:a1:
e7:f3:18:8e:a6:ee:72:a5:71:1b:8f:33:90:7c:82:
08:57:70:fe:74:6b:0e:93:d0:30:a8:ff:11:a9:d2:
d1:aa:24:74:a9:47:b9:73:75:08:91:29:1f:f7:80:
67:ab:25:69:a1:f1:67:8d:4b:99:69:63:a4:8e:28:
a3:99:45:d1:76:7f:b6:cb:c7:d0:21:a9:a9:06:24:
2a:cf:7b:1f:eb:6f:53:dc:e5:2e:8f:52:cc:c7:da:
c2:b3:57:97:ba:0e:c0:ab:8b:b5:dc:d2:af:ba:3e:
67:20:be:65:e0:cc:7e:49:a7:89:cf:7e:1f:d5:a3:
74:5f:64:9c:13:57:f8:b3:aa:18:b3:a9:1b:e5:c6:
58:e1:c9:6d:cc:cb:46:32:9b:3a:14:a9:8d:62:30:
71:43:79:55:9c:5f:21:5c:d8:5a:a9:c6:63:59:31:
c9:6d:d0:ec:e9:4a:80:e3:98:01:f1:bc:c1:43:28:
47:24:1f:c1:16:97:bb:b9:ce:17:59:ce:02:af:d5:
6e:42:1b:bd:bf:dd:82:c2:dd:21:1b:21:c7:bf:aa:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:48:A2:9C:81:D1:A4:96:B7:F9:B8:ED:2C:CC:E1:E5:B9:1C:EE
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/pDRIopyB0aSWt_m47SzM4eW5HO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
38:52:d1:44:d7:33:0f:c7:0c:77:a0:a8:71:76:de:5c:f4:94:
43:22:9a:7a:ca:f2:03:fc:5a:38:23:55:10:9b:1b:88:cc:c0:
92:35:b2:8c:02:b7:81:bc:93:1b:fb:4a:0c:60:2c:ba:c1:73:
a0:86:72:31:59:33:ea:d8:84:b9:d2:b5:76:27:74:73:73:60:
e6:e1:bd:b3:34:fd:5d:43:d3:bd:20:e2:91:ae:97:9b:86:22:
f6:88:d6:38:62:44:f9:2a:0c:4b:5c:3a:93:05:05:3f:3e:f5:
2d:ed:50:2a:3c:d3:a0:a9:fa:ac:22:21:2d:e0:7b:2c:51:e9:
83:72:ae:2f:88:86:ae:98:b8:35:ea:b6:88:b4:b3:a0:39:26:
1d:2b:c9:01:4c:a1:45:70:89:4c:6e:2b:26:a2:40:1a:78:09:
27:07:2b:b3:24:24:ac:0b:8e:52:cd:dc:95:37:cd:fe:a0:6d:
c3:9c:52:f3:18:ac:23:aa:b0:70:a5:cd:b1:50:ca:e4:6c:0c:
2b:51:5e:2e:13:ec:53:51:35:f5:57:34:49:d4:86:47:4b:9f:
e2:94:21:2a:2c:59:ea:b7:48:5d:63:6b:68:29:48:11:fe:2a:
9e:43:72:ed:6b:12:37:2d:57:a9:0f:d1:da:36:04:a1:af:f9:
23:a2:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:45:32 2026 by rpki-client