Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1AD40_36VQGlBOp28Lk3RlvsfgA.roa
File: 1AD40_36VQGlBOp28Lk3RlvsfgA.roa (raw, json)
Hash identifier: VSUpQ8bW6JW+bGa00K3nPlbLWsV4kDCig7et0X0CYXY=
Subject key identifier: D4:00:F8:D3:FD:FA:55:01:A5:04:EA:76:F0:B9:37:46:5B:EC:7E:00
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019EB1D90D651B5E3DF2B0B65B22A1AEDC49
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1AD40_36VQGlBOp28Lk3RlvsfgA.roa
Signing time: Wed 10 Jun 2026 14:04:12 +0000
ROA not before: Wed 10 Jun 2026 14:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 269800
IP address blocks: 77.246.242.0/24 maxlen: 24
91.242.68.0/24 maxlen: 24
91.242.69.0/24 maxlen: 24
91.242.82.0/24 maxlen: 24
91.242.124.0/24 maxlen: 24
92.249.25.0/24 maxlen: 24
95.141.251.0/24 maxlen: 24
147.78.20.0/24 maxlen: 24
147.78.21.0/24 maxlen: 24
185.51.120.0/24 maxlen: 24
185.147.48.0/24 maxlen: 24
193.221.211.0/24 maxlen: 24
195.88.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:d9:0d:65:1b:5e:3d:f2:b0:b6:5b:22:a1:ae:dc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 10 14:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d400f8d3fdfa5501a504ea76f0b937465bec7e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:a6:b7:1d:c2:29:26:a7:3a:2c:f3:e0:19:
58:11:09:54:f8:11:52:0e:28:70:39:91:c1:62:12:
85:1e:89:10:70:be:33:bf:d5:b3:24:44:9c:2b:2d:
51:71:14:83:b6:eb:87:5a:b6:f5:15:c5:0a:11:58:
bd:96:10:50:92:8e:95:6c:a8:70:e4:6c:ba:ad:00:
f1:9e:d1:42:7a:e5:d9:79:84:26:2b:45:78:22:4b:
cf:ae:8a:f8:c1:63:2a:14:54:77:b6:e4:c8:60:61:
40:0f:56:af:9a:29:14:3e:0a:fe:ce:2a:af:8e:96:
e3:5c:57:b6:8f:cc:11:5e:c5:c5:11:90:e4:d8:7a:
96:3c:a5:9e:16:a1:54:41:76:d7:e8:83:a9:67:77:
0d:97:b8:7a:27:82:a6:3a:78:d1:49:49:65:6f:d7:
b7:86:82:3b:71:fd:42:ec:21:d8:78:f5:81:a5:82:
c1:3b:80:1b:c9:97:55:4d:d9:c0:c1:80:e0:b7:1e:
ba:62:35:30:ff:15:7d:48:fa:4b:6c:69:cb:32:20:
ed:39:bd:3c:40:03:47:11:bd:81:7a:f7:a0:d2:66:
3d:d4:4b:0e:54:25:26:e0:67:cf:8c:50:50:44:6c:
bc:14:68:3e:08:90:d5:d7:70:05:68:7e:d6:af:3e:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:F8:D3:FD:FA:55:01:A5:04:EA:76:F0:B9:37:46:5B:EC:7E:00
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1AD40_36VQGlBOp28Lk3RlvsfgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.242.0/24
91.242.68.0/23
91.242.82.0/24
91.242.124.0/24
92.249.25.0/24
95.141.251.0/24
147.78.20.0/23
185.51.120.0/24
185.147.48.0/24
193.221.211.0/24
195.88.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7a:ac:15:31:24:2d:e2:19:50:ac:b5:d8:cb:41:ee:cc:af:
5b:ce:da:16:89:8f:96:e4:6a:5f:36:73:0d:be:e0:15:fb:08:
4c:e7:c3:94:d8:00:b5:5a:46:db:39:c5:88:fb:a9:0f:2c:cf:
af:b0:98:64:ee:25:7e:3a:c7:a9:90:54:27:75:e4:17:2a:e9:
bd:e8:a8:10:62:97:b3:fb:f6:b5:8b:de:18:dd:f7:e3:34:c9:
d5:db:12:65:52:ea:24:de:ad:1b:81:34:e2:48:2e:95:2a:4a:
11:3d:9f:20:9d:74:5e:e8:9e:04:c6:7d:ca:ec:df:62:fc:de:
96:0c:9d:19:a3:b7:8a:69:f8:47:43:ee:26:dc:d9:d2:bf:2c:
c6:19:db:1c:64:98:68:a8:c2:89:73:19:d1:cc:a1:fe:1c:79:
af:e5:0f:67:68:8f:59:11:73:6a:18:63:da:77:c9:6f:1e:f1:
20:12:7a:a5:f0:5b:35:8d:fd:eb:7e:95:8f:f4:e9:23:35:bd:
36:8f:53:be:7a:78:16:b2:80:c1:20:f9:70:52:64:51:23:05:
c1:2d:f5:2e:e3:03:47:36:7a:8d:35:90:3a:c2:2a:89:6a:7b:
c1:8f:e2:70:d4:35:95:82:23:fc:6e:8f:5e:9b:c3:4c:e5:78:
1e:2d:5d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:37 2026 by rpki-client