Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AIQmu0a98rCCUomfrA0Jv_dOuT0.roa
File: AIQmu0a98rCCUomfrA0Jv_dOuT0.roa (raw, json)
Hash identifier: MRjBk2AN/VFq4d5G5WuqqWtblyHno5kfO8O6VIb/MKs=
Subject key identifier: 00:84:26:BB:46:BD:F2:B0:82:52:89:9F:AC:0D:09:BF:F7:4E:B9:3D
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A068346B8849861B46EDCDB470066D1FED
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AIQmu0a98rCCUomfrA0Jv_dOuT0.roa
Signing time: Thu 03 Sep 2026 16:57:40 +0000
ROA not before: Thu 03 Sep 2026 16:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33659
IP address blocks: 45.150.168.0/22 maxlen: 22
45.151.196.0/22 maxlen: 22
185.147.49.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
193.31.104.0/22 maxlen: 22
195.138.109.0/24 maxlen: 24
195.138.110.0/24 maxlen: 24
195.138.113.0/24 maxlen: 24
195.138.115.0/24 maxlen: 24
195.138.124.0/22 maxlen: 22
195.211.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:34:6b:88:49:86:1b:46:ed:cd:b4:70:06:6d:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 3 16:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=008426bb46bdf2b08252899fac0d09bff74eb93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:92:10:4c:80:4e:01:9f:0a:96:7e:c0:f2:
1c:ea:28:08:35:cb:3a:2b:5b:c1:e4:15:44:3a:d1:
43:d1:09:cf:76:50:5b:ba:c0:12:6d:31:3f:01:a2:
68:5d:6d:b2:a1:1d:40:24:e6:20:df:65:04:a9:88:
4a:3f:28:93:a7:41:01:4b:45:f5:b4:e2:85:5a:f3:
1b:8f:8e:65:3a:eb:e4:21:98:70:c9:4f:59:42:7b:
e8:a5:7b:a1:46:82:3f:73:f5:ae:b1:cd:2a:f7:e3:
07:75:22:92:6a:3b:6b:26:91:95:6c:44:27:aa:85:
eb:14:13:e9:db:ba:9b:b2:f9:a7:65:55:bc:1f:a8:
38:c6:59:e2:db:e9:e3:46:36:9c:16:8f:e6:7e:60:
38:52:77:b4:d5:58:11:79:ef:a0:7f:21:33:41:d1:
4d:a4:db:05:3f:25:e7:4e:07:20:e3:55:e5:37:3d:
d6:ac:b8:79:43:90:9e:d2:97:44:31:ac:1f:92:0e:
54:a0:d4:35:8f:ab:a0:10:bd:8e:60:da:39:f0:5b:
e6:b2:78:b6:53:99:b1:b0:4e:ce:fd:7c:5d:c9:98:
b1:71:3f:0c:8e:48:f6:92:11:b4:37:f8:be:6c:07:
d8:b4:45:99:81:71:fb:1a:58:e4:4e:8f:89:12:77:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:84:26:BB:46:BD:F2:B0:82:52:89:9F:AC:0D:09:BF:F7:4E:B9:3D
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AIQmu0a98rCCUomfrA0Jv_dOuT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.168.0/22
45.151.196.0/22
185.147.49.0/24
185.212.11.0/24
193.31.104.0/22
195.138.109.0-195.138.110.255
195.138.113.0/24
195.138.115.0/24
195.138.124.0/22
195.211.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e5:3c:7f:28:ca:f1:50:ed:ad:34:cf:aa:09:4c:bd:18:1e:
d3:e7:71:44:26:51:d7:e5:0e:28:23:a8:5e:d7:ec:f6:9c:25:
07:90:59:fe:c5:f1:82:19:81:d0:54:c6:67:b2:60:e1:7b:b1:
da:9d:98:f2:5c:aa:f3:40:b1:52:73:1f:dd:1f:95:33:4a:dc:
19:fd:e5:bd:73:32:69:e6:81:1e:27:78:d0:c4:55:5c:60:e7:
76:4a:aa:18:bf:2d:a5:fd:15:63:b2:5b:78:88:aa:bb:d4:39:
f5:79:b8:97:59:07:78:f9:17:b8:12:4d:3e:5f:76:82:4b:42:
9a:81:74:10:86:2f:3a:2c:00:06:1e:0c:81:32:63:44:64:8b:
b3:2a:24:b0:9d:37:c7:49:86:bb:73:c9:a1:bc:f8:3d:e7:a9:
46:1d:b1:db:86:8e:76:50:53:2e:00:39:5c:b9:76:59:06:e8:
9c:a3:e9:37:44:28:31:0b:51:b0:54:26:8a:49:bf:ec:d7:30:
1a:1a:54:11:ac:0d:80:46:95:0c:20:0e:fe:d0:96:d9:56:a4:
50:f7:5e:f5:3a:70:93:72:b7:c1:91:4e:7d:4c:34:49:52:d4:
78:0f:67:e4:8f:7c:b4:ff:ab:0e:d6:c3:60:b7:96:f6:a1:30:
0e:6f:b4:53
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAaBoNGuISYYbRu3NtHAGbR/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwOTAzMTY1NzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDg0MjZiYjQ2YmRmMmIwODI1Mjg5OWZhYzBkMDliZmY3NGViOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmeSEEyATgGfCpZ+wPIc6igINcs6
K1vB5BVEOtFD0QnPdlBbusASbTE/AaJoXW2yoR1AJOYg32UEqYhKPyiTp0EBS0X1
tOKFWvMbj45lOuvkIZhwyU9ZQnvopXuhRoI/c/Wusc0q9+MHdSKSajtrJpGVbEQn
qoXrFBPp27qbsvmnZVW8H6g4xlni2+njRjacFo/mfmA4Une01VgRee+gfyEzQdFN
pNsFPyXnTgcg41XlNz3WrLh5Q5Ce0pdEMawfkg5UoNQ1j6ugEL2OYNo58Fvmsni2
U5mxsE7O/XxdyZixcT8Mjkj2khG0N/i+bAfYtEWZgXH7GljkTo+JEne0HwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFACEJrtGvfKwglKJn6wNCb/3Trk9MB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvQUlRbXUwYTk4ckNDVW9tZnJBMEp2X2RPdVQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQCLZaoAwQC
LZfEAwQAuZMxAwQAudQLAwQCwR9oMAwDBADDim0DBADDim4DBADDinEDBADDinMD
BALDinwDBADD0zAwDQYJKoZIhvcNAQELBQADggEBAB/lPH8oyvFQ7a00z6oJTL0Y
HtPncUQmUdflDigjqF7X7PacJQeQWf7F8YIZgdBUxmeyYOF7sdqdmPJcqvNAsVJz
H90flTNK3Bn95b1zMmnmgR4neNDEVVxg53ZKqhi/LaX9FWOyW3iIqrvUOfV5uJdZ
B3j5F7gSTT5fdoJLQpqBdBCGLzosAAYeDIEyY0Rki7MqJLCdN8dJhrtzyaG8+D3n
qUYdsduGjnZQUy4AOVy5dlkG6Jyj6TdEKDELUbBUJopJv+zXMBoaVBGsDYBGlQwg
Dv7QltlWpFD3XvU6cJNyt8GRTn1MNElS1HgPZ+SPfLT/qw7Ww2C3lvahMA5vtFM=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:06 2026 by rpki-client