Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/rxRvkr7ysSPB_e9Loy_YqaGLndA.roa
File: rxRvkr7ysSPB_e9Loy_YqaGLndA.roa (raw, json)
Hash identifier: S6ZgK8ZIpc3qAqf259XNj61s/p1HjrzmuG86h3GqnQw=
Subject key identifier: AF:14:6F:92:BE:F2:B1:23:C1:FD:EF:4B:A3:2F:D8:A9:A1:8B:9D:D0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A08687E2D9BF4D3702B244C4F73A50F051
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/rxRvkr7ysSPB_e9Loy_YqaGLndA.roa
Signing time: Wed 09 Sep 2026 14:17:27 +0000
ROA not before: Wed 09 Sep 2026 14:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 5.182.28.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
45.145.176.0/22 maxlen: 22
62.106.83.0/24 maxlen: 24
89.40.161.0/24 maxlen: 24
91.242.70.0/24 maxlen: 24
91.242.74.0/24 maxlen: 24
91.242.105.0/24 maxlen: 24
146.19.228.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
185.218.184.0/24 maxlen: 24
193.84.26.0/24 maxlen: 24
193.109.82.0/24 maxlen: 24
194.50.200.0/24 maxlen: 24
194.50.206.0/23 maxlen: 24
195.88.147.0/24 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 24
195.138.107.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.114.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.211.48.0/24 maxlen: 24
195.216.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:87:e2:d9:bf:4d:37:02:b2:44:c4:f7:3a:50:f0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 9 14:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af146f92bef2b123c1fdef4ba32fd8a9a18b9dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:87:2e:a4:5f:fd:ed:20:04:65:40:31:e6:
14:f0:64:fd:1c:53:32:74:9a:85:82:fb:a4:63:3b:
35:39:37:96:21:ab:0c:80:fa:98:ae:2a:73:f9:40:
af:60:57:df:49:65:f8:1c:62:b2:ba:eb:0d:4c:02:
d4:71:8b:a5:8c:1c:39:f8:8e:e8:bb:d5:8e:7c:e5:
7f:88:43:25:4a:dc:92:ee:09:fd:31:af:1a:05:40:
a7:f0:b8:aa:ba:8f:c3:a4:d2:59:ef:d5:87:97:e9:
a9:11:e9:79:63:d4:aa:46:15:ed:0d:35:3f:70:a1:
86:52:5f:16:4c:fc:0b:18:59:fc:47:7e:ff:11:a3:
eb:8b:38:db:dc:4b:68:bb:22:aa:55:eb:34:a4:de:
11:fb:fb:1a:b9:65:64:70:1e:88:ea:4b:35:93:c1:
b2:40:4e:bd:4e:cf:fe:81:08:a2:48:60:d7:00:43:
63:75:18:df:eb:e5:bc:ec:94:2a:00:24:a2:de:c6:
61:04:f1:4d:9b:9c:9f:ae:b2:18:73:e6:9c:02:e3:
fc:f4:44:c8:2f:bd:3d:0b:ee:a7:ef:15:44:1e:aa:
04:58:b7:e1:a4:a4:bd:63:d1:99:3b:5b:91:d8:78:
f0:3a:f6:8b:a8:24:6d:5a:1d:8d:76:a8:ba:ef:99:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:14:6F:92:BE:F2:B1:23:C1:FD:EF:4B:A3:2F:D8:A9:A1:8B:9D:D0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/rxRvkr7ysSPB_e9Loy_YqaGLndA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
45.67.117.0/24
45.145.176.0/22
62.106.83.0/24
89.40.161.0/24
91.242.70.0/24
91.242.74.0/24
91.242.105.0/24
146.19.228.0/24
185.180.145.0/24
185.218.184.0/24
193.84.26.0/24
193.109.82.0/24
194.50.200.0/24
194.50.206.0/23
195.88.147.0/24
195.138.103.0-195.138.107.255
195.138.111.0/24
195.138.114.0/24
195.138.120.0/24
195.211.48.0/24
195.216.248.0/24
Signature Algorithm: sha256WithRSAEncryption
78:bd:4b:52:ad:ca:e9:85:4c:6e:3f:99:1a:1d:ce:1b:1d:04:
c5:ca:1c:09:0e:61:1c:70:d9:dd:b1:a7:21:e0:b1:ac:92:0e:
77:08:0e:16:80:37:61:71:49:4b:b5:f4:c7:c8:16:d4:74:d4:
94:76:11:76:27:da:cd:3d:31:52:46:49:c0:31:6c:c2:b2:cf:
06:1f:eb:ad:7e:a5:02:ec:79:93:46:34:e5:e6:23:13:aa:95:
c7:7f:80:8a:b1:f6:20:6d:47:cd:e2:0a:38:e3:f9:e6:41:7a:
d3:b5:42:77:40:cb:84:63:2d:6c:c4:e6:55:dd:40:5d:8e:d6:
a1:ce:b3:0c:dd:e9:1a:77:c9:4f:fe:d1:32:b0:85:48:b1:3f:
d6:5a:28:10:b0:57:07:41:90:09:f3:0f:f3:d4:4a:16:da:5a:
b1:a0:c4:ae:d2:2c:35:81:2d:fc:00:e5:05:43:ce:b6:64:57:
13:58:76:00:2b:25:e4:52:21:21:bd:07:b9:a5:80:ba:a7:7d:
88:4a:93:ea:f4:0c:bb:7e:fc:36:b7:92:fb:3e:24:40:90:3f:
3d:da:b0:fb:a8:66:77:f9:5a:5a:07:7b:f0:46:61:4c:59:cb:
9a:6c:5f:b0:54:37:17:c0:54:00:9b:97:9c:40:94:0d:1f:ba:
03:57:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:10:29 2026 by rpki-client