Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/641FF9WcOr2zp5VArznhsxuXijE.roa
File: 641FF9WcOr2zp5VArznhsxuXijE.roa (raw, json)
Hash identifier: MthMIOEXGUb8jrJgQoFKRddAxAdKtXmipSiyScG0pEA=
Subject key identifier: EB:8D:45:17:D5:9C:3A:BD:B3:A7:95:40:AF:39:E1:B3:1B:97:8A:31
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01A0442375F42A9613A33CE5E90D43C37F1F
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/641FF9WcOr2zp5VArznhsxuXijE.roa
Signing time: Thu 27 Aug 2026 16:52:49 +0000
ROA not before: Thu 27 Aug 2026 16:52:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.41.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.73.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:23:75:f4:2a:96:13:a3:3c:e5:e9:0d:43:c3:7f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Aug 27 16:52:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb8d4517d59c3abdb3a79540af39e1b31b978a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:10:26:cd:c8:4d:ad:84:13:e2:2a:59:4e:
43:10:54:5d:4c:85:08:96:28:6a:4b:c6:11:3c:4e:
33:7c:93:e8:09:e0:93:1b:ea:24:bb:08:60:3d:e9:
21:00:b6:b4:6f:f5:1f:2e:dc:55:bf:00:09:b4:22:
cc:b9:e7:a8:86:2c:a4:40:dc:64:38:bb:ae:c2:1c:
45:91:ba:7e:9b:8c:29:20:0d:d5:23:a6:a3:fd:0b:
fb:bd:a9:f3:3f:3e:67:05:2f:76:0f:b2:f6:8f:60:
ca:ef:36:f1:8c:97:39:9e:72:8f:46:39:d7:9b:40:
c1:b4:0d:84:c2:5c:0c:20:a6:9c:4b:89:ec:dc:56:
e0:dd:6f:4d:d0:73:60:f5:6b:89:e6:81:0b:29:1f:
2b:57:fa:1a:5a:38:cf:1a:30:14:d1:80:86:bd:5a:
c8:f1:c9:d7:37:71:b2:58:23:ed:c7:b8:41:c2:fe:
22:e0:68:54:80:61:44:77:2a:65:5f:88:46:18:ce:
a0:2c:45:28:73:7d:34:69:9a:9f:ed:78:aa:b1:fc:
2d:4b:b9:7e:27:8d:ff:f1:c0:86:00:3d:6a:2e:5f:
38:b3:99:b1:55:8b:33:38:51:5d:7a:79:a1:b3:f6:
67:eb:ae:31:08:a4:57:a8:68:fd:f1:07:22:7b:46:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8D:45:17:D5:9C:3A:BD:B3:A7:95:40:AF:39:E1:B3:1B:97:8A:31
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/641FF9WcOr2zp5VArznhsxuXijE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.41.0/24
89.43.46.0/24
89.44.209.0/24
89.45.34.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.73.0/24
188.215.95.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
1d:e7:f7:e3:2c:dd:63:89:9e:7c:e8:b5:28:78:05:71:e2:40:
a6:c9:e2:f9:c8:2b:ad:59:6e:42:f1:83:31:b8:b0:c2:8f:99:
97:e5:ea:b2:8d:93:34:0b:6c:54:f9:51:11:bc:f0:1f:d6:67:
6d:99:ba:b5:81:60:a8:6f:4f:81:0d:e1:75:54:85:8d:88:88:
5b:5e:5b:88:3f:6a:67:4d:db:39:b9:ac:d5:c0:a6:25:45:ee:
97:a1:16:49:14:10:90:81:bf:16:0b:77:fd:bf:00:e5:71:db:
99:9f:4d:44:6b:3a:b9:9e:63:fd:ac:25:6e:c0:be:28:dd:22:
68:d1:84:25:20:e7:78:dd:39:01:e6:4b:fe:f2:91:12:79:ab:
ac:ed:f5:93:1f:cc:85:09:23:9b:60:11:6e:b3:ef:6d:57:35:
b1:1c:35:f4:86:c6:65:a7:17:14:fc:b6:fa:80:15:72:77:61:
45:f0:26:26:81:7a:f5:3e:2f:c3:0a:d6:60:d8:85:60:7f:97:
83:ff:a5:22:38:23:f9:2e:34:bf:75:c8:a0:10:19:48:69:a0:
98:81:98:98:f7:7c:11:fe:46:5c:58:5a:65:27:02:ff:bb:aa:
d7:b1:a1:a4:e5:14:ff:d8:09:94:3c:32:71:d2:71:57:ac:27:
e3:18:6b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:25 2026 by rpki-client