Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/t2l4yAzjOlij6gTRgBqv7EnlgoI.roa
File: t2l4yAzjOlij6gTRgBqv7EnlgoI.roa (raw, json)
Hash identifier: IkTCiHAgmfqKf9DWDK0iqXOzM3D1JVhN80sC9d5A+VA=
Subject key identifier: B7:69:78:C8:0C:E3:3A:58:A3:EA:04:D1:80:1A:AF:EC:49:E5:82:82
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01A1452684677F29BCCC7A04D92BA362B90D
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/t2l4yAzjOlij6gTRgBqv7EnlgoI.roa
Signing time: Fri 16 Oct 2026 14:38:34 +0000
ROA not before: Fri 16 Oct 2026 14:38:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
188.215.73.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:26:84:67:7f:29:bc:cc:7a:04:d9:2b:a3:62:b9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Oct 16 14:38:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b76978c80ce33a58a3ea04d1801aafec49e58282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:5d:14:94:3a:d4:02:0c:b8:14:0a:a3:2c:
9f:66:26:36:ed:73:19:a0:94:74:f5:da:eb:1c:50:
b1:13:ff:f0:3e:1f:0f:61:c2:83:63:c3:00:bf:2c:
ea:6d:e2:32:a8:00:2f:47:06:41:0a:53:93:5e:31:
dc:cc:fa:2b:2d:16:71:85:ea:b2:86:53:f5:8b:99:
65:4d:ec:e7:be:08:9d:e7:4e:e1:f7:c4:9c:c4:db:
9a:3e:d4:98:ec:c6:49:92:e1:da:99:2d:ec:04:e0:
f9:9e:68:ef:e2:f3:5e:dd:a0:6e:8b:d6:a2:cc:de:
f6:91:3c:30:02:88:b2:b0:70:fb:c9:45:8d:9f:a5:
5a:2d:b2:1b:d5:49:3c:13:5d:63:72:38:42:f9:25:
68:a7:71:d5:82:8f:02:08:a4:07:5f:e0:92:fb:ba:
98:9b:e1:e8:d1:ac:7d:97:8e:73:c1:c1:4c:f6:61:
f2:78:a9:b1:b0:01:3e:c6:55:73:16:27:4c:77:0d:
1c:e9:04:9f:6f:19:54:93:be:9a:0c:3d:79:43:5c:
7f:34:97:d2:87:a2:e5:c9:54:61:47:64:b6:40:c9:
f6:3f:4c:51:d0:83:97:bd:44:65:f1:67:1b:c2:f2:
93:67:3f:64:3f:df:97:e2:7e:0c:0c:a3:df:e3:2b:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:69:78:C8:0C:E3:3A:58:A3:EA:04:D1:80:1A:AF:EC:49:E5:82:82
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/t2l4yAzjOlij6gTRgBqv7EnlgoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.46.0/24
89.44.209.0/24
89.45.34.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.215.95.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
b9:43:04:cb:3f:c0:e9:8c:28:01:f8:c7:20:88:93:62:eb:a4:
0a:a4:4c:f1:99:73:00:7b:fa:0b:50:08:cc:35:94:4e:66:71:
e7:65:54:a8:d3:4a:23:eb:d7:a4:df:d0:ea:25:54:16:ec:05:
b5:99:b4:de:1a:19:2e:ba:26:be:dd:40:fe:2e:9f:e3:58:ee:
c3:f0:c3:28:5f:f1:38:78:9c:c0:4a:e1:16:fe:3e:7e:85:d2:
a3:46:c6:e5:17:7c:34:e1:01:0c:0a:d9:07:85:92:13:f2:c8:
40:bb:6c:8f:b4:6e:32:c2:51:34:dc:a0:d6:1c:a6:4c:c0:02:
5e:b6:90:c8:a5:f1:ab:b8:5d:a1:23:c1:8b:20:4d:53:e8:b0:
b2:50:a1:c1:dd:a0:06:74:54:95:55:b8:71:c7:90:98:35:55:
fa:50:9c:f9:e7:f0:86:cf:e6:08:12:ee:8a:8f:c0:1e:3a:a1:
7f:a7:81:8b:4e:13:af:8a:a1:d8:d7:5a:72:4e:36:32:65:56:
ee:cc:5c:9e:f9:44:e0:21:58:1b:5c:83:e1:30:b7:33:1e:25:
fb:16:08:5c:fe:3c:74:64:76:31:88:20:ef:8a:be:d5:73:fe:
33:18:25:0a:1b:c5:84:8f:25:3f:db:17:b8:a9:71:33:30:86:
9a:02:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 16:22:36 2026 by rpki-client