Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1bgTdaxo6VbA5jEACErsIVm2nEg.roa
File: 1bgTdaxo6VbA5jEACErsIVm2nEg.roa (raw, json)
Hash identifier: i12POeax3AuW8urZEKO52dQ292GhjS1byhLsGeWAwYQ=
Subject key identifier: D5:B8:13:75:AC:68:E9:56:C0:E6:31:00:08:4A:EC:21:59:B6:9C:48
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A1377FE5E301151FC27E5A07FC28DA3BF3
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1bgTdaxo6VbA5jEACErsIVm2nEg.roa
Signing time: Tue 13 Oct 2026 23:01:31 +0000
ROA not before: Tue 13 Oct 2026 23:01:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12722
IP address blocks: 2.59.48.0/24 maxlen: 24
31.222.240.0/24 maxlen: 24
31.222.243.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.220.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
45.80.120.0/22 maxlen: 22
45.89.68.0/24 maxlen: 24
45.89.71.0/24 maxlen: 24
94.158.188.0/24 maxlen: 24
176.56.35.0/24 maxlen: 24
176.56.36.0/24 maxlen: 24
185.234.8.0/24 maxlen: 24
193.201.114.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
213.109.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:e5:e3:01:15:1f:c2:7e:5a:07:fc:28:da:3b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 13 23:01:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5b81375ac68e956c0e63100084aec2159b69c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:f7:41:a8:a2:e6:e9:bc:8b:10:bf:7d:8f:
de:2a:86:8f:2b:c9:6d:dc:2b:27:09:c9:75:f0:d8:
10:e2:6f:87:ca:d2:91:cd:7c:2a:93:f6:ed:d7:59:
fb:27:e8:ab:60:5a:62:85:2d:ae:db:54:be:d7:27:
1d:fa:1a:5e:81:f1:2e:57:f5:37:77:2b:40:11:92:
9d:91:c2:c3:66:49:f3:87:fa:cc:cc:02:26:a2:d8:
0b:77:6b:7c:19:b6:9a:f1:dd:90:35:e9:5c:b8:82:
47:d5:17:e5:a3:4d:30:c9:38:60:18:4b:ce:0b:77:
b3:96:3d:f2:27:83:8e:c2:e3:4b:b1:c8:f1:5c:1b:
d5:1d:f2:62:a4:25:f5:0e:34:3d:02:58:7f:a3:0c:
5f:a9:81:e6:9f:a7:b7:6d:0b:1d:bd:da:37:c8:e1:
80:ba:1d:ef:00:88:90:04:f3:37:69:07:c6:f8:1e:
73:9a:22:8b:09:3a:47:fa:e0:5e:61:3d:f6:8a:68:
1a:a0:f7:ec:24:00:58:4f:3c:b0:51:39:46:a0:d9:
54:db:00:02:0c:f3:b0:de:b3:c3:60:cc:8f:79:c5:
e9:52:05:61:4f:7e:0a:7a:8c:c6:25:37:34:ac:70:
33:c7:3a:a5:a5:3c:bc:13:61:fc:f2:a2:02:98:ba:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:13:75:AC:68:E9:56:C0:E6:31:00:08:4A:EC:21:59:B6:9C:48
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1bgTdaxo6VbA5jEACErsIVm2nEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
31.222.240.0/24
31.222.243.0/24
37.221.80.0/24
45.11.22.0/24
45.14.220.0/23
45.80.120.0/22
45.89.68.0/24
45.89.71.0/24
94.158.188.0/24
176.56.35.0-176.56.36.255
185.234.8.0/24
193.201.114.0/24
194.32.240.0/24
195.69.148.0/24
213.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ac:b3:87:b2:b0:ca:63:8a:f7:e4:aa:f1:12:e9:0c:84:b0:
32:6a:d2:0d:ad:b2:21:7b:11:3e:78:b5:cb:c5:8b:63:06:fc:
9b:a7:97:2d:19:4f:19:05:32:4a:a5:43:25:4e:c5:33:5b:d3:
f0:15:5e:f4:8e:e6:5a:fe:ec:18:d5:7c:94:27:96:3b:56:d2:
da:c6:3c:72:a0:c0:05:c4:79:ba:47:71:0e:13:58:bf:47:05:
a3:ad:da:4c:4e:13:53:7f:f4:a8:0e:d0:8c:e1:75:b3:31:d4:
a4:2a:9f:ac:2d:6c:c5:89:c1:23:19:ac:f5:96:20:f4:ff:30:
ff:2e:35:71:97:84:cd:95:84:a0:80:02:79:35:33:b9:71:ac:
8e:ad:bc:36:81:3e:3b:f5:2a:b7:1c:1f:8d:56:60:48:a0:f1:
1e:82:08:16:6e:10:35:32:1b:49:a5:d5:27:c1:d7:33:c1:b7:
c2:43:8c:d7:a5:1a:a4:65:fe:2d:cf:8a:e4:81:63:b5:8d:0f:
f7:af:1b:07:24:e9:72:a2:7e:f0:32:9b:79:a6:c0:ec:fa:be:
c5:18:93:a3:00:1f:fc:a7:3e:01:6c:e4:b0:de:2e:c2:eb:86:
df:45:0d:ae:ec:3a:97:12:31:ed:65:26:82:3e:d4:a6:49:77:
af:6a:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:17 2026 by rpki-client