Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/6bAJsmzIb5hQD9MPtnue6M1tUPE.roa
File: 6bAJsmzIb5hQD9MPtnue6M1tUPE.roa (raw, json)
Hash identifier: z6oo7+7aynnVl378/wDKFY5QnQk8ue6CTF/VgMvGnUc=
Subject key identifier: E9:B0:09:B2:6C:C8:6F:98:50:0F:D3:0F:B6:7B:9E:E8:CD:6D:50:F1
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A1377FE65196D34EBD17B54DAFBBACF435
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/6bAJsmzIb5hQD9MPtnue6M1tUPE.roa
Signing time: Tue 13 Oct 2026 23:01:31 +0000
ROA not before: Tue 13 Oct 2026 23:01:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:e6:51:96:d3:4e:bd:17:b5:4d:af:bb:ac:f4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 13 23:01:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9b009b26cc86f98500fd30fb67b9ee8cd6d50f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:96:17:98:df:a1:9d:b9:d8:59:1f:a4:aa:
96:fc:aa:87:03:9a:cd:6d:83:87:97:bc:bd:3a:18:
08:3e:69:ac:32:23:66:95:2e:8a:35:94:50:c5:85:
d6:a3:d2:1d:a2:30:b5:7d:b3:62:4c:e4:72:f3:1b:
76:1c:ba:5f:2e:4f:34:f5:5d:86:04:b0:24:29:d3:
88:65:49:88:f8:36:07:69:40:b7:14:0a:b1:7f:97:
4a:ae:55:10:40:ad:5b:39:d6:2a:85:72:a9:bb:e8:
22:ce:1a:d8:44:44:ba:a0:d9:80:93:53:17:8a:d8:
c9:9d:02:38:29:36:6b:c3:a7:0f:94:49:d0:b6:e3:
ad:d7:4a:27:5d:0e:be:b7:0a:c9:c0:0b:c4:15:6c:
54:92:50:d6:d8:2d:e1:34:f2:f7:5a:af:15:54:13:
65:00:ba:9b:c4:64:3b:b9:d7:84:26:9d:34:cd:90:
82:60:28:14:49:9d:2e:d8:3a:23:c1:c2:1f:aa:78:
b8:3b:4c:12:1e:91:70:dc:2d:2d:8f:e4:78:be:6e:
70:5b:79:38:65:ea:25:cb:b8:10:b7:93:d1:d3:18:
4f:37:4b:63:d3:c3:ff:bc:57:5b:7e:ac:7a:44:86:
f5:4e:b9:41:4d:5e:01:76:ea:e5:1a:47:da:74:11:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B0:09:B2:6C:C8:6F:98:50:0F:D3:0F:B6:7B:9E:E8:CD:6D:50:F1
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/6bAJsmzIb5hQD9MPtnue6M1tUPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/24
45.132.48.0/24
45.157.136.0/24
62.204.36.0/24
62.233.56.0/24
80.91.209.0-80.91.210.255
91.226.247.0/24
130.193.79.0/24
130.255.169.0/24
146.19.148.0/24
146.19.152.0/24
146.19.190.0/24
176.56.38.0/24
185.122.206.0/24
193.3.22.0/24
195.64.112.0/24
195.96.136.0/24
212.52.5.0/24
Signature Algorithm: sha256WithRSAEncryption
16:77:42:3c:db:52:c6:18:7d:f4:fa:c1:18:77:f0:64:b3:e0:
ff:51:ec:cc:60:89:86:c8:f9:9a:92:c7:5f:0d:4f:19:d1:74:
c6:c6:fd:1e:7f:13:82:98:a6:f0:22:0d:29:b3:9f:3d:8a:86:
0c:ac:d3:96:5b:bc:55:d1:18:47:bf:5e:32:58:07:fa:d8:65:
d9:da:c6:6b:ef:83:dc:e2:55:fc:94:35:fb:4e:2b:d5:a3:fa:
cc:39:d4:61:61:63:ee:d7:7f:79:69:3f:64:37:a2:cb:17:be:
19:9d:e5:8b:d9:90:68:01:c3:f3:41:a2:e2:4e:dd:48:0d:2e:
71:ab:79:82:9e:d4:2e:d4:12:43:38:2b:c8:b7:5c:cb:16:b4:
4d:d9:fd:e2:5b:9f:48:5e:03:f5:94:6d:e6:f6:95:8b:d7:dd:
61:e2:eb:47:21:d3:1e:a1:36:1a:2c:20:3c:a6:93:0d:6d:9d:
15:08:12:af:91:15:db:ae:cd:3f:9a:71:1a:f4:8d:45:1a:91:
fc:50:84:be:6e:63:71:07:bc:42:4c:da:da:3d:5c:a1:08:f8:
62:09:af:16:45:93:83:99:bf:25:5d:15:cc:18:ab:85:94:d3:
3e:fa:2e:30:47:09:29:4b:8c:3e:21:16:f4:0f:71:d2:6d:d8:
b2:cc:af:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:22:40 2026 by rpki-client