Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DIX9eljRNvMb6RPGOZvKzZ0z6Vo.roa
File: DIX9eljRNvMb6RPGOZvKzZ0z6Vo.roa (raw, json)
Hash identifier: 0/TuXFNpuIdIEhT7vryz094IU0zferh9MZiFEpkLDYc=
Subject key identifier: 0C:85:FD:7A:58:D1:36:F3:1B:E9:13:C6:39:9B:CA:CD:9D:33:E9:5A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A0F33AEC35FE6416735A875F0FCFB32C2E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DIX9eljRNvMb6RPGOZvKzZ0z6Vo.roa
Signing time: Wed 30 Sep 2026 16:52:00 +0000
ROA not before: Wed 30 Sep 2026 16:52:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12722
IP address blocks: 2.59.48.0/24 maxlen: 24
31.222.240.0/24 maxlen: 24
31.222.243.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.220.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
45.80.120.0/22 maxlen: 22
45.89.68.0/24 maxlen: 24
45.89.71.0/24 maxlen: 24
94.158.188.0/24 maxlen: 24
176.56.35.0/24 maxlen: 24
176.56.36.0/24 maxlen: 24
176.124.34.0/24 maxlen: 24
185.234.8.0/24 maxlen: 24
193.201.114.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
213.109.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:3a:ec:35:fe:64:16:73:5a:87:5f:0f:cf:b3:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 30 16:52:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c85fd7a58d136f31be913c6399bcacd9d33e95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:14:b1:a3:a5:25:a4:25:98:14:46:55:69:
95:0e:b6:ae:e8:44:2b:5e:9c:f2:63:26:36:36:22:
21:c6:23:fa:30:ec:a3:ee:bd:17:ee:29:0b:de:65:
ab:39:8e:e7:eb:bf:2c:e6:e5:c1:b4:b4:df:f4:49:
e4:7d:bc:22:5f:3c:97:21:f4:01:8e:59:9a:c5:34:
f3:1a:a1:bd:5e:6b:d5:c0:85:70:47:07:20:8d:65:
e1:13:72:c0:e7:32:aa:28:38:de:d6:01:51:ae:bc:
3b:23:7a:b1:bb:6e:78:e7:93:ef:61:69:b1:c5:27:
0e:c6:95:10:72:84:b8:24:9e:d6:9d:3f:30:db:7e:
70:74:93:2b:a5:ce:65:80:8b:f3:24:ae:d4:63:93:
ad:96:07:53:06:b3:ec:ad:f9:f6:18:ac:66:34:c1:
00:83:e2:3c:89:3a:76:cf:45:96:7b:35:e8:ec:4a:
7b:08:3d:7d:30:33:cf:a0:06:a0:d2:45:e6:53:ca:
bd:bd:aa:fc:7e:77:07:a5:40:52:dd:c1:ca:95:e3:
a9:39:27:ee:2c:b8:40:f2:b8:44:27:ab:5b:73:7f:
13:7f:e8:0b:fb:09:e5:7b:c1:8c:a3:e4:f1:6b:e6:
b9:33:20:fc:9f:e1:88:62:e4:9d:1c:34:16:6d:86:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:85:FD:7A:58:D1:36:F3:1B:E9:13:C6:39:9B:CA:CD:9D:33:E9:5A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DIX9eljRNvMb6RPGOZvKzZ0z6Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
31.222.240.0/24
31.222.243.0/24
37.221.80.0/24
45.11.22.0/24
45.14.220.0/23
45.80.120.0/22
45.89.68.0/24
45.89.71.0/24
94.158.188.0/24
176.56.35.0-176.56.36.255
176.124.34.0/24
185.234.8.0/24
193.201.114.0/24
194.32.240.0/24
195.69.148.0/24
213.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
19:66:9e:f2:35:98:5c:b9:14:d0:d4:19:93:52:5c:a7:11:55:
a0:42:b0:b7:2a:a3:21:7b:14:45:71:2b:89:f2:06:84:0b:59:
a5:15:ef:93:f5:93:02:d3:56:81:78:4b:7e:0e:54:e7:20:09:
83:3c:e4:a7:e4:65:39:89:b8:ea:75:4a:06:63:84:32:82:a1:
6e:f4:31:5e:02:d7:eb:9e:21:c6:6f:ec:e5:7b:56:e8:f0:42:
01:8f:14:32:8e:75:85:07:14:89:d2:29:71:bf:3c:94:bd:fb:
af:f6:45:a2:01:f4:b0:d9:14:e8:e4:2c:57:c6:ef:d0:54:4c:
fa:c4:26:7e:62:3c:71:fc:1f:d3:b2:ff:85:37:57:c9:f1:54:
ea:de:4a:be:29:4a:7f:d1:fd:e1:3c:ef:bc:b1:b1:c4:a6:01:
dc:84:29:f6:ee:cd:78:6c:aa:b8:64:e4:6b:cf:45:17:57:0b:
18:c1:92:57:bf:f2:28:e7:fd:e6:62:1f:5d:18:43:c4:04:36:
43:ac:52:89:0d:42:3a:66:9a:2f:4c:57:c4:59:04:18:d2:ac:
e7:d6:bb:b8:2e:b8:ec:51:84:05:a0:15:29:36:f2:2b:b2:e2:
86:98:2d:a2:b7:23:f3:e6:22:ce:56:d5:f0:6e:15:c4:2c:40:
2b:94:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:04:56 2026 by rpki-client