Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DRHeZ3f1ONc80xQ53CvNd9nVkDU.roa
File: DRHeZ3f1ONc80xQ53CvNd9nVkDU.roa (raw, json)
Hash identifier: /on878yhcVsuOzpA7ldnqgnD18dto04cSFRJ/PtgJt0=
Subject key identifier: 0D:11:DE:67:77:F5:38:D7:3C:D3:14:39:DC:2B:CD:77:D9:D5:90:35
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019F46E24FDC78CF8018957EB8A4CE70F020
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DRHeZ3f1ONc80xQ53CvNd9nVkDU.roa
Signing time: Thu 09 Jul 2026 12:37:44 +0000
ROA not before: Thu 09 Jul 2026 12:37:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 2.59.48.0/24 maxlen: 24
31.222.240.0/24 maxlen: 24
31.222.243.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.220.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
45.89.68.0/24 maxlen: 24
45.89.71.0/24 maxlen: 24
45.147.168.0/22 maxlen: 22
91.188.220.0/24 maxlen: 24
94.158.188.0/24 maxlen: 24
176.56.35.0/24 maxlen: 24
176.56.36.0/24 maxlen: 24
176.124.34.0/24 maxlen: 24
185.212.112.0/24 maxlen: 24
185.234.8.0/24 maxlen: 24
193.201.114.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
195.69.150.0/24 maxlen: 24
195.96.150.0/24 maxlen: 24
195.225.96.0/24 maxlen: 24
212.18.100.0/24 maxlen: 24
212.18.122.0/24 maxlen: 24
212.52.4.0/24 maxlen: 24
213.109.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:e2:4f:dc:78:cf:80:18:95:7e:b8:a4:ce:70:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 9 12:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d11de6777f538d73cd31439dc2bcd77d9d59035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:fa:5e:01:72:1b:f3:16:8d:1e:1a:13:d7:
2b:aa:50:bd:6e:54:b3:17:a7:98:58:27:db:bf:8d:
9f:6e:19:17:51:14:16:fb:15:cd:e1:7d:da:69:74:
b6:ca:9c:25:96:55:85:07:99:bd:e2:b1:01:ae:47:
93:a2:e2:21:45:36:8f:48:58:c0:d6:ea:8a:6b:29:
d4:32:ac:bc:e2:ea:69:1c:1d:ad:9b:ed:2b:67:21:
6c:13:4e:1b:70:72:61:01:ba:d4:78:2b:9d:b4:80:
d3:2f:95:69:42:99:84:8f:42:99:3c:f1:f3:98:cc:
11:13:98:a4:00:b1:ed:40:80:99:b3:3f:e3:20:69:
eb:46:ca:72:ab:eb:ea:f7:7d:14:7e:37:4f:0b:e8:
4a:e2:39:fe:19:58:00:c9:bb:3c:7e:3e:bc:1a:c1:
56:20:45:c2:8c:a9:02:30:cb:4c:76:a0:04:20:6d:
3d:94:74:28:23:e3:47:14:15:27:68:42:37:69:b4:
4f:37:28:da:40:3b:e8:d8:8d:a0:3b:ba:9d:e7:c2:
a4:7e:58:25:fb:23:7b:e8:80:2f:18:ec:c5:26:c5:
da:98:c2:b2:30:5c:91:ce:42:4a:9e:a9:80:d0:52:
d0:57:eb:50:00:9e:73:42:9d:ba:04:01:23:87:ba:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:11:DE:67:77:F5:38:D7:3C:D3:14:39:DC:2B:CD:77:D9:D5:90:35
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DRHeZ3f1ONc80xQ53CvNd9nVkDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
31.222.240.0/24
31.222.243.0/24
37.221.80.0/24
45.11.22.0/24
45.14.220.0/23
45.89.68.0/24
45.89.71.0/24
45.147.168.0/22
91.188.220.0/24
94.158.188.0/24
176.56.35.0-176.56.36.255
176.124.34.0/24
185.212.112.0/24
185.234.8.0/24
193.201.114.0/24
194.32.240.0/24
195.69.148.0/24
195.69.150.0/24
195.96.150.0/24
195.225.96.0/24
212.18.100.0/24
212.18.122.0/24
212.52.4.0/24
213.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
34:37:e9:d4:5a:85:eb:89:bc:dd:5e:fc:3e:cf:1a:ca:5b:f9:
00:24:0a:ed:47:46:a5:1c:5d:8f:20:f8:3a:07:57:ed:fd:be:
87:d6:07:fd:f0:fc:2f:dc:3a:05:2a:ba:32:b3:c8:fd:55:77:
30:66:21:5b:3c:4e:9b:0d:af:82:f7:4c:39:9a:eb:d0:be:61:
84:5e:12:1f:56:e6:49:d0:88:2a:c6:70:f4:14:e0:fd:58:37:
09:a0:dd:7c:9f:e6:a9:bd:dd:12:c2:7c:fd:5f:27:ef:42:90:
0d:f5:ce:88:ee:41:dc:5f:ca:5f:f3:7a:a3:22:34:76:87:7a:
b0:73:dc:05:97:88:65:b5:f0:fe:d7:be:53:75:2d:9f:f8:b8:
45:7c:d0:7c:f5:1f:45:d7:46:c4:98:de:3f:3c:c8:84:ff:ce:
8d:80:b4:06:03:01:cb:96:17:aa:0b:9f:8b:00:b7:bd:d9:1f:
26:07:5b:9c:c0:99:17:6a:e8:94:19:12:3e:ad:79:1e:42:c9:
3e:0d:98:2e:62:07:b0:89:d5:d4:9f:50:b9:32:b3:0f:15:15:
ba:7a:be:5e:14:de:ee:a0:ab:50:c9:02:fe:73:29:fa:57:ef:
57:73:ac:e9:11:d5:92:39:8b:75:b4:b7:8f:3b:18:0a:84:b0:
40:d9:11:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 12 06:55:47 2026 by rpki-client