Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_VwyhGqaY1U3LJ0JYO3meT-GJyA.roa
File: _VwyhGqaY1U3LJ0JYO3meT-GJyA.roa (raw, json)
Hash identifier: YJm1LgV7TG5/GmoKWi2H2N4gkb3rCRuCkiW/e0qrxjM=
Subject key identifier: FD:5C:32:84:6A:9A:63:55:37:2C:9D:09:60:ED:E6:79:3F:86:27:20
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A08C3C283D422797C7E4DD3550FFA71A82
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_VwyhGqaY1U3LJ0JYO3meT-GJyA.roa
Signing time: Thu 10 Sep 2026 16:52:27 +0000
ROA not before: Thu 10 Sep 2026 16:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.68.87.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.68.145.0/24 maxlen: 24
80.68.158.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
93.177.104.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:3c:28:3d:42:27:97:c7:e4:dd:35:50:ff:a7:1a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 10 16:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd5c32846a9a6355372c9d0960ede6793f862720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:51:42:e3:93:80:4e:ef:01:ec:da:7e:4d:
ce:26:82:75:9f:81:a3:63:b6:f9:20:b3:e4:25:de:
4c:11:d5:ab:b8:cd:58:55:cf:3c:3f:27:94:45:f9:
bf:64:61:31:ee:23:62:66:23:bb:58:88:ea:e3:89:
3d:db:c7:34:89:15:d0:04:18:c6:b8:c1:a5:b1:77:
28:0b:1a:03:ad:84:9c:55:cb:53:e9:4d:ce:78:a4:
be:8d:9d:f4:1e:c3:1b:50:06:9b:5a:b6:02:b1:f7:
7b:c6:e0:0d:c3:d6:11:67:ff:6d:21:30:f7:4c:ce:
c3:c6:21:6b:87:43:34:22:44:cb:6f:39:5d:04:a9:
03:fd:d4:32:eb:e0:ee:69:2e:20:5f:9c:77:03:40:
4e:93:b7:f2:6f:22:13:c0:b9:de:d9:17:fe:73:88:
fe:c9:40:0b:0a:f0:6f:e0:50:fb:53:88:6e:a8:5c:
7b:1e:57:bd:a7:0a:7b:5a:eb:6f:09:d7:38:eb:e0:
25:00:fe:ab:f2:aa:c2:c9:21:58:99:0b:1b:22:ac:
7c:13:0d:20:15:1c:bb:b0:44:ed:58:c2:9e:f1:8e:
d5:54:d1:3a:1d:c3:11:35:f4:68:8d:3f:8d:2b:51:
b2:e8:9f:e0:d3:0a:60:02:40:51:08:18:60:ec:a6:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5C:32:84:6A:9A:63:55:37:2C:9D:09:60:ED:E6:79:3F:86:27:20
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_VwyhGqaY1U3LJ0JYO3meT-GJyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/24
45.132.48.0/24
45.157.136.0/24
62.68.87.0/24
62.204.36.0/24
62.233.56.0/24
62.233.60.0/24
80.68.145.0/24
80.68.158.0/24
80.91.209.0-80.91.210.255
91.226.247.0/24
93.177.104.0/24
94.143.226.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
146.19.148.0/24
146.19.150.0/24
146.19.152.0/24
146.19.190.0/24
176.56.38.0/24
185.122.206.0/24
193.3.22.0/24
195.64.112.0/24
195.96.136.0/24
195.96.157.0/24
212.52.5.0/24
217.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9b:66:1c:8e:25:0c:c6:26:44:54:1f:a5:93:b2:a2:7d:87:
bd:4d:14:36:ec:fe:9e:7a:1d:f9:05:7e:e6:40:6b:bc:68:53:
4e:0c:4b:c8:c7:c1:35:c0:0e:1b:36:c0:04:05:ee:bd:c8:b3:
50:28:b7:a8:60:27:9c:bd:fd:ce:1c:e3:13:d2:63:a6:2c:d5:
74:be:09:cb:89:fe:97:c2:89:8c:ab:5d:85:ff:34:40:99:7b:
75:a6:61:48:f0:b5:85:a2:91:42:72:3d:a7:78:24:92:0a:c0:
38:83:c2:cb:7c:4f:2c:6e:92:ba:69:1b:5e:52:bc:94:2d:11:
1e:45:69:24:df:ff:0a:19:7d:3c:7c:74:61:b1:63:d0:74:1e:
17:04:66:10:ce:a4:13:05:3a:38:37:43:a4:a6:a0:a5:8f:19:
5b:70:7e:b2:df:0f:d8:a5:e6:2a:bf:02:69:ff:64:7b:ac:a6:
8b:7b:41:63:18:45:3f:3b:ed:2a:51:6b:a9:df:b2:45:f4:01:
fd:4b:e8:b6:cb:7c:36:50:79:f5:ce:3a:b6:b4:3a:b9:52:ab:
89:ad:5f:38:7c:ea:c7:cd:9f:0d:35:ce:4c:96:39:1c:0c:7c:
c9:e1:da:f1:cb:b3:18:c2:8f:b2:cd:db:ee:5f:74:50:50:06:
35:d9:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:49:35 2026 by rpki-client