Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m7lBLbiWIpYETPuTbQ2jeFSQEtU.roa
File: m7lBLbiWIpYETPuTbQ2jeFSQEtU.roa (raw, json)
Hash identifier: 8rsqQJBCHWiKNfGKjrBiov4JpX8sXPXIt2gxvYvqRr0=
Subject key identifier: 9B:B9:41:2D:B8:96:22:96:04:4C:FB:93:6D:0D:A3:78:54:90:12:D5
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A0580BA383C03C9512FBB88DBEFE0DF6E9
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m7lBLbiWIpYETPuTbQ2jeFSQEtU.roa
Signing time: Mon 31 Aug 2026 13:39:12 +0000
ROA not before: Mon 31 Aug 2026 13:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.68.87.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.68.145.0/24 maxlen: 24
80.68.158.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
93.177.104.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 16:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:0b:a3:83:c0:3c:95:12:fb:b8:8d:be:fe:0d:f6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 31 13:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bb9412db8962296044cfb936d0da378549012d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:6a:93:c3:24:27:66:a9:f4:6a:19:41:a3:
99:5b:cd:6d:24:de:28:6e:47:7b:0f:75:df:70:4e:
e0:ba:23:bd:6b:8f:a0:51:b8:23:b2:df:cc:2d:14:
67:30:ca:64:43:39:e7:08:09:4b:62:b9:b7:59:eb:
bb:74:b3:df:f7:7e:b8:0b:d2:ed:1e:35:0d:aa:54:
2d:52:23:60:98:4e:88:b4:61:34:52:f0:d8:3d:0d:
71:d1:a8:ec:84:ea:ed:2d:f9:e5:0d:74:3e:be:58:
55:2d:bb:e6:71:a4:0c:1f:62:4b:7e:72:4e:1e:2c:
e3:a7:52:ac:48:58:85:39:21:b9:ad:bb:29:54:51:
79:10:3e:25:e6:bf:77:a8:9c:79:6c:72:e9:24:e7:
76:45:68:04:76:a3:ac:6c:e0:ee:37:ab:01:56:bb:
d6:af:21:3c:c2:e9:10:57:46:62:e5:07:fb:bf:23:
8c:d5:44:64:3e:31:80:15:ed:31:f7:e9:f5:60:6a:
5f:ce:77:3c:e7:8d:ce:fe:38:84:97:c1:79:08:51:
7b:3a:99:86:4a:0d:4a:9a:45:fc:f6:cb:01:6d:2e:
53:37:84:76:cc:f3:68:6f:19:fa:f6:8a:4f:09:b5:
a0:f8:42:8d:f6:bc:37:54:1f:8a:0e:4d:19:03:4e:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B9:41:2D:B8:96:22:96:04:4C:FB:93:6D:0D:A3:78:54:90:12:D5
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m7lBLbiWIpYETPuTbQ2jeFSQEtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/24
45.132.48.0/24
45.157.136.0/24
62.68.87.0/24
62.204.36.0/24
62.233.56.0/24
62.233.60.0/24
80.68.145.0/24
80.68.158.0/24
80.91.209.0-80.91.210.255
91.226.247.0/24
93.177.104.0/24
94.143.226.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
146.19.148.0/24
146.19.150.0/24
146.19.152.0/24
146.19.190.0/24
176.56.38.0/24
185.122.206.0/24
185.218.1.0/24
193.3.22.0/24
195.64.112.0/24
195.96.136.0/24
195.96.157.0/24
212.52.5.0/24
217.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4c:67:c6:18:50:ea:f3:0b:fa:5e:35:f0:f9:70:d8:fb:bc:
96:f6:5f:e2:b3:9d:8b:f3:ea:47:26:57:9e:78:27:0d:5d:58:
6d:2d:d8:f9:9a:2f:f2:40:e1:7e:52:6e:3a:2d:a7:c7:f7:e5:
0d:81:bd:a9:70:49:c9:de:b5:be:8d:4d:ee:6c:33:10:40:27:
19:7b:c1:1e:db:5a:23:41:be:c7:0b:b0:63:0d:77:c6:b5:1a:
d9:1d:0f:38:2c:99:5a:3a:44:c1:80:51:d6:3f:86:f1:42:a1:
c0:d7:de:b9:55:86:8c:77:67:a3:46:19:2d:bf:ed:69:89:f6:
f1:fc:94:0f:4f:13:06:80:d4:78:a7:9a:bb:6a:4c:4b:0a:26:
f1:43:09:8e:63:2b:85:af:79:5f:8d:dc:38:84:b6:17:3b:3e:
15:f8:e6:c8:80:18:51:bd:46:a1:94:03:cf:4b:cc:6f:27:16:
4b:2e:05:24:72:3b:d6:f5:4d:f6:d0:93:ea:93:7e:80:24:ba:
18:f5:d6:cf:dd:98:de:05:00:6a:be:43:b0:b9:85:58:d7:3e:
02:b9:4b:0b:bd:52:9e:d7:d0:a5:22:be:2f:0d:b2:8b:5a:a7:
aa:35:43:e6:96:09:9e:2b:36:e9:c3:9e:8f:79:bf:86:b9:44:
fd:79:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 21:38:10 2026 by rpki-client