Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/o1Brhy0vrwCO44FkpuElvXMmeY8.roa
File: o1Brhy0vrwCO44FkpuElvXMmeY8.roa (raw, json)
Hash identifier: d+8El5YKEmWY1Id7fdUIEWILBbUU74XQaJ/MUhUCADk=
Subject key identifier: A3:50:6B:87:2D:2F:AF:00:8E:E3:81:64:A6:E1:25:BD:73:26:79:8F
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A0EEEACAE01354503B85FA3C55DED8B481
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/o1Brhy0vrwCO44FkpuElvXMmeY8.roa
Signing time: Tue 29 Sep 2026 20:45:59 +0000
ROA not before: Tue 29 Sep 2026 20:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.68.87.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.68.145.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
93.177.104.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:ea:ca:e0:13:54:50:3b:85:fa:3c:55:de:d8:b4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 29 20:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3506b872d2faf008ee38164a6e125bd7326798f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:54:69:c2:ce:34:95:41:7b:a8:3b:ea:81:
aa:03:d0:ec:23:79:32:82:1e:e9:41:01:86:67:de:
36:99:b1:1f:14:44:7b:3c:dc:ee:10:14:17:5e:fa:
c6:74:97:b7:76:bf:7f:e0:1b:04:15:6f:25:47:38:
ce:58:54:ef:cd:ab:1e:6c:fa:ae:b9:6e:34:6d:22:
6c:84:5b:23:9c:d0:27:b6:e2:25:70:ca:11:f7:7a:
0a:2d:c1:ba:9b:16:e4:2e:98:7d:09:f2:38:34:23:
dc:17:92:3f:ca:3e:5b:83:07:18:e0:8f:00:6c:20:
d3:6b:1c:e7:c0:b5:de:ce:ff:de:c9:3e:a0:c0:fa:
fa:df:63:a5:44:73:5d:3d:06:26:53:df:0b:86:d5:
09:0a:ad:26:3a:89:ea:cf:7f:ad:a0:4c:07:32:33:
f4:3d:f2:ec:26:4e:e8:7d:b1:b6:88:d6:5f:3e:3a:
fe:d9:55:1a:a7:17:a5:02:46:87:51:ca:a1:b0:8b:
4b:b9:24:bc:0b:b9:16:fb:60:05:54:1b:a7:e2:0a:
c9:2f:65:e9:a5:53:a7:83:0a:9b:21:2b:c9:0c:d4:
83:98:a2:b4:60:51:da:98:a1:5f:72:66:de:0d:6a:
f6:a2:c1:c6:12:49:c9:87:72:f0:1b:10:59:dc:73:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:50:6B:87:2D:2F:AF:00:8E:E3:81:64:A6:E1:25:BD:73:26:79:8F
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/o1Brhy0vrwCO44FkpuElvXMmeY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/24
45.132.48.0/24
45.157.136.0/24
62.68.87.0/24
62.204.36.0/24
62.233.56.0/24
62.233.60.0/24
80.68.145.0/24
80.91.209.0-80.91.210.255
91.226.247.0/24
93.177.104.0/24
94.143.226.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
146.19.148.0/24
146.19.150.0/24
146.19.152.0/24
146.19.190.0/24
176.56.38.0/24
185.122.206.0/24
193.3.22.0/24
195.64.112.0/24
195.96.136.0/24
195.96.157.0/24
212.52.5.0/24
217.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
93:41:12:a1:8e:6c:3a:c4:a4:d6:66:b6:88:27:e7:5a:d4:b8:
a6:5a:05:ff:89:8a:d2:63:67:f4:ca:b2:53:81:cd:b7:51:6c:
4a:d8:48:31:ba:78:ae:d3:22:01:0b:92:10:91:8a:d7:5d:0a:
cb:1b:f8:6a:d6:47:e1:bd:d5:d5:01:a8:54:8b:74:a7:49:e3:
16:08:f1:8a:14:cb:dc:bc:d2:9b:a3:68:d1:91:fd:fe:9e:f8:
2f:f1:25:87:78:19:02:67:1c:45:bd:23:aa:6a:6b:4d:7d:f9:
a3:b5:94:97:15:4c:2a:75:24:af:82:8d:98:ac:49:16:59:51:
d9:d8:5f:5e:96:fc:6a:24:1f:b6:b5:09:f8:07:55:58:f9:fd:
25:c3:ea:2d:0d:fd:9c:5a:80:87:5d:32:43:77:65:ee:cd:ea:
ee:33:6d:40:13:25:b0:b9:e5:3d:7f:dc:96:37:24:a1:be:47:
59:b9:e2:76:ce:75:c9:b2:66:d4:80:0e:37:f2:d7:4d:b6:b1:
cc:f5:65:e0:a0:3a:fd:15:b7:9a:2e:11:2c:5f:d6:ab:1b:bd:
df:29:f8:67:28:0e:eb:2c:3b:b2:3b:47:1a:77:da:66:7b:af:
08:1f:8b:2e:46:02:6d:64:c5:43:72:5e:1a:2f:0f:08:de:99:
18:37:56:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:36:31 2026 by rpki-client