Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/anTJWEQp0i6KTaSXHOsTHQh5WnE.roa
File: anTJWEQp0i6KTaSXHOsTHQh5WnE.roa (raw, json)
Hash identifier: ZtVU1H4tfyZrn5QvM+PL/R2U7WZ74D460z4PylgnXrM=
Subject key identifier: 6A:74:C9:58:44:29:D2:2E:8A:4D:A4:97:1C:EB:13:1D:08:79:5A:71
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01A03904609393D9F3082CA86E36974C716F
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/anTJWEQp0i6KTaSXHOsTHQh5WnE.roa
Signing time: Tue 25 Aug 2026 13:03:03 +0000
ROA not before: Tue 25 Aug 2026 13:03:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61220
IP address blocks: 84.54.14.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:04:60:93:93:d9:f3:08:2c:a8:6e:36:97:4c:71:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Aug 25 13:03:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a74c9584429d22e8a4da4971ceb131d08795a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:c2:a7:bd:b9:7c:fd:6e:b9:a5:d9:7f:47:
57:25:ba:e2:c8:9c:a1:35:20:3d:57:55:ed:42:0c:
1c:16:aa:2a:9a:df:4c:9f:a0:f2:8b:d0:39:4a:4a:
b7:a3:3e:db:1c:7a:69:81:3e:c9:11:15:99:20:90:
c2:93:69:e5:40:4f:a8:94:bf:38:dc:fa:e0:df:a0:
51:79:e8:f3:95:81:ea:ca:0b:37:58:32:6d:df:aa:
f0:8e:06:cb:d8:d0:40:b1:47:e1:53:ec:d3:40:45:
8f:87:e2:59:3a:60:5e:65:85:f5:10:30:07:2d:f3:
3c:b1:97:fd:b5:a4:67:68:7d:88:30:6d:9b:73:22:
0a:25:d7:4d:e0:ce:8a:58:18:a1:5b:70:14:d1:4f:
f4:d2:51:91:e4:d0:c9:14:05:17:78:33:d1:16:cc:
13:16:8c:63:e7:cd:aa:5e:27:65:7a:c4:7a:a1:f8:
72:96:71:11:34:ba:2c:8a:14:39:bf:bf:06:f9:34:
9a:b2:64:27:68:87:29:e3:37:4f:b3:72:94:dc:1d:
de:1c:88:66:3a:a1:ca:92:83:35:0c:67:0c:30:eb:
cf:db:7c:85:bf:4c:15:37:76:f6:34:fd:86:d7:e0:
33:c8:65:9a:bd:89:dd:d9:02:b1:f8:12:d2:2a:31:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:C9:58:44:29:D2:2E:8A:4D:A4:97:1C:EB:13:1D:08:79:5A:71
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/anTJWEQp0i6KTaSXHOsTHQh5WnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
176.98.42.0/23
185.81.152.0/24
185.81.155.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e4:73:5c:6e:cf:c2:be:a1:90:f7:7b:ab:10:59:eb:1c:a7:
59:f3:b5:83:ba:55:64:e3:56:f8:b2:87:a9:f6:d9:45:ff:d4:
d1:24:07:ca:0b:68:a1:1e:83:fd:2f:07:bb:17:ae:20:72:57:
f1:25:cc:9a:43:d0:eb:31:67:31:34:db:22:f8:93:8a:7d:5a:
e8:ef:cc:7d:98:60:ce:75:31:40:4b:dc:a3:27:bb:5b:ee:f7:
4e:be:cf:68:99:63:ae:12:50:24:e7:63:a2:5d:68:39:3f:e5:
3d:f4:d9:57:11:36:8b:a7:20:d1:4c:6f:82:c0:3e:80:ae:74:
69:5e:0c:fc:3e:31:7d:4b:50:5b:28:da:11:b2:c6:53:8e:b3:
02:9c:d5:1f:73:b8:0d:1a:d0:42:90:cc:97:c3:15:57:a9:cb:
ad:51:8d:c1:5d:9f:01:0e:31:34:80:56:52:84:f2:73:54:99:
5c:fd:d3:60:f7:66:c9:78:60:bd:62:36:cb:33:17:6a:c1:0a:
1c:96:d2:60:d5:98:f8:8d:81:25:84:30:5c:24:9b:28:01:11:
f6:95:af:cc:45:78:58:21:46:ee:f6:31:0d:c2:e2:b1:2f:5d:
af:34:e2:4b:dd:33:01:6f:45:f8:07:a8:66:a0:a1:f9:7a:a1:
1e:90:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:31 2026 by rpki-client