Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/PRNpmNoXJBIoF9gh578wEhtMpdQ.roa
File: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (raw, json)
Hash identifier: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=
Subject key identifier: 3D:13:69:98:DA:17:24:12:28:17:D8:21:E7:BF:30:12:1B:4C:A5:D4
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A07CBB8A1AF4AC4C1B00EB7AD41333C53C
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/PRNpmNoXJBIoF9gh578wEhtMpdQ.roa
Signing time: Mon 07 Sep 2026 16:37:40 +0000
ROA not before: Mon 07 Sep 2026 16:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199775
IP address blocks: 45.94.32.0/22 maxlen: 24
46.36.192.0/21 maxlen: 24
185.6.152.0/22 maxlen: 24
185.42.0.0/22 maxlen: 24
185.65.164.0/22 maxlen: 24
185.95.108.0/22 maxlen: 24
185.168.132.0/22 maxlen: 24
185.182.52.0/22 maxlen: 24
185.208.240.0/22 maxlen: 22
185.242.218.0/24 maxlen: 24
194.126.152.0/22 maxlen: 24
2a05:1c0::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:bb:8a:1a:f4:ac:4c:1b:00:eb:7a:d4:13:33:c5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 7 16:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d136998da1724122817d821e7bf30121b4ca5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:da:b5:f8:29:d7:d8:4f:4e:f7:0d:f1:41:
44:ae:06:2f:d3:21:20:41:9d:d4:06:18:3f:8d:e6:
37:97:52:55:38:b0:a2:86:36:ff:fc:33:e5:aa:ef:
aa:02:0f:6e:ac:be:f3:84:34:49:8a:59:4b:c4:fd:
f2:56:29:21:49:94:c8:45:c2:8b:2f:ff:00:51:dd:
3a:95:32:21:e3:28:b0:46:76:6d:ec:fb:b5:22:e0:
44:dd:be:41:62:be:59:00:be:ce:42:cc:03:b6:02:
1c:d3:4d:a1:8f:a1:64:71:c2:18:be:7c:44:5e:9a:
b4:e3:d0:62:cd:7b:d9:5f:f6:0a:ab:84:22:7f:98:
65:c6:22:d2:f6:55:e4:16:44:30:1e:9c:5c:7a:69:
1c:63:ff:a0:90:24:9c:bd:ce:aa:7b:90:25:bc:d8:
cc:82:4e:4f:c5:93:eb:eb:f8:c2:d1:8a:81:47:ca:
f7:7d:22:66:08:06:67:f5:72:05:89:8a:72:ee:e5:
6a:59:69:0f:4b:87:fa:92:57:f2:ff:cc:da:5a:f7:
08:df:7c:64:df:18:f8:60:21:3f:3a:e4:a6:9a:d3:
28:d4:c0:70:bf:b1:53:19:71:73:d7:ec:45:ba:00:
a9:92:00:c7:39:29:ff:9d:da:16:47:ea:28:ba:f5:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:13:69:98:DA:17:24:12:28:17:D8:21:E7:BF:30:12:1B:4C:A5:D4
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/PRNpmNoXJBIoF9gh578wEhtMpdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.32.0/22
46.36.192.0/21
185.6.152.0/22
185.42.0.0/22
185.65.164.0/22
185.95.108.0/22
185.168.132.0/22
185.182.52.0/22
185.208.240.0/22
185.242.218.0/24
194.126.152.0/22
IPv6:
2a05:1c0::/40
Signature Algorithm: sha256WithRSAEncryption
44:d1:47:45:9c:34:93:f7:83:74:e6:22:9c:d3:56:69:f4:be:
c8:f3:15:fb:a1:ac:5a:bd:98:b0:4f:a7:de:f5:12:d5:0e:8a:
d4:e0:18:61:63:97:43:fe:57:db:42:88:94:40:8e:47:f4:8d:
59:7a:c0:c8:9c:31:95:02:69:4e:67:cc:41:6e:b9:a2:4d:9d:
c4:30:cd:88:73:5f:0b:90:91:66:81:1c:2e:11:f0:71:e9:50:
a1:2a:6e:9d:41:4f:92:f6:8e:40:c2:d4:54:a5:5f:5f:63:6b:
af:8c:c4:dd:6d:d3:27:87:2d:fe:5f:98:4c:a4:50:d9:27:9f:
1e:71:94:b1:a6:59:eb:85:6a:dd:3a:4b:45:d3:6e:22:0f:16:
dc:4a:d2:26:8d:cb:27:8a:46:cf:09:4e:f5:76:e1:9d:c7:a2:
93:11:cf:79:8a:31:dc:8e:2a:b4:87:be:df:a9:3f:57:87:ff:
bc:7c:7e:c5:bc:e0:94:c8:0c:9e:7c:c3:62:7d:37:c0:be:1a:
b9:a7:1e:3d:86:cc:81:dc:c1:64:e7:bd:d1:41:bf:6b:5c:63:
7b:49:ba:61:79:b9:c4:b3:e8:0d:83:d3:7e:b9:0e:be:f4:61:
48:fa:e4:a9:ba:cd:57:36:e5:53:10:30:37:d1:77:fb:50:b8:
c0:f7:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 03:05:34 2026 by rpki-client