Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/0maovDntuB-r4dB2oYpYKrRT1Zk.roa
File: 0maovDntuB-r4dB2oYpYKrRT1Zk.roa (raw, json)
Hash identifier: IwmmJgUZFadFMNSlEhzI4JB4ZOkonDbhULNxWNxh3Gg=
Subject key identifier: D2:66:A8:BC:39:ED:B8:1F:AB:E1:D0:76:A1:8A:58:2A:B4:53:D5:99
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 019E7369FF8181FCF1FF44530FB7A424CD76
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/0maovDntuB-r4dB2oYpYKrRT1Zk.roa
Signing time: Fri 29 May 2026 11:06:26 +0000
ROA not before: Fri 29 May 2026 11:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39442
IP address blocks: 62.122.88.0/21 maxlen: 21
92.39.104.0/21 maxlen: 21
178.212.80.0/21 maxlen: 21
185.125.72.0/22 maxlen: 22
185.183.48.0/22 maxlen: 22
185.183.48.0/23 maxlen: 23
188.247.32.0/19 maxlen: 19
188.247.40.0/24 maxlen: 24
188.247.44.0/22 maxlen: 22
188.247.44.0/24 maxlen: 24
188.247.54.0/24 maxlen: 24
188.247.55.0/24 maxlen: 24
188.247.56.0/21 maxlen: 21
213.234.0.0/20 maxlen: 20
213.234.0.0/24 maxlen: 24
213.234.1.0/24 maxlen: 24
213.234.5.0/24 maxlen: 24
213.234.6.0/24 maxlen: 24
213.234.8.0/24 maxlen: 24
213.234.10.0/24 maxlen: 24
213.234.11.0/24 maxlen: 24
213.234.14.0/24 maxlen: 24
213.234.16.0/21 maxlen: 21
213.234.16.0/22 maxlen: 22
213.234.16.0/24 maxlen: 24
213.234.18.0/23 maxlen: 23
213.234.18.0/24 maxlen: 24
213.234.20.0/24 maxlen: 24
213.234.21.0/24 maxlen: 24
213.234.22.0/24 maxlen: 24
213.234.23.0/24 maxlen: 24
217.149.176.0/20 maxlen: 20
217.149.176.0/21 maxlen: 21
217.149.176.0/22 maxlen: 22
217.149.176.0/24 maxlen: 24
217.149.177.0/24 maxlen: 24
217.149.178.0/24 maxlen: 24
217.149.179.0/24 maxlen: 24
217.149.181.0/24 maxlen: 24
217.149.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:69:ff:81:81:fc:f1:ff:44:53:0f:b7:a4:24:cd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: May 29 11:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d266a8bc39edb81fabe1d076a18a582ab453d599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:64:2f:05:71:b8:3a:cc:e3:93:89:c3:87:
48:b2:70:92:7c:4f:d0:c4:d6:9a:7d:15:b5:28:50:
e1:68:c4:c7:26:07:46:9c:80:34:c8:4f:99:78:9c:
8e:11:d6:9d:c7:18:00:f3:43:56:c7:f1:72:ef:07:
41:ef:da:26:19:79:20:46:3c:08:85:46:e1:9c:39:
c2:49:28:e4:01:d7:b8:43:1c:3f:81:56:9e:24:9e:
fa:71:8e:66:db:e3:7f:10:39:a8:89:6f:c3:a9:32:
51:83:f3:7b:ca:7e:5b:f9:98:09:a4:98:ef:c2:43:
19:32:6e:47:ee:d7:14:37:18:67:85:5e:fd:d8:5e:
d3:f7:64:0d:0d:12:ca:75:85:82:a1:4e:32:35:76:
7f:38:4d:6e:41:c5:08:67:3d:60:bf:b9:15:88:fd:
18:d0:79:9a:b2:52:1c:86:c8:a5:57:42:b9:73:ca:
e5:a4:e9:c3:0c:10:22:62:b7:49:b1:db:a9:33:44:
9e:84:e8:c5:31:ba:35:e5:4c:1a:47:ab:b9:47:04:
10:7c:82:2d:4f:e3:90:b9:b3:5f:6f:c5:06:a4:20:
47:eb:52:66:55:8e:c0:dc:b4:2d:2e:04:94:22:76:
bb:32:2c:e5:29:31:93:86:b0:b3:23:21:12:a9:6e:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:66:A8:BC:39:ED:B8:1F:AB:E1:D0:76:A1:8A:58:2A:B4:53:D5:99
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/0maovDntuB-r4dB2oYpYKrRT1Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.88.0/21
92.39.104.0/21
178.212.80.0/21
185.125.72.0/22
185.183.48.0/22
188.247.32.0/19
213.234.0.0-213.234.23.255
217.149.176.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:5a:41:04:bb:2b:6d:67:4d:df:f0:bd:2f:d5:ad:d2:c8:87:
99:58:03:92:62:69:63:27:e9:8c:2b:1d:4a:69:61:de:82:2c:
fb:6c:df:5f:fc:e9:76:48:b0:2f:d2:00:a8:47:c3:b5:41:0d:
b1:26:62:7e:ff:56:da:2d:51:f7:f5:2b:0b:ca:f5:e6:9a:ce:
b2:ef:c6:ac:18:7c:42:f9:5a:45:bf:31:9b:e6:7d:f0:91:73:
c4:a6:32:f9:e0:64:6e:b2:30:84:8d:47:bb:f3:83:2b:1a:ea:
33:c5:24:51:4b:bc:55:db:1e:8e:5e:63:e2:37:5a:3d:d9:33:
2b:3c:36:f6:57:60:3d:66:8c:0d:67:51:a8:f5:5b:4d:0e:ca:
4b:c6:c9:1b:8e:1d:be:9b:1c:00:45:bf:44:1f:39:28:d9:f0:
8b:47:35:d0:46:b3:d7:a7:d4:c7:6d:6f:31:1f:ef:0e:5c:ac:
21:de:ab:a3:16:5d:99:6c:27:8a:31:97:4e:b6:02:c5:9c:39:
0d:1d:48:69:16:57:9f:03:b7:85:af:26:67:f0:d6:26:51:96:
aa:18:4e:7b:47:d0:14:12:0a:42:96:fa:b5:2e:e8:01:f9:82:
3d:33:04:e3:a9:d3:bd:65:e8:4a:f4:b2:4c:77:01:3d:81:07:
66:67:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:49:23 2026 by rpki-client