Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1-iWEQMIAQFuZJosDdcv_lQw9cTY.roa
File: 1-iWEQMIAQFuZJosDdcv_lQw9cTY.roa (raw, json)
Hash identifier: IXVQ1/qK9JA2ovyTv/5U1KCAu/xzF+ewncxqKngvKpo=
Subject key identifier: FA:25:84:40:C2:00:40:5B:99:26:8B:03:75:CB:FF:95:0C:3D:71:36
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A0E7F60306FB84CA19D43FBB7D73BE1B3C
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1-iWEQMIAQFuZJosDdcv_lQw9cTY.roa
Signing time: Mon 28 Sep 2026 12:20:54 +0000
ROA not before: Mon 28 Sep 2026 12:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 84.232.39.0/24 maxlen: 24
88.148.21.0/24 maxlen: 24
88.148.104.0/24 maxlen: 24
89.32.163.0/24 maxlen: 24
89.32.167.0/24 maxlen: 24
93.115.157.0/24 maxlen: 24
93.115.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:f6:03:06:fb:84:ca:19:d4:3f:bb:7d:73:be:1b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Sep 28 12:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa258440c200405b99268b0375cbff950c3d7136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:2f:15:37:ba:c3:71:b6:0f:17:cc:c8:60:
57:1c:72:b2:86:06:60:06:ba:15:d5:be:0b:03:46:
19:22:64:42:28:06:43:b9:64:40:d9:57:d6:b3:93:
e9:de:95:fc:bd:15:77:ff:23:73:6e:57:2d:72:d9:
32:d2:e6:a0:86:c4:6a:61:a2:b8:05:81:60:de:b5:
7e:93:ed:e2:e1:58:71:e2:82:d9:0c:d5:f4:d7:51:
7d:d1:e3:37:4f:d3:64:90:2d:7b:9f:f1:23:cf:fb:
ac:f7:e5:98:6c:ce:d3:2a:11:57:81:24:24:71:8b:
3f:e8:d1:3c:4f:f9:08:4d:88:08:57:c8:fc:fd:5b:
40:88:9b:27:6d:0f:20:a4:34:c2:6a:44:a7:16:23:
bc:e1:55:e5:f0:ce:34:b1:b5:f3:63:c3:6d:3b:9a:
76:02:7f:a9:fa:1a:dc:69:77:e4:89:c9:7c:e9:23:
68:14:df:69:76:9e:fb:21:e5:1e:27:6c:10:bc:79:
a6:b9:2e:60:d1:f5:2f:29:d4:b6:0a:9a:76:ce:31:
63:82:ad:8b:b5:1b:06:59:b8:60:d0:d8:14:c5:08:
b1:d9:04:c9:38:e3:b8:67:74:49:04:45:79:f7:a5:
4e:61:7d:76:b2:f7:0c:73:96:2a:55:97:47:60:ed:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:25:84:40:C2:00:40:5B:99:26:8B:03:75:CB:FF:95:0C:3D:71:36
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1-iWEQMIAQFuZJosDdcv_lQw9cTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.39.0/24
88.148.21.0/24
88.148.104.0/24
89.32.163.0/24
89.32.167.0/24
93.115.157.0-93.115.158.255
Signature Algorithm: sha256WithRSAEncryption
a4:08:35:3a:71:76:4b:53:ea:73:21:7c:15:9b:22:2a:81:05:
7d:a3:40:9e:7d:4c:3b:d1:41:74:97:30:ad:36:cb:26:69:ac:
69:52:b0:bd:df:ec:80:05:f2:e7:be:64:6d:8f:ef:be:69:43:
93:6f:90:d3:7f:75:80:20:3c:df:56:22:d1:6a:6c:15:90:52:
76:8c:ca:db:0b:17:a9:67:d7:ba:5d:8d:ff:34:b5:4f:89:97:
00:1e:59:75:da:fa:ec:21:6b:c4:90:ec:7e:66:a9:46:bc:db:
f4:0f:b9:6d:15:20:cd:f0:a8:3a:bb:d8:30:2e:cd:92:62:1a:
58:aa:39:8f:d5:66:3e:45:7e:03:98:af:5a:f8:b0:95:01:8d:
ca:81:aa:22:4b:27:60:20:0a:00:b6:ca:12:ce:21:77:30:11:
88:d7:4a:f0:b5:75:2f:8b:3e:00:de:5b:53:1e:13:0f:86:0e:
1a:a2:92:bc:14:6f:da:34:aa:31:58:1d:82:1a:47:de:50:3e:
f4:c5:5a:7a:1b:87:45:8c:07:fe:da:38:98:2d:9f:07:9e:b4:
fa:01:45:f0:d3:ec:00:27:60:76:9b:82:8c:d2:7b:f5:66:11:
2c:71:e4:4d:4f:c0:d1:ab:f5:10:65:cb:76:dc:5d:38:00:c2:
8e:d7:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:42 2026 by rpki-client