Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/1BN5YxYU2FN0z0zIN5knPBNU-sE.roa
File: 1BN5YxYU2FN0z0zIN5knPBNU-sE.roa (raw, json)
Hash identifier: /UMLJoDe51xs233AtpFCV7C5DNwQokBQAmX64DATeYg=
Subject key identifier: D4:13:79:63:16:14:D8:53:74:CF:4C:C8:37:99:27:3C:13:54:FA:C1
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 01A0F7594A19C37B7FA2A9C2FBD3A17114AB
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/1BN5YxYU2FN0z0zIN5knPBNU-sE.roa
Signing time: Thu 01 Oct 2026 12:03:38 +0000
ROA not before: Thu 01 Oct 2026 12:03:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209902
IP address blocks: 45.139.96.0/22 maxlen: 24
80.88.232.0/22 maxlen: 24
185.91.68.0/24 maxlen: 24
185.166.180.0/22 maxlen: 24
185.243.204.0/22 maxlen: 24
195.35.118.0/23 maxlen: 24
195.211.165.0/24 maxlen: 24
2a12:5140::/32 maxlen: 48
2a12:5140::/36 maxlen: 48
2a12:5140:1000::/36 maxlen: 44
2a12:5140:2000::/36 maxlen: 44
2a12:5140:3000::/36 maxlen: 44
2a12:5140:4000::/36 maxlen: 44
2a12:5140:5000::/36 maxlen: 44
2a12:5140:6000::/36 maxlen: 44
2a12:5140:7000::/36 maxlen: 44
2a12:5140:8000::/36 maxlen: 44
2a12:5144::/36 maxlen: 48
2a12:5144:1000::/36 maxlen: 44
2a12:5144:2000::/36 maxlen: 44
2a12:5144:3000::/36 maxlen: 44
2a12:5144:4000::/36 maxlen: 44
2a12:5144:5000::/36 maxlen: 44
2a12:5144:f000::/36 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:59:4a:19:c3:7b:7f:a2:a9:c2:fb:d3:a1:71:14:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Oct 1 12:03:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d41379631614d85374cf4cc83799273c1354fac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:da:b3:84:6a:ac:d1:f1:03:d3:90:e3:5f:
ba:ab:53:3f:26:9e:88:c1:4b:38:e2:8b:5b:b2:ef:
16:67:57:ca:c8:ac:ca:96:ea:a7:48:8a:28:e9:fa:
44:73:bd:61:4f:de:b5:e1:ac:2f:95:40:d5:f3:e4:
01:7e:c8:d1:16:59:c1:fc:70:46:a0:e5:70:d4:15:
42:fe:e9:b5:c9:78:d4:6b:25:2b:e8:fe:9f:56:2f:
98:d9:42:e0:68:1e:86:bd:6d:b1:46:dc:9c:c3:86:
3f:9b:de:80:d4:20:e8:0a:e1:af:76:dc:00:96:d1:
ab:6f:45:3e:6c:f8:52:1c:ab:23:ae:c1:51:1c:49:
00:b1:0b:65:1a:bc:df:42:7c:bc:86:06:b3:37:34:
c3:44:b8:49:18:3c:5c:51:8b:c5:17:0e:70:53:a4:
25:4f:04:97:58:53:16:dc:cc:66:bc:62:e5:76:83:
91:b9:25:04:fa:5a:49:5a:a0:3b:96:51:1e:78:84:
56:b8:d2:a5:c9:80:27:ee:54:bc:11:50:e9:e5:3c:
fa:a3:45:b8:58:cb:5f:7f:4d:e3:55:ef:b4:cc:c0:
b6:3b:4c:eb:f5:5e:02:97:47:af:0f:9c:38:5b:bb:
91:84:ce:e2:60:2f:24:1d:dd:39:32:ab:4f:96:0e:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:79:63:16:14:D8:53:74:CF:4C:C8:37:99:27:3C:13:54:FA:C1
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/1BN5YxYU2FN0z0zIN5knPBNU-sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.96.0/22
80.88.232.0/22
185.91.68.0/24
185.166.180.0/22
185.243.204.0/22
195.35.118.0/23
195.211.165.0/24
IPv6:
2a12:5140::/32
2a12:5144::-2a12:5144:5fff:ffff:ffff:ffff:ffff:ffff
2a12:5144:f000::/36
Signature Algorithm: sha256WithRSAEncryption
c5:c6:8e:1c:d0:b2:1a:32:6c:7b:db:87:38:90:09:fc:09:aa:
c1:70:7a:90:47:b5:0f:36:03:d0:4a:a9:2f:b9:4c:92:36:9c:
55:61:15:ae:05:bc:86:fd:b2:81:99:75:03:3c:d4:34:3b:39:
ba:22:64:f9:93:6e:a2:3a:f0:9a:69:3a:23:92:ba:f3:de:78:
8f:35:bf:89:fd:d5:75:8b:3d:0d:4d:6b:54:ff:f5:bc:00:8a:
fe:1a:86:04:1f:67:54:d3:36:55:f5:c8:26:94:da:39:22:5f:
2e:8e:2d:b7:d7:84:f9:44:40:fd:74:c4:90:f0:c5:93:a7:36:
11:4c:5a:86:69:19:29:da:aa:fc:21:42:61:4e:a9:07:14:2b:
58:f3:ec:2e:6e:98:ac:71:3e:73:b2:4b:85:0a:a1:98:61:d1:
ff:b8:d2:af:52:bc:57:1d:51:98:45:90:5d:1c:3b:04:09:65:
8e:6b:9c:c8:0a:d0:41:60:b2:51:c9:f9:d7:46:a9:c4:ad:d0:
07:64:7f:b0:b6:d2:eb:0c:b2:bb:0b:e9:88:3f:95:fd:a5:a9:
19:70:05:64:b2:ce:4f:b0:45:5b:71:ff:7e:5a:b7:b2:68:8f:
fb:f5:af:1a:b1:aa:78:75:4a:ae:dd:e5:02:22:68:af:4b:69:
a9:7c:1e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:18 2026 by rpki-client