Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/dfblRhCjffZSWc4rnsQFcpCEos8.roa
File: dfblRhCjffZSWc4rnsQFcpCEos8.roa (raw, json)
Hash identifier: mi3ij9CS4Da75DCzGftaT41PVVIZsboGM7ahRlZsPrU=
Subject key identifier: 75:F6:E5:46:10:A3:7D:F6:52:59:CE:2B:9E:C4:05:72:90:84:A2:CF
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019FE705E5E7DBCF5BB1AC57D3E86C9DD17F
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/dfblRhCjffZSWc4rnsQFcpCEos8.roa
Signing time: Sun 09 Aug 2026 14:55:51 +0000
ROA not before: Sun 09 Aug 2026 14:55:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29075
IP address blocks: 45.10.224.0/23 maxlen: 23
45.10.226.0/24 maxlen: 24
45.94.124.0/22 maxlen: 22
45.94.128.0/22 maxlen: 22
45.94.128.0/23 maxlen: 23
45.94.130.0/23 maxlen: 23
85.118.32.0/19 maxlen: 19
91.109.176.0/20 maxlen: 20
128.204.224.0/20 maxlen: 20
141.255.144.0/20 maxlen: 20
178.20.48.0/21 maxlen: 21
185.10.252.0/22 maxlen: 24
185.10.252.0/24 maxlen: 24
185.10.254.0/24 maxlen: 24
185.10.255.0/24 maxlen: 24
185.118.0.0/22 maxlen: 22
185.123.24.0/22 maxlen: 22
185.132.74.0/24 maxlen: 24
185.132.75.0/24 maxlen: 24
185.177.180.0/22 maxlen: 22
188.121.224.0/19 maxlen: 19
188.121.226.0/24 maxlen: 24
188.121.227.0/24 maxlen: 24
212.85.144.0/20 maxlen: 20
2a00:1b88::/32 maxlen: 32
2a02:2178::/29 maxlen: 29
2a02:2178::/32 maxlen: 32
2a06:e040:3502::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e7:05:e5:e7:db:cf:5b:b1:ac:57:d3:e8:6c:9d:d1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Aug 9 14:55:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75f6e54610a37df65259ce2b9ec405729084a2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:22:af:4a:6a:b5:d9:8a:fa:fa:de:0c:8f:
76:fc:b1:f6:d1:fd:7e:73:bb:39:d8:31:39:70:1c:
bf:f3:6e:fb:90:80:cf:a0:ab:a3:a2:a5:d2:16:f4:
14:30:31:ce:9e:89:08:a1:4f:3a:2c:c1:6f:ba:18:
00:39:2e:69:6a:4e:be:55:a3:e9:6a:93:21:01:e4:
01:1a:71:da:0c:ce:a4:10:ff:b6:9a:b1:26:30:eb:
f3:ee:30:c6:ab:27:4e:27:a7:57:df:58:6d:26:63:
38:c4:73:34:72:a3:af:3c:c2:25:0d:a3:10:c4:a5:
1f:23:60:f7:9c:23:5f:5c:67:ee:a3:63:eb:df:7d:
c8:e9:ab:7f:78:75:d0:7a:e2:e1:80:1b:64:f6:3a:
53:2d:4b:4c:1f:1f:05:f2:ef:24:64:24:35:74:7c:
4b:da:7e:14:f7:53:2f:24:47:e0:c8:86:16:ee:42:
86:f7:cc:de:2d:11:bf:1c:e5:c4:8b:9e:7e:78:ee:
dd:dc:02:55:5a:c3:59:85:36:7f:3a:cc:91:f2:38:
6f:43:4f:61:d8:70:a4:bc:bb:14:4a:20:17:4c:51:
12:24:18:18:3e:71:b5:37:27:16:99:9a:ca:90:fb:
c2:a8:1a:64:cc:72:af:7a:41:e0:21:26:25:2f:0a:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F6:E5:46:10:A3:7D:F6:52:59:CE:2B:9E:C4:05:72:90:84:A2:CF
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/dfblRhCjffZSWc4rnsQFcpCEos8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.224.0-45.10.226.255
45.94.124.0-45.94.131.255
85.118.32.0/19
91.109.176.0/20
128.204.224.0/20
141.255.144.0/20
178.20.48.0/21
185.10.252.0/22
185.118.0.0/22
185.123.24.0/22
185.132.74.0/23
185.177.180.0/22
188.121.224.0/19
212.85.144.0/20
IPv6:
2a00:1b88::/32
2a02:2178::/29
2a06:e040:3502::/48
Signature Algorithm: sha256WithRSAEncryption
9e:c6:7a:74:32:1d:6d:8d:83:95:eb:84:c4:84:2b:17:b8:55:
6c:57:64:57:94:47:15:a9:31:33:21:58:82:e2:20:9a:6a:52:
6a:19:72:d1:6d:c8:5e:98:ea:38:b4:6d:77:99:68:ac:0c:b0:
2b:f8:c2:a4:1d:15:aa:87:0a:ea:49:d8:89:83:54:c7:61:91:
33:f8:6d:3c:c1:ce:c2:73:95:1e:9d:63:71:8c:fd:63:60:96:
6d:82:60:46:18:34:02:c1:01:40:89:ba:42:93:71:fc:81:be:
29:55:ea:a4:23:ef:60:6c:8a:67:7d:35:58:e6:93:96:61:de:
aa:53:8e:dd:c1:a7:79:2b:ee:f9:a6:5f:94:69:c3:3b:6b:9d:
2e:d1:5a:e8:b2:c5:d5:5a:5b:70:c0:34:d6:70:36:26:21:1a:
e2:1b:eb:68:6b:21:b9:81:9e:45:53:dd:d4:99:5b:f7:cd:36:
05:e6:28:da:d7:e8:d5:f5:57:39:62:14:0a:1c:1a:5c:59:8f:
ca:ca:a4:94:c9:52:f7:48:87:fd:fb:b9:72:14:ff:4f:b0:1a:
d2:d3:da:9d:34:ac:12:bf:ea:c4:61:9b:a1:5e:98:2d:06:e6:
c7:b3:5f:13:1d:4d:0f:49:0f:eb:06:6a:14:d5:c3:5b:97:ae:
8a:99:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:36:10 2026 by rpki-client