Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/89tYEoKSEhkjFD9jKwdbx6DCSsk.roa
File: 89tYEoKSEhkjFD9jKwdbx6DCSsk.roa (raw, json)
Hash identifier: jkHDlzCm8Ga5tOZ62sKtqXC1nnGOHeix+ItJDowlAi8=
Subject key identifier: F3:DB:58:12:82:92:12:19:23:14:3F:63:2B:07:5B:C7:A0:C2:4A:C9
Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial: 01A1345B96F0EB930CEDE266A9F1C22BBC2C
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/89tYEoKSEhkjFD9jKwdbx6DCSsk.roa
Signing time: Tue 13 Oct 2026 08:22:59 +0000
ROA not before: Tue 13 Oct 2026 08:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.12.48.0/22 maxlen: 24
185.114.4.0/22 maxlen: 24
185.128.236.0/23 maxlen: 24
185.128.238.0/24 maxlen: 24
185.129.44.0/22 maxlen: 24
185.162.80.0/22 maxlen: 22
185.199.40.0/22 maxlen: 24
185.200.192.0/22 maxlen: 22
193.36.45.0/24 maxlen: 24
195.137.184.0/24 maxlen: 24
195.200.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:5b:96:f0:eb:93:0c:ed:e2:66:a9:f1:c2:2b:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
Validity
Not Before: Oct 13 08:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3db58128292121923143f632b075bc7a0c24ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:b0:ec:24:8d:b4:67:9c:94:96:94:ab:39:
47:95:4c:d0:b4:a1:f7:b2:a1:a1:8f:5d:8a:5b:dd:
d3:17:f8:d1:76:22:4d:a0:6e:f4:63:9e:32:b4:58:
b1:1c:c1:87:7f:68:44:0a:0c:ae:bd:51:2c:81:74:
d7:ce:e9:e9:4b:c2:2c:07:46:47:21:fb:dc:3e:5a:
d6:fc:2a:dc:5a:bb:74:f0:46:b1:03:fd:c1:86:4b:
5a:e8:f2:88:1f:11:4d:24:ca:c5:cb:97:10:a0:8f:
c7:19:cb:b3:55:b4:03:27:1d:fb:dd:13:a8:06:bd:
65:99:d0:ed:29:40:b3:44:57:75:e0:7e:f5:c8:ca:
d0:9e:bd:ec:ed:dd:89:9f:23:67:f7:04:23:65:0a:
20:03:be:07:a4:b8:e6:1c:e8:4f:16:01:27:26:61:
b6:f2:6a:72:16:69:e7:cc:12:6c:ee:70:b9:64:e3:
16:53:32:b9:77:29:e9:b3:d0:6b:57:02:0f:d2:46:
a5:ae:ac:78:2b:fc:b0:4f:4e:cc:2d:81:99:a6:f9:
67:ae:ed:e6:71:c8:1a:a6:62:ad:d0:97:eb:85:86:
79:c5:2b:96:9f:e5:38:4a:51:68:12:3b:10:39:0a:
b1:f0:ae:fb:01:d4:13:63:89:88:28:a2:fe:31:0f:
e7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:58:12:82:92:12:19:23:14:3F:63:2B:07:5B:C7:A0:C2:4A:C9
X509v3 Authority Key Identifier:
keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/89tYEoKSEhkjFD9jKwdbx6DCSsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.48.0/22
185.114.4.0/22
185.128.236.0-185.128.238.255
185.129.44.0/22
185.162.80.0/22
185.199.40.0/22
185.200.192.0/22
193.36.45.0/24
195.137.184.0/24
195.200.195.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f2:28:e2:15:be:a8:3d:e8:a0:a4:f1:f0:76:ef:ab:82:14:
cc:4d:a5:87:5e:ac:a4:00:2b:d1:82:f2:ca:bb:16:6b:8d:e8:
8f:1f:d1:99:8b:68:da:39:db:1b:e6:67:c8:d7:17:46:9d:3a:
b2:4f:2b:5c:7e:00:3b:52:ef:0a:29:49:36:5a:10:24:06:68:
1e:89:21:ca:8d:5b:8b:99:7a:2f:dc:21:32:11:0b:5e:6b:66:
c6:79:62:8e:02:86:0c:f8:b5:51:c9:1c:34:b0:6e:c2:70:65:
b2:e5:42:ee:7c:cb:79:bf:bc:5a:e9:eb:9e:09:ec:89:0b:ac:
44:6e:dd:ca:a9:aa:d5:0f:a2:fe:03:f9:e3:f6:92:5c:c1:28:
13:cf:b2:e0:fc:3b:0a:00:63:e5:9a:d3:f8:ba:7f:e9:02:f1:
42:9d:1e:5c:b3:a9:d4:fb:88:cb:a3:da:9e:4c:3c:c5:a7:98:
6c:a6:7d:c4:b4:f2:e1:38:02:b0:47:0f:c7:5a:7d:25:b6:c2:
70:6c:0c:11:13:c2:1c:fc:9a:af:2c:45:36:8d:9f:d3:cf:82:
13:a1:29:71:be:da:d6:9d:b6:17:c0:1d:ab:16:83:5a:04:1f:
7c:33:ff:f9:01:26:52:fa:ca:6a:d0:cd:32:17:9e:df:b6:0d:
50:2c:a6:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:18:37 2026 by rpki-client