Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/1-CR_WNb6CnNKKJqUv5gmk8m0cS4.roa
File: 1-CR_WNb6CnNKKJqUv5gmk8m0cS4.roa (raw, json)
Hash identifier: 88X/FRLq0ZA1Kkr+OQW1npnhye/acWvglL9X9bRa5oU=
Subject key identifier: F8:24:7F:58:D6:FA:0A:73:4A:28:9A:94:BF:98:26:93:C9:B4:71:2E
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 01A172C131CBD4D421DCF05101000EC42C6A
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/1-CR_WNb6CnNKKJqUv5gmk8m0cS4.roa
Signing time: Sun 25 Oct 2026 11:10:26 +0000
ROA not before: Sun 25 Oct 2026 11:10:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63911
IP address blocks: 62.171.232.0/21 maxlen: 24
63.254.128.0/20 maxlen: 24
85.136.88.0/21 maxlen: 24
85.136.96.0/21 maxlen: 24
85.136.128.0/21 maxlen: 24
85.136.160.0/21 maxlen: 24
85.137.112.0/20 maxlen: 24
135.132.176.0/20 maxlen: 24
153.55.160.0/20 maxlen: 24
198.13.144.0/22 maxlen: 24
209.92.144.0/21 maxlen: 24
217.177.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:c1:31:cb:d4:d4:21:dc:f0:51:01:00:0e:c4:2c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Oct 25 11:10:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8247f58d6fa0a734a289a94bf982693c9b4712e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:0a:93:0f:2a:23:1a:98:ca:cc:85:77:10:
87:2c:f5:d4:c1:22:15:ef:0e:a5:c5:29:08:68:11:
84:00:b1:aa:13:45:b3:a2:4d:d9:6e:01:b0:59:e0:
eb:79:81:4c:56:e1:fb:c2:c3:13:2f:e3:dd:75:0a:
e9:2b:d2:54:f6:b2:b8:51:4a:fa:f1:3c:25:fb:89:
1a:f2:33:83:06:49:8d:da:36:0c:39:cb:f2:06:af:
34:c7:0e:51:91:72:f6:4d:a9:27:00:94:77:d2:dc:
3e:3c:02:97:d0:99:07:2e:33:aa:f4:c9:fb:7c:43:
6e:77:c6:7e:d9:5e:33:5f:e6:f7:3e:ef:33:cb:32:
8a:69:2b:d6:77:1c:2a:ce:af:ed:cd:31:24:81:1e:
78:27:5b:48:4e:c1:16:9f:e0:40:99:28:90:57:81:
6b:fa:d6:14:ab:6b:cd:fe:be:27:a1:91:e2:ff:d9:
b4:a8:07:3a:06:20:7a:e4:a6:8e:fd:72:1f:24:ff:
77:58:4d:7a:ae:dd:09:7f:11:59:35:64:86:4c:85:
a0:63:5d:73:64:49:fd:d2:63:4b:85:07:74:91:ff:
72:9c:4c:37:e8:9c:72:33:b9:de:3b:3f:98:6d:1c:
ce:04:e5:23:aa:83:3f:5e:15:a0:2f:51:69:15:2e:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:24:7F:58:D6:FA:0A:73:4A:28:9A:94:BF:98:26:93:C9:B4:71:2E
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/1-CR_WNb6CnNKKJqUv5gmk8m0cS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.232.0/21
63.254.128.0/20
85.136.88.0-85.136.103.255
85.136.128.0/21
85.136.160.0/21
85.137.112.0/20
135.132.176.0/20
153.55.160.0/20
198.13.144.0/22
209.92.144.0/21
217.177.80.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:04:71:9b:e7:ac:33:a8:20:6b:b2:9b:c4:8d:3d:10:e3:fb:
c4:6c:89:ba:66:d3:69:7f:05:12:93:1e:95:39:1b:88:97:b6:
a9:3b:92:b2:8d:b2:fb:f3:2b:7d:bd:9c:b9:94:6f:1d:9f:14:
80:95:1e:26:26:8e:1c:6c:58:08:75:d8:2a:ad:f5:31:0f:88:
4f:dd:93:47:1e:91:27:01:c4:91:23:24:e0:d5:6b:65:f4:da:
42:b5:43:d6:a3:ff:53:2e:23:9b:48:77:c4:71:78:1c:55:6c:
7f:70:8d:00:fe:cd:60:d8:7c:58:53:80:cd:cc:07:6e:33:cf:
0f:51:e0:0c:64:83:80:9e:87:85:81:51:d8:f0:6f:5b:36:cd:
d1:4a:e6:8e:89:d2:ac:c8:17:bd:00:17:92:72:ec:25:8e:cf:
44:9f:25:9a:ad:3f:cc:15:d0:af:e6:7b:0a:d2:e9:81:8a:b4:
4f:3c:12:42:78:f1:1b:a1:ff:12:f9:ed:cd:87:f0:2e:24:f5:
5c:64:9d:ec:b3:6e:17:2c:3d:dc:b4:ae:0e:f3:40:14:99:0b:
dd:93:e2:4e:53:6f:e2:18:d2:2d:11:9e:bf:7d:df:70:ed:0e:
54:70:06:73:a8:6f:43:af:86:b7:b6:e8:3a:cf:99:4e:28:a7:
07:25:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:20:39 2026 by rpki-client