Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/I8asKIhR7rx1QJHePz1zSrjIGUY.roa
File: I8asKIhR7rx1QJHePz1zSrjIGUY.roa (raw, json)
Hash identifier: Mi4ka4rN84ZkzQjrL2y3JAqkIczcI4CxcVd5uspi2ss=
Subject key identifier: 23:C6:AC:28:88:51:EE:BC:75:40:91:DE:3F:3D:73:4A:B8:C8:19:46
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 01A13975553877997D22569C497054845069
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/I8asKIhR7rx1QJHePz1zSrjIGUY.roa
Signing time: Wed 14 Oct 2026 08:09:13 +0000
ROA not before: Wed 14 Oct 2026 08:09:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212136
IP address blocks: 5.172.178.0/24 maxlen: 24
5.181.12.0/24 maxlen: 24
81.22.46.0/24 maxlen: 24
81.22.47.0/24 maxlen: 24
91.214.116.0/24 maxlen: 24
176.56.32.0/24 maxlen: 24
176.111.174.0/24 maxlen: 24
185.122.204.0/24 maxlen: 24
185.198.69.0/24 maxlen: 24
185.228.248.0/24 maxlen: 24
185.234.216.0/24 maxlen: 24
185.247.187.0/24 maxlen: 24
194.31.9.0/24 maxlen: 24
213.232.254.0/24 maxlen: 24
2a10:aa80::/30 maxlen: 30
2a10:aa84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:75:55:38:77:99:7d:22:56:9c:49:70:54:84:50:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Oct 14 08:09:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23c6ac288851eebc754091de3f3d734ab8c81946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:98:d4:49:27:86:1d:83:62:37:98:b1:70:
4e:c4:b9:7f:84:fe:05:94:b5:f4:ae:e5:03:9b:bf:
42:b7:96:f2:5d:39:d4:e2:a0:76:b1:db:97:a5:cd:
bf:04:b7:78:0d:d5:18:2c:58:2b:53:c9:c0:11:9a:
9f:8e:48:ec:58:20:a0:8f:4c:2c:76:22:c3:8d:d2:
a9:e5:3e:e5:35:ba:7a:dc:52:3e:2a:bc:7a:af:ff:
72:1e:d3:58:fe:df:96:3d:91:9d:69:59:d8:96:ea:
50:a9:46:fc:a6:b4:06:00:2b:2b:0c:41:af:25:08:
5b:76:84:70:59:d0:af:60:98:c6:e1:d8:6e:b8:c5:
40:66:4f:81:9d:39:be:58:07:e2:50:44:ef:1f:a4:
3e:d1:c8:e4:47:1c:87:1b:ae:55:f7:f8:c6:15:c2:
01:20:0b:13:a5:60:76:41:16:91:ef:5e:13:f2:6e:
8a:9f:cb:87:ef:a8:bd:2c:98:f6:b4:ed:c0:17:bb:
92:fa:03:7a:c5:b5:88:95:e7:bd:80:92:99:2b:9e:
cc:e7:3b:b6:2e:87:66:04:35:1c:2f:2d:47:1c:4d:
f5:02:ef:07:98:69:0a:57:e0:9b:5f:66:85:e0:7a:
5e:f0:7d:59:ce:2b:dd:73:f8:3b:c9:e3:04:cf:0d:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C6:AC:28:88:51:EE:BC:75:40:91:DE:3F:3D:73:4A:B8:C8:19:46
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/I8asKIhR7rx1QJHePz1zSrjIGUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.178.0/24
5.181.12.0/24
81.22.46.0/23
91.214.116.0/24
176.56.32.0/24
176.111.174.0/24
185.122.204.0/24
185.198.69.0/24
185.228.248.0/24
185.234.216.0/24
185.247.187.0/24
194.31.9.0/24
213.232.254.0/24
IPv6:
2a10:aa80::/29
Signature Algorithm: sha256WithRSAEncryption
83:ce:88:61:cc:c2:58:c2:23:80:af:8c:67:91:7b:34:04:8f:
5c:ab:90:14:35:6c:2d:c4:a3:a5:42:d4:5d:c0:47:88:42:e7:
93:c9:fe:12:13:b9:52:a7:ef:1d:c4:6a:75:d9:65:73:00:f7:
2e:09:74:29:e7:e4:d4:44:f7:ef:2f:a9:78:13:bc:82:51:68:
95:e7:24:ca:b7:06:0e:d0:ba:cf:17:34:50:bb:05:bd:0a:43:
ba:6b:20:e8:39:46:75:26:24:87:83:e9:4b:4c:28:cf:eb:28:
31:77:e1:17:4b:db:a6:70:e0:46:70:0f:7f:88:50:d3:13:35:
43:f3:a3:0e:e6:12:47:70:cd:01:3a:58:ed:0c:dd:da:37:65:
96:b2:b4:ce:ae:20:e4:ab:e4:2e:31:6c:69:59:54:42:cd:a2:
6b:6f:cc:6f:00:1b:f7:20:4b:31:5d:ef:83:1d:3b:35:a9:9b:
d9:4f:4c:bd:4d:b0:f5:6e:e2:ab:5e:ad:06:4d:5f:d4:40:b8:
3e:01:09:be:96:a4:af:14:39:77:13:84:c8:d6:97:01:6e:15:
70:0b:fd:71:27:a0:6b:7a:4c:8a:53:5b:60:b1:be:e2:c3:ae:
82:e4:a1:2d:be:11:9b:c1:55:20:b9:3a:84:f9:6b:1c:95:de:
63:1f:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:06:18 2026 by rpki-client