Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/b2TPQnMivuCqOcD9PbXuhpnrtnE.roa
File: b2TPQnMivuCqOcD9PbXuhpnrtnE.roa (raw, json)
Hash identifier: Vjq0Wd9v7n84v4ILhyenhaSlDjIU4qcskqbEGM7uJjI=
Subject key identifier: 6F:64:CF:42:73:22:BE:E0:AA:39:C0:FD:3D:B5:EE:86:99:EB:B6:71
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A0E22ADAF603A74EBA5801A94453F4D17D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/b2TPQnMivuCqOcD9PbXuhpnrtnE.roa
Signing time: Sun 27 Sep 2026 09:20:54 +0000
ROA not before: Sun 27 Sep 2026 09:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
46.249.107.0/24 maxlen: 24
82.115.0.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
103.25.85.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
178.173.232.0/24 maxlen: 24
185.215.247.0/24 maxlen: 24
185.231.172.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:2a:da:f6:03:a7:4e:ba:58:01:a9:44:53:f4:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 27 09:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f64cf427322bee0aa39c0fd3db5ee8699ebb671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:17:5a:7d:4f:90:13:8f:ca:73:62:ca:0b:
30:a6:4c:93:50:32:d8:86:79:5e:74:43:ea:f2:92:
a7:2e:ce:84:df:ca:06:50:89:68:17:cb:32:ba:5e:
4b:20:07:cd:09:06:cc:42:9b:eb:0a:f3:61:3f:40:
41:99:07:2c:33:ce:7c:de:b8:8b:32:a1:6c:5f:cd:
17:2a:eb:07:02:7e:df:b6:fb:6b:e6:ea:8e:c7:08:
f0:e5:ca:e6:40:eb:38:13:96:3b:7f:9c:a1:63:d1:
b2:a9:f1:4f:30:39:48:5a:b7:0d:51:3d:66:42:fa:
4d:79:18:59:32:ae:17:ae:6f:fa:c0:4a:5f:8f:31:
e2:5f:a8:3b:17:27:c0:b4:b1:28:44:cd:e1:ca:26:
d8:53:61:7a:2d:6c:09:18:8c:71:13:ae:38:cb:e2:
a9:77:ea:1e:ef:ca:7e:7e:92:68:9a:68:a3:f1:e3:
d6:38:6e:a3:4c:f5:ec:47:2b:e9:fe:a0:c7:f1:92:
14:54:c7:4b:15:e4:70:93:57:17:a0:1e:33:ae:a2:
f3:b9:f7:21:f6:45:61:74:fe:9f:06:83:c6:0d:74:
de:31:9f:98:91:92:3e:65:eb:d7:95:d5:e2:f5:57:
a4:b2:ef:17:ed:14:90:40:bd:4c:0d:73:34:0b:ec:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:64:CF:42:73:22:BE:E0:AA:39:C0:FD:3D:B5:EE:86:99:EB:B6:71
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/b2TPQnMivuCqOcD9PbXuhpnrtnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
46.249.107.0/24
82.115.0.0/24
82.115.9.0/24
89.251.10.0/24
103.25.85.0/24
159.255.32.0/21
178.173.232.0/24
185.215.247.0/24
185.231.172.0/23
188.209.156.0/22
202.133.90.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
21:10:99:c9:94:aa:83:c0:49:ac:8b:6e:5f:12:f5:76:74:a3:
0e:26:4e:c7:43:5c:01:a2:ef:ad:ab:8d:d9:a7:e9:24:8f:8e:
3c:da:ec:88:3a:56:04:f9:98:d4:fc:ad:21:6d:ef:e3:6d:8b:
91:c6:03:cf:d5:6a:7c:de:ea:82:83:b6:df:5f:45:81:24:df:
89:0e:9d:9f:b3:90:cf:80:5e:e4:1d:33:3a:c5:73:34:65:cc:
43:b3:a7:4c:dc:b1:55:17:ab:4e:3f:5a:a7:46:cd:ae:2d:94:
50:49:2e:fc:cf:c9:61:04:cf:84:9f:30:f6:29:93:17:2c:4c:
73:4a:86:4f:29:08:4d:16:e3:f7:e6:53:03:b4:9f:b4:cd:64:
2a:a5:64:76:08:f3:9c:91:33:83:b4:ce:04:1d:0a:79:c9:a8:
a8:56:56:16:0a:17:13:59:91:52:c0:41:6d:d2:f9:41:a5:29:
f3:fb:9b:8b:b8:f5:b6:73:d0:72:60:47:ab:91:0e:68:d8:62:
d1:7a:9e:a6:36:e6:7e:94:34:8a:8d:eb:73:ab:81:51:0a:0d:
2c:2c:81:63:25:dd:65:12:20:10:59:97:7b:74:58:7a:c8:40:
8b:b5:7f:0b:c1:af:2a:5b:20:a3:2c:5e:e9:9e:36:fb:84:52:
38:62:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:19 2026 by rpki-client