Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/n-6nvgfIp2v5axlJA_PPlZOOFMs.roa
File: n-6nvgfIp2v5axlJA_PPlZOOFMs.roa (raw, json)
Hash identifier: Q5plaT5U1UVzB4l3JC7jXn90nULcCWsE7ZQ9imq7fFk=
Subject key identifier: 9F:EE:A7:BE:07:C8:A7:6B:F9:6B:19:49:03:F3:CF:95:93:8E:14:CB
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 01A0102270A4BAB97A23153014762C2D1D15
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/n-6nvgfIp2v5axlJA_PPlZOOFMs.roa
Signing time: Mon 17 Aug 2026 14:31:27 +0000
ROA not before: Mon 17 Aug 2026 14:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 2.59.132.0/22 maxlen: 24
45.145.40.0/22 maxlen: 24
45.157.232.0/22 maxlen: 24
62.192.153.0/24 maxlen: 24
89.124.251.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
104.167.24.0/24 maxlen: 24
159.200.230.0/24 maxlen: 24
159.200.231.0/24 maxlen: 24
176.96.136.0/22 maxlen: 24
185.94.29.0/24 maxlen: 24
185.219.84.0/24 maxlen: 24
185.229.207.0/24 maxlen: 24
185.254.96.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
193.148.253.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
194.107.126.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
2a0c:4ac0::/29 maxlen: 40
2a0c:4ac0:1300::/40 maxlen: 40
2a0d:1180::/29 maxlen: 29
2a0d:5940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:22:70:a4:ba:b9:7a:23:15:30:14:76:2c:2d:1d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Aug 17 14:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9feea7be07c8a76bf96b194903f3cf95938e14cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:e7:da:e4:50:45:cf:72:0e:9a:6d:ca:8b:
7b:e4:0b:02:39:db:06:f5:c6:d1:b7:1d:03:f5:01:
76:58:80:e4:e5:bc:4c:c0:b0:9a:40:25:22:89:e7:
c8:a9:bb:1f:e2:39:e5:71:00:6e:33:6a:48:53:f8:
61:4e:d5:4e:14:3d:4b:d5:a5:4d:98:ce:ea:db:90:
17:ba:83:0c:2e:61:5e:15:24:90:10:fc:5e:cb:54:
04:98:de:94:b6:46:eb:dd:b5:de:7e:07:db:15:e8:
a4:f7:6d:a3:90:44:cd:a0:e8:74:05:28:22:38:e1:
d7:bd:6e:25:4f:1c:1c:c2:d0:2e:ff:6a:3b:6b:4a:
0e:65:fb:20:e1:b7:48:73:fe:d1:35:a5:5f:14:fe:
0d:ea:58:36:b7:75:01:3d:aa:21:af:25:d4:47:a8:
3c:7a:81:84:67:89:d3:a5:ba:87:ed:ae:9a:65:4f:
b0:40:ec:d5:f9:05:32:10:df:43:5b:13:e8:d8:70:
65:2c:85:ad:71:d4:9b:f1:7c:9d:77:90:e4:50:56:
f3:5e:80:e4:89:0e:e3:c4:b3:3c:95:2d:46:8e:4a:
fd:82:96:e6:65:41:13:5a:01:01:18:21:27:4c:0e:
f5:f4:6f:3d:0d:e8:1f:00:37:39:d8:64:9e:d1:79:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EE:A7:BE:07:C8:A7:6B:F9:6B:19:49:03:F3:CF:95:93:8E:14:CB
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/n-6nvgfIp2v5axlJA_PPlZOOFMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.145.40.0/22
45.157.232.0/22
62.192.153.0/24
89.124.251.0/24
93.123.85.0/24
94.143.231.0/24
104.167.24.0/24
159.200.230.0/23
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.229.207.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
193.148.253.0/24
194.48.217.0/24
194.107.126.0/24
194.238.79.0/24
212.87.204.0/24
IPv6:
2a0c:4ac0::/29
2a0d:1180::/29
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
b0:08:a4:4f:f0:70:7d:5f:7b:19:38:c3:bd:2c:6d:20:a6:1d:
8b:06:80:cd:0f:52:e6:03:c4:d0:83:83:3e:db:32:46:20:08:
d4:6f:3b:33:cd:87:84:48:63:e3:02:58:aa:52:3e:f2:3e:86:
8a:75:5b:11:4e:0c:d7:23:ca:ca:65:35:be:89:73:f8:b2:b7:
1d:7f:da:1e:58:6a:48:15:4f:3a:73:c0:e3:0c:22:72:f1:b9:
ec:02:f1:58:df:d1:95:cf:de:f4:09:06:b6:45:3b:83:b9:d7:
7d:a0:19:e4:a2:52:97:f1:51:e5:88:90:76:1d:75:25:e7:14:
a8:59:27:3c:cc:22:e6:9c:3c:6e:92:0b:aa:1d:2c:e7:86:fc:
bd:d4:42:5c:a5:59:91:9d:a5:ae:ee:09:03:a1:1d:ed:50:0d:
3f:a3:b7:95:77:36:cc:a0:ea:08:2a:ac:93:71:ec:ed:84:5c:
bf:72:34:49:9a:4b:cd:18:8a:99:f1:d2:c0:06:aa:82:6e:58:
b0:61:08:e0:12:35:f1:4e:2e:b4:e7:92:7a:df:60:8f:ed:e2:
d9:9e:30:45:d8:bb:15:65:d7:95:1a:99:8c:f0:3f:9d:e3:83:
b5:48:dc:74:4e:f6:1d:06:b0:a9:e9:3e:e4:6d:cb:a9:89:27:
21:7f:be:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:43 2026 by rpki-client