Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/a2611bscdrRY2_wHCR4FhxsBu2U.roa
File: a2611bscdrRY2_wHCR4FhxsBu2U.roa (raw, json)
Hash identifier: hSoLR45PR45DP7LTcBF0X+mXt4XGdfZ4sbLt7hM26eY=
Subject key identifier: 6B:6E:B5:D5:BB:1C:76:B4:58:DB:FC:07:09:1E:05:87:1B:01:BB:65
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019E915F1DA1B734A7D7681DECCB36A2520F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/a2611bscdrRY2_wHCR4FhxsBu2U.roa
Signing time: Thu 04 Jun 2026 06:43:10 +0000
ROA not before: Thu 04 Jun 2026 06:43:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206804
IP address blocks: 45.86.201.0/24 maxlen: 24
45.132.195.0/24 maxlen: 24
45.139.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:5f:1d:a1:b7:34:a7:d7:68:1d:ec:cb:36:a2:52:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 4 06:43:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b6eb5d5bb1c76b458dbfc07091e05871b01bb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:90:c3:13:b8:b3:d7:25:c1:02:07:dd:13:
dd:03:95:03:81:6c:6f:e0:46:d8:43:3a:51:51:92:
5f:13:f4:1d:75:04:e3:13:4a:a3:ac:33:f4:ac:57:
36:bc:31:15:02:e1:9c:b4:ba:18:51:f8:81:76:41:
9c:31:a9:21:e7:ba:47:1b:a7:ee:0f:5e:2b:d5:c4:
bb:c4:a8:41:7d:12:8f:bd:73:a2:7d:0b:2d:b0:1b:
7c:51:b1:6f:c7:b0:be:4c:41:09:ba:fb:21:f6:27:
e6:b5:54:fb:df:b0:36:b7:e5:f6:53:01:a8:84:17:
e6:90:f2:83:05:c1:e7:5d:dc:aa:39:6d:18:ec:62:
7e:8f:71:9e:d6:96:32:6a:4d:5b:4f:d8:3e:a0:6e:
18:a9:ab:e9:9a:c5:7a:b1:53:18:d4:0e:96:52:a2:
ce:2d:8d:1f:94:12:20:f3:1a:43:fe:5e:d6:b8:61:
91:a5:b3:a2:30:54:62:14:3b:59:b0:8b:47:17:b9:
df:42:9a:a7:ab:44:56:f8:ba:0b:83:b8:a5:b5:6f:
26:04:8a:8a:96:41:60:90:c1:b9:40:9a:d8:c6:06:
e6:c5:ea:16:82:1e:48:c7:64:40:86:10:26:ba:29:
0f:d8:c8:49:5d:8f:e2:4a:ed:d3:7b:ef:e9:72:c6:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6E:B5:D5:BB:1C:76:B4:58:DB:FC:07:09:1E:05:87:1B:01:BB:65
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/a2611bscdrRY2_wHCR4FhxsBu2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.201.0/24
45.132.195.0/24
45.139.48.0/23
Signature Algorithm: sha256WithRSAEncryption
23:ef:fc:dc:8e:3a:f6:17:90:93:80:cb:a2:82:ed:41:91:dd:
06:5b:91:26:0b:a0:cf:bb:54:e4:db:f0:e2:af:b9:2e:0f:5f:
25:fa:a6:67:a5:41:1d:0f:c7:cf:5e:a5:cf:1f:11:92:b3:45:
1f:bf:ff:b6:34:ba:6d:fa:af:81:9d:02:63:22:8f:1c:a9:36:
1f:4a:97:2a:ab:23:e6:c3:69:93:15:a4:54:0d:a3:c6:00:56:
57:60:c3:9a:dd:37:06:2c:01:dc:0e:fe:ec:86:ba:cf:d6:d5:
3a:b7:e4:61:9f:15:a2:d5:32:52:55:fc:cb:8d:68:42:e1:48:
55:bf:3e:5f:b0:12:20:4a:e5:85:b3:40:3d:8e:ab:3f:fb:35:
72:cc:9b:a5:f1:1c:4d:c1:ba:b6:43:68:45:c9:15:28:28:34:
d0:06:53:8d:97:97:99:80:28:7c:37:83:b5:f6:94:16:cf:38:
2c:a6:54:db:43:35:34:8b:ed:2b:3d:8e:c5:4f:ea:51:21:c8:
c0:4b:23:eb:03:da:ad:ad:97:16:01:01:4f:d1:43:99:08:4c:
c7:0b:0f:b6:e2:9b:0b:c3:78:69:d6:03:37:df:c6:ab:2f:2b:
31:36:c2:4f:ba:b3:63:32:d9:06:cf:db:c2:92:83:75:67:ed:
bc:18:3c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:20 2026 by rpki-client