Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/fSvyUrJEoFKLhdVVOgd91gyo6c4.roa
File: fSvyUrJEoFKLhdVVOgd91gyo6c4.roa (raw, json)
Hash identifier: QncrgByRIRG2I1YfO2J00p5t9DKnnQDt43rI+/tvU2k=
Subject key identifier: 7D:2B:F2:52:B2:44:A0:52:8B:85:D5:55:3A:07:7D:D6:0C:A8:E9:CE
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0668B28C3C8E531C2F19EF488FD6C4E63
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/fSvyUrJEoFKLhdVVOgd91gyo6c4.roa
Signing time: Thu 03 Sep 2026 09:13:10 +0000
ROA not before: Thu 03 Sep 2026 09:13:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 45.83.188.0/22 maxlen: 24
45.85.224.0/22 maxlen: 24
45.86.248.0/22 maxlen: 24
45.87.22.0/24 maxlen: 24
45.88.120.0/24 maxlen: 24
45.88.122.0/24 maxlen: 24
45.129.232.0/22 maxlen: 24
45.133.252.0/24 maxlen: 24
45.133.254.0/24 maxlen: 24
45.136.72.0/22 maxlen: 24
45.143.192.0/24 maxlen: 24
45.143.194.0/24 maxlen: 24
45.144.216.0/22 maxlen: 24
45.146.52.0/24 maxlen: 24
45.146.56.0/22 maxlen: 24
45.148.24.0/24 maxlen: 24
45.149.0.0/24 maxlen: 24
45.150.92.0/24 maxlen: 24
45.150.94.0/24 maxlen: 24
45.154.136.0/24 maxlen: 24
45.154.139.0/24 maxlen: 24
45.157.96.0/23 maxlen: 24
45.157.113.0/24 maxlen: 24
45.157.114.0/24 maxlen: 24
45.157.115.0/24 maxlen: 24
89.36.36.0/24 maxlen: 24
89.38.38.0/24 maxlen: 24
89.46.46.0/24 maxlen: 24
89.251.1.0/24 maxlen: 24
89.251.3.0/24 maxlen: 24
136.144.16.0/24 maxlen: 24
136.144.18.0/24 maxlen: 24
136.144.32.0/24 maxlen: 24
136.144.34.0/24 maxlen: 24
185.51.193.0/24 maxlen: 24
185.51.194.0/23 maxlen: 23
185.114.60.0/22 maxlen: 22
185.227.32.0/24 maxlen: 24
185.243.244.0/24 maxlen: 24
185.243.246.0/24 maxlen: 24
188.208.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:8b:28:c3:c8:e5:31:c2:f1:9e:f4:88:fd:6c:4e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 3 09:13:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d2bf252b244a0528b85d5553a077dd60ca8e9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:bc:2d:b7:65:27:80:6a:2b:58:bb:ca:3e:
27:9a:02:de:99:94:73:01:74:20:15:25:41:cd:f9:
cd:0a:58:19:a5:a7:5e:c2:b4:d7:b4:2c:36:ee:98:
6a:46:8c:19:75:90:82:d7:4f:02:23:a3:bb:59:37:
4c:0e:7e:de:55:1a:64:2a:49:2b:42:02:91:a7:03:
e5:ed:5c:f3:85:4c:98:8d:a3:cf:95:82:a0:06:de:
8b:55:40:f4:65:65:15:28:be:d9:a0:72:6b:7d:a7:
d6:bd:65:1b:94:10:0e:ca:91:2f:d7:74:1a:e2:c6:
90:c2:7a:32:95:f9:cf:de:5e:54:46:0b:a8:a7:7e:
3a:ee:ae:99:8a:75:19:54:b7:8b:71:2a:ff:77:e3:
bf:60:2b:85:90:c0:bd:4b:9e:ef:52:55:f9:c5:31:
41:b6:ed:7b:8a:10:07:a3:a1:32:8a:52:11:95:86:
60:96:5c:b8:a9:fc:82:d9:f1:80:4f:4b:f7:d4:5b:
f9:75:73:75:e0:28:e3:98:f5:9e:ed:22:d8:9f:23:
dd:ab:11:cd:1d:f9:4e:74:90:25:29:f1:d5:48:01:
09:a1:5c:bb:b4:6a:4e:a0:46:1a:99:3c:71:ff:9e:
92:3f:62:95:8b:8a:30:68:c9:06:15:52:92:47:1b:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:F2:52:B2:44:A0:52:8B:85:D5:55:3A:07:7D:D6:0C:A8:E9:CE
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/fSvyUrJEoFKLhdVVOgd91gyo6c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.188.0/22
45.85.224.0/22
45.86.248.0/22
45.87.22.0/24
45.88.120.0/24
45.88.122.0/24
45.129.232.0/22
45.133.252.0/24
45.133.254.0/24
45.136.72.0/22
45.143.192.0/24
45.143.194.0/24
45.144.216.0/22
45.146.52.0/24
45.146.56.0/22
45.148.24.0/24
45.149.0.0/24
45.150.92.0/24
45.150.94.0/24
45.154.136.0/24
45.154.139.0/24
45.157.96.0/23
45.157.113.0-45.157.115.255
89.36.36.0/24
89.38.38.0/24
89.46.46.0/24
89.251.1.0/24
89.251.3.0/24
136.144.16.0/24
136.144.18.0/24
136.144.32.0/24
136.144.34.0/24
185.51.193.0-185.51.195.255
185.114.60.0/22
185.227.32.0/24
185.243.244.0/24
185.243.246.0/24
188.208.38.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:60:d1:52:ce:0b:d2:a6:ea:ef:1e:9f:a6:15:4d:0c:7b:72:
25:08:48:66:f7:97:df:07:20:e0:8b:ac:d3:a2:09:71:fe:67:
d0:9f:e3:dc:f1:dd:03:7c:14:c4:c8:5a:08:b5:4b:70:91:b0:
c4:a4:11:db:6d:1a:d1:b6:5e:50:f1:9f:df:c9:76:c8:b9:88:
e9:97:53:d6:26:a9:d8:23:7f:d5:fa:ce:ff:52:a7:39:b0:44:
1d:36:5a:c9:1e:95:83:03:d1:ba:be:58:51:4b:51:bc:7c:80:
cc:0f:c7:ea:a6:72:d3:52:13:1e:d5:57:08:6e:53:d3:1b:62:
34:0c:be:ac:67:41:fa:43:77:fa:c8:06:6e:2f:11:ff:cc:df:
d5:94:9a:0e:09:21:2b:b1:f1:60:1e:6f:0b:ee:89:be:60:52:
21:b3:a7:7f:fb:0e:3e:a1:30:08:11:10:08:3f:c4:d6:ff:e7:
ab:80:ea:54:b9:e3:c8:fa:5a:b1:32:85:30:79:2c:56:93:c2:
2c:dc:c0:82:c9:87:23:b0:22:c4:df:64:96:90:60:3d:ea:b0:
ce:d8:60:08:e4:cb:96:cc:61:3d:19:65:f5:34:3e:70:d1:9f:
a7:21:b8:d6:d7:e3:b4:e4:7e:58:52:d9:3d:74:0f:ab:57:cb:
bb:dd:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:59 2026 by rpki-client