Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/b4jVpXvDDybGJ8khFBjF7U8BVH0.roa
File: b4jVpXvDDybGJ8khFBjF7U8BVH0.roa (raw, json)
Hash identifier: Ssw5mGkKRGt/i+elQJI+geK+/agjaWjYsjDTLxvkTiU=
Subject key identifier: 6F:88:D5:A5:7B:C3:0F:26:C6:27:C9:21:14:18:C5:ED:4F:01:54:7D
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 01A1210A7283C77B94E329D86046EE53EA66
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/b4jVpXvDDybGJ8khFBjF7U8BVH0.roa
Signing time: Fri 09 Oct 2026 14:21:35 +0000
ROA not before: Fri 09 Oct 2026 14:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62212
IP address blocks: 85.137.164.0/22 maxlen: 24
87.236.146.0/24 maxlen: 24
91.184.248.0/22 maxlen: 24
91.199.137.0/24 maxlen: 24
91.199.147.0/24 maxlen: 24
91.199.154.0/24 maxlen: 24
91.199.160.0/24 maxlen: 24
92.61.70.0/23 maxlen: 24
109.172.8.0/23 maxlen: 24
109.238.94.0/23 maxlen: 24
141.133.172.0/22 maxlen: 24
159.200.240.0/23 maxlen: 24
188.127.246.0/23 maxlen: 24
193.124.56.0/22 maxlen: 24
195.110.216.0/22 maxlen: 24
2a11:3b80::/29 maxlen: 48
2a11:3b80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:0a:72:83:c7:7b:94:e3:29:d8:60:46:ee:53:ea:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Oct 9 14:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f88d5a57bc30f26c627c9211418c5ed4f01547d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cd:dd:6a:ab:2f:80:b0:c1:ce:62:b2:05:70:
0e:19:02:ea:5a:39:b3:be:de:37:74:07:99:77:1e:
e3:bd:c1:1a:37:f7:de:e5:f0:ab:fe:c1:2e:d7:8a:
e8:2c:3b:37:40:6e:af:bf:64:f0:b7:9b:0c:80:ff:
8f:2a:bd:84:0b:8a:a8:b4:50:70:9a:9c:20:f9:30:
19:a6:d8:59:85:e6:53:47:cc:72:ad:2f:f1:39:d9:
a1:97:83:a2:d2:1b:65:4e:4b:13:96:ba:51:2a:2d:
63:3a:2c:11:ed:88:23:e6:08:02:eb:f8:7c:9d:0f:
c9:7d:f4:c1:c1:29:60:d9:e8:ad:0a:8e:74:74:db:
6a:67:bf:ea:13:0e:90:d9:a2:65:ed:7f:dd:be:59:
25:b0:1a:f2:86:eb:16:00:66:a6:9e:05:0f:ed:24:
d5:1e:4e:40:d1:db:17:f0:f0:cc:65:d8:07:6c:06:
16:ec:7c:90:2d:68:ab:2d:d2:a1:99:ad:82:7e:83:
ff:7e:82:51:13:20:84:63:75:a5:35:d9:68:ff:22:
e5:a8:d6:a4:9b:25:f7:d3:9d:7f:c0:86:bc:be:4b:
36:ad:28:8c:cf:f6:01:90:68:43:75:af:5e:bd:bf:
0f:c4:fe:1d:bc:d6:b9:40:fe:a7:f5:fe:73:d1:52:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:88:D5:A5:7B:C3:0F:26:C6:27:C9:21:14:18:C5:ED:4F:01:54:7D
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/b4jVpXvDDybGJ8khFBjF7U8BVH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.164.0/22
87.236.146.0/24
91.184.248.0/22
91.199.137.0/24
91.199.147.0/24
91.199.154.0/24
91.199.160.0/24
92.61.70.0/23
109.172.8.0/23
109.238.94.0/23
141.133.172.0/22
159.200.240.0/23
188.127.246.0/23
193.124.56.0/22
195.110.216.0/22
IPv6:
2a11:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
7a:ac:b0:8d:21:5d:e4:65:db:28:e2:47:a8:fe:92:01:eb:53:
21:a6:86:14:73:6f:c6:e1:a2:2f:07:2f:13:d3:b3:f3:a1:69:
77:9e:5d:e6:d7:83:f0:57:b5:d9:f1:74:5a:d4:a6:85:6e:45:
2c:57:25:0d:9d:33:1a:fe:40:4b:c7:c2:36:59:0e:9e:fe:15:
be:4c:8f:4b:5a:32:da:7c:e7:13:65:e9:f6:e3:30:c3:d8:b1:
c0:ba:9a:ad:c1:24:4c:cb:be:75:3c:63:6e:f2:cf:d3:df:ff:
7a:d9:6e:da:6a:4e:24:88:a7:9b:26:41:4d:99:0a:3d:d4:2f:
d9:9a:08:aa:26:c4:5a:a9:b0:9c:54:dd:1b:93:1c:2c:61:88:
4e:db:e4:21:f4:3d:c1:8b:0c:2b:3d:67:b3:3c:82:7c:c8:2a:
ee:0d:43:3a:b1:c9:39:7d:0a:85:d0:e4:3d:10:72:9c:4f:b5:
1a:a6:9e:11:a0:9e:3f:62:1d:0e:f9:06:78:d8:77:27:9a:48:
4e:68:28:4c:49:f8:67:04:12:f7:5c:c7:20:ed:60:ef:99:ac:
66:67:84:ea:6a:bb:e4:60:19:61:67:b7:e6:47:87:ed:7c:9d:
79:85:fc:5f:42:df:e2:66:d3:43:b2:9f:e2:1a:f1:df:a0:b2:
ea:65:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:48 2026 by rpki-client