Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bl5VaSbQEYZA1Z7dwncliXdoXbU.roa
File: bl5VaSbQEYZA1Z7dwncliXdoXbU.roa (raw, json)
Hash identifier: K6uEeFzEr+ALZUWgNUkf12P6MB/TtM6tFTWTB3hEQh8=
Subject key identifier: 6E:5E:55:69:26:D0:11:86:40:D5:9E:DD:C2:77:25:89:77:68:5D:B5
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A1156B7766A1B56B99A7D3A02AA0EE0A71
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bl5VaSbQEYZA1Z7dwncliXdoXbU.roa
Signing time: Wed 07 Oct 2026 08:12:06 +0000
ROA not before: Wed 07 Oct 2026 08:12:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.37.119.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.42.143.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
89.46.2.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
93.114.74.0/24 maxlen: 24
93.114.75.0/24 maxlen: 24
93.114.76.0/24 maxlen: 24
93.114.77.0/24 maxlen: 24
93.114.78.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:6b:77:66:a1:b5:6b:99:a7:d3:a0:2a:a0:ee:0a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 7 08:12:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e5e556926d0118640d59eddc277258977685db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:57:65:97:2f:2e:e1:d5:ab:49:d6:b8:3d:
c5:51:20:6c:59:51:14:ca:83:4e:9b:59:74:56:25:
2c:87:d4:24:ba:b0:ec:22:a1:22:44:93:8e:50:e6:
23:c8:50:6e:f6:c5:13:a1:38:d5:21:e5:fd:d5:a0:
40:6f:38:40:45:3c:c0:13:cc:12:e4:91:24:5c:3a:
ab:c5:90:9a:35:1e:77:98:69:dc:42:54:c3:16:9c:
13:2e:22:47:c7:c5:2f:2a:38:6d:4f:f3:e1:20:ff:
21:a0:41:36:68:7d:22:a1:ed:f1:2d:30:19:cc:5f:
73:cb:a8:ed:da:e9:a3:c5:a2:53:99:3b:36:6d:8b:
38:fe:43:fe:5a:9b:37:7a:ca:c0:38:9f:5f:67:37:
e0:42:64:d0:9c:d0:42:7d:f2:a2:ca:5c:da:6c:fc:
bc:f9:fc:24:6b:7d:b3:47:2a:9f:e1:7e:21:77:ba:
59:47:de:7d:f4:b6:00:f5:65:69:67:73:56:a6:9e:
dc:00:93:29:6a:80:a2:21:db:83:b8:dc:ec:5d:cb:
0f:92:58:3d:d7:a2:9f:08:bd:a4:c6:65:94:08:4d:
56:ee:72:1a:56:47:d1:55:8c:22:ea:9b:60:ad:3b:
12:de:4e:05:fe:3c:3b:64:0a:c0:32:2f:40:cc:e3:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5E:55:69:26:D0:11:86:40:D5:9E:DD:C2:77:25:89:77:68:5D:B5
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bl5VaSbQEYZA1Z7dwncliXdoXbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.34.231.0/24
89.37.119.0/24
89.38.228.0/23
89.40.82.0/24
89.42.80.0-89.42.82.255
89.42.86.0/24
89.42.143.0/24
89.43.140.0/24
89.43.143.0/24
89.46.0.0/24
89.46.2.0/23
89.47.117.0/24
89.47.125.0-89.47.127.255
93.113.181.0/24
93.114.74.0-93.114.79.255
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2c:59:a1:0a:15:99:d1:81:07:e0:76:78:d6:c3:ac:a8:f9:
23:6e:eb:d2:e1:09:1f:8c:cf:9d:b3:52:21:9d:7d:2f:85:17:
6b:45:2f:8d:93:45:33:96:c6:76:5b:f9:8c:80:e7:19:47:d2:
ce:41:9c:ba:9b:df:e5:4a:1f:2c:4d:ab:6e:32:1e:74:c8:50:
a9:44:58:d5:b5:0b:07:aa:aa:65:2b:28:08:61:82:6f:52:92:
f7:12:d4:b6:b4:6a:29:e1:da:0c:c9:2d:32:f7:4a:90:7d:02:
54:f4:00:d9:a0:1d:94:0b:c1:ae:1a:3f:4f:c9:6b:02:af:d4:
52:5f:e3:0e:ce:b1:41:5c:29:33:00:d7:72:0a:dc:74:bb:6e:
77:34:d3:95:c1:eb:fa:06:a4:64:d1:6e:d3:39:9b:7d:4a:9c:
d6:92:73:96:70:90:a0:c4:52:f1:e5:57:5b:2b:3e:b1:84:2c:
d6:f8:4c:d2:7c:ec:cf:76:80:91:c5:b0:1f:61:0e:81:78:59:
a7:b9:6a:eb:b8:46:f9:9d:38:33:e3:47:52:8e:55:e3:7c:e9:
d5:3d:40:1c:58:1f:f7:fc:79:ac:d6:9d:ea:85:62:71:48:93:
04:36:17:62:17:04:1c:14:34:68:65:8b:71:60:64:4e:5a:f0:
d6:5f:e6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:42 2026 by rpki-client