Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/buYrLtMBpdMpEr7L9yLrs_gcXdA.roa
File: buYrLtMBpdMpEr7L9yLrs_gcXdA.roa (raw, json)
Hash identifier: V32l9YdZ0Bn7TbmXn6LgM3qccDYdt6A+FoyTEnpInNQ=
Subject key identifier: 6E:E6:2B:2E:D3:01:A5:D3:29:12:BE:CB:F7:22:EB:B3:F8:1C:5D:D0
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F3B1A8E5114990633838F8D0C1778158B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/buYrLtMBpdMpEr7L9yLrs_gcXdA.roa
Signing time: Tue 07 Jul 2026 05:43:43 +0000
ROA not before: Tue 07 Jul 2026 05:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.37.119.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.42.143.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
89.46.2.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
93.114.74.0/24 maxlen: 24
93.114.75.0/24 maxlen: 24
93.114.76.0/24 maxlen: 24
93.114.77.0/24 maxlen: 24
93.114.78.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:1a:8e:51:14:99:06:33:83:8f:8d:0c:17:78:15:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 7 05:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ee62b2ed301a5d32912becbf722ebb3f81c5dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:09:58:c1:f1:b2:ed:ae:17:e3:0a:57:c6:
77:b8:bd:fe:24:2e:17:bc:55:89:57:42:04:fa:2b:
10:20:ed:da:03:7f:5b:9d:b4:3a:82:8b:9f:a5:43:
c4:4f:ff:df:c4:5d:d0:b1:a9:dc:76:3f:d4:4d:15:
44:b2:a6:2f:a3:81:ee:b2:22:ab:d9:b5:ad:d7:ca:
0d:c8:93:ce:13:c1:d2:0e:0d:38:31:35:fc:51:35:
f5:7f:63:14:01:ed:45:9b:b9:82:5d:7a:ca:86:d6:
c5:43:f8:a5:a1:ff:82:48:7c:72:28:4b:59:38:d4:
2c:a0:ad:51:ad:d9:4c:de:d6:e5:b3:e4:59:51:82:
3b:c4:7b:61:34:36:81:32:2d:82:ae:04:b6:a4:89:
39:ae:0c:a5:6d:56:5a:1b:4a:05:91:93:82:91:f7:
00:cf:18:98:c0:8b:e9:b6:d6:0e:27:cd:55:b8:18:
f5:73:ba:37:5a:ef:a3:9f:d8:3b:9d:78:05:78:6f:
46:3f:74:97:0b:3d:eb:2b:0e:bf:cc:92:0a:b5:f5:
51:2e:7c:d1:e0:bc:95:2d:2b:08:0a:b0:04:48:7f:
f6:d4:88:b3:4d:f1:25:fe:d4:7e:d3:e5:d1:8d:df:
33:db:86:fe:fc:d5:fe:d8:4f:98:63:91:34:81:a3:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E6:2B:2E:D3:01:A5:D3:29:12:BE:CB:F7:22:EB:B3:F8:1C:5D:D0
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/buYrLtMBpdMpEr7L9yLrs_gcXdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.34.231.0/24
89.37.119.0/24
89.38.228.0/23
89.40.82.0/24
89.42.80.0-89.42.82.255
89.42.86.0/24
89.42.143.0/24
89.43.140.0/24
89.43.143.0/24
89.46.0.0/24
89.46.2.0/23
89.47.99.0/24
89.47.115.0/24
89.47.117.0/24
89.47.119.0/24
89.47.125.0-89.47.127.255
93.113.181.0/24
93.114.74.0-93.114.79.255
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
16:9f:d7:fa:ef:48:57:f3:c3:33:75:cb:43:52:7e:8b:25:90:
a0:3f:6b:f0:a0:53:4b:99:e9:f4:57:44:44:fd:a4:90:49:bd:
da:f6:44:cb:c7:53:bb:8a:98:8f:48:75:e0:99:2f:3f:14:02:
e9:77:c5:52:6c:70:9f:ed:5f:e8:98:95:64:85:f8:94:6c:27:
79:1f:fe:6e:22:2a:8b:ee:44:c7:96:80:5d:98:3e:ab:e6:cd:
cf:5d:fd:01:38:0a:5c:95:5b:19:dd:5e:81:8f:96:40:0e:67:
b7:d9:86:f0:1b:87:9e:43:3f:24:eb:27:9f:d4:ea:63:84:66:
1b:4e:83:32:0e:58:2d:8c:56:5e:41:67:81:de:0e:dc:e0:ba:
76:b5:e1:d7:70:36:30:76:5f:0f:12:46:c6:d5:98:80:53:e8:
4a:30:1e:1e:9f:5f:8c:ef:25:51:da:67:45:5a:4d:25:c8:ab:
31:55:01:b0:f3:e9:d0:2e:03:83:8e:b9:b0:6d:07:3b:9c:9d:
c8:eb:e5:f6:e2:51:53:3d:24:99:84:6c:00:db:8e:24:c4:6f:
5e:2a:60:89:85:99:bd:9b:7f:54:33:bd:2f:af:ca:e5:ad:f0:
06:08:df:fb:f3:44:4a:7d:1e:d4:0a:a9:89:d7:a4:c9:d1:2a:
a8:21:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:52 2026 by rpki-client