Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dLirisZQjd9UFJvLFwCFv-qm71Q.roa
File: dLirisZQjd9UFJvLFwCFv-qm71Q.roa (raw, json)
Hash identifier: gkLYoln83CGygvrbPXDebBJ66a/Rpfa4aeWbI8NcUxA=
Subject key identifier: 74:B8:AB:8A:C6:50:8D:DF:54:14:9B:CB:17:00:85:BF:EA:A6:EF:54
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A0F352BA65D8718883598FD38B94706B2F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dLirisZQjd9UFJvLFwCFv-qm71Q.roa
Signing time: Wed 30 Sep 2026 17:18:00 +0000
ROA not before: Wed 30 Sep 2026 17:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 86.107.178.0/24 maxlen: 24
86.107.179.0/24 maxlen: 24
89.33.193.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.36.94.0/24 maxlen: 24
89.36.95.0/24 maxlen: 24
89.41.180.0/24 maxlen: 24
89.41.181.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
185.101.107.0/24 maxlen: 24
188.211.233.0/24 maxlen: 24
188.241.218.0/24 maxlen: 24
188.241.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:52:ba:65:d8:71:88:83:59:8f:d3:8b:94:70:6b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 30 17:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74b8ab8ac6508ddf54149bcb170085bfeaa6ef54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:62:10:31:12:12:47:fb:b3:48:72:d9:34:31:
9d:0c:63:8d:b5:7a:58:96:99:73:6e:ee:5a:a7:0e:
45:f2:82:a3:d6:c9:60:3f:b9:00:05:f5:82:b1:10:
67:55:9b:cb:87:16:40:97:86:e9:c2:bb:db:09:d5:
1b:7b:8c:cd:cb:98:4e:c7:09:59:cf:bd:69:d4:a2:
1f:d2:15:99:7c:dc:3a:b6:40:78:0e:12:71:58:5c:
ef:55:b3:51:aa:54:a8:cd:dc:b7:1c:17:e7:d7:29:
82:6f:7e:05:7f:0d:d1:46:66:79:ca:03:08:1d:db:
a6:e9:9d:e9:41:50:58:d3:b0:04:db:24:87:22:1b:
79:d2:8d:92:99:ba:5f:15:a2:28:54:b5:64:35:4d:
62:9c:58:9d:6a:e9:54:3d:fb:fc:07:54:44:25:ab:
a1:10:b1:fb:97:d2:7e:ed:bb:bb:7c:a1:fc:00:71:
dc:f8:47:7b:14:ae:85:c2:6c:0c:ea:ee:3c:f4:fb:
39:e8:ee:19:ed:56:94:6e:40:7c:2d:b7:9f:ec:85:
5c:b3:46:0a:bd:2c:7c:d6:b7:b5:ae:cb:e9:9d:80:
f0:63:06:d9:ed:72:c4:ea:cb:ba:5f:2e:7e:d1:c2:
63:a6:dd:43:99:e8:da:f2:83:4c:e5:42:39:f8:4a:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B8:AB:8A:C6:50:8D:DF:54:14:9B:CB:17:00:85:BF:EA:A6:EF:54
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dLirisZQjd9UFJvLFwCFv-qm71Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.178.0/23
89.33.193.0/24
89.34.27.0/24
89.36.94.0/23
89.41.180.0/23
93.114.194.0/24
185.101.107.0/24
188.211.233.0/24
188.241.218.0/23
Signature Algorithm: sha256WithRSAEncryption
05:b7:f6:b5:1e:80:43:c7:d2:72:96:d0:59:3c:f4:b7:d0:53:
48:22:7f:6d:c3:d2:b1:df:85:bf:43:c1:19:38:b6:7e:bd:83:
3d:98:73:16:ff:50:44:94:2b:b8:0c:83:77:42:61:86:ef:87:
46:8d:f2:4a:4b:67:1b:f1:21:24:22:16:fa:67:6b:75:c7:43:
38:58:ed:c0:0d:e7:89:38:04:bd:0c:b0:be:89:87:5b:84:de:
a3:31:41:9c:5f:5d:5d:b7:75:31:98:b6:e3:8f:95:a1:93:2d:
1e:fe:98:25:8f:c7:13:98:27:90:10:c7:0b:76:85:2b:1d:75:
ec:5f:07:b4:78:f1:6d:a8:88:7c:85:b7:ad:87:9f:5d:de:9a:
21:53:7f:e0:88:4f:1d:89:8b:09:52:07:84:48:cd:a8:44:9c:
26:ee:25:ef:9e:0f:00:9c:f6:48:b7:92:e8:bf:2c:9d:4d:99:
04:cc:28:ea:1d:5d:70:3f:8f:ae:64:c1:f5:5d:07:76:a4:7f:
1c:bd:e8:86:db:80:4c:3f:47:3b:b5:f6:38:49:c7:09:c9:4c:
cd:6f:db:e2:88:ab:1a:00:82:05:45:fc:5e:e9:64:6a:6e:bc:
52:07:d7:da:bd:da:72:d1:0c:04:e5:16:58:b1:f5:dc:2f:92:
a7:d1:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:40:35 2026 by rpki-client