Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/bLd5QVIMiCwkFLZ8S98BxMCkWUo.roa
File: bLd5QVIMiCwkFLZ8S98BxMCkWUo.roa (raw, json)
Hash identifier: +BUONYpT5TSnB0r+YO2WPo4xPzFtw/P+I5ni5WwQLtM=
Subject key identifier: 6C:B7:79:41:52:0C:88:2C:24:14:B6:7C:4B:DF:01:C4:C0:A4:59:4A
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 01A1645AAF2A4F4FE2339598962FC127C10B
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/bLd5QVIMiCwkFLZ8S98BxMCkWUo.roa
Signing time: Thu 22 Oct 2026 16:03:47 +0000
ROA not before: Thu 22 Oct 2026 16:03:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55293
IP address blocks: 85.187.136.0/22 maxlen: 24
85.187.144.0/21 maxlen: 24
85.187.156.0/22 maxlen: 24
114.129.128.0/22 maxlen: 24
114.129.132.0/22 maxlen: 24
114.129.144.0/22 maxlen: 24
185.52.148.0/22 maxlen: 24
185.132.4.0/22 maxlen: 24
185.133.20.0/22 maxlen: 24
185.146.28.0/22 maxlen: 24
185.148.44.0/22 maxlen: 24
185.148.128.0/22 maxlen: 24
185.160.66.0/23 maxlen: 24
185.166.146.0/23 maxlen: 24
185.168.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:5a:af:2a:4f:4f:e2:33:95:98:96:2f:c1:27:c1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Oct 22 16:03:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cb77941520c882c2414b67c4bdf01c4c0a4594a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:1d:9c:5b:8d:51:07:7b:d3:93:93:5a:04:
6f:5d:a3:6f:ed:2e:e7:8d:97:6f:a3:8c:a8:68:ef:
a0:69:d0:f8:5f:01:b9:5c:0f:ef:8a:ef:36:42:17:
a6:72:cf:4c:5f:55:8a:d9:1e:2e:20:fb:a1:5e:9a:
96:12:80:2e:db:09:76:ad:0c:6c:27:a1:50:23:5f:
ba:59:c7:d2:49:fd:2f:e4:30:bc:00:e1:09:c8:8b:
bb:31:8e:7b:aa:e8:f3:11:33:69:20:3b:e4:64:9b:
57:85:60:40:63:b4:57:94:6e:40:5a:6f:ca:a2:55:
e5:64:d9:33:6f:7b:53:8d:75:bd:0f:ba:01:0d:2a:
1e:64:7d:7a:e2:29:70:65:e8:17:b0:eb:f1:74:01:
ab:ff:f2:d5:3c:59:e2:08:8c:b6:e4:ed:30:01:f7:
69:ec:e6:09:e9:d5:6f:ca:4a:3a:39:ae:3a:0e:35:
b7:e4:b3:d8:3b:76:b9:50:4c:4a:3f:13:4c:12:6b:
f4:1e:d1:29:e6:8b:c2:b4:3f:08:e1:8c:a7:b4:2b:
e3:df:1c:11:4c:c7:f4:42:98:bc:e9:85:fc:f6:8a:
d9:e8:f5:8b:e9:49:fa:58:6a:04:e7:49:7b:44:b0:
4d:19:08:bb:8d:3e:3e:48:52:9e:06:67:ca:65:38:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:79:41:52:0C:88:2C:24:14:B6:7C:4B:DF:01:C4:C0:A4:59:4A
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/bLd5QVIMiCwkFLZ8S98BxMCkWUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.136.0/22
85.187.144.0/21
85.187.156.0/22
114.129.128.0/21
114.129.144.0/22
185.52.148.0/22
185.132.4.0/22
185.133.20.0/22
185.146.28.0/22
185.148.44.0/22
185.148.128.0/22
185.160.66.0/23
185.166.146.0/23
185.168.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:62:69:ed:bf:be:81:71:b4:29:88:10:85:16:cc:88:59:4b:
7d:09:bf:b0:7d:af:4c:67:6b:8e:5d:6e:09:f2:97:f2:6e:95:
00:59:de:c4:d6:fd:a9:7d:d8:09:10:c5:16:15:46:5f:b4:df:
8c:24:1b:a0:31:3f:02:fe:50:29:bd:c2:09:e5:87:08:6d:51:
aa:94:45:e6:a1:24:3b:83:c0:9a:c1:63:66:6d:3d:dc:fd:e0:
87:05:88:85:2d:78:33:2d:c8:d9:ca:a8:f6:d7:60:a1:e4:dd:
b1:89:e8:6f:d1:ed:f3:69:d8:2d:32:93:7b:6b:8a:88:90:f2:
ca:09:f2:d3:d7:b4:5b:79:fe:37:62:f1:0b:57:1c:bb:70:20:
13:fd:dc:4b:71:71:b6:ff:42:ed:6c:c8:ac:90:fb:70:9f:34:
8a:9e:eb:ba:9b:0f:42:67:4b:4f:eb:17:b5:8a:e7:4c:37:fe:
3f:fd:86:a7:d9:60:5f:6f:7b:e8:e8:97:3a:2b:62:a5:75:b0:
18:6b:19:e8:d5:2b:0d:49:55:70:b3:4c:f2:7e:7f:47:f1:6f:
a6:3d:10:d2:f8:8d:f0:ec:52:86:e1:9f:35:7b:f2:2c:a5:23:
51:e7:31:27:d8:90:fa:80:bc:5a:0e:6b:39:49:79:23:d4:be:
b5:ff:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:29:15 2026 by rpki-client