Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/D9_k4SvW6XC0erIpNxQi-LJIpuk.roa
File: D9_k4SvW6XC0erIpNxQi-LJIpuk.roa (raw, json)
Hash identifier: PkTHhh7bvxDP1hQCSLhQfwccOJWA9jbESY6qR4DZFfI=
Subject key identifier: 0F:DF:E4:E1:2B:D6:E9:70:B4:7A:B2:29:37:14:22:F8:B2:48:A6:E9
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 01A0F78ABA2B61C258713B7D0F201F486A4F
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/D9_k4SvW6XC0erIpNxQi-LJIpuk.roa
Signing time: Thu 01 Oct 2026 12:57:39 +0000
ROA not before: Thu 01 Oct 2026 12:57:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50340
IP address blocks: 23.105.224.0/19 maxlen: 24
23.111.32.0/19 maxlen: 24
23.111.96.0/19 maxlen: 24
23.111.192.0/19 maxlen: 24
88.212.192.0/18 maxlen: 24
88.212.192.0/20 maxlen: 24
88.212.192.0/24 maxlen: 24
88.212.196.0/24 maxlen: 24
88.212.204.0/24 maxlen: 24
88.212.208.0/22 maxlen: 24
88.212.220.0/22 maxlen: 24
88.212.224.0/22 maxlen: 24
88.212.228.0/22 maxlen: 24
88.212.229.0/24 maxlen: 24
88.212.230.0/23 maxlen: 24
185.206.100.0/22 maxlen: 24
185.206.100.0/24 maxlen: 24
2a02:2100::/32 maxlen: 48
2a02:2101::/32 maxlen: 32
2a02:2102::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8a:ba:2b:61:c2:58:71:3b:7d:0f:20:1f:48:6a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Oct 1 12:57:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fdfe4e12bd6e970b47ab229371422f8b248a6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:5b:6e:43:94:2b:47:af:59:b7:ab:7f:b3:
d3:77:c6:64:77:e0:25:73:e3:18:6a:9b:55:1b:25:
3c:b0:41:aa:40:1b:11:d1:d5:a8:13:ea:d9:35:75:
56:10:6f:6d:0f:7a:4c:f7:01:d0:c9:fb:36:44:60:
42:55:69:aa:46:79:a7:4a:b3:44:cc:20:52:a7:48:
de:63:6a:8d:66:a2:01:ab:8f:43:bc:f7:28:a4:07:
b9:bd:63:1a:48:f7:29:4b:8f:ad:0e:e7:4a:ce:ca:
46:e2:0f:70:e7:1c:24:3a:21:3a:41:2b:e2:cd:a2:
9b:a6:32:ae:d9:a5:52:7f:bb:c4:6f:c5:e9:f3:8c:
aa:12:f7:d8:48:1c:fa:c4:60:61:10:df:1f:2c:59:
c5:ac:53:ff:1a:23:d0:8a:20:9e:ef:cb:16:21:7f:
5a:02:c1:fd:aa:e8:3b:52:ef:f5:ca:34:9d:57:fb:
aa:f3:71:1f:3a:ab:1c:ad:d0:c9:e8:f2:4a:1b:13:
57:7d:b1:6b:6b:11:32:fc:ed:a8:df:cc:58:da:c5:
bd:3e:55:ee:f4:5a:65:b5:a6:9e:46:af:41:57:ea:
08:fa:41:e5:e3:45:58:f0:d1:9e:2d:de:34:77:79:
f0:84:b3:0d:51:b8:97:32:ae:95:75:44:bc:b1:77:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DF:E4:E1:2B:D6:E9:70:B4:7A:B2:29:37:14:22:F8:B2:48:A6:E9
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/D9_k4SvW6XC0erIpNxQi-LJIpuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.105.224.0/19
23.111.32.0/19
23.111.96.0/19
23.111.192.0/19
88.212.192.0/18
185.206.100.0/22
IPv6:
2a02:2100::-2a02:2102:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:5d:7f:66:37:15:5a:19:ba:ab:3e:ec:43:4f:8a:46:9c:23:
82:e2:a0:7d:84:c1:f1:b8:c0:da:0a:c9:b2:69:a9:5a:a6:80:
51:dc:41:96:a2:1a:2a:03:42:d1:86:c8:b0:18:62:87:77:e1:
eb:c2:31:4a:1c:fe:e4:ea:de:11:4f:b1:58:0d:80:ce:ae:7c:
4c:af:45:14:23:1d:bd:cf:5f:5c:34:d3:c3:6f:b2:f0:10:a5:
6b:cb:67:63:a8:83:50:92:85:4d:5d:57:07:8d:a5:53:d6:a4:
9a:53:e0:be:2a:06:19:d5:32:24:13:d7:a3:44:4d:a1:43:e3:
89:e1:48:b6:2e:ae:a8:7a:0a:d5:a9:c5:de:0c:f9:fb:9f:42:
a9:a9:47:d9:73:b9:76:b8:2b:bb:d7:c7:11:50:18:bf:5e:80:
f5:e8:83:5c:33:dd:e3:ed:a5:92:3c:7b:6b:1e:4b:fb:f8:68:
f9:aa:0d:f6:ff:38:67:f2:96:d7:d7:86:81:15:8c:41:84:ba:
9e:a4:4a:4e:47:94:b2:2f:59:02:41:22:65:26:da:3d:db:8c:
a6:1d:43:e3:90:4c:a2:e2:2d:62:bb:ca:52:8a:f0:df:2a:08:
f6:f1:fe:12:5f:c4:65:a8:3d:58:82:bc:9e:1c:f3:7b:60:cb:
50:12:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:57:52 2026 by rpki-client