Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/0E76KXZ9iHkQo5cuwSmpBWCgAGY.roa
File: 0E76KXZ9iHkQo5cuwSmpBWCgAGY.roa (raw, json)
Hash identifier: dF9xWEdJ4yslQZrm/UOaV1qAa6lP8Z3elmi3oqjU0TY=
Subject key identifier: D0:4E:FA:29:76:7D:88:79:10:A3:97:2E:C1:29:A9:05:60:A0:00:66
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 01A172BE71A85D98ADF137A588769B92EFC8
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/0E76KXZ9iHkQo5cuwSmpBWCgAGY.roa
Signing time: Sun 25 Oct 2026 11:07:25 +0000
ROA not before: Sun 25 Oct 2026 11:07:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 45.74.224.0/20 maxlen: 24
70.40.128.0/21 maxlen: 24
82.158.208.0/20 maxlen: 24
85.137.216.0/22 maxlen: 24
85.137.224.0/22 maxlen: 24
103.5.188.0/22 maxlen: 24
132.243.128.0/19 maxlen: 24
150.251.16.0/20 maxlen: 24
150.251.192.0/20 maxlen: 24
151.185.0.0/19 maxlen: 24
161.104.128.0/19 maxlen: 24
206.206.16.0/20 maxlen: 24
213.187.150.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:be:71:a8:5d:98:ad:f1:37:a5:88:76:9b:92:ef:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Oct 25 11:07:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d04efa29767d887910a3972ec129a90560a00066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:90:9e:36:13:98:95:83:a0:5a:70:8c:2f:
45:4f:13:ea:b2:25:3e:86:0f:8a:91:7c:b1:6b:74:
54:6c:d0:6a:8c:ef:58:75:6f:3b:b2:be:ab:fb:39:
e0:1a:a8:b1:f6:ef:58:b1:45:e1:68:b0:e6:1e:c2:
ac:8f:fc:9e:7d:30:01:71:4e:a9:6e:ea:c7:cf:9a:
5d:a6:76:aa:a2:98:55:9c:2b:f7:21:13:41:a9:6c:
4b:5f:38:48:72:af:78:e2:49:5d:a4:af:27:3d:56:
00:d8:7e:67:54:68:b2:fa:5d:46:12:97:f2:ee:e5:
8b:8b:5e:a5:ca:7e:43:bc:e3:67:f5:9e:c5:13:14:
ea:60:50:e6:da:42:23:02:fd:60:13:0a:72:54:8b:
bf:9f:6e:5a:d5:b3:f6:8b:50:8d:d1:11:e2:43:6a:
87:e4:de:94:71:87:a7:32:2c:93:cb:02:ac:8d:10:
7a:f9:7a:d3:f8:6a:83:90:5a:2f:1f:fd:70:bb:37:
da:61:ab:a1:74:ee:0e:53:95:4f:5e:41:44:9b:8d:
ef:4a:d9:22:84:b7:3b:aa:52:53:be:a9:c2:9d:13:
6d:ef:d3:bd:3f:67:55:77:bc:bb:24:66:fa:23:9d:
af:12:88:68:ac:9c:47:1d:33:f1:fb:6f:81:29:04:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4E:FA:29:76:7D:88:79:10:A3:97:2E:C1:29:A9:05:60:A0:00:66
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/0E76KXZ9iHkQo5cuwSmpBWCgAGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.224.0/20
70.40.128.0/21
82.158.208.0/20
85.137.216.0/22
85.137.224.0/22
103.5.188.0/22
132.243.128.0/19
150.251.16.0/20
150.251.192.0/20
151.185.0.0/19
161.104.128.0/19
206.206.16.0/20
213.187.150.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1f:c6:a5:0b:f3:16:6f:c4:e1:61:c9:c7:89:67:1c:7f:82:
0f:b9:46:96:91:14:ba:c2:26:98:35:7e:77:48:8b:30:14:85:
de:ef:c9:8a:5c:88:dc:f5:3f:4d:bd:8a:9d:30:ee:06:dd:11:
76:68:0c:67:e6:89:b2:72:fe:e6:31:73:65:55:2b:8e:8c:11:
2c:f5:19:0a:97:68:5b:fc:6a:87:bf:95:9f:69:62:58:52:d4:
3e:aa:69:4c:47:1e:2d:c8:94:a4:19:23:44:41:89:56:27:a7:
e9:ca:83:c9:c2:8f:d9:9b:59:cf:f3:9e:1d:eb:eb:b8:e4:c4:
de:b9:d1:66:48:ab:72:f8:c1:b4:a1:b0:fd:01:97:e2:17:0e:
ae:89:5d:b3:e5:a7:5e:60:20:a5:a9:31:ca:36:b2:14:86:0f:
db:bd:c3:7f:70:00:96:a4:c1:70:46:18:e6:8a:fe:df:d8:4b:
18:78:ec:5d:72:2d:a4:2c:38:78:93:9a:6d:81:29:77:c1:ad:
d3:bf:8b:1a:c9:8f:c6:81:6f:5c:32:61:4b:82:5c:f6:b3:9b:
78:ef:8c:dc:2f:78:93:06:ee:f9:9f:98:6c:d0:77:eb:f7:e3:
39:3d:75:14:83:90:5a:89:c6:e9:6b:e1:30:a7:d0:b0:6e:55:
cc:e3:5b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:40 2026 by rpki-client