Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9RVbC3aDVX4UqkMTVCxfKMyUnIo.roa
File: 9RVbC3aDVX4UqkMTVCxfKMyUnIo.roa (raw, json)
Hash identifier: FQgekgmb4rseIFxv6HNos/CC12QPnk+UKwyf7AmH1Ik=
Subject key identifier: F5:15:5B:0B:76:83:55:7E:14:AA:43:13:54:2C:5F:28:CC:94:9C:8A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A19654DB187818FFB493F9A767AF5F3C01
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9RVbC3aDVX4UqkMTVCxfKMyUnIo.roa
Signing time: Sun 01 Nov 2026 08:58:25 +0000
ROA not before: Sun 01 Nov 2026 08:58:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2.56.117.0/24 maxlen: 24
5.180.23.0/24 maxlen: 24
45.9.5.0/24 maxlen: 24
45.9.17.0/24 maxlen: 24
45.66.164.0/24 maxlen: 24
45.82.253.0/24 maxlen: 24
45.86.71.0/24 maxlen: 24
45.86.76.0/24 maxlen: 24
45.86.77.0/24 maxlen: 24
45.88.160.0/24 maxlen: 24
45.88.170.0/24 maxlen: 24
45.88.171.0/24 maxlen: 24
45.88.178.0/24 maxlen: 24
45.88.179.0/24 maxlen: 24
45.88.181.0/24 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.98.0/24 maxlen: 24
45.89.197.0/24 maxlen: 24
45.89.198.0/24 maxlen: 24
45.89.199.0/24 maxlen: 24
45.136.115.0/24 maxlen: 24
45.149.112.0/24 maxlen: 24
92.118.229.0/24 maxlen: 24
95.214.248.0/24 maxlen: 24
139.28.234.0/23 maxlen: 24
141.98.167.0/24 maxlen: 24
171.22.110.0/23 maxlen: 24
185.161.70.0/24 maxlen: 24
194.36.38.0/24 maxlen: 24
213.59.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:54:db:18:78:18:ff:b4:93:f9:a7:67:af:5f:3c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 1 08:58:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5155b0b7683557e14aa4313542c5f28cc949c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:e8:c5:7b:53:fc:73:22:ed:52:67:6b:3d:
62:43:d9:87:6a:f4:5a:9e:5b:9e:69:17:37:3d:76:
bd:29:c6:1f:79:a5:1e:0f:39:40:c2:6b:83:1e:95:
80:fe:54:e5:49:77:3e:e5:81:db:93:2a:97:2e:e5:
1a:78:be:ec:72:7d:1b:40:54:1d:f5:f9:38:19:04:
52:c5:9b:de:1c:58:21:5f:dc:01:78:d9:65:b4:74:
3f:52:b2:99:36:83:f9:8d:40:b5:33:ca:6e:d9:f7:
f7:68:da:3b:46:23:00:d3:46:e5:98:ab:37:a1:b4:
fe:d2:5f:18:19:c6:65:21:d0:22:7b:c0:04:09:12:
b7:f4:46:e4:2e:c5:88:50:45:1f:f6:69:33:35:7b:
2d:1e:4e:96:16:40:3f:2d:a9:e5:3b:c1:39:3c:e9:
77:b1:e6:1b:c0:a8:b5:54:f2:6b:77:95:72:f4:c7:
3e:6b:37:67:d3:05:3d:7d:38:f3:ac:d9:08:a7:84:
b7:d1:7c:4c:65:59:d7:9e:53:33:72:7a:dc:bb:19:
32:b4:44:3c:5e:3e:22:f6:67:5a:d7:5f:2d:f9:6c:
a8:87:9f:7c:99:9f:31:0e:42:ca:d0:26:ca:6b:37:
4f:3d:39:6c:31:fd:33:48:ad:04:da:cc:cc:e8:ef:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:5B:0B:76:83:55:7E:14:AA:43:13:54:2C:5F:28:CC:94:9C:8A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9RVbC3aDVX4UqkMTVCxfKMyUnIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.117.0/24
5.180.23.0/24
45.9.5.0/24
45.9.17.0/24
45.66.164.0/24
45.82.253.0/24
45.86.71.0/24
45.86.76.0/23
45.88.160.0/24
45.88.170.0/23
45.88.178.0/23
45.88.181.0/24
45.89.96.0/24
45.89.98.0/24
45.89.197.0-45.89.199.255
45.136.115.0/24
45.149.112.0/24
92.118.229.0/24
95.214.248.0/24
139.28.234.0/23
141.98.167.0/24
171.22.110.0/23
185.161.70.0/24
194.36.38.0/24
213.59.112.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9b:b5:14:6f:41:ee:93:eb:58:82:12:22:0b:d5:be:9b:54:
fb:d4:c0:e3:2d:71:16:5b:1b:f0:5b:b6:d3:45:20:dc:3f:fa:
d1:e9:cd:a3:39:3e:2f:8c:5c:bf:78:24:66:76:7e:77:be:ee:
cf:31:ee:8b:d6:d9:3a:6c:ba:25:e2:d0:3b:75:1b:1e:55:1a:
91:1d:64:65:18:7c:e8:9f:65:c7:9c:ec:ef:aa:55:7d:cc:a6:
7a:32:b3:cd:7f:ef:e5:a7:ad:a6:1b:f2:16:99:80:28:8b:e6:
76:c8:40:ab:ed:78:1b:1c:47:a7:a1:a9:3f:1a:0f:fb:e4:5c:
01:cb:d4:e0:40:7d:a4:fc:24:a7:65:7b:eb:7b:95:cf:af:e4:
64:9e:33:9b:fa:03:c4:f7:53:3f:51:42:ff:08:bf:72:b4:9a:
11:1e:a6:28:85:26:50:94:62:31:e7:15:cd:67:1d:ea:85:0d:
20:ee:54:28:a6:eb:6a:f0:13:d2:e0:68:79:d4:78:c3:85:cb:
53:9b:ee:ee:36:e5:e4:62:27:2e:7f:77:f8:91:95:eb:6d:87:
57:2e:ce:1b:e7:35:53:09:6b:2c:67:b9:7f:fb:f7:16:d3:12:
46:26:02:54:74:f6:82:ab:12:1d:90:c5:fb:11:3c:eb:cd:5a:
02:cf:61:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:30:15 2026 by rpki-client