Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_JTyW4iYFufSsLYeShGSHGqGgx4.roa
File: _JTyW4iYFufSsLYeShGSHGqGgx4.roa (raw, json)
Hash identifier: O6VppN5HR+ya8qrRmvsLMuo1/oOEnKrOFNbSHGJMxfk=
Subject key identifier: FC:94:F2:5B:88:98:16:E7:D2:B0:B6:1E:4A:11:92:1C:6A:86:83:1E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0EC6812D78CA9E155EB1A2B4C67BE99F2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_JTyW4iYFufSsLYeShGSHGqGgx4.roa
Signing time: Tue 29 Sep 2026 09:03:58 +0000
ROA not before: Tue 29 Sep 2026 09:03:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 2.56.118.0/24 maxlen: 24
2.56.119.0/24 maxlen: 24
2.56.120.0/24 maxlen: 24
2.56.121.0/24 maxlen: 24
2.56.122.0/24 maxlen: 24
2.56.123.0/24 maxlen: 24
2.56.124.0/24 maxlen: 24
2.56.125.0/24 maxlen: 24
2.56.126.0/24 maxlen: 24
2.56.127.0/24 maxlen: 24
2.56.172.0/24 maxlen: 24
2.56.174.0/24 maxlen: 24
2.56.175.0/24 maxlen: 24
2.56.176.0/24 maxlen: 24
2.56.177.0/24 maxlen: 24
2.56.179.0/24 maxlen: 24
171.22.114.0/24 maxlen: 24
171.22.119.0/24 maxlen: 24
171.22.128.0/24 maxlen: 24
171.22.129.0/24 maxlen: 24
171.22.130.0/24 maxlen: 24
171.22.131.0/24 maxlen: 24
171.22.132.0/24 maxlen: 24
185.156.108.0/24 maxlen: 24
185.156.109.0/24 maxlen: 24
185.156.110.0/24 maxlen: 24
185.156.111.0/24 maxlen: 24
185.203.4.0/24 maxlen: 24
185.203.5.0/24 maxlen: 24
185.203.6.0/24 maxlen: 24
185.203.7.0/24 maxlen: 24
194.55.188.0/24 maxlen: 24
194.59.244.0/24 maxlen: 24
194.76.136.0/24 maxlen: 24
194.76.137.0/24 maxlen: 24
194.76.138.0/24 maxlen: 24
194.76.139.0/24 maxlen: 24
213.59.113.0/24 maxlen: 24
213.59.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:68:12:d7:8c:a9:e1:55:eb:1a:2b:4c:67:be:99:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 29 09:03:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc94f25b889816e7d2b0b61e4a11921c6a86831e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:ea:61:2a:3b:cb:9c:17:17:57:68:95:a3:
0e:84:61:81:2f:98:4d:b1:f8:32:b5:a7:0f:35:59:
4d:34:f2:be:03:26:06:05:e7:52:0c:2a:14:ef:47:
35:1f:e9:32:e6:03:06:54:70:56:81:c7:cd:bc:68:
1b:3d:e2:6e:53:ac:30:bf:d9:d4:35:a4:10:14:9d:
5a:06:41:ca:85:c6:75:2a:d3:7d:c2:84:95:af:41:
25:e7:7b:c7:5d:80:82:e5:41:41:63:95:a9:e4:21:
bb:38:84:5d:f5:32:9b:c9:56:80:de:26:00:ab:b7:
88:8e:4e:73:24:cb:f8:e3:3b:cf:97:98:74:9d:4d:
38:98:0f:07:59:0e:fb:56:be:cf:e9:0a:15:6b:d3:
03:cf:d9:4d:16:d9:80:32:73:ef:e4:b2:e3:ae:e1:
d8:83:b2:bc:7b:88:8f:2a:71:32:5f:78:98:d6:45:
f1:e9:1f:2b:1f:e1:24:01:a5:05:29:13:82:38:56:
b7:cc:5b:d6:e1:01:64:e4:5c:16:3f:9a:25:23:6f:
31:92:fa:79:37:75:c1:60:23:77:dd:80:a2:18:8f:
1c:dc:e3:a2:f1:93:92:5c:f6:6a:5b:60:3f:27:a9:
8a:da:b7:fe:ee:68:b5:ae:8b:bf:0e:3b:3c:e9:9b:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:F2:5B:88:98:16:E7:D2:B0:B6:1E:4A:11:92:1C:6A:86:83:1E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_JTyW4iYFufSsLYeShGSHGqGgx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.118.0-2.56.127.255
2.56.172.0/24
2.56.174.0-2.56.177.255
2.56.179.0/24
171.22.114.0/24
171.22.119.0/24
171.22.128.0-171.22.132.255
185.156.108.0/22
185.203.4.0/22
194.55.188.0/24
194.59.244.0/24
194.76.136.0/22
213.59.113.0-213.59.114.255
Signature Algorithm: sha256WithRSAEncryption
22:bb:37:09:da:91:86:46:cb:70:0c:4a:b9:57:f0:07:e9:92:
4b:d6:0b:82:2c:cf:b4:b2:88:ef:dc:fa:aa:de:76:03:ef:a2:
3a:12:b8:7f:ed:10:dd:f9:83:3b:59:b7:da:8e:2d:22:09:db:
3f:67:3c:6f:43:f1:b0:82:e9:bd:2a:b2:4c:dd:d5:e7:a8:e4:
4e:f7:10:d2:85:aa:70:fa:6e:56:4b:26:5a:f8:d3:a1:66:80:
1d:a4:31:44:72:2e:2f:24:82:01:78:c4:1b:88:8f:49:2c:e5:
7f:fd:47:2c:75:cb:e4:7d:88:67:8e:46:e8:b8:08:e8:9a:bb:
5b:f5:c9:94:72:5b:55:f6:97:d0:4c:d2:42:d3:0e:bf:b1:85:
2a:9d:01:ec:5b:9c:b0:80:07:eb:8f:d2:cb:6c:c9:74:b0:fd:
8b:3c:5d:f6:4f:dd:9f:02:a0:c9:50:16:71:b5:6f:c1:71:c8:
1f:9d:98:cd:97:e2:d1:91:5c:23:12:98:3c:60:a0:1f:97:84:
75:0c:7d:56:8c:0f:9a:8e:b3:c0:0f:ac:31:d6:fc:90:f9:7b:
dc:32:f4:8d:45:42:1b:3c:2c:3d:84:9c:7a:cd:8b:b2:04:27:
d7:ea:73:d3:3f:a5:b6:8c:77:7c:d9:fb:f4:5b:d0:e0:e0:25:
7a:fd:89:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:15:33 2026 by rpki-client