Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa
File: hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa (raw, json)
Hash identifier: zCLqNFR/17rQqa13pT3OcgSGKUtKcJcNjAIXmiREIUM=
Subject key identifier: 85:18:66:68:E5:38:81:9F:ED:BC:3D:45:21:79:AB:F2:0D:2F:80:FE
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019F2E229DAA58C5855FF37941D0E52DE57C
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa
Signing time: Sat 04 Jul 2026 17:17:28 +0000
ROA not before: Sat 04 Jul 2026 17:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208161
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.131.0/24 maxlen: 24
87.248.133.0/24 maxlen: 24
87.248.137.0/24 maxlen: 24
87.248.138.0/24 maxlen: 24
87.248.139.0/24 maxlen: 24
87.248.145.0/24 maxlen: 24
87.248.150.0/24 maxlen: 24
87.248.151.0/24 maxlen: 24
87.248.152.0/24 maxlen: 24
87.248.153.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
194.60.230.0/24 maxlen: 24
194.60.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:22:9d:aa:58:c5:85:5f:f3:79:41:d0:e5:2d:e5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 4 17:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85186668e538819fedbc3d452179abf20d2f80fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:99:74:7b:a2:ff:c7:fd:e3:71:ee:cb:50:
99:de:ef:4b:1d:13:3e:aa:2c:c6:0e:ce:4f:41:e4:
5b:9e:cd:fa:41:07:88:65:47:54:32:7a:09:58:19:
cc:76:00:a0:72:41:04:20:22:36:b1:09:4f:37:a9:
cb:13:22:03:c3:4d:e5:84:e7:b0:22:f6:95:6e:12:
7d:2c:09:4b:fc:d5:29:29:32:ff:d6:f2:e9:98:c1:
f4:67:f4:e9:85:91:ef:65:32:35:32:98:4f:82:27:
fc:fc:88:e6:d7:45:fc:b4:b6:c3:d9:44:04:02:f8:
b8:24:f5:61:4b:31:01:2c:f3:4e:2b:b0:51:7a:62:
d0:37:16:ef:dc:69:aa:d9:76:8b:6d:10:03:1d:d2:
94:ba:fe:b9:3e:22:a3:7b:a9:6a:e8:2d:b2:cc:7a:
ec:bf:0f:e5:9b:bb:85:98:72:02:b5:5c:c0:2b:90:
df:e8:6e:da:50:93:71:ab:af:ec:a3:b7:83:aa:45:
a2:2e:80:5a:89:2a:97:32:93:1c:f5:51:84:11:50:
07:75:32:d2:eb:8f:10:62:a8:7f:7c:d3:b0:5d:07:
5a:fd:d8:76:d3:45:fb:6c:8f:8d:4b:e2:aa:e1:4d:
3d:3b:d5:6c:7f:6a:6f:a2:7b:51:73:43:6e:f2:85:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:18:66:68:E5:38:81:9F:ED:BC:3D:45:21:79:AB:F2:0D:2F:80:FE
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/23
87.248.133.0/24
87.248.137.0-87.248.139.255
87.248.145.0/24
87.248.150.0-87.248.153.255
87.248.155.0-87.248.156.255
194.60.230.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:a3:2a:4f:61:10:af:6c:c3:2d:83:d2:b7:b4:cb:60:f1:da:
3c:30:54:47:e6:cc:1e:33:20:b2:11:57:00:22:96:a6:54:c6:
53:f6:f9:c0:ec:32:89:67:0e:91:59:10:74:bc:61:e1:40:f5:
5b:92:1b:6b:75:2f:a6:42:9d:1f:9f:3a:a8:5e:34:f0:9b:35:
a8:a7:2a:bf:c3:04:80:88:4f:67:29:43:bd:d9:73:fb:00:8e:
b7:94:0b:fd:af:30:4f:8b:cc:49:2e:2d:c7:05:55:70:e6:ee:
7c:e7:06:1e:76:73:8e:3b:55:aa:11:25:4f:56:63:5b:13:b0:
32:8f:09:f7:ee:44:93:52:2a:fc:30:6a:5d:07:d6:b6:87:ea:
a4:b4:c6:a6:55:2d:f0:ef:4c:45:2a:dd:e5:36:01:24:58:0b:
2f:c0:2d:6c:ec:c3:67:77:02:68:e0:12:3d:d3:19:41:e4:d0:
cb:65:3f:9a:ce:5f:f3:a8:09:54:da:aa:95:3e:45:ba:1d:b0:
cf:6f:41:f8:b2:a0:56:27:f2:cb:d9:f4:7e:34:21:3e:2b:01:
56:a9:82:ac:6d:98:66:5d:86:f3:48:d2:09:a9:9a:df:0e:2b:
b4:8f:bd:1c:41:41:7a:38:67:42:25:12:08:ef:9a:fa:2e:f8:
cf:0c:dc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:49 2026 by rpki-client