Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sf2hdeYsDolTVdmYlzH9mIt8y6g.roa
File: sf2hdeYsDolTVdmYlzH9mIt8y6g.roa (raw, json)
Hash identifier: 6wzDusiFHmh1WiTvdtPUnEZo9mmBghcMydkiaPNfiME=
Subject key identifier: B1:FD:A1:75:E6:2C:0E:89:53:55:D9:98:97:31:FD:98:8B:7C:CB:A8
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019E8E14D5623FB4170952868A9ACC598106
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sf2hdeYsDolTVdmYlzH9mIt8y6g.roa
Signing time: Wed 03 Jun 2026 15:23:10 +0000
ROA not before: Wed 03 Jun 2026 15:23:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 45.8.69.0/24 maxlen: 24
45.123.41.0/24 maxlen: 32
45.123.42.0/23 maxlen: 32
45.129.134.0/23 maxlen: 24
45.141.200.0/23 maxlen: 32
45.141.202.0/24 maxlen: 32
45.141.203.0/24 maxlen: 32
84.245.18.0/24 maxlen: 24
84.245.29.0/24 maxlen: 24
87.101.2.0/24 maxlen: 24
89.47.89.0/24 maxlen: 32
91.190.100.0/24 maxlen: 32
92.114.107.0/24 maxlen: 32
185.9.55.0/24 maxlen: 32
185.35.136.0/23 maxlen: 32
185.35.138.0/24 maxlen: 32
185.35.139.0/24 maxlen: 32
188.212.133.0/24 maxlen: 32
188.241.214.0/24 maxlen: 32
2a0b:64c0::/32 maxlen: 128
2a10:6c02::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:14:d5:62:3f:b4:17:09:52:86:8a:9a:cc:59:81:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 3 15:23:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1fda175e62c0e895355d9989731fd988b7ccba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:6b:2a:1f:65:6e:c2:ce:10:e4:4f:52:d0:
ab:fe:76:e8:0a:2f:c8:4e:0d:e6:fc:a3:c0:62:ab:
db:2b:1b:fd:ea:68:7a:12:db:4a:bd:5b:a7:5b:1d:
46:0f:81:b3:ee:0f:b4:e8:ec:5e:ef:80:75:7f:7c:
aa:be:87:9f:b5:c9:0b:fd:ff:4b:6e:77:46:6f:35:
cd:63:54:e7:b0:e7:97:96:1e:81:ba:aa:2b:fc:a1:
f3:c7:de:f1:4f:cb:47:d0:3e:27:56:1a:cd:e3:ef:
89:04:6c:95:c7:9d:06:0d:a8:3f:f7:6d:26:a1:11:
35:5f:3c:f4:46:24:1a:33:68:bf:df:50:55:eb:04:
90:e5:b5:cb:72:0c:31:02:35:9a:7e:b9:02:ef:b5:
c9:90:2e:2a:06:e4:b9:26:1d:9a:65:6b:ea:a4:a3:
6d:df:47:64:d9:47:f4:cb:07:de:70:ba:2b:0c:6f:
ed:58:4c:7d:cc:23:d3:5e:0b:0b:c3:bd:90:03:1f:
a8:bb:72:8b:62:4c:1b:44:61:a1:dc:8c:3b:0e:c3:
4d:f4:7c:3c:69:cc:3c:20:de:de:27:75:ed:3f:38:
67:5e:c6:bd:9f:5f:94:3c:66:ff:e9:d3:3e:4f:bc:
70:ae:bb:5c:85:5b:15:b9:9a:bc:a7:f9:bf:91:97:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FD:A1:75:E6:2C:0E:89:53:55:D9:98:97:31:FD:98:8B:7C:CB:A8
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sf2hdeYsDolTVdmYlzH9mIt8y6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.69.0/24
45.123.41.0-45.123.43.255
45.129.134.0/23
45.141.200.0/22
84.245.18.0/24
84.245.29.0/24
87.101.2.0/24
89.47.89.0/24
91.190.100.0/24
92.114.107.0/24
185.9.55.0/24
185.35.136.0/22
188.212.133.0/24
188.241.214.0/24
IPv6:
2a0b:64c0::/32
2a10:6c02::/32
Signature Algorithm: sha256WithRSAEncryption
93:b2:d2:7a:4b:92:22:e0:10:80:31:90:a5:aa:22:57:6d:6d:
99:39:ed:60:5c:9d:e5:28:37:1e:b3:35:bd:77:0a:93:5c:36:
e8:97:2d:66:4a:d5:c3:4b:e4:ea:df:30:c6:42:2c:d8:8e:49:
c7:9f:ba:a9:e6:1a:68:08:1a:39:2f:3a:ff:3f:12:13:48:14:
0d:07:ae:48:30:0c:1c:5b:f3:51:69:04:0d:ec:a0:30:a2:43:
ae:71:7e:8b:c8:a0:fd:9c:2e:59:9e:42:f2:13:0d:99:93:d7:
f8:f3:a4:31:5b:7d:8c:53:56:3a:1f:51:bf:74:f8:4e:2b:65:
01:e9:b0:ef:6c:0b:a8:fd:3a:64:1a:1f:6c:d1:3f:ce:48:eb:
d6:8f:97:3e:6f:29:76:8d:74:67:21:6b:34:ef:54:40:ff:b6:
ad:a0:05:56:09:9e:94:b1:ad:e2:19:67:76:a5:fc:bb:1d:07:
d4:ee:11:77:6c:65:28:7e:3c:87:c4:1d:89:5d:96:b4:04:39:
61:88:28:23:00:84:6d:03:ad:fc:c4:b3:ef:99:2f:1b:29:35:
3a:2c:03:19:b5:e2:52:7d:97:45:5d:e2:f2:09:da:e8:26:85:
b4:ce:0b:78:66:03:3b:dc:85:de:c2:b2:b3:dc:9e:73:f6:89:
2b:23:77:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 4 07:14:11 2026 by rpki-client