Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/D0lOqZlz6l7-ZrCUQ8GBdVANexg.roa
File: D0lOqZlz6l7-ZrCUQ8GBdVANexg.roa (raw, json)
Hash identifier: K1RGqnZZYJTD3uw/i1TIaxwWVFvWBkxVYj1unQ+iV0M=
Subject key identifier: 0F:49:4E:A9:99:73:EA:5E:FE:66:B0:94:43:C1:81:75:50:0D:7B:18
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 019E92FCEDC4F9C43FCDA2D804FF3F323F4E
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/D0lOqZlz6l7-ZrCUQ8GBdVANexg.roa
Signing time: Thu 04 Jun 2026 14:15:09 +0000
ROA not before: Thu 04 Jun 2026 14:15:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 45.11.56.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.134.174.0/24 maxlen: 24
45.134.175.0/24 maxlen: 24
85.137.48.0/24 maxlen: 24
85.137.52.0/24 maxlen: 24
85.137.53.0/24 maxlen: 24
85.137.54.0/23 maxlen: 23
85.137.56.0/24 maxlen: 24
85.137.58.0/24 maxlen: 24
91.222.172.0/22 maxlen: 24
91.234.198.0/23 maxlen: 24
91.234.199.0/24 maxlen: 24
176.97.120.0/23 maxlen: 23
176.97.125.0/24 maxlen: 24
176.97.126.0/23 maxlen: 23
176.97.126.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
194.42.196.0/23 maxlen: 23
194.42.198.0/24 maxlen: 24
194.42.199.0/24 maxlen: 24
194.42.206.0/23 maxlen: 24
195.26.86.0/23 maxlen: 24
195.66.212.0/24 maxlen: 24
195.66.213.0/24 maxlen: 24
195.160.220.0/22 maxlen: 24
212.86.120.0/23 maxlen: 23
212.86.125.0/24 maxlen: 24
212.86.126.0/23 maxlen: 23
2a09:2dc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:fc:ed:c4:f9:c4:3f:cd:a2:d8:04:ff:3f:32:3f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jun 4 14:15:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f494ea99973ea5efe66b09443c18175500d7b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:7f:3e:71:44:d0:7d:83:08:4c:c4:0f:c4:
a2:66:19:83:0f:80:4a:38:a7:31:df:da:00:cf:b9:
91:dc:99:dd:5e:28:a1:08:e1:de:4b:b3:2f:54:74:
b8:76:39:ef:c0:a4:f9:96:e6:51:6a:b3:22:8c:3a:
0e:fe:38:27:21:b9:4e:73:ad:06:de:9b:13:70:7e:
5d:62:c2:d4:18:b1:86:dd:a2:b6:cb:7a:78:e8:ea:
60:50:ec:d0:5a:e3:3f:07:9d:0c:68:2b:45:50:57:
10:d7:59:07:d3:08:b2:35:76:eb:84:5c:20:82:75:
a0:0a:ef:15:3d:a5:86:6f:df:39:46:30:8c:1c:0d:
06:8b:4d:9b:d6:3c:11:56:98:80:27:95:8a:1c:60:
5b:f6:7b:c2:d6:8b:71:7c:49:c0:92:67:88:6b:6d:
cf:76:ac:26:fc:d1:c9:21:ec:d0:ab:7d:64:8a:1d:
91:a7:8c:41:08:ab:d1:cd:1e:6c:de:71:eb:69:76:
09:09:60:48:a9:1d:d3:3b:6a:27:56:a2:69:22:d2:
6b:5a:af:cc:61:82:f2:28:54:4b:dd:68:1a:f1:2a:
cf:ca:97:a2:81:9c:70:16:8f:d3:e1:f5:c1:cf:0a:
a7:7d:8b:40:66:31:81:5c:e9:bb:73:0d:35:ee:eb:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:49:4E:A9:99:73:EA:5E:FE:66:B0:94:43:C1:81:75:50:0D:7B:18
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/D0lOqZlz6l7-ZrCUQ8GBdVANexg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.56.0/24
45.11.59.0/24
45.134.174.0/23
85.137.48.0/24
85.137.52.0-85.137.56.255
85.137.58.0/24
91.222.172.0/22
91.234.198.0/23
176.97.120.0/23
176.97.125.0-176.97.127.255
185.254.199.0/24
194.42.196.0/22
194.42.206.0/23
195.26.86.0/23
195.66.212.0/23
195.160.220.0/22
212.86.120.0/23
212.86.125.0-212.86.127.255
IPv6:
2a09:2dc1::/32
Signature Algorithm: sha256WithRSAEncryption
7b:6b:08:6b:3c:57:6e:cf:fc:d9:ed:c6:bb:b3:d1:26:31:2c:
78:73:98:c5:af:f1:2d:dc:ae:d3:6e:47:f8:29:75:15:54:d3:
d9:fc:0a:59:6f:15:86:25:98:37:53:5b:7a:5b:d7:af:79:57:
ed:c7:1c:58:ee:21:96:01:ed:83:c4:e8:9a:49:22:45:cb:5c:
ac:76:16:6a:0e:7c:e7:8d:59:68:3b:04:4f:ff:33:06:f1:85:
6e:ea:28:3a:21:18:2e:df:55:70:ef:8d:05:40:7d:7a:a4:aa:
83:86:eb:9d:fb:92:ad:6e:e3:92:2e:3d:c8:d2:00:ae:92:9e:
0e:1d:75:a2:3f:57:d9:43:3e:31:82:06:eb:e4:4b:27:de:4d:
39:5d:0b:38:d8:48:29:4f:f3:33:4e:e6:92:b2:aa:3b:de:43:
8a:a0:c9:e6:10:9d:e9:a2:2a:3a:78:1c:06:3e:8e:9e:c0:63:
1e:1a:ab:1b:96:7c:9a:42:27:76:11:1e:cb:58:d7:25:3c:58:
87:46:25:24:88:b7:42:9e:eb:3f:3f:6e:18:f3:82:7f:52:df:
47:d6:c0:26:18:f9:98:6b:0f:22:92:27:2f:f5:18:ac:2a:dd:
df:db:1a:73:a2:35:05:02:09:89:47:8c:5f:7e:0a:f8:92:81:
bc:8f:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:17:40 2026 by rpki-client