Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0RGIqhUFEMWK2fXC9rV_tlkv4n4.roa
File: 0RGIqhUFEMWK2fXC9rV_tlkv4n4.roa (raw, json)
Hash identifier: NJUTFV3IxSRhyNkIEDIrFx6J1eUfUKf8sdUXb9DzEBI=
Subject key identifier: D1:11:88:AA:15:05:10:C5:8A:D9:F5:C2:F6:B5:7F:B6:59:2F:E2:7E
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A13FB2422B5C61D864AA3BA740DB2C0F30
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0RGIqhUFEMWK2fXC9rV_tlkv4n4.roa
Signing time: Thu 15 Oct 2026 13:13:29 +0000
ROA not before: Thu 15 Oct 2026 13:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 84.55.0.0/24 maxlen: 24
84.55.2.0/24 maxlen: 24
84.55.4.0/24 maxlen: 24
84.55.5.0/24 maxlen: 24
84.55.6.0/24 maxlen: 24
84.55.7.0/24 maxlen: 24
84.55.15.0/24 maxlen: 24
88.223.46.0/24 maxlen: 24
88.223.168.0/24 maxlen: 24
88.223.172.0/24 maxlen: 24
88.223.173.0/24 maxlen: 24
95.173.46.0/24 maxlen: 24
95.173.49.0/24 maxlen: 24
95.173.52.0/24 maxlen: 24
95.173.58.0/24 maxlen: 24
95.173.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:b2:42:2b:5c:61:d8:64:aa:3b:a7:40:db:2c:0f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 15 13:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d11188aa150510c58ad9f5c2f6b57fb6592fe27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:d6:51:20:52:85:cc:f8:8a:d0:9b:65:1c:
c9:6b:a8:2a:e0:75:f3:89:ce:d9:42:1f:78:2d:46:
f2:c0:de:d6:90:a2:37:13:22:4e:b1:74:48:0b:cb:
aa:ff:25:a8:cb:f7:2f:e3:48:ea:c3:2d:5b:46:ef:
87:57:7e:dc:a9:eb:f7:52:36:f5:06:03:38:5a:a9:
94:33:03:28:29:f7:5c:5e:70:f0:95:7d:1d:f8:9c:
dc:57:46:a2:74:1f:82:4e:a4:fb:7d:31:3d:12:ad:
ab:b1:cd:a0:79:2e:31:d8:c1:23:72:fa:16:4c:f5:
58:20:2d:aa:10:87:d0:ce:b4:46:71:6c:85:f3:78:
36:38:87:4c:9b:0b:cb:04:4e:ee:f4:51:58:cc:57:
9c:fc:85:44:f9:6d:c5:69:33:79:a5:5c:35:5f:1a:
b2:d1:62:6d:47:53:a7:43:20:4f:e6:be:c7:55:94:
37:d3:db:78:1a:c1:61:f6:3f:be:6d:c3:e4:2e:bd:
c0:d0:35:21:4b:de:59:4f:c5:63:c6:aa:3b:68:c5:
b1:ec:38:b6:96:54:3c:5f:13:39:75:ad:07:56:27:
0d:3e:6f:cf:fb:5b:1a:49:8a:1f:23:d7:ba:be:fe:
4d:6e:11:aa:56:2e:c6:4d:29:72:c3:af:ae:39:2c:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:88:AA:15:05:10:C5:8A:D9:F5:C2:F6:B5:7F:B6:59:2F:E2:7E
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0RGIqhUFEMWK2fXC9rV_tlkv4n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.0.0/24
84.55.2.0/24
84.55.4.0/22
84.55.15.0/24
88.223.46.0/24
88.223.168.0/24
88.223.172.0/23
95.173.46.0/24
95.173.49.0/24
95.173.52.0/24
95.173.58.0/24
95.173.60.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c1:cf:66:d3:2c:54:02:06:b7:fb:39:e0:47:99:88:32:ac:
80:7a:9b:62:54:6a:40:f9:9c:02:f1:85:97:d8:1c:a6:b9:0f:
ce:6f:31:64:71:ca:d4:dc:75:8b:b2:e7:18:15:a5:4a:50:08:
e5:c1:65:ea:4f:03:1e:d5:88:85:44:20:ca:62:cb:d1:7c:50:
85:7d:28:b3:d0:38:b0:ae:cb:16:24:ba:bf:f9:4b:fc:3f:31:
be:90:b2:d5:53:6e:7b:f0:ab:74:e9:66:49:3d:22:80:a7:23:
47:63:1c:d7:6f:b8:b0:63:cc:23:ca:77:58:d7:7f:31:41:17:
d0:7a:76:7d:10:70:b7:94:72:97:13:a8:6d:1b:1b:7f:1b:2b:
bb:8c:d2:45:9b:55:28:a3:91:25:8b:26:19:bb:8a:5a:fc:21:
b0:dc:de:2b:d3:a7:bd:cf:b6:96:df:f8:2d:17:64:ce:6a:95:
c3:73:ef:53:29:26:3f:00:90:9d:1d:5a:4b:7c:e6:5c:cb:d0:
51:79:50:7e:55:ca:73:01:fd:94:48:3c:d4:8c:6d:f3:7d:bd:
9e:a9:a2:1f:98:e9:f2:70:f6:30:56:cd:28:3a:17:50:7a:6e:
c1:14:12:51:fb:a5:39:b4:6c:09:10:5c:e6:b5:9f:44:28:75:
59:02:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:39 2026 by rpki-client