Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/SUbHUZDl3o6ezWxoDAA-9ZXu8p0.roa
File: SUbHUZDl3o6ezWxoDAA-9ZXu8p0.roa (raw, json)
Hash identifier: AHUWqK7SMq/LDn5G/1m1Pnh21JpFg6IieS/cW274xkE=
Subject key identifier: 49:46:C7:51:90:E5:DE:8E:9E:CD:6C:68:0C:00:3E:F5:95:EE:F2:9D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019F6A9477C9112D9C65966A323C76E3524F
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/SUbHUZDl3o6ezWxoDAA-9ZXu8p0.roa
Signing time: Thu 16 Jul 2026 10:59:02 +0000
ROA not before: Thu 16 Jul 2026 10:59:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 84.55.1.0/24 maxlen: 24
84.55.3.0/24 maxlen: 24
84.55.9.0/24 maxlen: 24
84.55.18.0/24 maxlen: 24
88.223.16.0/24 maxlen: 24
88.223.17.0/24 maxlen: 24
88.223.18.0/24 maxlen: 24
88.223.19.0/24 maxlen: 24
88.223.20.0/24 maxlen: 24
88.223.21.0/24 maxlen: 24
88.223.22.0/24 maxlen: 24
88.223.23.0/24 maxlen: 24
88.223.44.0/24 maxlen: 24
88.223.169.0/24 maxlen: 24
88.223.170.0/24 maxlen: 24
88.223.171.0/24 maxlen: 24
88.223.174.0/24 maxlen: 24
88.223.175.0/24 maxlen: 24
95.173.41.0/24 maxlen: 24
95.173.54.0/24 maxlen: 24
95.173.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:94:77:c9:11:2d:9c:65:96:6a:32:3c:76:e3:52:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 16 10:59:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4946c75190e5de8e9ecd6c680c003ef595eef29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:6e:47:0f:06:79:91:81:0f:ae:74:34:54:
eb:e5:f4:fe:64:2c:c5:60:2e:d7:d7:43:e9:94:4f:
5b:df:04:33:59:90:72:7b:71:a4:02:85:66:e3:91:
35:a0:e8:57:c7:6c:70:69:fe:ef:3a:15:4f:7d:04:
17:bd:83:f8:a6:7a:e6:3d:7f:cf:5b:f1:8b:69:85:
81:88:f2:5e:16:7c:81:5e:44:89:fd:c2:28:74:7e:
f9:07:dc:56:09:90:c0:53:52:90:f0:cf:4c:61:73:
85:ce:6e:df:69:7c:47:74:58:a6:3a:a3:b1:74:bd:
2c:df:e7:da:03:32:f2:83:33:8e:46:a6:b1:cc:9a:
37:de:60:45:65:f8:3b:e8:63:57:69:a5:f0:82:18:
74:af:24:17:7b:0f:67:83:bb:d5:3b:62:59:22:e7:
89:49:cb:0d:ee:5a:9f:58:01:25:9b:dd:a4:58:89:
2d:32:f1:44:12:41:ca:01:f8:e2:67:7c:08:52:09:
78:41:74:ed:16:29:0e:c3:73:e1:c7:47:ca:b1:17:
58:3b:1a:76:bc:23:67:a2:07:62:f2:e1:e0:8f:87:
ff:71:ca:31:44:a7:1d:9b:bd:ae:2b:1d:d7:03:7f:
65:a4:34:00:94:6d:37:51:84:9e:bc:2a:9a:d2:4a:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:C7:51:90:E5:DE:8E:9E:CD:6C:68:0C:00:3E:F5:95:EE:F2:9D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/SUbHUZDl3o6ezWxoDAA-9ZXu8p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.1.0/24
84.55.3.0/24
84.55.9.0/24
84.55.18.0/24
88.223.16.0/21
88.223.44.0/24
88.223.169.0-88.223.171.255
88.223.174.0/23
95.173.41.0/24
95.173.54.0/24
95.173.63.0/24
Signature Algorithm: sha256WithRSAEncryption
75:97:c2:76:e5:13:82:9f:da:f5:66:00:4a:f7:63:f6:cd:5c:
ca:71:87:91:bd:26:1c:08:b6:83:39:b6:82:16:c8:33:3a:a8:
32:1d:33:ad:c1:f0:39:e5:64:29:f9:40:89:d4:90:db:d6:73:
9a:a4:e0:c2:63:07:83:f5:bf:a8:71:e4:00:80:08:62:4e:e8:
bd:c6:85:05:7c:ab:eb:72:ad:e9:29:ad:95:82:e2:01:9a:c8:
84:4f:2a:92:65:69:3b:68:a6:10:2c:55:fd:d8:50:a5:b1:89:
88:68:32:05:6f:46:73:2d:60:d9:ce:7b:41:16:12:d0:3a:5f:
15:8c:f1:52:e5:e1:5c:0e:33:3a:12:fe:67:c1:9a:ea:4b:aa:
e5:30:83:c2:90:df:df:55:72:30:e1:6d:c2:9b:9d:8a:f9:87:
e4:fb:d2:45:a0:cc:f5:23:d8:23:9a:01:3d:95:9b:02:42:1e:
9e:9d:c4:ca:88:d7:13:f1:74:75:21:0e:3f:6a:51:c0:df:e7:
86:82:41:90:da:89:80:a8:ed:ed:83:ef:ed:00:89:30:b2:c4:
1c:52:6a:35:92:db:86:08:50:7c:bc:7a:8c:b8:85:30:49:8b:
d1:98:9a:3e:10:6a:b9:20:1b:40:04:88:e2:24:02:41:4a:b3:
da:a1:13:e9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZ9qlHfJES2cZZZqMjx241JPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjYwNzE2MTA1OTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTQ2Yzc1MTkwZTVkZThlOWVjZDZjNjgwYzAwM2VmNTk1ZWVmMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8huRw8GeZGBD650NFTr5fT+ZCzF
YC7X10PplE9b3wQzWZBye3GkAoVm45E1oOhXx2xwaf7vOhVPfQQXvYP4pnrmPX/P
W/GLaYWBiPJeFnyBXkSJ/cIodH75B9xWCZDAU1KQ8M9MYXOFzm7faXxHdFimOqOx
dL0s3+faAzLygzOORqaxzJo33mBFZfg76GNXaaXwghh0ryQXew9ng7vVO2JZIueJ
ScsN7lqfWAElm92kWIktMvFEEkHKAfjiZ3wIUgl4QXTtFikOw3Phx0fKsRdYOxp2
vCNnogdi8uHgj4f/ccoxRKcdm72uKx3XA39lpDQAlG03UYSevCqa0krRvwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFElGx1GQ5d6Ons1saAwAPvWV7vKdMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvU1ViSFVaRGwzbzZleld4b0RBQS05Wlh1OHAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAVDcBAwQA
VDcDAwQAVDcJAwQAVDcSAwQDWN8QAwQAWN8sMAwDBABY36kDBAJY36gDBAFY364D
BABfrSkDBABfrTYDBABfrT8wDQYJKoZIhvcNAQELBQADggEBAHWXwnblE4Kf2vVm
AEr3Y/bNXMpxh5G9JhwItoM5toIWyDM6qDIdM63B8DnlZCn5QInUkNvWc5qk4MJj
B4P1v6hx5ACACGJO6L3GhQV8q+tyrekprZWC4gGayIRPKpJlaTtophAsVf3YUKWx
iYhoMgVvRnMtYNnOe0EWEtA6XxWM8VLl4VwOMzoS/mfBmupLquUwg8KQ399VcjDh
bcKbnYr5h+T70kWgzPUj2COaAT2VmwJCHp6dxMqI1xPxdHUhDj9qUcDf54aCQZDa
iYCo7e2D7+0AiTCyxBxSajWS24YIUHy8eoy4hTBJi9GYmj4QarkgG0AEiOIkAkFK
s9qhE+k=
-----END CERTIFICATE-----
Generated at Sun Jul 19 14:53:15 2026 by rpki-client