Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/AX2facRajAYTbLHEv2SE-8tACkk.roa
File: AX2facRajAYTbLHEv2SE-8tACkk.roa (raw, json)
Hash identifier: 9A3CFsiIWM3oeDGZNKBGtXDQWoPfKxnYhCoNC50/Ns4=
Subject key identifier: 01:7D:9F:69:C4:5A:8C:06:13:6C:B1:C4:BF:64:84:FB:CB:40:0A:49
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 01A115749DE6D79ACA6A1ACC21349A178205
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/AX2facRajAYTbLHEv2SE-8tACkk.roa
Signing time: Wed 07 Oct 2026 08:22:06 +0000
ROA not before: Wed 07 Oct 2026 08:22:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210892
IP address blocks: 5.1.45.0/24 maxlen: 24
37.235.120.0/23 maxlen: 23
37.235.122.0/23 maxlen: 23
37.235.124.0/23 maxlen: 23
37.235.126.0/23 maxlen: 23
79.135.124.0/24 maxlen: 24
79.135.125.0/24 maxlen: 24
79.135.126.0/24 maxlen: 24
79.135.127.0/24 maxlen: 24
94.198.80.0/23 maxlen: 23
94.198.82.0/23 maxlen: 23
94.198.84.0/23 maxlen: 24
94.198.86.0/23 maxlen: 23
109.224.223.0/24 maxlen: 24
109.224.232.0/24 maxlen: 24
168.222.168.0/22 maxlen: 22
168.222.172.0/22 maxlen: 22
185.199.72.0/22 maxlen: 24
185.199.72.0/24 maxlen: 24
185.199.73.0/24 maxlen: 24
185.199.74.0/24 maxlen: 24
185.199.75.0/24 maxlen: 24
213.254.180.0/24 maxlen: 24
213.254.181.0/24 maxlen: 24
213.254.182.0/24 maxlen: 24
213.254.183.0/24 maxlen: 24
2a11:2b03:100::/40 maxlen: 40
2a11:2b03:200::/40 maxlen: 40
2a11:2b03:300::/40 maxlen: 40
2a11:2b03:8100::/40 maxlen: 40
2a11:2b03:8200::/40 maxlen: 40
2a11:2b03:8300::/40 maxlen: 40
2a11:2b07:1::/48 maxlen: 48
2a11:2b07:f000::/48 maxlen: 48
2a11:2b07:f001::/48 maxlen: 48
2a11:2b07:f002::/48 maxlen: 48
2a11:2b07:f003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:74:9d:e6:d7:9a:ca:6a:1a:cc:21:34:9a:17:82:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Oct 7 08:22:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=017d9f69c45a8c06136cb1c4bf6484fbcb400a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:a9:e2:eb:e5:6d:1e:fb:cd:69:d0:ec:e6:
e6:40:2b:61:91:7e:02:39:fa:bf:e6:ce:e3:aa:92:
cb:aa:1b:d7:04:c8:4a:66:a1:87:0c:e6:5d:62:40:
6f:2d:20:e7:cb:a3:21:b1:c2:37:d9:80:7d:cb:f0:
9b:55:90:6b:95:9e:16:04:79:69:4f:96:fb:bb:0b:
ce:54:98:ae:cc:c6:aa:2c:d3:60:e6:f7:32:a9:4e:
41:23:af:0c:e5:ea:fa:34:92:e7:81:b2:86:fd:3f:
d4:d0:96:13:8b:c1:a7:43:a0:9a:33:7f:64:95:23:
57:25:23:1b:42:8d:ef:52:6a:20:47:46:83:80:97:
df:9c:67:77:2c:1a:a7:83:f3:55:35:09:b6:d1:35:
c1:58:fa:2c:b7:16:ed:c7:92:9b:15:fa:26:2a:25:
bf:e1:a3:7b:26:bc:ed:ce:ba:fa:bb:a0:f9:dd:68:
d0:41:05:69:f2:f2:51:54:12:f1:ee:10:7d:73:55:
91:7d:2d:5d:54:91:8d:c3:39:dd:4b:f1:3e:91:3d:
44:6e:fa:1d:c3:04:ab:40:f9:9c:a0:9f:07:de:95:
e0:b9:4f:63:33:4f:29:3f:30:c9:04:69:22:b6:0c:
8f:8c:2b:39:c2:91:45:45:4b:3a:ee:f4:05:9a:7a:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7D:9F:69:C4:5A:8C:06:13:6C:B1:C4:BF:64:84:FB:CB:40:0A:49
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/AX2facRajAYTbLHEv2SE-8tACkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.45.0/24
37.235.120.0/21
79.135.124.0/22
94.198.80.0/21
109.224.223.0/24
109.224.232.0/24
168.222.168.0/21
185.199.72.0/22
213.254.180.0/22
IPv6:
2a11:2b03:100::-2a11:2b03:3ff:ffff:ffff:ffff:ffff:ffff
2a11:2b03:8100::-2a11:2b03:83ff:ffff:ffff:ffff:ffff:ffff
2a11:2b07:1::/48
2a11:2b07:f000::/46
Signature Algorithm: sha256WithRSAEncryption
68:b6:05:58:78:59:06:2e:19:01:b8:53:ff:22:3c:c9:fd:59:
60:3c:67:6d:d8:d9:7f:f1:d2:ad:5b:6c:86:7a:33:58:da:97:
43:10:92:fb:21:50:ba:7b:a0:94:9c:af:75:ed:b8:67:5a:79:
5b:aa:6e:ba:ec:c2:5a:f0:23:52:15:8b:74:57:f4:46:fe:d4:
1b:98:b5:8f:35:d4:87:4a:1f:0e:9c:b3:6d:ab:7d:7c:2a:9f:
a8:37:b2:ee:28:b1:e9:13:0a:3f:77:0e:70:44:f3:df:24:7d:
b2:a6:05:1f:f8:9f:0d:0a:5b:ab:fb:5c:4e:12:c4:8e:5e:00:
8d:b3:af:27:c6:a0:64:16:2e:22:73:d9:f1:ca:2d:14:5c:b7:
d9:f7:3d:9f:de:1f:bd:03:86:f6:ed:97:63:3e:8b:f7:31:50:
27:bd:a5:41:b1:d0:70:54:34:b4:76:b5:83:cd:d7:f4:55:84:
67:eb:55:c5:99:ac:37:82:35:b3:87:21:c9:a4:ca:a0:c9:9e:
ac:62:f4:ad:1b:5b:56:35:85:ac:93:42:92:16:43:bb:7f:ac:
ee:39:bd:9e:69:20:b8:7a:e4:51:3a:16:92:91:c0:b2:dd:e6:
04:d2:cc:24:4a:8b:3a:8f:b6:44:30:fa:60:64:37:66:a9:95:
fc:5c:b9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:06 2026 by rpki-client