Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/Rhs6X9DhyFs3h7s9MzdpZ7dy1aA.roa
File: Rhs6X9DhyFs3h7s9MzdpZ7dy1aA.roa (raw, json)
Hash identifier: kDlz+lQJT2OJo56pbT9e6OoJmCx823FW1ZjB0FimVeA=
Subject key identifier: 46:1B:3A:5F:D0:E1:C8:5B:37:87:BB:3D:33:37:69:67:B7:72:D5:A0
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 01A1583525AC733658957C20D30840A5038A
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/Rhs6X9DhyFs3h7s9MzdpZ7dy1aA.roa
Signing time: Tue 20 Oct 2026 07:27:20 +0000
ROA not before: Tue 20 Oct 2026 07:27:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35725
IP address blocks: 89.33.32.0/21 maxlen: 21
89.33.48.0/21 maxlen: 21
178.138.0.0/16 maxlen: 16
178.138.1.0/24 maxlen: 24
178.138.32.0/22 maxlen: 22
178.138.36.0/24 maxlen: 24
178.138.38.0/24 maxlen: 24
178.138.39.0/24 maxlen: 24
178.138.40.0/23 maxlen: 23
178.138.42.0/24 maxlen: 24
178.138.43.0/24 maxlen: 24
178.138.62.0/24 maxlen: 24
178.138.63.0/24 maxlen: 24
178.138.96.0/22 maxlen: 22
178.138.126.0/23 maxlen: 23
178.138.192.0/22 maxlen: 22
193.104.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:35:25:ac:73:36:58:95:7c:20:d3:08:40:a5:03:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Oct 20 07:27:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=461b3a5fd0e1c85b3787bb3d33376967b772d5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a2:3a:5d:8a:60:3e:c7:c1:87:11:b1:11:9f:
04:c4:b5:66:77:80:5e:e9:bb:0f:d3:16:ce:16:f1:
5e:6d:2c:19:70:07:9e:69:47:96:07:1f:d1:c2:42:
53:99:8f:c4:db:eb:57:9c:1b:09:1f:75:eb:f4:7e:
0c:dd:7a:23:17:f5:db:3b:64:ec:e1:b6:7b:c7:e7:
af:eb:fc:eb:b3:d8:d7:62:0d:bd:ae:ee:d7:6c:0c:
47:c4:ca:62:b1:86:c2:d4:aa:50:9b:8b:89:63:19:
25:b8:13:c2:de:5f:3e:cf:b5:fa:b2:6e:01:5f:b4:
18:bf:6e:5c:63:73:68:62:6c:56:f8:de:a8:12:c2:
40:e0:40:c6:9d:84:fc:a2:99:71:68:d1:30:40:c4:
51:1f:4b:d7:b9:50:47:02:9c:5b:9d:29:a0:75:ee:
af:c2:22:f3:22:ec:e1:e2:39:ca:1a:a4:69:b8:6d:
76:e3:85:49:38:88:7f:92:d3:76:ba:26:10:60:a0:
92:b4:f2:94:3b:39:65:08:5b:8c:67:6e:ff:83:9b:
87:82:b6:b2:13:0f:46:01:c6:88:d5:d0:f2:22:0f:
5f:88:82:05:8c:c6:d0:e9:fd:d2:8b:f1:2d:df:8d:
40:dd:b0:57:ff:0e:6e:b8:44:35:aa:d1:60:be:27:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1B:3A:5F:D0:E1:C8:5B:37:87:BB:3D:33:37:69:67:B7:72:D5:A0
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/Rhs6X9DhyFs3h7s9MzdpZ7dy1aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.32.0/21
89.33.48.0/21
178.138.0.0/16
193.104.247.0/24
Signature Algorithm: sha256WithRSAEncryption
52:08:54:6a:41:71:6f:a9:8b:c2:63:14:5b:3f:7a:34:f4:89:
c9:8e:4b:7a:3d:9d:9c:0a:80:e4:49:77:09:6c:0e:bc:59:57:
08:45:8c:a4:54:18:f4:76:6a:41:25:23:b7:47:13:a7:6c:5c:
73:2b:a4:ef:b0:ac:f5:14:aa:03:e8:6d:8e:72:27:64:0f:15:
fc:f9:7e:28:81:63:5a:d1:41:b0:03:e9:97:83:e8:10:8c:2d:
e5:d1:8b:93:5a:14:fb:c8:d5:20:15:a3:2e:27:87:d6:dc:47:
b8:6d:0d:2e:79:a5:42:53:3b:44:d6:93:90:cc:19:8f:b7:5c:
f0:09:5e:5f:c0:1c:a6:2f:09:76:96:54:12:19:bc:f4:ea:94:
4d:15:b4:55:47:fb:5c:51:ab:bc:07:34:d7:15:c1:67:0d:ac:
f5:16:5a:cb:e3:3e:63:ca:45:d8:49:5f:11:ec:1f:21:e1:d5:
c5:66:c0:30:9b:19:a7:6e:b5:27:04:48:aa:40:15:37:fc:ee:
dd:f0:ca:ff:47:7c:26:54:f7:0f:e5:17:24:43:1f:06:71:ce:
de:04:91:50:a6:8a:be:d8:71:c4:e2:5e:2d:35:a5:95:68:f6:
8d:3d:83:71:27:04:3f:1d:ed:26:72:b8:c1:98:d5:d2:10:1a:
aa:ea:bd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:52 2026 by rpki-client