Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/X0J52EzTniQ_AWSg1-2AbO6v1Wk.roa
File: X0J52EzTniQ_AWSg1-2AbO6v1Wk.roa (raw, json)
Hash identifier: 9v97Ev9XNoSdWC+HcarjgeTi3NzDuLNkqpn6zxqUTN8=
Subject key identifier: 5F:42:79:D8:4C:D3:9E:24:3F:01:64:A0:D7:ED:80:6C:EE:AF:D5:69
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 01A038F35B8D356C5D407344B2F3F77CEBE4
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/X0J52EzTniQ_AWSg1-2AbO6v1Wk.roa
Signing time: Tue 25 Aug 2026 12:44:27 +0000
ROA not before: Tue 25 Aug 2026 12:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29014
IP address blocks: 86.109.234.0/24 maxlen: 24
86.109.236.0/24 maxlen: 24
86.109.238.0/23 maxlen: 23
212.34.179.0/24 maxlen: 24
212.34.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:f3:5b:8d:35:6c:5d:40:73:44:b2:f3:f7:7c:eb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Aug 25 12:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f4279d84cd39e243f0164a0d7ed806ceeafd569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:02:82:fb:37:7b:36:23:b0:11:69:42:df:
bd:9a:7f:c7:bb:9c:43:0d:c6:ae:33:8c:14:36:5a:
d7:58:8f:5b:e4:b7:38:f4:48:c8:17:34:d1:43:9b:
e7:4e:c9:01:45:4c:00:90:88:a7:a4:60:fc:c2:c4:
48:ed:e7:3b:67:6f:85:1b:9c:35:9f:02:92:bd:59:
6a:8d:98:e6:15:62:0b:41:a5:5e:6a:95:3e:0a:6d:
df:4b:a8:dc:ef:3c:b5:a8:4b:9e:75:d8:5a:2f:79:
8c:25:0c:5b:ea:5b:7a:85:9d:e5:8f:b7:95:e3:34:
c2:af:20:c9:df:e4:b5:e6:c4:f8:85:48:b5:35:f5:
79:a9:48:c8:71:1a:7b:c8:15:36:b3:87:79:db:41:
03:4b:08:12:3e:cb:de:96:50:97:eb:3b:f7:10:07:
78:73:02:c0:42:2e:b8:06:3c:90:b5:4b:52:24:dd:
4f:77:ce:11:3d:79:77:b0:2a:8e:95:19:eb:f9:21:
34:fc:d5:5a:70:da:a0:83:2c:38:82:ac:bd:a6:83:
e3:36:ef:97:e7:65:b2:29:71:e5:59:b0:9e:da:a8:
87:37:29:36:af:75:92:bd:3c:c5:60:dd:74:70:0a:
c1:d3:8a:8d:0d:1d:a3:19:90:f1:db:e4:ee:cf:cd:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:42:79:D8:4C:D3:9E:24:3F:01:64:A0:D7:ED:80:6C:EE:AF:D5:69
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/X0J52EzTniQ_AWSg1-2AbO6v1Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.234.0/24
86.109.236.0/24
86.109.238.0/23
212.34.179.0/24
212.34.182.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c8:1d:30:78:61:d0:37:47:3b:16:a1:9f:1e:40:f2:51:ba:
82:2b:1f:cd:fb:64:e8:a1:cf:9e:21:75:a1:3b:10:17:9d:7b:
a4:92:3e:98:a5:e9:08:2d:72:65:0c:a5:2b:c7:21:a9:73:bf:
f1:a6:2f:ed:cc:0d:45:1a:fb:99:f3:c2:35:a5:ee:50:0e:a5:
cf:c1:e0:41:45:00:30:77:c1:b6:71:59:5f:2d:08:71:50:44:
f7:17:0f:2e:bb:47:ff:86:da:77:21:db:21:9e:15:0c:49:8e:
48:31:81:ef:13:cf:e4:75:4e:4e:41:b2:9c:a4:34:37:c7:67:
8c:7a:1b:4f:7d:29:15:9d:4e:65:97:98:a7:d2:6d:dd:db:02:
8a:fc:36:76:98:4f:e3:62:cb:e3:2f:c2:ae:aa:8c:fa:e2:31:
ee:c6:31:eb:e7:73:ad:2d:d2:8c:bd:ea:f8:6f:9d:d5:9a:68:
2c:d8:0e:7f:75:fb:bc:57:d3:20:c7:b0:04:1c:c2:6c:10:55:
75:70:bf:63:ae:86:bf:d3:8e:ee:e5:9c:ca:3a:d0:cb:9b:fc:
7e:f3:e0:ae:50:34:b0:f4:1e:fc:54:aa:62:ce:0f:e5:a6:6f:
61:d1:e0:4c:ff:41:92:f1:49:97:e4:48:41:2d:ef:e3:89:af:
86:a4:04:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:03 2026 by rpki-client