Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/raFuC_u8FXIkL3qzbF_M7uzS1bY.roa
File: raFuC_u8FXIkL3qzbF_M7uzS1bY.roa (raw, json)
Hash identifier: rn7vhUa/CpBOHdDH6ILdMBUoshBfT4bHqwrkhi/LUAM=
Subject key identifier: AD:A1:6E:0B:FB:BC:15:72:24:2F:7A:B3:6C:5F:CC:EE:EC:D2:D5:B6
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 01A026066212707E22B9CD9A5878EDC57D88
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/raFuC_u8FXIkL3qzbF_M7uzS1bY.roa
Signing time: Fri 21 Aug 2026 20:32:27 +0000
ROA not before: Fri 21 Aug 2026 20:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16633
IP address blocks: 45.91.121.0/24 maxlen: 24
45.147.95.0/24 maxlen: 24
46.229.240.0/24 maxlen: 24
80.91.219.0/24 maxlen: 24
87.236.163.0/24 maxlen: 24
185.201.16.0/24 maxlen: 24
185.201.17.0/24 maxlen: 24
185.201.18.0/24 maxlen: 24
185.201.19.0/24 maxlen: 24
185.225.27.0/24 maxlen: 24
188.190.112.0/24 maxlen: 24
188.190.113.0/24 maxlen: 24
193.41.32.0/24 maxlen: 24
193.200.214.0/24 maxlen: 24
2a01:ebc0::/32 maxlen: 48
2a01:ebc0:17::/48 maxlen: 48
2a01:ebc0:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:06:62:12:70:7e:22:b9:cd:9a:58:78:ed:c5:7d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Aug 21 20:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ada16e0bfbbc1572242f7ab36c5fcceeecd2d5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:1a:c5:58:c0:9b:41:b6:df:1d:99:fd:09:
6d:79:9a:64:5f:b1:00:8e:77:3a:fb:25:91:c0:08:
d9:be:42:14:3d:f5:a3:d0:e3:5e:bc:c8:b9:5c:20:
92:0f:d2:4f:74:c0:1b:d8:a4:0d:15:c2:b0:70:98:
28:7c:d3:4a:07:b7:34:cf:91:bc:81:11:07:4c:63:
c0:a9:8d:d5:50:0c:da:30:bc:0c:00:b0:a1:9f:51:
29:1a:6f:e0:e2:24:48:0e:ee:82:c8:8a:bb:85:ba:
c4:9e:15:63:1c:d2:c8:d3:36:f9:49:a2:c3:fd:12:
54:7a:15:ee:86:c6:b4:73:a9:41:93:9a:ca:5a:bf:
21:ef:e4:66:3c:63:d8:b1:0c:a3:13:66:b3:7e:ff:
74:b5:df:4a:9d:6a:81:2d:62:7c:d9:2a:ec:de:c6:
fa:98:5a:93:19:de:3f:ef:99:4f:67:39:3f:d9:e7:
52:c7:41:d1:bc:00:0e:80:97:26:dd:99:19:65:4b:
c8:53:02:dd:aa:73:26:32:9a:32:f8:76:1a:d5:0f:
5f:6e:84:d8:7c:df:4a:ac:69:c0:ed:01:2d:b5:56:
c7:47:60:bd:7b:a8:e8:89:a6:6d:ed:cc:55:45:62:
56:f9:57:2d:0d:89:73:29:5a:e1:98:bf:85:53:42:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:6E:0B:FB:BC:15:72:24:2F:7A:B3:6C:5F:CC:EE:EC:D2:D5:B6
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/raFuC_u8FXIkL3qzbF_M7uzS1bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.121.0/24
45.147.95.0/24
46.229.240.0/24
80.91.219.0/24
87.236.163.0/24
185.201.16.0/22
185.225.27.0/24
188.190.112.0/23
193.41.32.0/24
193.200.214.0/24
IPv6:
2a01:ebc0::/32
Signature Algorithm: sha256WithRSAEncryption
c4:65:54:aa:22:ed:e3:30:fa:bc:62:2b:32:fe:b7:1d:ad:c1:
94:9a:b6:74:9b:8b:83:74:09:91:f1:65:83:6f:e8:f2:5c:2f:
f2:56:8a:97:17:65:42:57:26:4b:3a:14:88:17:d1:8e:82:8e:
5a:4b:c3:f5:76:4a:ab:29:0d:ef:42:b5:d9:07:ec:c3:00:1f:
92:b0:86:ef:10:35:6e:37:c1:6d:bd:ed:b8:ac:ea:9f:da:b5:
23:ad:c5:e5:84:5b:2d:fa:ff:01:1c:0e:79:b4:e6:f3:03:5d:
f5:58:b4:a6:26:ba:d5:09:0a:54:28:a9:4f:8b:4e:91:6b:16:
36:98:5b:50:59:94:16:56:d0:b2:3f:18:63:d3:79:e8:62:3f:
a1:1b:6a:96:68:f5:1c:32:7a:38:08:a5:fd:57:c6:e7:c8:88:
c9:f9:15:c5:b4:f2:33:3a:ba:6b:ee:8a:70:a5:f5:dc:07:75:
93:bf:d1:8a:89:f6:fb:21:2f:d7:29:3a:46:ac:3c:e6:cc:74:
be:7b:62:ad:34:9a:87:a3:40:a4:12:0c:76:69:0b:cd:8a:af:
cb:a4:a6:a6:de:c5:d1:15:24:84:5e:ed:7c:0b:6b:85:b0:a4:
da:84:1d:e7:88:53:8d:8f:c9:11:82:7c:83:99:ea:68:13:b4:
b7:29:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:45:00 2026 by rpki-client