Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/u3bNEcZyKEc2QX1CnOzs1iY9mxo.roa
File: u3bNEcZyKEc2QX1CnOzs1iY9mxo.roa (raw, json)
Hash identifier: 30Lv2Xe8gMieDUUWqPNrdfC3YOKPSE8dXGkr78PVxg4=
Subject key identifier: BB:76:CD:11:C6:72:28:47:36:41:7D:42:9C:EC:EC:D6:26:3D:9B:1A
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 01A03320E0CB37EDE9274A0409270989FB80
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/u3bNEcZyKEc2QX1CnOzs1iY9mxo.roa
Signing time: Mon 24 Aug 2026 09:36:27 +0000
ROA not before: Mon 24 Aug 2026 09:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 78.40.216.0/24 maxlen: 24
85.193.92.0/24 maxlen: 24
85.193.93.0/24 maxlen: 24
85.193.95.0/24 maxlen: 24
90.156.231.0/24 maxlen: 24
176.57.212.0/24 maxlen: 24
176.57.221.0/24 maxlen: 24
185.104.112.0/24 maxlen: 24
185.104.115.0/24 maxlen: 24
185.247.18.0/24 maxlen: 24
185.247.19.0/24 maxlen: 24
188.225.14.0/24 maxlen: 24
194.35.117.0/24 maxlen: 24
217.151.229.0/24 maxlen: 24
217.151.231.0/24 maxlen: 24
2a03:6f02::/48 maxlen: 128
2a03:6f02::/64 maxlen: 64
2a03:6f02:1::/48 maxlen: 128
2a03:6f02:2::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:20:e0:cb:37:ed:e9:27:4a:04:09:27:09:89:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Aug 24 09:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb76cd11c672284736417d429cececd6263d9b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:e3:31:a2:9b:e7:5c:30:25:3f:40:c1:98:
52:cc:73:2e:99:f2:19:0b:15:77:58:17:88:14:60:
cf:c0:09:82:c1:87:5f:06:c1:e7:e5:a7:80:36:dc:
35:86:49:6d:83:4e:ca:e2:24:a4:81:15:86:b6:2e:
d5:e6:21:1f:7a:31:54:9c:c2:99:fa:a6:b7:f3:50:
29:73:2f:21:cf:64:11:19:a4:78:ed:9d:7a:a1:05:
04:f0:0e:4f:66:e8:76:b1:d7:15:d1:d0:e9:45:d1:
ab:f5:02:c2:1a:02:07:8f:52:4c:61:08:ba:a2:75:
92:12:04:d7:32:ae:33:63:89:7c:68:34:e4:49:f9:
74:79:54:46:ae:6e:f9:ac:a7:d6:4d:09:95:25:a3:
b9:c7:04:de:c3:51:70:f1:37:16:e2:ec:2f:9d:e4:
4f:3c:20:c2:f6:68:ea:9d:5c:3e:33:83:df:ea:9e:
5c:9d:c5:77:df:33:66:24:c4:0e:0f:19:0c:78:bb:
61:5c:a4:56:37:b0:6a:d5:b3:57:df:60:17:2e:f1:
e0:fa:93:c2:09:71:ed:94:81:9b:0d:b4:3e:4b:00:
fc:bb:b6:cc:f8:fc:57:77:d4:b8:cc:2c:d6:af:4b:
f3:39:cc:d3:ca:ed:46:5a:cb:a5:88:c2:04:19:77:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:76:CD:11:C6:72:28:47:36:41:7D:42:9C:EC:EC:D6:26:3D:9B:1A
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/u3bNEcZyKEc2QX1CnOzs1iY9mxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.216.0/24
85.193.92.0/23
85.193.95.0/24
90.156.231.0/24
176.57.212.0/24
176.57.221.0/24
185.104.112.0/24
185.104.115.0/24
185.247.18.0/23
188.225.14.0/24
194.35.117.0/24
217.151.229.0/24
217.151.231.0/24
IPv6:
2a03:6f02::-2a03:6f02:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:b7:b4:97:c2:87:a7:1d:69:0c:46:83:17:cb:e3:1d:71:c7:
20:a9:5f:1b:ef:94:b5:b8:d4:6c:89:2b:16:37:63:ec:93:e7:
0c:ba:04:fc:76:ab:7a:e5:cd:33:1e:7c:01:d0:53:7a:b9:0e:
df:43:87:9f:af:fa:15:7a:13:1b:fd:ba:81:5a:fa:71:b2:44:
01:79:95:c6:48:e5:2b:07:70:48:03:50:79:6a:e8:e7:ff:6c:
f5:2a:f8:32:43:a6:06:0d:55:0e:fc:da:6e:9c:3f:a3:21:79:
e1:73:20:c1:eb:e5:1a:7e:b7:68:ae:72:9c:b7:78:4e:6b:20:
9c:c9:75:ab:35:6f:8d:0e:d8:0b:af:4a:ca:ea:dc:8f:6c:f2:
a5:1e:6e:a4:d0:14:02:87:de:6c:3d:3d:ac:e4:26:21:16:c6:
a9:49:cb:32:87:d8:56:54:3e:44:c9:5e:05:ad:35:e5:fb:76:
e6:fc:97:f1:b1:9b:6b:a3:d7:fd:8f:a0:25:ae:68:48:f1:74:
fc:b9:b8:5e:2b:37:a9:bc:44:b3:eb:53:cb:92:49:22:b0:09:
62:a0:df:a3:5b:b2:8b:dd:4b:8d:fc:28:9d:f1:05:0c:0c:94:
8f:8f:27:39:0e:4b:ee:c1:e0:79:4b:87:aa:92:20:c2:e6:0d:
94:79:4a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:43 2026 by rpki-client