Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/ih1gBauvjKjI0Y1A_bwmzOajV-U.roa
File: ih1gBauvjKjI0Y1A_bwmzOajV-U.roa (raw, json)
Hash identifier: uXb64iV5xQB6Dm557eWXOR7ACbRC3DydbqgS0WTD8js=
Subject key identifier: 8A:1D:60:05:AB:AF:8C:A8:C8:D1:8D:40:FD:BC:26:CC:E6:A3:57:E5
Certificate issuer: /CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Certificate serial: 01A09F8681B85D7CBBD3A1C99C9CA5DA66E9
Authority key identifier: 16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/ih1gBauvjKjI0Y1A_bwmzOajV-U.roa
Signing time: Mon 14 Sep 2026 10:46:27 +0000
ROA not before: Mon 14 Sep 2026 10:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56595
IP address blocks: 45.149.252.0/22 maxlen: 22
46.226.0.0/21 maxlen: 21
89.32.88.0/21 maxlen: 21
91.239.46.0/24 maxlen: 24
91.240.174.0/24 maxlen: 24
95.215.9.0/24 maxlen: 24
185.7.228.0/22 maxlen: 22
185.8.93.0/24 maxlen: 24
185.34.8.0/22 maxlen: 22
185.34.8.0/24 maxlen: 24
185.34.9.0/24 maxlen: 24
185.34.10.0/24 maxlen: 24
185.34.11.0/24 maxlen: 24
185.73.152.0/22 maxlen: 22
185.100.68.0/22 maxlen: 22
185.122.64.0/22 maxlen: 22
185.240.200.0/22 maxlen: 22
188.241.20.0/22 maxlen: 24
188.241.20.0/24 maxlen: 24
188.241.22.0/23 maxlen: 23
192.124.193.0/24 maxlen: 24
192.124.194.0/23 maxlen: 23
192.124.197.0/24 maxlen: 24
192.124.198.0/24 maxlen: 24
192.124.200.0/24 maxlen: 24
192.124.203.0/24 maxlen: 24
192.124.206.0/23 maxlen: 23
193.33.125.0/24 maxlen: 24
195.230.123.0/24 maxlen: 24
2a00:a600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:86:81:b8:5d:7c:bb:d3:a1:c9:9c:9c:a5:da:66:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16be9e0916ecd49b20d542ff3a410e416b7585b4
Validity
Not Before: Sep 14 10:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a1d6005abaf8ca8c8d18d40fdbc26cce6a357e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:1c:32:67:96:fc:24:3c:eb:30:dd:6e:05:
4e:42:7c:79:9e:a2:24:22:68:51:14:bb:64:d7:9d:
35:92:e2:ee:16:51:d0:4c:55:52:24:a6:af:cb:9b:
89:65:7d:78:09:fe:4c:76:7f:7d:aa:71:39:74:3a:
5b:02:39:54:f5:fa:fa:0b:a7:46:9c:c2:54:06:94:
42:20:02:cd:e4:a5:75:75:17:ae:e1:5d:ba:e7:1c:
35:2c:5d:d6:65:5c:13:9b:9d:48:21:a1:2f:b0:bc:
36:f9:1a:b6:8a:64:41:6a:b8:cd:57:f4:36:20:63:
e1:10:2d:66:3d:79:96:82:da:21:58:27:39:ab:f2:
d9:9e:42:c0:1a:ee:49:b3:21:8a:78:a8:f9:ee:c7:
c2:bc:cb:03:5e:e9:35:e4:b2:b5:4d:f0:85:f4:30:
ad:e9:4f:ae:d0:14:11:cb:c6:cf:aa:cb:88:a1:f1:
57:73:e7:fd:2a:97:7c:a9:8e:fa:08:58:36:45:d4:
63:50:c3:81:c6:0b:f3:cf:c0:4b:a4:b4:e5:52:78:
a2:d0:ee:4b:3f:1e:a3:aa:7e:01:0f:21:ec:10:2a:
54:af:fe:d1:30:f4:71:70:69:ca:2b:ff:55:31:40:
cd:ca:33:11:78:4a:e4:a2:82:4e:17:0d:29:84:cf:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1D:60:05:AB:AF:8C:A8:C8:D1:8D:40:FD:BC:26:CC:E6:A3:57:E5
X509v3 Authority Key Identifier:
keyid:16:BE:9E:09:16:EC:D4:9B:20:D5:42:FF:3A:41:0E:41:6B:75:85:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/ih1gBauvjKjI0Y1A_bwmzOajV-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9850c0-d5c9-401c-8c09-20babb9766c8/1/Fr6eCRbs1Jsg1UL_OkEOQWt1hbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.252.0/22
46.226.0.0/21
89.32.88.0/21
91.239.46.0/24
91.240.174.0/24
95.215.9.0/24
185.7.228.0/22
185.8.93.0/24
185.34.8.0/22
185.73.152.0/22
185.100.68.0/22
185.122.64.0/22
185.240.200.0/22
188.241.20.0/22
192.124.193.0-192.124.195.255
192.124.197.0-192.124.198.255
192.124.200.0/24
192.124.203.0/24
192.124.206.0/23
193.33.125.0/24
195.230.123.0/24
IPv6:
2a00:a600::/32
Signature Algorithm: sha256WithRSAEncryption
94:5a:8b:bf:99:20:11:97:f9:ac:e2:96:11:02:53:0f:14:7d:
8a:b5:e6:0d:ce:7f:4e:d6:56:d9:fd:31:1b:d4:24:5a:d4:a8:
bb:ad:9b:99:76:9e:69:aa:c5:6f:c0:ab:7d:33:92:ba:91:3b:
34:b5:5c:d1:68:e7:fa:10:64:82:c2:1b:ef:60:1a:e7:7c:8f:
94:ab:f4:e3:6f:5d:5d:30:50:74:68:29:4d:25:45:55:7c:82:
5f:06:8d:79:aa:42:d5:0b:a8:6c:ef:ca:cc:92:42:cf:b5:f4:
18:e3:8c:a5:84:48:9d:71:fa:d5:87:95:14:64:66:98:2b:f8:
19:fb:c4:72:33:77:cd:d9:93:c9:c0:24:22:d5:ac:8e:d7:c4:
98:c4:33:16:55:18:70:49:8c:94:73:54:fd:f5:3d:ab:54:ae:
71:b4:03:c7:61:2b:1a:91:0b:89:53:00:33:2c:9e:47:94:de:
84:d7:c8:fd:97:53:a8:16:95:c7:e6:f4:6d:53:d0:a3:b4:dd:
4c:2d:30:ed:dc:9b:b7:43:6d:51:f6:1c:d5:06:fb:cd:17:7e:
4a:f2:d3:0d:08:88:7d:00:dd:0d:d0:dd:26:12:ac:5c:88:41:
05:80:0d:ea:26:95:1b:53:ea:e3:49:78:a5:77:c5:79:e1:32:
82:44:7e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:59:36 2026 by rpki-client