Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/_rn6Rj2Ds0GSj28FRmIguxKlNQ0.roa
File: _rn6Rj2Ds0GSj28FRmIguxKlNQ0.roa (raw, json)
Hash identifier: uwuKJD7hG3qMUSbZShC3/y7WTLZoxodVBJWQj1oapGg=
Subject key identifier: FE:B9:FA:46:3D:83:B3:41:92:8F:6F:05:46:62:20:BB:12:A5:35:0D
Certificate issuer: /CN=579ecd5f59463115a9b058b277f3013963e384b8
Certificate serial: 019F2369143DC37546ECD6BEC7B9F6BBE2B5
Authority key identifier: 57:9E:CD:5F:59:46:31:15:A9:B0:58:B2:77:F3:01:39:63:E3:84:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V57NX1lGMRWpsFiyd_MBOWPjhLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/_rn6Rj2Ds0GSj28FRmIguxKlNQ0.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29405
IP address blocks: 2.57.64.0/22 maxlen: 24
46.229.224.0/20 maxlen: 24
46.229.230.0/24 maxlen: 24
81.89.48.0/20 maxlen: 24
86.110.224.0/19 maxlen: 24
86.110.229.0/24 maxlen: 24
86.110.238.0/24 maxlen: 24
92.240.228.0/24 maxlen: 24
92.240.229.0/24 maxlen: 24
92.240.230.0/24 maxlen: 24
92.240.231.0/24 maxlen: 24
92.240.234.0/24 maxlen: 24
92.240.235.0/24 maxlen: 24
92.240.236.0/24 maxlen: 24
92.240.237.0/24 maxlen: 24
92.240.241.0/24 maxlen: 24
92.240.242.0/24 maxlen: 24
92.240.244.0/24 maxlen: 24
92.240.245.0/24 maxlen: 24
92.240.249.0/24 maxlen: 24
92.240.253.0/24 maxlen: 24
92.240.254.0/24 maxlen: 24
93.184.64.0/20 maxlen: 24
109.74.144.0/20 maxlen: 24
176.109.56.0/21 maxlen: 24
185.176.72.0/22 maxlen: 22
217.73.16.0/20 maxlen: 24
217.73.16.0/24 maxlen: 24
217.73.17.0/24 maxlen: 24
2a00:10d8::/32 maxlen: 64
2a00:10d8:10::/48 maxlen: 64
2a01:390::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/V57NX1lGMRWpsFiyd_MBOWPjhLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/V57NX1lGMRWpsFiyd_MBOWPjhLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/V57NX1lGMRWpsFiyd_MBOWPjhLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:14:3d:c3:75:46:ec:d6:be:c7:b9:f6:bb:e2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ecd5f59463115a9b058b277f3013963e384b8
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feb9fa463d83b341928f6f05466220bb12a5350d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:86:da:67:59:9d:59:5a:23:31:28:42:d5:
0e:c4:3c:1c:26:97:67:2e:6b:22:68:df:8d:20:bd:
40:4b:80:7a:aa:80:6e:3a:b2:cd:c3:0d:3c:6c:62:
d3:17:a6:aa:65:f3:6d:96:74:d0:b4:2d:a2:fd:7a:
89:fb:24:d3:5d:14:b8:cf:c4:59:66:1a:5b:a4:75:
29:14:18:8f:fe:8e:06:f4:31:8b:3a:c3:66:46:68:
31:bf:fb:45:f7:9f:0c:ca:23:78:52:0b:ec:a1:16:
d4:ee:d1:e4:83:60:05:63:8a:82:77:c7:5b:c2:e7:
f2:44:93:aa:c2:fa:ed:c7:58:64:bb:35:35:60:1c:
24:d5:42:2b:88:66:26:1c:16:d0:ae:98:0f:6d:1c:
a0:a6:6d:a6:9e:7e:90:c8:f0:f1:3a:cd:94:1a:ef:
39:e2:87:8b:db:62:f2:e3:07:bf:7a:35:34:a0:99:
ed:ae:f4:cc:0b:05:06:30:d0:a4:f8:e1:9c:96:9a:
0a:94:6d:33:9c:24:f5:15:3d:10:39:b1:ed:59:1e:
17:6f:24:7b:71:7e:ab:c3:7b:4f:7b:3a:8e:a1:ae:
1c:26:32:0b:8b:e1:94:d5:da:f6:fe:2b:3d:82:d5:
c4:fa:90:eb:df:b4:78:e9:b6:14:ab:4e:a2:23:c2:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:FA:46:3D:83:B3:41:92:8F:6F:05:46:62:20:BB:12:A5:35:0D
X509v3 Authority Key Identifier:
keyid:57:9E:CD:5F:59:46:31:15:A9:B0:58:B2:77:F3:01:39:63:E3:84:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V57NX1lGMRWpsFiyd_MBOWPjhLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/_rn6Rj2Ds0GSj28FRmIguxKlNQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/V57NX1lGMRWpsFiyd_MBOWPjhLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.64.0/22
46.229.224.0/20
81.89.48.0/20
86.110.224.0/19
92.240.228.0/22
92.240.234.0-92.240.237.255
92.240.241.0-92.240.242.255
92.240.244.0/23
92.240.249.0/24
92.240.253.0-92.240.254.255
93.184.64.0/20
109.74.144.0/20
176.109.56.0/21
185.176.72.0/22
217.73.16.0/20
IPv6:
2a00:10d8::/32
2a01:390::/32
Signature Algorithm: sha256WithRSAEncryption
78:85:70:6a:00:70:98:3e:a2:9d:fe:4d:30:6b:db:28:25:6d:
42:0a:fb:10:85:fc:f0:7d:2f:41:d5:a8:95:c2:c9:42:03:93:
62:e9:4c:12:dd:37:4a:99:6c:c4:56:9d:07:19:4b:1c:70:52:
1e:4e:20:71:0f:56:1d:0d:c4:c3:2d:be:bd:ca:93:81:13:d7:
11:ff:bd:bb:67:f0:2c:4c:4f:19:ee:41:24:8a:a2:2c:09:b7:
6f:c5:ae:35:4c:6d:5b:8b:dd:96:24:6e:08:84:68:f8:ae:6d:
35:96:b2:5e:cb:b2:47:e6:e8:a3:59:18:51:41:e1:60:6b:76:
db:3f:b0:66:6a:f0:9d:5d:17:62:d2:52:e2:b7:37:c3:5c:d1:
07:46:54:75:7a:ad:d2:a8:8c:fc:44:c9:92:9d:b9:21:a3:67:
42:32:66:6b:7b:f0:c5:7e:9c:8b:e7:c0:79:16:93:8f:94:22:
e3:f8:e7:3c:bd:96:42:5e:17:fd:e5:c9:a8:43:3c:89:71:f2:
a4:55:61:fe:16:26:34:8c:79:d8:d9:f8:d5:ec:0e:5b:5d:39:
0e:ed:c0:ad:3e:e0:a2:98:f3:04:f1:f1:1a:4b:1e:8e:b9:96:
b2:be:8c:b2:2b:2b:e2:0e:e7:35:a0:d0:ae:ae:7f:2f:52:c9:
36:c2:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:42 2026 by rpki-client