Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/sB7bazw82pxn7uZCsBRtwsZkc2A.roa
File: sB7bazw82pxn7uZCsBRtwsZkc2A.roa (raw, json)
Hash identifier: 7xTRvo9YJ48k8rtWT1N5PatcI2zCXtinI13rQTQnEO0=
Subject key identifier: B0:1E:DB:6B:3C:3C:DA:9C:67:EE:E6:42:B0:14:6D:C2:C6:64:73:60
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 019CD31374DC5B387005DF557B62F208F812
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/sB7bazw82pxn7uZCsBRtwsZkc2A.roa
Signing time: Mon 09 Mar 2026 14:49:53 +0000
ROA not before: Mon 09 Mar 2026 14:49:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12989
IP address blocks: 2.59.21.0/24 maxlen: 24
2.59.22.0/24 maxlen: 24
45.12.60.0/24 maxlen: 24
86.54.28.0/24 maxlen: 24
86.54.29.0/24 maxlen: 24
86.54.30.0/24 maxlen: 24
86.54.31.0/24 maxlen: 24
168.222.185.0/24 maxlen: 24
212.104.140.0/24 maxlen: 24
212.104.141.0/24 maxlen: 24
213.254.179.0/24 maxlen: 24
2a01:e940::/48 maxlen: 48
2a01:e943::/48 maxlen: 48
2a01:e944::/48 maxlen: 48
2a01:e945::/48 maxlen: 48
2a01:e946::/48 maxlen: 48
2a01:e947::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:13:74:dc:5b:38:70:05:df:55:7b:62:f2:08:f8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Mar 9 14:49:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b01edb6b3c3cda9c67eee642b0146dc2c6647360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:5d:1f:c6:28:98:68:a2:3e:86:7e:b3:50:
fb:93:4a:05:a7:d7:c9:db:2b:e0:ba:2b:d3:6c:7a:
96:87:6b:6d:55:b3:3e:3d:ec:9f:95:aa:00:2d:7d:
aa:fd:e3:b5:a7:02:fc:25:3c:1f:f6:09:af:7d:11:
4a:87:fd:59:30:0b:9b:60:ee:b9:b1:99:7b:ff:b3:
61:d5:da:5c:28:0e:42:07:31:42:b3:ef:64:7b:4d:
bf:a1:3b:a8:83:2a:8a:cb:2f:b7:d5:c6:8e:db:52:
53:ed:da:6a:c0:48:78:5d:cc:a3:f9:fb:9f:5c:3a:
4c:98:fb:f6:ac:bd:ee:5c:84:d8:58:d3:e9:f4:3c:
0b:47:08:f9:7e:90:5f:e2:4c:d5:43:37:99:3f:50:
d2:5f:8b:d6:28:c5:47:49:0d:4e:3e:a8:f5:45:8a:
5a:14:f1:65:d4:67:0a:72:e1:7f:10:5d:bc:cd:54:
a2:53:f9:05:4b:4a:64:c1:6f:0e:10:b1:2c:2f:82:
99:cc:24:4a:d9:fe:ed:13:5d:fb:ff:79:72:48:e4:
eb:d1:61:5e:22:e1:a7:4e:b0:a1:29:d0:2e:b5:fb:
dd:ef:8a:73:81:26:d6:fd:e4:4d:eb:c1:5e:94:19:
17:4b:ac:cc:a4:6d:0c:3c:c6:93:c9:52:f2:38:5b:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:DB:6B:3C:3C:DA:9C:67:EE:E6:42:B0:14:6D:C2:C6:64:73:60
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/sB7bazw82pxn7uZCsBRtwsZkc2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.21.0-2.59.22.255
45.12.60.0/24
86.54.28.0/22
168.222.185.0/24
212.104.140.0/23
213.254.179.0/24
IPv6:
2a01:e940::/48
2a01:e943::/48
2a01:e944::/48
2a01:e945::/48
2a01:e946::/48
2a01:e947::/48
Signature Algorithm: sha256WithRSAEncryption
27:47:70:44:24:a3:8a:3a:26:9a:62:2f:ca:c6:39:ab:1a:4d:
69:24:0f:b5:b4:a0:1c:43:d5:69:4b:43:7e:12:56:bc:00:ec:
5b:0c:19:28:1e:28:9f:36:ae:0f:27:18:35:5d:db:b1:3b:ad:
a6:31:9a:15:21:18:f2:0f:0e:1f:33:e1:be:57:80:e5:88:fc:
55:07:a7:68:2d:4f:49:3e:73:77:f6:83:8d:f8:04:b6:22:54:
6b:ad:54:af:18:3f:fe:94:68:44:38:27:a2:98:b9:3a:be:13:
9d:82:d3:c5:76:80:73:7c:44:09:6d:6a:b3:51:5f:62:52:5c:
35:7b:10:de:77:6e:68:67:ba:ae:b3:99:f5:33:11:b3:63:82:
8d:9a:bf:58:79:9b:28:d8:e1:1e:5d:78:07:7d:f4:a3:65:ae:
07:d5:bf:32:dd:62:5b:ae:8d:b0:59:aa:fa:cd:db:09:6b:38:
77:8a:f6:c7:5a:68:ca:61:b4:3b:9b:65:25:cd:4f:59:a9:5a:
20:7e:2f:c0:4e:09:be:fa:f2:4e:82:a3:8c:61:6e:b8:4e:09:
c8:14:b1:be:1c:ae:48:08:1e:3f:0c:17:e1:56:15:e5:c4:44:
27:7d:a1:05:31:15:4f:7f:e2:9f:ad:52:0a:19:e3:ba:1a:96:
0c:4c:6b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:54:51 2026 by rpki-client