Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/RJdXAmRIYON2t23ktCIHd8uSCB4.roa
File: RJdXAmRIYON2t23ktCIHd8uSCB4.roa (raw, json)
Hash identifier: aNwYdoL7m0apdla4B71+6x9/Kd4cRca2EXzWghgiLbk=
Subject key identifier: 44:97:57:02:64:48:60:E3:76:B7:6D:E4:B4:22:07:77:CB:92:08:1E
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A17D6E57DA3FAF9CF548841269A3047DC7
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/RJdXAmRIYON2t23ktCIHd8uSCB4.roa
Signing time: Tue 27 Oct 2026 12:55:45 +0000
ROA not before: Tue 27 Oct 2026 12:55:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197207
IP address blocks: 79.132.220.0/23 maxlen: 24
86.109.36.0/22 maxlen: 24
185.45.188.0/22 maxlen: 24
185.82.166.0/23 maxlen: 24
188.75.116.0/23 maxlen: 24
188.75.116.0/24 maxlen: 24
188.75.117.0/24 maxlen: 24
217.146.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:6e:57:da:3f:af:9c:f5:48:84:12:69:a3:04:7d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Oct 27 12:55:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44975702644860e376b76de4b4220777cb92081e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:31:ff:4d:59:2c:8c:2f:a4:21:b8:db:b0:7e:
2f:a3:e8:7f:5a:c6:86:66:cc:4a:36:97:8d:c4:57:
c4:fa:0a:55:4c:cb:86:b1:1a:a3:11:b2:6a:88:59:
21:33:7c:20:c7:f2:40:f3:89:e3:77:2a:aa:af:41:
23:49:08:67:d0:70:89:5d:ef:77:c6:ae:2f:52:c4:
ca:d4:96:e9:1e:38:c6:00:d3:59:7e:43:71:27:68:
72:d1:18:0e:66:c7:82:bc:47:e0:ea:fc:57:88:73:
10:b6:f4:94:35:95:52:fe:0f:fb:32:63:41:8f:0e:
6b:a2:bd:fe:b1:83:f5:d9:7c:3e:4f:a6:67:49:85:
d5:cf:2f:e7:c6:73:cc:68:a3:33:5e:97:51:7b:b3:
0f:a6:88:4e:2b:ba:09:49:3f:69:32:54:43:fc:08:
f7:42:70:c9:a6:c3:59:52:55:7d:77:d1:d7:87:fa:
b2:62:bc:4a:e7:10:84:11:cc:5d:fe:ae:c4:77:e5:
3b:1f:b1:3f:1e:0c:2c:1b:95:b9:51:4a:98:62:96:
77:14:b4:ad:43:c7:01:2b:55:91:bb:f8:87:34:29:
8c:92:d2:f2:8f:b9:18:b2:d1:c7:0d:49:c0:91:e9:
b1:9b:88:b7:ac:a4:5c:df:14:30:54:bf:b6:5e:b9:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:97:57:02:64:48:60:E3:76:B7:6D:E4:B4:22:07:77:CB:92:08:1E
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/RJdXAmRIYON2t23ktCIHd8uSCB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.220.0/23
86.109.36.0/22
185.45.188.0/22
185.82.166.0/23
188.75.116.0/23
217.146.216.0/23
Signature Algorithm: sha256WithRSAEncryption
68:d5:dc:bb:98:95:5d:ff:1f:bf:a1:ea:f5:9a:bd:7d:33:83:
76:db:b2:cf:1e:90:fb:81:3d:d8:9c:80:c0:4b:d6:65:56:6e:
13:aa:29:5a:08:a9:df:cf:8c:aa:f0:48:20:a5:54:92:5b:ba:
90:fb:a6:ab:4f:74:43:69:78:b4:7d:08:b4:d7:02:2b:ea:85:
d5:58:5b:02:a1:65:23:a5:f1:3b:9b:fe:06:f4:23:82:a4:54:
1f:0c:2b:55:02:1e:a1:8f:9e:77:ca:78:c0:ee:52:9d:26:d6:
a1:74:33:95:23:c1:50:52:41:aa:a1:50:aa:81:26:97:df:e4:
75:05:6e:c2:c1:23:63:3c:33:e8:ed:4c:09:2b:f1:2b:04:aa:
89:39:9a:bc:12:73:d8:e7:a7:81:a4:5b:0e:c9:4a:32:d6:d7:
7b:65:57:c5:06:39:a8:72:4d:28:eb:bc:3c:5e:fe:8d:15:f7:
9f:0e:57:60:35:72:56:3c:0d:88:be:b6:f2:28:08:14:71:2d:
a0:19:06:6f:97:02:30:a7:08:40:ea:2d:8f:96:03:1a:39:1b:
35:af:e2:ea:4b:7b:47:9f:2b:22:e2:cf:af:ef:28:f8:7e:ce:
a7:e3:16:73:04:d0:7a:bb:11:59:61:d8:f9:75:42:fe:88:15:
71:2e:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:29:23 2026 by rpki-client