Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dUbbAY80_EVsEEb69k_x2KbL7Pc.roa
File: dUbbAY80_EVsEEb69k_x2KbL7Pc.roa (raw, json)
Hash identifier: C0paWqF0IHE+etbu/YuFkjg45F8H2BZw3jbP5lUQBec=
Subject key identifier: 75:46:DB:01:8F:34:FC:45:6C:10:46:FA:F6:4F:F1:D8:A6:CB:EC:F7
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D0089486E32100499DCFAC80EE1CD60A0
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dUbbAY80_EVsEEb69k_x2KbL7Pc.roa
Signing time: Wed 18 Mar 2026 10:41:30 +0000
ROA not before: Wed 18 Mar 2026 10:41:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
158.173.167.0/24 maxlen: 24
158.173.243.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:89:48:6e:32:10:04:99:dc:fa:c8:0e:e1:cd:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 18 10:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7546db018f34fc456c1046faf64ff1d8a6cbecf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:b5:80:35:84:d4:7a:8f:94:f8:3e:9f:25:
32:42:53:4b:56:98:3e:7b:a2:e5:6b:b5:27:94:40:
69:75:ee:2b:55:8d:b9:df:07:ed:a9:ba:57:82:9f:
f1:f5:7d:88:b8:d6:f3:ab:1d:ab:54:91:1f:8b:3f:
d4:00:5b:39:a2:99:21:e4:e1:8d:5a:c5:4b:48:d1:
d5:4b:39:c9:56:17:e9:9e:d5:e7:ed:14:3e:7c:45:
2b:ea:26:4f:31:24:13:f3:fc:29:07:91:f1:da:28:
23:bb:b1:4f:61:72:51:f7:7f:eb:1b:3f:fa:d5:41:
1b:cc:86:c0:5d:f7:34:f7:3b:42:f3:ff:53:5c:f6:
e3:cc:07:05:50:3b:ad:c9:86:34:b1:93:9b:ae:53:
5a:cc:59:1d:7a:70:56:5a:63:5a:50:7f:a8:bd:ce:
b2:18:28:b4:03:13:80:34:f1:fb:cb:c8:dd:cf:b5:
6c:55:af:1f:7c:bd:c1:fb:a8:4b:ce:be:12:27:86:
5e:50:cb:2d:81:f5:5a:e0:22:bb:95:28:a6:f2:7a:
11:c5:5b:e9:a5:39:0a:01:78:fb:d0:c0:f2:c7:c9:
a3:35:65:6f:2b:8d:6b:08:79:39:e8:75:09:4f:17:
3f:03:fe:f0:97:90:cc:ef:b3:a5:e2:32:d6:0d:31:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:46:DB:01:8F:34:FC:45:6C:10:46:FA:F6:4F:F1:D8:A6:CB:EC:F7
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dUbbAY80_EVsEEb69k_x2KbL7Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
66.56.87.0/24
103.61.196.0/24
158.173.167.0/24
158.173.243.0/24
167.160.28.0/24
170.62.238.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0/24
203.188.189.0-203.188.191.255
212.32.71.0/24
212.32.73.0/24
212.32.76.0/24
213.254.163.0/24
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:4e:2a:40:e0:95:3c:7e:a4:c9:c4:5e:cb:a9:a3:af:19:1b:
da:7d:58:8b:16:74:7c:c9:c3:76:53:a2:88:ea:3e:c9:51:c3:
8c:d2:08:ba:d6:5e:de:ac:f3:e3:13:4a:6b:81:52:f2:93:71:
d3:7e:71:aa:fb:47:bf:63:66:4f:71:2b:6d:5c:4a:cc:6d:c8:
84:5f:85:7b:70:dc:8b:cf:86:bb:71:1a:f5:b2:5e:6e:a3:42:
cd:1f:a4:6d:ab:b3:71:b2:5d:41:0a:90:03:7f:8c:00:b4:27:
c8:0a:12:7b:47:f2:65:51:fc:9a:c4:c1:fd:62:58:d6:38:22:
32:f4:4f:08:28:3f:97:3c:47:a8:c0:cd:be:28:a6:b0:b3:e0:
02:f7:4c:10:7f:bf:f2:fb:9c:91:25:d4:88:34:c3:43:75:0e:
83:86:1f:09:b0:1f:88:90:ba:19:c8:9b:c6:9e:46:0b:e0:ff:
76:ce:85:b9:3f:89:c9:de:ac:2c:e8:01:b3:f8:23:26:b5:a0:
e6:9f:55:8d:2a:5c:93:e7:87:91:8c:88:66:72:c9:8b:73:bc:
54:b0:05:79:62:e7:26:49:85:29:b7:78:bd:c2:4e:47:80:b1:
e1:19:00:ef:b4:19:07:4b:2d:5d:2d:12:9f:5b:7e:2d:8f:da:
82:17:50:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:11 2026 by rpki-client