Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/deQ7T13zBbLLAI09MTE9mILKxdA.roa
File: deQ7T13zBbLLAI09MTE9mILKxdA.roa (raw, json)
Hash identifier: 74j75GUlbNPYYNwjcXDGdpAOH7/VbhJcRPuZvwXCLpI=
Subject key identifier: 75:E4:3B:4F:5D:F3:05:B2:CB:00:8D:3D:31:31:3D:98:82:CA:C5:D0
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D00EB3DCA2DCE90AC0C53FA116990A142
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/deQ7T13zBbLLAI09MTE9mILKxdA.roa
Signing time: Wed 18 Mar 2026 12:28:29 +0000
ROA not before: Wed 18 Mar 2026 12:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 45.144.196.0/24 maxlen: 32
170.62.96.0/22 maxlen: 32
170.62.101.0/24 maxlen: 32
170.62.105.0/24 maxlen: 32
170.62.109.0/24 maxlen: 32
170.62.176.0/21 maxlen: 32
185.102.172.0/22 maxlen: 32
192.253.211.0/24 maxlen: 32
203.188.173.0/24 maxlen: 32
203.188.174.0/24 maxlen: 32
203.188.180.0/24 maxlen: 32
213.254.162.0/24 maxlen: 32
213.254.172.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:eb:3d:ca:2d:ce:90:ac:0c:53:fa:11:69:90:a1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 18 12:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75e43b4f5df305b2cb008d3d31313d9882cac5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:e8:45:15:d0:98:b0:80:29:54:21:ca:ab:
4a:c5:cd:4b:37:8b:97:b7:f2:e7:38:ff:6e:13:79:
3b:09:26:bc:c3:45:ef:77:ee:1f:13:92:08:2a:a2:
c9:3c:1a:98:bf:7c:2b:97:a4:7f:81:af:32:81:d8:
10:81:24:19:4d:be:b5:e6:46:e5:1c:cb:28:45:ae:
45:9c:eb:7b:8f:17:34:6b:13:36:93:16:c5:80:87:
ea:4e:83:88:cf:a5:08:93:93:91:7a:5c:f3:3f:b5:
99:da:1f:5b:a4:a7:81:e4:27:4f:bc:87:d8:71:8a:
1b:b5:03:f9:9d:49:4b:60:19:e7:77:69:fc:97:e9:
1c:b9:03:f6:ca:bf:b9:a7:32:fd:19:15:27:39:06:
6e:4b:7f:90:ee:be:ef:08:44:d2:9f:3d:ff:2a:9b:
3d:83:68:04:ea:b0:df:b7:e9:52:d4:4f:5e:1c:21:
09:27:be:b6:67:c4:22:15:1e:3d:d8:17:01:3c:6f:
d8:38:bd:c2:92:11:5e:50:a6:44:34:31:d3:03:4e:
f2:21:09:e3:5c:5e:da:6d:61:5d:2f:27:ff:17:56:
66:3e:94:0a:03:2c:d4:05:b0:b6:9b:81:9d:83:e3:
10:4d:a2:5f:cb:49:3b:6a:0c:b2:07:96:9c:20:37:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E4:3B:4F:5D:F3:05:B2:CB:00:8D:3D:31:31:3D:98:82:CA:C5:D0
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/deQ7T13zBbLLAI09MTE9mILKxdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.196.0/24
170.62.96.0/22
170.62.101.0/24
170.62.105.0/24
170.62.109.0/24
170.62.176.0/21
185.102.172.0/22
192.253.211.0/24
203.188.173.0-203.188.174.255
203.188.180.0/24
213.254.162.0/24
213.254.172.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:dd:36:ec:c2:74:4e:fa:28:a5:a9:79:7c:5e:bd:08:ab:f3:
c7:41:27:1d:6d:75:da:ac:af:15:9a:23:46:27:3c:2d:35:c9:
00:f2:1c:f6:48:47:41:41:0a:97:39:39:ac:78:b1:0e:98:1b:
b3:b9:2b:5f:6b:bd:5f:8b:24:07:1d:70:96:ee:56:af:19:d4:
55:78:c2:ee:90:e3:a5:1d:21:40:5a:15:26:b7:bf:27:f6:7b:
e0:2b:b7:a1:3f:9a:5e:e1:2e:ba:68:de:8b:16:33:7c:04:ad:
27:95:e5:d5:ee:8f:78:19:14:71:ed:42:43:4f:aa:fc:c7:79:
f1:b0:ee:8e:82:26:16:8c:cf:90:3d:e9:61:b9:6f:7b:d6:27:
96:6e:6f:42:3d:4d:89:fc:3f:02:96:38:00:9e:ba:ba:d9:8b:
cf:85:fe:4f:9f:a2:07:bc:a5:37:a4:ab:a4:5b:44:a0:74:9b:
7c:08:61:d5:80:54:51:0e:e1:f6:c8:3d:d1:29:b7:66:eb:5b:
6a:a6:ab:31:cc:ed:68:35:64:78:42:ec:f4:f3:c6:ed:f0:3b:
1d:96:7f:aa:9d:39:23:12:f9:d5:3e:0f:cc:98:89:a0:1b:42:
f0:15:ad:11:6c:23:fb:f8:f0:fe:6e:31:54:2b:8b:43:6a:2c:
c3:eb:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:38 2026 by rpki-client