Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0bUqCiCU2rErkj7QeCsf_w4wNjc.roa
File: 0bUqCiCU2rErkj7QeCsf_w4wNjc.roa (raw, json)
Hash identifier: j6Mht6Ffc0C23Uci7QJeMFMCAt1wEf7LtIUEbHecqnE=
Subject key identifier: D1:B5:2A:0A:20:94:DA:B1:2B:92:3E:D0:78:2B:1F:FF:0E:30:36:37
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E1688FEF4BE7AFA288E2CCB7E1C89F1AC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0bUqCiCU2rErkj7QeCsf_w4wNjc.roa
Signing time: Mon 11 May 2026 10:15:37 +0000
ROA not before: Mon 11 May 2026 10:15:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 89.34.106.0/24 maxlen: 24
89.125.126.0/24 maxlen: 24
89.125.185.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.144.0/21 maxlen: 21
206.245.152.0/22 maxlen: 22
206.245.156.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:88:fe:f4:be:7a:fa:28:8e:2c:cb:7e:1c:89:f1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 11 10:15:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1b52a0a2094dab12b923ed0782b1fff0e303637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:89:ba:c4:63:e6:c0:8f:13:ba:b9:f1:c1:
3d:3d:65:cd:5e:c0:c6:a3:1d:e8:1c:33:ab:dd:34:
da:3f:4d:d5:bc:5b:32:5c:f6:d2:cd:4b:f6:8f:1b:
71:cc:b3:c0:8b:62:5a:34:c3:31:a6:ca:7e:2c:a4:
13:63:5f:03:e4:21:eb:c0:ac:32:83:38:76:89:e3:
bf:30:99:bb:07:5d:a3:9a:b2:6b:3e:bf:bf:cb:f0:
a2:d4:30:3c:9b:ff:79:9b:9f:30:c9:07:41:f2:41:
03:5d:38:d0:a6:9d:a2:30:8b:35:b0:3c:03:c5:e2:
55:4a:d5:35:3d:94:c2:cd:31:0e:63:7b:05:3a:25:
56:54:8a:f4:16:73:36:a3:5e:9b:ed:4e:e6:39:74:
81:ed:c5:b5:d1:49:2d:39:80:ff:89:5f:cb:92:a0:
51:03:0d:00:25:f1:e2:f6:12:05:89:42:8e:f2:9c:
e0:6d:14:58:7d:93:66:6c:90:52:19:a7:99:c8:a2:
2b:a4:b3:6c:1c:42:fc:bc:f7:eb:1c:09:11:98:f5:
5a:ea:32:c0:88:9f:c1:56:87:d5:bd:5f:01:e0:1c:
b9:90:c3:51:0c:99:d0:2e:93:91:3a:2f:4d:c9:8e:
fb:bd:e2:c6:16:a9:43:a5:08:ce:66:75:d7:01:a3:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:2A:0A:20:94:DA:B1:2B:92:3E:D0:78:2B:1F:FF:0E:30:36:37
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0bUqCiCU2rErkj7QeCsf_w4wNjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.106.0/24
89.125.126.0/24
89.125.185.0/24
93.114.183.0/24
103.245.228.0/24
194.58.47.0/24
206.245.144.0-206.245.156.255
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.10.0/24
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
04:99:10:9a:e7:81:2c:69:52:65:2a:0a:24:a9:40:32:84:2b:
56:10:b7:10:98:81:b8:1e:cc:d5:10:44:06:6b:54:c9:10:65:
78:e4:a2:5e:61:f9:c0:03:5d:b2:0f:95:60:6a:5b:1a:95:57:
ca:6b:dd:b2:20:60:18:2d:43:81:e6:80:c8:3e:02:3a:15:40:
fd:46:7d:8f:9f:8b:f1:8a:eb:15:70:d5:57:2d:da:e6:40:eb:
70:b8:e3:9c:2d:56:d6:15:a3:8f:02:74:0c:5b:6d:a8:b4:1b:
65:b3:81:d6:43:95:19:69:2f:97:96:f9:e7:25:1e:88:1a:c0:
18:3f:ac:17:07:3f:42:69:32:bd:25:2f:d9:bd:8e:79:6e:ec:
bd:ed:3c:34:e8:65:55:eb:51:c3:14:6f:0e:17:7e:21:64:2c:
30:6d:8c:c7:e1:fe:7d:8c:14:f0:2b:f8:38:d5:0d:41:f9:09:
bd:85:65:20:21:ea:10:e2:d1:c0:e1:58:21:bb:e3:d2:db:cc:
6f:43:a0:09:26:90:10:ef:57:3d:f2:9f:6d:87:19:44:36:0e:
49:56:5f:ed:48:a1:55:5b:04:a6:23:2e:24:8c:2b:16:49:4a:
56:c2:a5:52:bc:d0:f8:8c:31:48:3a:48:e5:dc:ff:ec:f4:c8:
dd:39:4e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:55 2026 by rpki-client