Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/PDdsyfueJWkvrU3pYkbjZMgu1h8.roa
File: PDdsyfueJWkvrU3pYkbjZMgu1h8.roa (raw, json)
Hash identifier: 26bjggiQNB80rvMQOyTV/5L/llpmJn8tcdmihtANmPA=
Subject key identifier: 3C:37:6C:C9:FB:9E:25:69:2F:AD:4D:E9:62:46:E3:64:C8:2E:D6:1F
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01A01B91CB96A9064FC59B9327F3B90A6453
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/PDdsyfueJWkvrU3pYkbjZMgu1h8.roa
Signing time: Wed 19 Aug 2026 19:48:54 +0000
ROA not before: Wed 19 Aug 2026 19:48:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51295
IP address blocks: 45.153.88.0/24 maxlen: 24
45.153.91.0/24 maxlen: 24
185.165.184.0/22 maxlen: 22
185.179.156.0/22 maxlen: 22
185.248.196.0/22 maxlen: 22
193.29.227.0/24 maxlen: 24
194.165.26.0/24 maxlen: 24
2a0a:8880::/48 maxlen: 48
2a0a:8880:1::/48 maxlen: 48
2a0a:8880:2::/48 maxlen: 48
2a0a:8880:aaaa::/48 maxlen: 48
2a0f:4440:aaaa::/48 maxlen: 48
2a0f:4440:abcd::/48 maxlen: 48
2a0f:4440:abcf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:91:cb:96:a9:06:4f:c5:9b:93:27:f3:b9:0a:64:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Aug 19 19:48:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c376cc9fb9e25692fad4de96246e364c82ed61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:20:b5:a2:a5:33:fa:d7:d8:9f:08:17:3c:
cb:39:27:ab:16:96:cd:c1:2e:23:35:40:d9:87:cd:
e0:fd:c5:d2:d7:66:a6:9f:3e:a6:b9:3f:fd:fc:58:
87:7f:5b:ed:2b:ae:1f:4d:9e:9d:61:ac:8f:a3:c3:
67:78:19:65:c5:58:59:7c:bb:1d:ab:6e:9e:50:3c:
d6:32:76:69:72:c4:67:26:d5:cf:3a:b5:17:54:28:
02:81:f1:c5:1c:b6:58:08:86:55:5e:12:19:d2:2d:
1f:f5:0b:d2:e1:cb:fd:33:cc:05:07:3c:ff:79:1f:
c3:f3:cf:6e:57:a9:59:41:cf:dc:48:ad:86:15:51:
8e:9e:f4:a7:74:42:9f:ac:67:40:51:5b:ab:db:90:
de:c4:70:59:2d:de:0d:0f:8d:95:6f:55:1c:d1:bc:
00:56:b3:bc:ae:91:40:d5:8f:c8:a8:36:4b:61:5b:
b5:54:63:37:f2:09:f6:51:5f:82:6a:2a:a0:4f:eb:
9d:be:4c:49:59:db:c1:a6:d6:f9:2b:17:25:d2:1d:
60:1e:18:2c:d8:d5:f2:d7:f1:92:36:4b:2c:10:60:
77:95:38:2d:66:b1:bd:29:42:e7:69:f3:e0:53:b9:
60:a2:b5:89:45:cd:fe:fd:67:79:e0:c9:a7:7f:e9:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:37:6C:C9:FB:9E:25:69:2F:AD:4D:E9:62:46:E3:64:C8:2E:D6:1F
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/PDdsyfueJWkvrU3pYkbjZMgu1h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.88.0/24
45.153.91.0/24
185.165.184.0/22
185.179.156.0/22
185.248.196.0/22
193.29.227.0/24
194.165.26.0/24
IPv6:
2a0a:8880::-2a0a:8880:2:ffff:ffff:ffff:ffff:ffff
2a0a:8880:aaaa::/48
2a0f:4440:aaaa::/48
2a0f:4440:abcd::/48
2a0f:4440:abcf::/48
Signature Algorithm: sha256WithRSAEncryption
82:f8:de:53:40:8a:fb:16:64:01:98:5c:e9:30:3d:d5:cd:67:
c5:18:14:5b:07:91:47:de:44:b0:c5:2b:36:a6:41:6b:cf:18:
e9:0f:47:2a:a5:c7:6f:58:fa:25:47:0d:f0:7c:7d:aa:90:9b:
9a:13:1f:16:a6:df:ce:1c:17:e1:4e:e7:28:99:30:cc:9a:4c:
22:93:ce:09:b6:93:df:36:d0:20:da:be:3f:e6:0a:eb:c1:85:
34:05:b6:4c:77:00:00:63:fa:22:38:0b:6c:0b:d8:89:1c:94:
13:b0:ad:c4:61:73:5b:86:0f:40:c1:0c:5a:41:b7:f6:45:1c:
ac:81:f7:3b:92:7b:50:b4:98:e3:7d:cb:f2:1f:78:49:44:45:
58:00:97:0e:4b:9b:b5:2f:cb:85:50:e9:8b:c0:d2:c5:01:98:
53:5a:a3:4b:66:62:5e:6f:65:a0:21:fd:c9:6d:62:82:d1:30:
91:d4:b5:72:84:57:b0:25:10:f2:54:05:ef:85:14:95:f2:a6:
8b:ec:0b:35:44:cb:53:7a:1f:92:bf:94:df:0d:45:1d:64:fd:
e4:c5:70:92:31:65:af:f6:ad:fc:16:14:c2:4a:ef:ed:58:89:
c1:7b:b2:91:5c:e4:26:4b:6f:bd:75:c4:21:bb:e3:ba:db:05:
d9:96:f8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:21 2026 by rpki-client