Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/S1FL6fzk36pFFP4Lfan_b6d4GmM.roa
File: S1FL6fzk36pFFP4Lfan_b6d4GmM.roa (raw, json)
Hash identifier: 7EFH9HJpgBWE4mYIHn6Yos7c4tmrVRH0XksFgn2TuLE=
Subject key identifier: 4B:51:4B:E9:FC:E4:DF:AA:45:14:FE:0B:7D:A9:FF:6F:A7:78:1A:63
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 019E0304F40938C5AE400725C3BC20C0562D
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/S1FL6fzk36pFFP4Lfan_b6d4GmM.roa
Signing time: Thu 07 May 2026 15:18:36 +0000
ROA not before: Thu 07 May 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 2.59.132.0/22 maxlen: 24
45.145.40.0/22 maxlen: 24
45.157.232.0/22 maxlen: 24
62.192.153.0/24 maxlen: 24
89.124.251.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
104.167.24.0/24 maxlen: 24
176.96.136.0/22 maxlen: 24
185.94.29.0/24 maxlen: 24
185.219.84.0/24 maxlen: 24
185.254.96.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
193.148.253.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
194.107.126.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
2a0c:4ac0::/29 maxlen: 40
2a0c:4ac0:1300::/40 maxlen: 40
2a0d:1180::/29 maxlen: 29
2a0d:5940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:04:f4:09:38:c5:ae:40:07:25:c3:bc:20:c0:56:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: May 7 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b514be9fce4dfaa4514fe0b7da9ff6fa7781a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:00:8b:91:ef:3c:f0:e4:32:48:73:7e:66:
7d:7b:79:a7:2d:62:6d:63:83:66:ba:ae:09:3d:cf:
91:49:7c:d6:5a:3c:4c:36:50:89:2b:e4:87:74:f3:
bd:16:aa:79:34:1d:1f:6b:69:25:ed:f0:59:9a:d0:
20:79:0f:b0:f8:cb:1f:3f:b6:8b:a1:ef:e9:2d:37:
6b:33:ec:8a:c4:84:38:80:5a:35:48:9f:f9:e5:ac:
7a:14:34:f1:76:3b:b0:42:9d:22:fa:37:74:88:dc:
c8:66:2a:3d:41:1c:8f:ab:7d:c3:a4:10:c5:a4:9e:
01:f8:8e:e0:89:78:f6:a0:fd:46:3d:4a:7e:d2:bf:
4f:b4:97:7e:2a:c4:85:4e:e6:cb:82:5c:92:96:70:
e2:a8:0d:db:6d:89:d5:5f:83:f7:2d:04:05:b4:c0:
fe:dd:a3:73:3e:59:e5:f2:17:7b:da:c1:65:ea:3d:
95:e4:0f:a7:39:21:41:a4:2e:5c:8d:09:86:50:89:
35:c1:46:77:a2:55:9d:07:59:1b:c5:63:7a:23:51:
89:76:4d:27:e0:ec:82:9a:ec:e1:06:49:50:a4:59:
7f:c8:dd:19:87:f6:47:ef:99:80:32:91:2b:1d:00:
56:ae:3b:52:cb:25:5b:57:dd:ea:3c:e3:b1:d0:b7:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:51:4B:E9:FC:E4:DF:AA:45:14:FE:0B:7D:A9:FF:6F:A7:78:1A:63
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/S1FL6fzk36pFFP4Lfan_b6d4GmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.145.40.0/22
45.157.232.0/22
62.192.153.0/24
89.124.251.0/24
93.123.85.0/24
94.143.231.0/24
104.167.24.0/24
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
193.148.253.0/24
194.48.217.0/24
194.107.126.0/24
194.238.79.0/24
212.87.204.0/24
IPv6:
2a0c:4ac0::/29
2a0d:1180::/29
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
41:ac:19:a2:f2:c6:77:fa:60:6f:43:95:65:c5:d3:5a:cb:6a:
e6:d9:23:f2:b7:7f:2d:18:13:d4:e3:57:93:a6:06:77:2d:06:
10:25:ed:0c:66:d1:57:b9:1a:88:9a:d9:8f:3a:e6:af:91:ca:
89:f3:17:67:dc:12:8e:d3:cf:51:80:20:77:2b:21:a6:e0:1f:
f3:23:49:93:bf:a8:ec:64:8b:50:10:6d:c1:70:3d:cb:fe:ee:
be:60:7d:dc:96:8a:7c:04:93:59:18:13:9e:40:02:76:28:7b:
f9:77:a0:75:aa:c4:78:c4:d0:df:5b:b2:12:44:1c:18:9e:22:
25:f2:ea:c5:fc:97:43:00:9a:5e:d8:7c:e2:45:95:6b:58:8d:
b9:53:50:35:7a:49:87:0e:ac:3f:64:dd:66:34:8c:ec:3b:88:
a9:db:1b:96:61:bc:7d:58:c4:b2:c4:16:a7:e1:4d:1b:19:71:
4c:47:e2:01:2a:32:6e:4f:ec:b4:9c:57:87:cd:1a:0b:e1:d0:
26:ac:cd:13:c6:89:3a:3e:0c:e3:fa:75:21:40:de:17:27:8e:
5c:1b:a2:66:33:0b:cd:39:5c:1d:66:31:38:d8:71:97:c7:2b:
39:10:8a:e3:9a:02:55:ee:a6:a1:25:f2:74:de:c3:75:51:7f:
15:ba:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:06 2026 by rpki-client