Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa
File: bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa (raw, json)
Hash identifier: jfuS4WANPOwG9IyimGe8aZrpP9Pv78GN//1LDqZ2n2k=
Subject key identifier: 6E:75:39:43:41:5E:28:25:CF:1D:38:2C:C5:23:71:F6:45:7D:DD:DE
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 019CD7CB616AFEBB275C4A281FB0E3115BC6
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa
Signing time: Tue 10 Mar 2026 12:49:15 +0000
ROA not before: Tue 10 Mar 2026 12:49:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34245
IP address blocks: 37.26.72.0/23 maxlen: 23
85.91.0.0/19 maxlen: 24
87.192.80.0/24 maxlen: 24
87.192.220.0/23 maxlen: 24
87.198.0.0/16 maxlen: 24
87.198.204.0/24 maxlen: 24
87.232.32.0/19 maxlen: 24
87.232.128.0/21 maxlen: 24
87.232.134.0/24 maxlen: 24
87.232.193.0/24 maxlen: 24
87.232.224.0/24 maxlen: 24
87.232.250.0/23 maxlen: 24
87.232.252.0/22 maxlen: 24
89.124.242.0/23 maxlen: 24
89.124.244.0/24 maxlen: 24
185.106.88.0/22 maxlen: 24
212.17.32.0/19 maxlen: 24
213.79.32.0/19 maxlen: 24
213.159.128.0/22 maxlen: 24
2a01:148::/29 maxlen: 32
2a01:148::/32 maxlen: 32
2a01:14f::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:cb:61:6a:fe:bb:27:5c:4a:28:1f:b0:e3:11:5b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Mar 10 12:49:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e753943415e2825cf1d382cc52371f6457dddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:ed:80:ac:3d:02:62:e5:b1:5d:22:97:f6:
4c:5f:0b:37:76:be:02:d3:1a:d8:87:b7:91:ce:3a:
75:35:f7:47:f0:ac:02:9c:dd:9c:08:8d:e1:44:b4:
11:15:1f:67:65:cb:64:b4:a2:e9:38:9a:a0:5b:b9:
0f:7f:57:18:08:89:24:64:9e:c6:d6:9f:cf:fb:e3:
b6:5d:eb:11:c9:ec:41:87:50:86:3f:1b:7e:51:e3:
ab:60:38:bb:2c:08:53:12:72:22:c6:d6:9b:22:7b:
05:92:b6:96:db:80:b4:51:6d:81:4c:a5:e4:79:dc:
31:61:98:1b:f7:92:84:6e:24:c7:a5:b0:9b:9f:8d:
11:53:d6:f5:41:66:30:5e:9e:c9:56:3a:b3:83:aa:
aa:61:68:40:0d:b7:5d:14:69:0c:0f:c3:e0:d1:e5:
f4:fd:17:03:8b:ee:2b:89:af:e8:2a:83:0b:6b:43:
d8:a4:8d:2e:d5:9b:64:ad:46:00:a5:3a:88:f5:01:
d2:d4:71:9b:59:12:6c:bb:b1:a8:12:7b:a3:75:a1:
b0:2d:ee:58:f6:a0:26:c4:c9:45:57:9a:13:b1:73:
03:0b:3f:3b:70:56:ac:80:88:56:e7:9d:7f:90:e0:
50:70:d8:dc:64:6b:ac:93:c2:72:b5:2f:8c:48:df:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:75:39:43:41:5E:28:25:CF:1D:38:2C:C5:23:71:F6:45:7D:DD:DE
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.72.0/23
85.91.0.0/19
87.192.80.0/24
87.192.220.0/23
87.198.0.0/16
87.232.32.0/19
87.232.128.0/21
87.232.193.0/24
87.232.224.0/24
87.232.250.0-87.232.255.255
89.124.242.0-89.124.244.255
185.106.88.0/22
212.17.32.0/19
213.79.32.0/19
213.159.128.0/22
IPv6:
2a01:148::/29
Signature Algorithm: sha256WithRSAEncryption
9c:41:db:af:30:ef:ff:0d:57:30:5a:d1:e0:8c:e4:5e:f8:5d:
c5:bd:57:86:e8:3d:b5:51:32:57:f4:78:d1:b2:9b:93:b0:6d:
64:a9:b6:61:46:8e:c3:41:4e:10:66:b3:e5:05:07:be:51:9b:
d6:f3:f7:2a:ac:7a:70:25:42:2a:be:74:7f:7c:f3:e1:e0:18:
3b:cc:ef:30:1b:19:f8:96:58:8c:fa:44:18:ce:71:0a:43:8a:
68:e0:2d:9e:82:1c:d5:cb:d0:95:7a:30:cc:15:2b:11:9b:31:
f5:f5:1d:25:cd:10:80:2c:e7:0d:b5:33:6e:47:9a:41:be:26:
b3:bb:ee:9d:1c:e8:ef:a3:2c:41:fd:e0:ff:81:b1:d8:d3:dd:
e5:d8:db:94:91:fe:77:0f:cd:2d:c5:09:2a:02:e7:4a:94:31:
4e:d3:3a:4d:6b:0f:27:11:da:9a:89:23:a7:ed:59:3e:63:b6:
40:a3:32:3b:d1:7a:08:4a:76:18:82:0a:01:af:f1:56:50:99:
f4:4c:80:f4:97:7a:2a:b2:75:82:7a:ad:50:c5:bc:84:b6:ac:
cd:47:e0:92:04:2e:49:26:ed:d2:cb:d2:e1:0a:55:3f:7e:2a:
c3:03:ab:39:42:64:b8:11:06:93:c0:ac:0d:43:8e:0e:73:60:
02:e3:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:56 2026 by rpki-client