Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/DVSq2z2itJSfY-PGsnNgadH1ViI.roa
File: DVSq2z2itJSfY-PGsnNgadH1ViI.roa (raw, json)
Hash identifier: WCDvwCOGrkbrKRqQtz7d1XL34Br4DoCIGqWdc5vjs2E=
Subject key identifier: 0D:54:AA:DB:3D:A2:B4:94:9F:63:E3:C6:B2:73:60:69:D1:F5:56:22
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 01A19CFCA02CDC37FA593BB0AAB005D78FEC
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/DVSq2z2itJSfY-PGsnNgadH1ViI.roa
Signing time: Mon 02 Nov 2026 15:59:24 +0000
ROA not before: Mon 02 Nov 2026 15:59:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48847
IP address blocks: 185.104.68.0/22 maxlen: 22
185.104.68.0/24 maxlen: 24
185.104.68.0/26 maxlen: 26
185.104.68.64/26 maxlen: 26
185.104.68.144/28 maxlen: 28
185.104.68.240/29 maxlen: 29
185.104.70.0/24 maxlen: 24
185.104.70.0/28 maxlen: 28
185.104.70.16/29 maxlen: 29
185.104.70.32/30 maxlen: 30
185.104.70.152/29 maxlen: 29
185.104.70.184/29 maxlen: 29
185.104.70.216/29 maxlen: 29
185.104.70.220/30 maxlen: 30
185.104.71.0/24 maxlen: 24
185.104.71.0/28 maxlen: 28
185.104.71.16/30 maxlen: 30
185.104.71.20/30 maxlen: 30
185.104.71.24/30 maxlen: 30
185.104.71.28/30 maxlen: 30
185.104.71.32/28 maxlen: 28
185.104.71.64/27 maxlen: 27
185.104.71.128/28 maxlen: 28
185.104.71.160/29 maxlen: 29
185.104.71.176/29 maxlen: 29
185.104.71.192/29 maxlen: 29
185.104.71.200/29 maxlen: 29
185.104.71.208/28 maxlen: 28
185.104.71.224/28 maxlen: 28
2a06:3480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:fc:a0:2c:dc:37:fa:59:3b:b0:aa:b0:05:d7:8f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Nov 2 15:59:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d54aadb3da2b4949f63e3c6b2736069d1f55622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:d6:c2:9c:5d:b1:01:44:bd:f4:42:f1:61:
2d:56:16:a0:5c:85:49:ba:21:44:a3:67:65:59:a3:
d4:fd:f1:99:df:37:bc:b4:f5:b0:59:f6:21:d8:3e:
f2:b2:6d:bd:f2:80:ba:d7:48:6b:a5:ef:c1:28:4d:
8c:58:58:5a:68:d2:aa:40:4d:08:5b:56:1e:90:d0:
ea:96:ea:ef:dc:25:3d:13:c9:6f:af:ad:20:0c:f6:
80:13:f1:b5:dd:f5:7d:c0:13:69:64:7f:a7:1d:f1:
86:49:65:f4:e7:a9:15:d6:b6:9a:b3:4c:dc:3f:92:
96:d6:ac:6c:1c:7b:d6:9b:ae:e3:83:fc:ad:27:d6:
37:97:61:18:cc:f9:39:d8:87:21:3a:17:14:b1:1a:
c6:18:c9:46:be:dd:61:1a:85:9a:8c:6f:91:ef:cf:
49:b8:2b:da:df:03:42:ec:13:ff:db:ad:05:a2:19:
9b:9a:b5:79:47:cb:79:ec:92:6a:d6:50:74:a1:88:
33:e8:0c:37:7d:a3:57:e2:74:4c:60:ca:b9:6f:59:
88:06:94:59:6c:8a:cf:5d:7f:47:12:3b:7c:d7:d1:
99:63:1f:49:b8:31:c7:63:cc:e7:a5:da:85:fe:da:
b3:d2:20:ff:a5:83:68:70:42:15:15:ab:2a:f7:7f:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:AA:DB:3D:A2:B4:94:9F:63:E3:C6:B2:73:60:69:D1:F5:56:22
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/DVSq2z2itJSfY-PGsnNgadH1ViI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.68.0/22
IPv6:
2a06:3480::/29
Signature Algorithm: sha256WithRSAEncryption
b1:a7:57:cf:ce:65:bf:b7:e3:b7:c6:8c:ee:86:4d:0a:99:5f:
a2:1e:fc:aa:24:74:61:38:0a:f6:29:0e:63:55:27:fc:35:a9:
0c:36:8f:0e:72:a1:f1:2d:e7:5b:5e:d7:d4:a8:92:a2:7b:38:
ae:81:78:79:e6:d2:2c:fb:c6:b0:28:67:cc:fc:e1:43:3b:00:
e1:d5:66:71:12:5d:5a:5c:c4:c6:d2:a5:2b:a5:1f:de:e9:0d:
98:62:e7:93:33:ee:a4:40:94:38:f4:71:0c:75:95:27:64:9a:
05:67:f0:78:fa:9f:bb:97:8a:45:91:53:9c:3b:08:17:02:14:
bc:f6:71:b0:a6:61:7b:8c:ba:80:32:3b:89:70:5d:63:6f:f9:
25:22:a0:10:dd:ca:6a:1a:6a:f8:06:7e:ae:55:d0:22:c0:5b:
77:07:02:75:e8:37:92:e1:88:c6:ac:4f:43:2a:0d:57:8c:7c:
e7:ca:76:da:2d:fd:92:98:e7:21:68:c9:4a:0e:78:a6:81:b3:
39:a3:f1:7c:77:cd:75:1e:f6:e9:6f:d4:d8:5c:2f:c1:0e:1c:
2e:11:a1:77:df:be:80:34:e5:35:2e:0b:d6:23:15:22:e2:53:
ec:8c:f0:94:f1:54:c4:5d:32:c9:4e:d1:b8:c0:42:8d:cd:8d:
bf:cc:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:57 2026 by rpki-client