Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/X7ac4XA1tpGm-YT6i7tT6fbzYY8.roa
File: X7ac4XA1tpGm-YT6i7tT6fbzYY8.roa (raw, json)
Hash identifier: vEQjrEenJSqoTsTtPfT7M/Rb7txYfAfPWEy15g3YYqE=
Subject key identifier: 5F:B6:9C:E1:70:35:B6:91:A6:F9:84:FA:8B:BB:53:E9:F6:F3:61:8F
Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial: 01A1AC0AFE6BE0A99346117F48B8ADAE56DE
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/X7ac4XA1tpGm-YT6i7tT6fbzYY8.roa
Signing time: Thu 05 Nov 2026 14:09:23 +0000
ROA not before: Thu 05 Nov 2026 14:09:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214110
IP address blocks: 2.59.244.0/22 maxlen: 22
2.59.247.0/24 maxlen: 24
89.38.216.0/21 maxlen: 21
103.95.124.0/22 maxlen: 22
103.115.182.0/23 maxlen: 23
103.132.4.0/22 maxlen: 22
103.132.6.0/24 maxlen: 24
103.204.220.0/23 maxlen: 23
185.124.100.0/22 maxlen: 22
185.250.76.0/22 maxlen: 22
193.36.96.0/22 maxlen: 22
2a0c:8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:0a:fe:6b:e0:a9:93:46:11:7f:48:b8:ad:ae:56:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Validity
Not Before: Nov 5 14:09:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fb69ce17035b691a6f984fa8bbb53e9f6f3618f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:90:5f:ee:75:64:cc:8d:ec:68:d6:2f:2c:
51:f3:33:01:1c:36:76:1b:a8:26:8e:dd:bb:cd:ac:
22:6e:9f:f2:45:a2:cc:e0:8e:73:60:b2:b6:32:ac:
a0:a4:5c:a3:1e:36:0f:58:ea:50:50:8b:fa:0a:fb:
7c:40:79:bd:c5:9f:1d:16:bd:72:ad:a7:e7:86:96:
77:55:28:3a:d3:7a:30:58:b4:40:9b:0d:00:6b:21:
31:7f:05:75:a1:95:06:e3:84:92:0c:9d:d8:97:53:
9a:b3:52:b9:8c:64:45:24:a7:ce:26:5a:85:22:97:
2c:cc:64:f2:a8:4b:30:2a:e2:c6:42:11:0f:b1:33:
58:3f:ed:4a:0a:8f:a7:67:e1:ac:97:37:ea:cf:71:
00:77:aa:32:64:63:b4:c5:8c:c0:98:f6:fe:d6:3f:
9c:4a:c2:60:2e:c5:a4:83:08:25:db:71:1f:70:44:
a9:88:a7:0f:7f:c2:83:f5:11:ac:9b:fb:a5:23:0f:
de:99:7c:94:79:50:0c:a7:b3:fc:c3:7a:ea:fe:e6:
11:1a:e3:35:36:7a:a8:3e:52:c6:3d:ab:37:08:1c:
25:f2:57:57:23:99:2d:2f:77:a5:46:6f:86:e7:dc:
6a:5a:7f:ce:83:d8:2b:f6:5a:ca:c9:c7:7f:a2:9e:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B6:9C:E1:70:35:B6:91:A6:F9:84:FA:8B:BB:53:E9:F6:F3:61:8F
X509v3 Authority Key Identifier:
keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/X7ac4XA1tpGm-YT6i7tT6fbzYY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.244.0/22
89.38.216.0/21
103.95.124.0/22
103.115.182.0/23
103.132.4.0/22
103.204.220.0/23
185.124.100.0/22
185.250.76.0/22
193.36.96.0/22
IPv6:
2a0c:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
95:84:cc:b0:05:c7:77:bf:55:15:3e:ea:28:2e:72:38:e0:19:
82:05:36:2e:fc:55:94:52:bb:9c:34:55:b4:cb:91:e6:7a:be:
6d:4c:91:ff:9a:29:49:ee:27:5b:7f:e8:22:42:40:f2:a9:6e:
75:dd:df:f7:3c:ef:b3:cb:00:fb:04:0a:f6:6f:9b:e8:0d:13:
5d:fb:fb:67:08:59:b4:7f:ed:d0:51:b6:4b:58:6a:c0:c9:45:
a2:60:ca:91:09:36:69:64:18:8a:fb:e8:3b:a1:bb:9a:59:9c:
84:8f:a7:59:ec:f2:8c:cc:ce:c5:72:b6:b9:c0:30:1d:74:a7:
b1:e7:31:70:79:2d:c5:88:85:5d:48:41:b2:1f:65:80:77:00:
9d:64:19:de:37:38:5c:fb:e4:77:7a:0c:11:32:75:8d:95:a5:
1b:06:03:c5:5c:7b:33:cc:1d:a7:91:72:c9:87:22:56:25:7e:
cc:4e:ee:42:17:e4:42:16:b3:f0:09:d0:fb:e0:07:59:a1:ec:
32:30:f4:ef:bf:64:03:ac:56:74:0e:66:ca:00:80:43:c7:8c:
3b:7c:36:14:a7:04:f2:0b:63:3b:24:58:f1:b9:97:f0:78:9f:
0b:70:f2:6e:a3:4e:ed:15:a7:7e:97:df:52:bd:81:c5:a9:47:
8c:35:77:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:42:50 2026 by rpki-client