Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/aeIz8X8Ys2hGlS_pB1nXiyKJBS0.roa
File: aeIz8X8Ys2hGlS_pB1nXiyKJBS0.roa (raw, json)
Hash identifier: SMyWHGh9aDYvxehTQ5ea5JyrzJM2FelJAv5kLF2N5co=
Subject key identifier: 69:E2:33:F1:7F:18:B3:68:46:95:2F:E9:07:59:D7:8B:22:89:05:2D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019F89C323C4FA5D61415F7C7C073E4AE2C0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/aeIz8X8Ys2hGlS_pB1nXiyKJBS0.roa
Signing time: Wed 22 Jul 2026 12:18:15 +0000
ROA not before: Wed 22 Jul 2026 12:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45929
IP address blocks: 45.143.52.0/24 maxlen: 24
45.143.55.0/24 maxlen: 24
84.247.24.0/24 maxlen: 24
84.247.27.0/24 maxlen: 24
91.188.204.0/22 maxlen: 24
94.103.248.0/24 maxlen: 24
94.103.251.0/24 maxlen: 24
185.184.132.0/23 maxlen: 24
185.205.188.0/24 maxlen: 24
185.245.112.0/22 maxlen: 22
185.255.36.0/22 maxlen: 24
188.240.224.0/22 maxlen: 24
193.23.128.0/22 maxlen: 24
195.38.4.0/22 maxlen: 22
213.232.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:c3:23:c4:fa:5d:61:41:5f:7c:7c:07:3e:4a:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 22 12:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e233f17f18b36846952fe90759d78b2289052d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:a6:17:9a:75:90:2d:d0:2f:c1:0b:be:92:
33:c8:f6:9b:65:96:01:47:2d:5a:f9:8f:45:8f:d9:
b5:63:0c:ed:05:16:a3:d6:12:4d:ce:c7:ff:e9:71:
2c:db:8b:71:4c:dc:80:c7:44:70:0c:c6:43:26:22:
c4:dd:26:00:05:38:34:5e:b1:c6:b8:99:e4:9a:e0:
0b:76:9b:8c:6d:88:a5:89:0e:2a:3b:7f:6e:2c:8d:
82:62:fa:0f:e6:37:14:fe:30:5e:79:e9:f5:42:60:
75:b8:39:63:72:e5:3e:aa:91:b6:0b:ee:63:04:b3:
ed:a1:44:63:be:c2:6c:7a:d5:fb:f3:5e:58:5f:a6:
de:8f:ac:08:df:aa:6e:a1:14:fd:48:65:b3:41:63:
db:a6:42:cd:6a:d4:a3:b6:3f:05:f5:8d:cb:a2:8f:
54:38:ef:2e:7d:80:62:ec:6a:cd:78:56:bf:f8:ea:
e1:4c:59:d9:a7:56:97:52:28:51:33:97:a1:8d:e7:
74:c1:9d:18:91:ad:ef:77:df:2d:9a:6c:05:17:97:
e8:8c:44:66:32:96:3c:0a:6c:f9:80:99:de:03:45:
11:22:95:28:ea:7e:3f:df:63:b0:ac:a1:54:25:fa:
1e:b2:0b:4d:af:8f:d6:61:50:84:8b:1e:9e:de:f9:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:33:F1:7F:18:B3:68:46:95:2F:E9:07:59:D7:8B:22:89:05:2D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/aeIz8X8Ys2hGlS_pB1nXiyKJBS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.52.0/24
45.143.55.0/24
84.247.24.0/24
84.247.27.0/24
91.188.204.0/22
94.103.248.0/24
94.103.251.0/24
185.184.132.0/23
185.205.188.0/24
185.245.112.0/22
185.255.36.0/22
188.240.224.0/22
193.23.128.0/22
195.38.4.0/22
213.232.92.0/22
Signature Algorithm: sha256WithRSAEncryption
37:e3:8a:07:f5:9c:bf:28:46:31:49:e0:e3:fd:2f:1e:e9:f6:
5f:a3:e8:e1:12:18:2c:a9:49:c6:91:bd:e2:93:69:87:db:27:
1a:3e:85:48:84:16:6e:03:87:52:e2:f4:04:bc:97:47:f1:75:
6e:59:82:99:a2:2d:1a:28:38:42:9e:5a:1b:02:ca:fd:42:35:
5d:3f:bf:c9:43:b2:22:4c:84:2d:18:59:6e:7a:23:5d:95:6c:
06:7d:4d:c3:04:a8:ae:56:75:36:95:f4:fa:65:16:4d:26:ec:
39:b5:88:51:16:d5:46:16:83:d4:19:1a:3c:53:0b:c9:46:79:
e0:12:c8:3e:b6:31:68:26:1b:3a:48:52:ce:ee:87:e3:ee:25:
36:95:96:5d:7f:b6:16:dc:07:97:cd:48:dc:4f:7e:18:19:75:
d2:72:b7:ed:89:a7:47:54:98:97:22:f7:4c:72:dd:66:fa:66:
20:4a:bb:b2:4a:d3:00:f8:c5:d4:63:b6:1e:a1:32:6e:3f:5f:
a6:f2:b3:97:c0:33:19:7d:6b:46:38:e1:fa:dd:38:7a:66:41:
5b:4c:5c:93:c3:ae:84:90:06:87:b9:8f:c6:45:69:e6:3b:bf:
3a:f6:09:d5:63:de:ae:a5:b4:92:98:5c:16:0a:ca:30:bd:d6:
4b:52:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:37 2026 by rpki-client