Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa
File: oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa (raw, json)
Hash identifier: bWjEdLBfsFa6qTx3+Dfw2/yFPlyDQhUFTnCquJm018M=
Subject key identifier: A1:71:EB:A1:51:6A:AD:31:6B:4F:87:56:FA:33:B0:4A:0C:4A:81:C4
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F8405029ED07DD77989F7690EE21
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56534
IP address blocks: 45.135.215.0/24 maxlen: 24
89.104.126.0/24 maxlen: 24
89.223.17.0/24 maxlen: 24
89.223.80.0/21 maxlen: 21
92.255.60.0/24 maxlen: 24
92.255.88.0/21 maxlen: 32
92.255.96.0/21 maxlen: 21
93.174.72.0/21 maxlen: 21
176.53.192.0/24 maxlen: 24
176.53.194.0/23 maxlen: 24
176.53.196.0/24 maxlen: 24
176.53.197.0/24 maxlen: 24
176.53.198.0/23 maxlen: 23
176.53.200.0/22 maxlen: 22
176.53.204.0/22 maxlen: 22
176.53.208.0/22 maxlen: 24
176.53.208.0/24 maxlen: 24
176.53.211.0/24 maxlen: 24
176.53.212.0/22 maxlen: 22
176.53.213.0/24 maxlen: 24
185.47.52.0/22 maxlen: 22
185.47.54.0/24 maxlen: 24
185.108.4.0/24 maxlen: 24
2a04:ac00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f8:40:50:29:ed:07:dd:77:98:9f:76:90:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a171eba1516aad316b4f8756fa33b04a0c4a81c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:5a:b4:be:9b:68:ae:4a:68:18:be:ac:98:
60:68:4d:00:31:53:2c:9a:aa:d6:8a:6d:ae:6f:7c:
86:65:90:8c:aa:b6:bc:89:19:7b:9e:a1:e4:85:0f:
d4:1c:69:81:65:38:ac:ea:a4:ae:f7:6e:d4:4f:cd:
8f:0f:25:f9:39:a9:1f:40:18:85:e0:a2:5d:60:95:
7d:65:7a:35:a2:3e:86:01:0f:73:d2:6e:49:0f:69:
b4:4b:e8:e7:e9:6e:92:e5:9b:93:95:1c:34:6a:17:
a7:96:5a:6e:6b:c0:bb:e8:7c:1e:13:d6:84:0d:94:
88:19:5b:9d:cd:33:be:f0:ca:b6:44:d4:c7:dc:ff:
c4:c6:05:9e:b2:1f:86:d1:65:81:cd:28:4c:14:97:
87:3e:29:c9:e5:0f:a4:d1:b9:1a:74:35:63:5e:f1:
76:a5:55:90:1b:fe:8d:bd:30:e8:6e:6f:57:fb:3f:
ff:f2:4a:2e:67:88:06:59:5e:5d:05:95:5a:71:6e:
c4:55:49:b5:72:e5:e8:97:8b:80:db:86:b5:68:11:
43:05:42:12:7d:21:18:2c:af:23:51:21:0d:f7:31:
b4:73:a9:8e:8b:f4:9e:92:9d:be:0d:07:33:35:01:
d6:6f:ab:a7:db:1d:2a:2d:ee:66:cd:67:5b:0a:63:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:EB:A1:51:6A:AD:31:6B:4F:87:56:FA:33:B0:4A:0C:4A:81:C4
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.215.0/24
89.104.126.0/24
89.223.17.0/24
89.223.80.0/21
92.255.60.0/24
92.255.88.0-92.255.103.255
93.174.72.0/21
176.53.192.0/24
176.53.194.0-176.53.215.255
185.47.52.0/22
185.108.4.0/24
IPv6:
2a04:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
29:d0:7d:40:ac:a9:64:bd:c7:86:9c:f3:db:fb:72:65:60:b9:
8e:1c:36:35:0c:d0:26:de:56:2b:3b:9a:0b:a7:d3:a7:2f:c8:
0e:a7:2b:4b:fb:be:f2:60:f7:8b:4f:05:82:40:4b:44:70:8a:
19:28:a7:ea:15:8f:86:1b:d3:50:9b:91:48:24:bd:59:5b:e4:
a4:4b:a0:9f:73:b2:29:fe:2f:b9:33:7a:c0:30:23:f6:cb:1a:
18:92:98:8e:a3:54:2f:a5:75:1c:7c:80:fd:ab:8e:43:62:63:
32:99:52:d9:46:87:a6:a3:ed:6a:8c:04:6a:b6:4b:79:18:0d:
61:cc:9a:f8:1b:2a:9f:82:3f:bb:83:7c:74:95:7e:6e:79:6f:
75:2a:a4:63:3b:33:e6:28:d9:bd:37:0e:be:58:97:51:19:26:
e2:2e:7a:75:b1:eb:ed:bc:4f:76:6a:3b:54:20:30:1c:fe:a9:
26:f4:8c:ba:da:76:bd:bc:8b:45:b6:7a:dd:6e:1e:82:76:5e:
00:d3:98:4c:11:bb:09:19:01:dc:b3:e0:82:2f:2a:2b:8d:b1:
d8:be:ba:05:1a:7a:b0:13:d8:01:48:ea:71:35:42:2b:1e:60:
0e:37:19:c0:c2:97:a1:de:96:b6:14:2e:0e:98:d9:0f:4c:72:
16:04:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:32 2026 by rpki-client