Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/djZFkLkOP1i4A3QD0iq7FYfbH8k.roa
File: djZFkLkOP1i4A3QD0iq7FYfbH8k.roa (raw, json)
Hash identifier: Ke0UPwLsbzS5tVeJA/RZ8i1nwVPlXEw7kayqjUa+RnI=
Subject key identifier: 76:36:45:90:B9:0E:3F:58:B8:03:74:03:D2:2A:BB:15:87:DB:1F:C9
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019CF6C0653B3A1273EDAD0FB79C60030E38
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/djZFkLkOP1i4A3QD0iq7FYfbH8k.roa
Signing time: Mon 16 Mar 2026 13:05:29 +0000
ROA not before: Mon 16 Mar 2026 13:05:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203936
IP address blocks: 45.93.180.0/22 maxlen: 24
45.144.248.0/22 maxlen: 24
89.40.238.0/24 maxlen: 24
89.43.198.0/24 maxlen: 24
89.44.145.0/24 maxlen: 24
185.249.232.0/24 maxlen: 24
185.253.144.0/22 maxlen: 24
193.39.92.0/24 maxlen: 24
193.39.93.0/24 maxlen: 24
193.39.94.0/24 maxlen: 24
193.39.95.0/24 maxlen: 24
194.15.219.0/24 maxlen: 24
194.15.232.0/24 maxlen: 24
194.15.236.0/24 maxlen: 24
194.26.1.0/24 maxlen: 24
2a0c:1380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:c0:65:3b:3a:12:73:ed:ad:0f:b7:9c:60:03:0e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Mar 16 13:05:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76364590b90e3f58b8037403d22abb1587db1fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:ff:d2:fb:04:2d:2e:6b:95:60:ca:07:10:
6f:68:7e:64:d1:81:16:94:b8:18:77:ca:ab:22:7c:
52:62:a6:2c:13:b3:3f:ba:ca:c3:31:d7:2b:93:c4:
f4:98:92:a9:ff:8a:38:62:a1:11:c6:b9:a3:f2:00:
06:2e:23:30:50:1e:03:73:4a:bf:4c:c8:c0:e7:d8:
a5:1a:fb:40:f3:f5:b9:b1:89:98:24:f4:ac:02:c7:
74:ab:11:1c:cc:c1:a8:d8:44:45:c5:bb:5f:24:93:
e1:e3:f1:26:b5:98:bf:9e:34:39:40:46:8d:4b:a4:
08:d2:ae:70:c2:d1:53:e6:cc:0e:ce:43:e9:96:40:
22:26:1d:73:3d:14:da:b6:87:2c:dc:9e:1c:9d:ad:
4a:3c:a9:13:74:ee:57:16:2e:6f:6b:df:25:9f:59:
dc:d3:07:da:69:d4:05:11:40:b0:e7:76:33:8f:14:
9a:79:05:59:74:06:d1:a2:8c:62:7f:84:bf:c3:b6:
c3:ce:c4:af:3e:18:db:31:14:34:9b:8e:6a:bc:ac:
aa:59:73:9a:f7:e2:08:62:53:62:50:6e:71:a5:31:
c5:b9:13:ea:28:76:91:f4:dd:d9:75:b3:ac:5f:3e:
7a:73:5a:94:d6:57:34:96:aa:29:ed:7e:28:fa:88:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:36:45:90:B9:0E:3F:58:B8:03:74:03:D2:2A:BB:15:87:DB:1F:C9
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/djZFkLkOP1i4A3QD0iq7FYfbH8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.180.0/22
45.144.248.0/22
89.40.238.0/24
89.43.198.0/24
89.44.145.0/24
185.249.232.0/24
185.253.144.0/22
193.39.92.0/22
194.15.219.0/24
194.15.232.0/24
194.15.236.0/24
194.26.1.0/24
IPv6:
2a0c:1380::/29
Signature Algorithm: sha256WithRSAEncryption
97:ea:93:5f:d1:e1:39:e4:78:b4:0a:c4:3d:0c:18:d6:a1:2b:
24:11:6c:65:da:08:bc:74:ea:59:d2:f2:94:16:d5:d2:7c:d1:
5e:40:21:9b:73:9c:1d:3f:c0:4a:4c:12:32:ae:9d:e7:46:50:
06:0a:db:e2:5f:96:61:f4:6d:00:db:47:76:4a:cc:ac:b2:15:
4f:7c:ef:bd:92:af:92:e0:b7:4d:52:f3:ff:a1:90:52:dd:2c:
10:be:f0:5c:07:8c:f0:eb:74:29:0c:d5:41:32:47:46:dd:11:
96:6d:84:4b:3a:40:29:e9:38:45:1c:88:32:62:46:d0:58:ef:
9e:09:ed:f3:f9:02:d6:1c:7d:6d:e7:fd:d3:6e:97:92:63:cc:
d6:aa:d1:34:be:72:a1:e6:3d:aa:ab:54:8a:00:24:9a:ad:5a:
f7:3f:74:28:d8:2d:71:3c:c2:0e:80:2e:51:a9:67:65:ca:c7:
b7:b2:e7:9d:94:8b:ca:ba:01:23:bf:69:35:6d:3f:65:b1:35:
9c:b2:9d:98:0b:83:a8:d8:37:8e:cf:c9:b9:79:00:b0:0a:ae:
4b:66:ac:5f:9c:6a:36:19:24:69:f2:e4:59:68:9f:46:b5:37:
d8:3b:a0:ee:8b:09:99:d7:2c:47:df:3f:2d:f9:a9:e3:30:a0:
46:37:df:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:48 2026 by rpki-client