Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/26wR-zBZgEkmFf1adE8GJHuoqPU.roa
File: 26wR-zBZgEkmFf1adE8GJHuoqPU.roa (raw, json)
Hash identifier: rl+0y7cKEh+pIKYEueM3wxoK7uD1ezs5gktU26nNymw=
Subject key identifier: DB:AC:11:FB:30:59:80:49:26:15:FD:5A:74:4F:06:24:7B:A8:A8:F5
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 0199F9420B5F1F623DBDB2DC94CE07BEC6ED
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/26wR-zBZgEkmFf1adE8GJHuoqPU.roa
Signing time: Sat 18 Oct 2025 21:37:58 +0000
ROA not before: Sat 18 Oct 2025 21:37:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216096
IP address blocks: 109.175.210.0/24 maxlen: 24
109.205.193.0/24 maxlen: 24
158.94.220.0/23 maxlen: 24
158.94.220.0/24 maxlen: 24
158.94.221.0/24 maxlen: 24
2a01:fb00::/32 maxlen: 34
2a01:fb00::/33 maxlen: 34
2a01:fb00::/34 maxlen: 34
2a01:fb01::/32 maxlen: 32
2a01:fb02::/32 maxlen: 34
2a01:fb02::/34 maxlen: 34
2a01:fb02:4000::/34 maxlen: 34
2a01:fb02:8000::/34 maxlen: 34
2a01:fb02:c000::/34 maxlen: 34
2a01:fb03::/32 maxlen: 32
2a01:fb04::/32 maxlen: 32
2a01:fb05::/32 maxlen: 36
2a01:fb05::/36 maxlen: 36
2a01:fb05:1000::/36 maxlen: 36
2a01:fb05:2000::/36 maxlen: 36
2a01:fb05:3000::/36 maxlen: 36
2a01:fb05:4000::/36 maxlen: 36
2a01:fb06::/32 maxlen: 32
2a01:fb07::/32 maxlen: 34
2a01:fb07::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f9:42:0b:5f:1f:62:3d:bd:b2:dc:94:ce:07:be:c6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 18 21:37:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbac11fb305980492615fd5a744f06247ba8a8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:56:24:bd:b0:d8:8e:11:87:e6:fc:51:9c:
3f:2f:da:e3:56:6f:dc:bb:ec:a4:18:9b:ec:8c:06:
cf:18:1a:60:49:58:50:01:e5:03:8d:23:d6:d2:6c:
69:69:84:d9:2c:d8:25:74:ef:b8:7d:3f:de:3b:8c:
e3:d8:3b:0a:0d:8b:fc:e3:33:ad:ca:e9:a9:29:e4:
ad:13:90:32:4d:a6:49:b8:b5:33:62:8e:e2:8a:b9:
1e:52:55:49:c4:bf:08:6f:38:a3:83:10:e9:eb:2e:
2e:01:c9:18:76:3e:3d:37:83:14:86:37:50:51:c5:
94:96:4f:3a:31:55:95:65:68:c9:0c:c2:03:10:c9:
78:c1:2f:36:48:33:ab:5c:a7:e3:3a:9f:4b:74:70:
fe:8c:76:da:97:33:b4:c6:64:65:4f:f1:0d:bf:5e:
54:21:49:08:2a:67:65:59:e5:82:b7:99:35:00:16:
27:af:6b:81:f8:09:68:f9:b6:45:50:df:c9:86:6e:
5b:a2:6a:1a:77:df:f2:81:9f:5b:9f:4d:43:33:5b:
21:19:b3:cb:37:94:71:24:51:e2:56:b1:32:38:a1:
4c:03:da:4e:52:ab:9a:d4:35:c6:bc:2e:4a:13:42:
de:ab:b0:06:5f:ce:a8:be:f5:53:98:4c:3b:b6:72:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AC:11:FB:30:59:80:49:26:15:FD:5A:74:4F:06:24:7B:A8:A8:F5
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/26wR-zBZgEkmFf1adE8GJHuoqPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.210.0/24
109.205.193.0/24
158.94.220.0/23
IPv6:
2a01:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
35:51:00:7d:6e:78:2a:62:97:b7:95:f1:23:33:09:b3:f6:cc:
4f:9c:5a:8d:ed:ab:63:50:a3:ef:64:a5:63:ea:98:02:65:2f:
c1:cb:ed:3b:3e:9e:20:16:c7:35:90:9a:8d:51:8c:5b:3b:c1:
e2:2e:39:6f:99:01:df:ac:45:f6:dd:dd:9d:7f:62:95:7a:87:
86:9d:23:c9:3f:b0:da:49:aa:57:9b:a0:ec:f6:0c:e6:27:01:
73:44:e6:5f:80:82:44:c8:16:64:ce:94:2a:67:ba:04:7e:95:
62:dc:de:32:ad:0b:bb:13:ea:fb:ec:2b:ef:72:9b:0c:2e:7f:
3f:78:80:4a:34:9d:ff:4a:e1:91:78:63:dc:88:bc:8d:da:dd:
e6:0c:be:23:1d:6f:4f:96:50:7e:45:50:c0:95:51:f6:3a:4f:
20:45:7d:fe:13:6d:0e:db:33:fb:c5:b7:68:a6:dc:3e:8b:9d:
23:13:16:46:1d:5b:0d:5d:97:21:3c:aa:79:13:fb:33:47:69:
69:75:8d:29:e7:f8:b3:40:30:24:db:12:39:16:e2:d9:d9:e1:
39:cc:b7:c7:48:81:61:d2:46:79:da:1a:e0:22:44:17:f9:d3:
1d:49:65:df:8b:f6:eb:fd:f1:b4:96:55:69:56:3b:80:6e:4c:
30:39:b2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:54 2025 by rpki-client