Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa
File: fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa (raw, json)
Hash identifier: YWEpMcVfS6S4vwVF7Bdrpn4pCsO6G0a695Az/e9ZD/E=
Subject key identifier: 7C:D6:AA:F2:6E:8E:F4:16:E1:B3:25:DF:A4:85:60:3B:51:41:59:F4
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019ED08A7A1FBCD475D0EA8C35DD09F49B8C
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa
Signing time: Tue 16 Jun 2026 13:06:36 +0000
ROA not before: Tue 16 Jun 2026 13:06:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43754
IP address blocks: 45.87.6.0/23 maxlen: 24
78.110.120.0/24 maxlen: 24
78.110.122.0/24 maxlen: 24
78.110.123.0/24 maxlen: 24
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
152.89.44.0/22 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.58.240.0/24 maxlen: 24
185.58.241.0/24 maxlen: 24
185.58.242.0/24 maxlen: 24
185.58.243.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.141.105.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.141.107.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
188.209.153.0/24 maxlen: 24
195.110.38.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:8a:7a:1f:bc:d4:75:d0:ea:8c:35:dd:09:f4:9b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jun 16 13:06:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cd6aaf26e8ef416e1b325dfa485603b514159f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:34:1f:bf:9d:b2:27:81:5b:7a:9c:e5:e3:
55:95:ac:da:c8:ba:95:e8:6c:2c:20:e3:bd:eb:44:
79:a2:51:35:5b:5d:e4:36:12:3a:11:ca:0c:f5:17:
ab:7e:84:c9:cf:3c:5a:71:9f:65:58:c6:50:c2:96:
1a:0a:8b:4e:d7:bd:df:d0:06:a3:0e:ed:db:27:5f:
d1:35:4e:76:d8:0b:6f:56:03:b5:65:eb:8b:fb:01:
cf:3a:98:6e:7a:34:e5:3a:0e:28:13:e5:90:8b:72:
0f:65:e6:08:93:19:92:08:c0:07:bd:8d:9b:21:ea:
3a:91:a5:c6:7f:82:10:40:77:ab:34:33:51:02:7e:
d2:0d:74:52:a4:3d:e5:30:63:23:72:0e:b7:b8:09:
da:ff:68:2b:19:d3:06:b9:fb:eb:0a:95:74:42:0c:
02:2b:9e:b3:6f:cd:3b:70:fc:71:96:ef:c7:22:30:
81:54:e3:56:90:fc:38:f1:6b:9d:21:b6:50:b5:92:
36:c5:ec:f5:1f:8c:53:13:76:f2:55:67:ec:d1:15:
d3:ec:e0:6c:43:b6:95:29:55:71:a5:1a:4a:3d:50:
f9:cb:62:a8:29:09:64:bd:2a:65:69:aa:f7:49:95:
b9:f8:e7:54:8e:6f:fe:7c:b0:7b:8f:4a:af:93:5f:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D6:AA:F2:6E:8E:F4:16:E1:B3:25:DF:A4:85:60:3B:51:41:59:F4
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.6.0/23
78.110.120.0/24
78.110.122.0/23
88.135.36.0/22
91.236.168.0/23
152.89.44.0/22
185.18.213.0-185.18.214.255
185.51.200.0/22
185.58.240.0/22
185.112.151.0/24
185.128.136.0/24
185.141.105.0-185.141.107.255
185.141.132.0/24
185.141.135.0/24
188.209.153.0/24
195.110.38.0/24
195.211.45.0-195.211.46.255
Signature Algorithm: sha256WithRSAEncryption
40:31:21:3d:09:aa:55:e3:92:3a:79:82:ca:d4:74:ec:b9:3c:
a1:18:be:30:5c:9d:c6:79:41:2e:21:38:55:82:bc:ef:3c:90:
9c:1e:43:f9:b7:9d:7d:c5:01:fa:81:81:03:34:d6:74:6b:2e:
ed:86:eb:2b:f2:dc:f6:b8:15:95:7a:b0:21:c3:50:7a:11:62:
38:69:44:57:ce:97:97:e4:d2:eb:ee:55:f7:a9:a9:ae:9e:f3:
a3:a0:62:06:50:6d:c4:a6:26:53:86:b3:e2:4e:0f:e5:7a:23:
1b:3b:f4:eb:4f:2e:d8:8c:75:6d:81:7f:30:bd:00:84:6b:b1:
2f:9b:ae:63:01:08:f6:d2:74:20:fb:72:3b:de:04:c6:9c:20:
7e:83:cb:b6:f5:dc:79:47:03:ac:b0:ff:96:d6:53:fb:87:8e:
92:00:c8:33:86:45:89:b9:50:c5:f8:84:3b:7c:93:9d:7d:02:
3b:22:d1:cf:ea:59:de:cd:5c:bc:bc:2a:ca:41:71:d5:9f:48:
a4:8d:b2:14:67:ec:7c:ce:4c:ef:b4:ef:3d:51:e1:e6:02:05:
ec:c2:f8:9f:9f:29:fb:19:34:82:8d:e7:5f:39:d1:95:c3:0b:
65:9b:74:94:74:f9:87:a9:8d:0d:44:19:48:12:f6:cf:fd:61:
37:8d:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:08 2026 by rpki-client