Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/Rbo6oxAqDb8H6ee1Bcd6zmIvanM.roa
File: Rbo6oxAqDb8H6ee1Bcd6zmIvanM.roa (raw, json)
Hash identifier: hbS17xb15eoENiFqWkrh4Rg5HMl3hCu9i3t7Tn7RjEU=
Subject key identifier: 45:BA:3A:A3:10:2A:0D:BF:07:E9:E7:B5:05:C7:7A:CE:62:2F:6A:73
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019F7EBF4D72860F8BA85A19CC5AA4AC2EFC
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/Rbo6oxAqDb8H6ee1Bcd6zmIvanM.roa
Signing time: Mon 20 Jul 2026 08:58:14 +0000
ROA not before: Mon 20 Jul 2026 08:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210656
IP address blocks: 89.223.6.0/23 maxlen: 32
89.223.20.0/24 maxlen: 32
92.255.16.0/24 maxlen: 32
92.255.58.0/23 maxlen: 32
94.126.204.0/22 maxlen: 32
94.139.248.0/22 maxlen: 32
185.184.128.0/22 maxlen: 32
185.216.194.0/23 maxlen: 32
2a0d:d6c2::/48 maxlen: 48
2a0d:d6c7:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:bf:4d:72:86:0f:8b:a8:5a:19:cc:5a:a4:ac:2e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jul 20 08:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45ba3aa3102a0dbf07e9e7b505c77ace622f6a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:00:f9:f7:8a:0d:26:b9:6b:06:3a:f3:5e:
b7:c4:7f:18:cb:82:f7:20:2c:79:aa:ea:a8:3b:35:
0d:88:6f:08:cc:49:6f:af:b3:7c:bd:c3:f4:68:ea:
4b:2d:c8:7b:42:5e:7d:fe:6e:2e:e9:a9:4e:50:df:
10:24:b2:85:3c:f0:6e:42:4e:17:0a:6b:97:85:96:
dd:9f:1e:ae:c3:e8:5b:a1:3a:b2:d6:c2:49:36:6b:
9a:56:a5:f9:57:b3:47:60:08:82:ca:f4:e7:a7:7e:
6d:34:21:12:0d:7f:d2:7c:60:52:51:02:1c:cd:40:
ae:24:f6:52:4e:54:22:19:ac:13:ae:52:4a:ef:2b:
9e:26:84:ac:4a:ac:bc:bc:d7:27:d3:29:44:a8:b4:
4d:4f:c7:dc:01:bc:9e:df:b0:4e:05:fd:b9:7a:2f:
3c:0d:4a:68:88:bb:d3:9e:1a:a5:32:5d:a6:47:58:
f6:1c:a5:60:65:8d:20:94:1b:86:94:78:a8:8e:0f:
61:2f:d6:de:43:bf:70:b4:a6:f6:92:54:22:4a:87:
08:5d:36:5d:40:e7:d2:c7:19:f6:a4:78:60:fb:c1:
cf:1f:0c:b4:fd:2b:93:a5:64:0c:80:93:b0:cf:31:
10:74:a5:42:60:51:6c:76:5f:d6:58:ae:28:b5:40:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:3A:A3:10:2A:0D:BF:07:E9:E7:B5:05:C7:7A:CE:62:2F:6A:73
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/Rbo6oxAqDb8H6ee1Bcd6zmIvanM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.6.0/23
89.223.20.0/24
92.255.16.0/24
92.255.58.0/23
94.126.204.0/22
94.139.248.0/22
185.184.128.0/22
185.216.194.0/23
IPv6:
2a0d:d6c2::/48
2a0d:d6c7:3::/48
Signature Algorithm: sha256WithRSAEncryption
3f:a0:57:e7:11:68:6c:e9:9e:df:6d:39:05:fc:7e:3d:0d:08:
aa:c9:b0:fe:85:a5:7c:b9:71:d7:aa:4f:54:24:b1:84:cc:f3:
74:0d:ef:64:98:c3:8b:f1:48:14:b2:93:b8:8c:30:0c:b6:98:
a4:9a:3f:45:14:2b:bd:28:54:0a:2b:92:36:e7:a5:92:b1:fd:
02:4b:05:e5:27:1c:70:ca:39:b3:5c:e9:fa:e9:93:f3:bf:2d:
b6:89:ae:df:97:59:dd:e9:13:39:86:90:02:84:f9:d9:a3:86:
ba:ed:2b:a3:4f:8c:93:7f:83:32:a8:c1:9d:f2:08:28:17:71:
58:8d:06:75:15:f4:f9:af:77:e5:70:c6:56:b1:d2:e5:f8:20:
39:9e:10:74:9d:98:55:cc:1b:b4:c2:57:d1:68:6a:87:88:84:
2b:5c:80:27:59:61:86:97:27:ac:7f:72:93:38:4b:41:43:2e:
12:f0:89:d0:87:b8:ad:f0:aa:46:56:a3:c5:99:83:42:c2:a7:
65:fb:61:8b:71:39:cd:00:bd:e3:7f:44:9b:eb:2d:76:9c:1a:
76:4b:27:41:5c:db:b7:00:cb:18:ce:9c:90:0b:29:cd:04:4c:
27:a1:53:44:f1:09:d6:e2:eb:10:44:55:5c:fc:7e:c3:85:04:
07:6a:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:32 2026 by rpki-client