Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa
File: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (raw, json)
Hash identifier: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=
Subject key identifier: A3:51:E2:DF:99:C9:51:C0:6F:92:9D:81:9D:DF:32:9C:32:72:82:34
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019B7AC7DB6BF6BA2EB4E59FD794E126A0C8
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa
Signing time: Thu 01 Jan 2026 18:17:56 +0000
ROA not before: Thu 01 Jan 2026 18:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48504
IP address blocks: 37.26.176.0/21 maxlen: 24
45.134.192.0/22 maxlen: 24
46.247.160.0/19 maxlen: 24
80.253.192.0/20 maxlen: 24
94.143.80.0/21 maxlen: 24
94.247.160.0/21 maxlen: 24
176.53.128.0/22 maxlen: 24
185.8.240.0/22 maxlen: 24
185.12.96.0/22 maxlen: 24
185.48.48.0/22 maxlen: 24
185.50.76.0/22 maxlen: 24
185.117.36.0/22 maxlen: 24
193.239.190.0/23 maxlen: 24
193.243.150.0/23 maxlen: 24
194.105.58.0/23 maxlen: 24
194.105.62.0/23 maxlen: 24
2a01:9720::/32 maxlen: 48
2a01:aa60::/32 maxlen: 48
2a03:bd00::/32 maxlen: 48
2a04:b440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:db:6b:f6:ba:2e:b4:e5:9f:d7:94:e1:26:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jan 1 18:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a351e2df99c951c06f929d819ddf329c32728234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:54:f5:b2:2e:65:73:16:ca:7e:c6:27:5d:
0d:ec:21:ce:5b:56:7b:bb:b2:77:9f:1b:65:d6:70:
db:49:38:50:54:cf:35:58:b8:d1:de:ef:a9:3e:d8:
74:8d:e4:91:4e:56:f2:ec:d7:fb:e9:db:ef:77:9a:
ad:04:1a:ee:f5:b1:02:a5:19:c6:b8:7e:06:d3:0f:
8c:0d:96:f5:4d:2b:a9:a9:ea:86:d4:b7:10:77:d9:
e9:7f:6c:f3:47:a4:f8:d6:49:b4:53:e3:4c:e7:f9:
0a:f6:40:8c:e1:64:6f:83:7b:3b:2e:ca:75:8e:55:
cd:5f:c4:3d:6f:eb:2d:1c:07:4e:6b:d4:e3:93:6c:
e1:e5:1f:d2:30:bb:01:05:84:31:b3:39:38:c8:12:
91:6e:5c:29:68:f4:82:a6:10:52:ae:ab:d4:41:cb:
41:45:f6:7d:06:b0:b8:e3:91:cd:68:b6:66:26:33:
d1:f6:0b:2a:cb:5d:d4:cd:6c:0d:5a:92:5c:d3:6d:
62:c8:8d:2a:69:38:49:90:3f:f1:01:92:ed:c2:59:
30:3e:07:37:e3:68:df:d0:37:79:36:c4:c8:02:b0:
31:f3:a7:10:ab:5a:95:3a:61:a8:c1:6b:78:66:91:
ae:c2:94:98:38:3e:bd:ae:25:c1:a7:4a:d2:49:ba:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:51:E2:DF:99:C9:51:C0:6F:92:9D:81:9D:DF:32:9C:32:72:82:34
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.176.0/21
45.134.192.0/22
46.247.160.0/19
80.253.192.0/20
94.143.80.0/21
94.247.160.0/21
176.53.128.0/22
185.8.240.0/22
185.12.96.0/22
185.48.48.0/22
185.50.76.0/22
185.117.36.0/22
193.239.190.0/23
193.243.150.0/23
194.105.58.0/23
194.105.62.0/23
IPv6:
2a01:9720::/32
2a01:aa60::/32
2a03:bd00::/32
2a04:b440::/29
Signature Algorithm: sha256WithRSAEncryption
1c:2a:04:69:f0:6a:68:3b:5c:2e:48:9e:82:1a:cd:96:d1:bf:
b4:5c:14:66:5c:4e:96:09:41:6a:30:7e:1c:a5:7e:ab:e8:c5:
f9:76:6b:a5:f9:ea:b9:82:d6:32:fa:b7:0a:bb:f4:ac:d2:89:
70:e2:07:a3:7d:ea:e1:92:ff:2b:ea:6e:8e:eb:2b:9d:66:b5:
ba:69:44:1f:4c:6d:56:c0:20:15:9b:69:91:71:7d:f7:4a:fe:
f7:92:74:a5:f1:8e:9c:1d:73:7e:4f:ce:95:ce:4f:8b:38:79:
dd:d0:c2:21:28:ae:e0:31:b5:79:74:a5:75:4d:b5:1a:f3:49:
8e:34:8c:62:8b:ef:c4:83:c6:9f:c4:73:5c:1f:e1:cc:a6:1f:
57:d7:12:86:85:a9:16:1c:1f:0a:94:e6:cc:02:f7:5b:ff:b6:
85:13:fe:51:15:8d:9c:08:91:f5:e5:69:ce:9a:ed:27:f7:3b:
91:ae:41:f9:a6:fe:5b:84:d9:99:56:25:eb:c8:fb:53:e9:39:
1c:17:bf:f3:44:84:ef:f5:89:86:8e:6a:9b:dd:21:88:9c:c0:
a2:6e:f4:3c:9b:43:6a:a2:52:90:07:36:b6:56:c1:0c:ec:fe:
4c:87:14:3d:38:ce:14:0a:10:c0:ce:38:28:be:a3:6a:ed:c5:
ae:d9:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:31:47 2026 by rpki-client