Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/sIMIn1dJinS_QNCqRZ3sAyP03Ys.roa
File: sIMIn1dJinS_QNCqRZ3sAyP03Ys.roa (raw, json)
Hash identifier: wj+8SIZf3ByO3mjHkql3d5okITDClOtvY8eSZHJh2bU=
Subject key identifier: B0:83:08:9F:57:49:8A:74:BF:40:D0:AA:45:9D:EC:03:23:F4:DD:8B
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 01A08BF029AC2A82D76715B1ABB5BEF0564E
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/sIMIn1dJinS_QNCqRZ3sAyP03Ys.roa
Signing time: Thu 10 Sep 2026 15:29:27 +0000
ROA not before: Thu 10 Sep 2026 15:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8856
IP address blocks: 195.214.192.0/23 maxlen: 23
195.214.192.0/24 maxlen: 24
195.214.193.0/24 maxlen: 24
195.214.194.0/23 maxlen: 23
195.214.194.0/24 maxlen: 24
195.214.195.0/24 maxlen: 24
212.42.64.0/22 maxlen: 22
212.42.64.0/23 maxlen: 23
212.42.64.0/24 maxlen: 24
212.42.65.0/24 maxlen: 24
212.42.66.0/23 maxlen: 23
212.42.68.0/23 maxlen: 23
212.42.70.0/24 maxlen: 24
212.42.71.0/24 maxlen: 24
212.42.72.0/24 maxlen: 24
212.42.73.0/24 maxlen: 24
212.42.74.0/23 maxlen: 23
212.42.76.0/23 maxlen: 23
212.42.76.0/24 maxlen: 24
212.42.77.0/24 maxlen: 24
212.42.78.0/23 maxlen: 23
212.42.78.0/24 maxlen: 24
212.42.79.0/24 maxlen: 24
212.42.80.0/22 maxlen: 22
212.42.80.0/24 maxlen: 24
212.42.81.0/24 maxlen: 24
212.42.82.0/23 maxlen: 23
212.42.84.0/24 maxlen: 24
212.42.85.0/24 maxlen: 24
212.42.88.0/24 maxlen: 24
212.42.89.0/24 maxlen: 24
212.42.92.0/24 maxlen: 24
212.42.93.0/24 maxlen: 24
212.42.94.0/23 maxlen: 23
212.42.94.0/24 maxlen: 24
212.42.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:f0:29:ac:2a:82:d7:67:15:b1:ab:b5:be:f0:56:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Sep 10 15:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b083089f57498a74bf40d0aa459dec0323f4dd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c1:9f:53:21:a8:73:6b:42:72:46:21:fd:83:
4b:03:3b:c7:24:68:c3:9c:26:ee:0d:9b:d0:ed:6e:
09:a8:e3:72:6a:51:98:19:1e:51:b3:8a:c5:36:e0:
67:44:ac:40:dc:2a:d7:19:c0:25:47:27:1d:b6:9f:
ba:e8:60:c3:57:19:8d:85:ff:98:b4:cb:dd:58:93:
ce:96:71:72:9a:9d:a3:83:89:93:79:eb:3d:14:d5:
7b:98:4d:4d:ba:25:31:0d:2b:c2:0b:e1:37:d3:ba:
2a:89:9a:ba:9e:59:03:ee:48:c5:de:d8:99:9e:9a:
54:7a:26:b0:1d:15:0e:fb:49:1b:8c:fd:40:e8:cc:
c2:7d:16:ef:a4:2c:b8:d4:b0:e4:1e:a3:d2:cc:5a:
c0:3e:5b:44:db:96:93:09:62:b0:e9:bf:4b:a6:ed:
ca:cf:c2:ce:f7:ef:44:2a:eb:42:20:50:e7:e6:5f:
f3:5a:b7:97:12:8c:c8:74:35:c2:42:b0:26:91:f1:
37:51:a3:b7:31:48:ba:fa:2e:4a:78:8e:1c:59:dd:
98:5a:a7:9c:86:27:0f:9f:29:62:48:98:8c:bf:aa:
81:2e:dc:9e:79:9d:3f:dc:94:30:ee:45:27:39:bc:
bf:19:4a:66:72:64:eb:51:70:02:52:27:6c:9e:ab:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:08:9F:57:49:8A:74:BF:40:D0:AA:45:9D:EC:03:23:F4:DD:8B
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/sIMIn1dJinS_QNCqRZ3sAyP03Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.192.0/22
212.42.64.0-212.42.85.255
212.42.88.0/23
212.42.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:22:e4:82:37:58:a9:2f:48:49:53:80:87:23:fa:d4:cb:11:
43:bf:64:81:57:63:80:94:e9:b1:b4:95:d8:9e:19:ad:b5:52:
ff:a0:65:f1:31:5f:e9:2b:da:54:f9:2f:91:8d:c2:be:6b:a2:
05:1a:8a:81:6e:4e:87:0c:fd:a5:5e:a6:00:d0:40:d2:8d:3b:
84:44:67:34:c1:8d:61:dc:e1:c2:ee:0e:e2:64:1b:22:c8:03:
88:59:56:a6:04:32:b5:89:fd:c0:99:e7:b3:ea:31:ce:60:27:
72:70:2f:55:52:03:f7:3a:d6:a9:58:ee:35:f2:2e:14:cf:92:
1a:c0:24:25:3e:6a:a7:a5:d6:a6:45:da:d6:38:38:67:67:23:
17:67:e1:2f:bd:85:c1:4e:5f:7d:f5:93:c8:ee:80:be:1f:55:
15:95:e1:f7:bc:19:cb:a9:b6:2e:fc:0c:00:92:ef:1f:31:21:
00:82:d1:7b:48:aa:94:c1:25:c8:31:f9:bf:be:68:2d:5e:91:
4c:fc:fa:61:4e:72:84:d4:33:2f:03:de:48:59:82:14:96:05:
fd:58:4b:18:6a:61:7e:18:eb:fe:2c:ea:42:be:79:be:46:b6:
82:90:92:7c:c6:a4:ea:22:2a:50:6f:56:62:ee:9e:03:45:ef:
a5:8c:38:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:59 2026 by rpki-client