Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/sjMKCmjaFKZ8YxmALLmdtrMAc1o.roa
File: sjMKCmjaFKZ8YxmALLmdtrMAc1o.roa (raw, json)
Hash identifier: hCi0GLTWFRS32LeOAKNmqM7bPUbqpVB22DtgGi/v/Pg=
Subject key identifier: B2:33:0A:0A:68:DA:14:A6:7C:63:19:80:2C:B9:9D:B6:B3:00:73:5A
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019FA3B71C7D6EB6CD2B544464BC25D4C351
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/sjMKCmjaFKZ8YxmALLmdtrMAc1o.roa
Signing time: Mon 27 Jul 2026 13:15:14 +0000
ROA not before: Mon 27 Jul 2026 13:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34450
IP address blocks: 86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.41.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:b7:1c:7d:6e:b6:cd:2b:54:44:64:bc:25:d4:c3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 27 13:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2330a0a68da14a67c6319802cb99db6b300735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:96:4b:47:b7:9c:5f:1a:c3:b3:9d:a5:9f:
0d:84:c6:fe:48:69:20:b7:dd:58:6f:29:7d:69:83:
af:d7:62:93:0f:0d:6b:a3:27:c1:93:6e:47:9e:3d:
8e:d8:0b:6e:35:29:62:5e:ad:98:d7:03:cb:00:01:
6d:3f:09:a8:37:88:74:60:ad:24:e5:60:60:ac:29:
28:a6:c3:39:61:61:98:73:42:ab:6f:65:05:58:92:
41:31:73:a9:a7:0f:38:b6:c2:8e:a0:25:49:0e:b3:
fa:b6:4c:c0:18:c9:f7:54:66:a8:88:4c:04:5c:d8:
82:7f:3a:ad:01:05:89:35:c9:b5:a8:c9:ef:d7:dd:
c7:9d:2d:dd:fa:2b:91:f1:ed:38:91:39:e4:d0:2d:
63:15:52:00:60:60:29:e1:da:16:bd:d9:8f:59:49:
5e:96:4a:99:00:59:57:c3:68:cd:53:74:1d:48:7f:
d5:1c:fd:20:5e:a5:25:3e:68:cc:7e:10:cd:b5:4e:
0e:72:07:51:ec:7f:28:1d:ec:01:b8:ef:77:ed:51:
63:85:89:23:79:f2:c8:89:e0:7d:ed:6c:ec:0d:56:
6b:42:f8:31:6a:1c:3a:ba:b6:5f:95:3a:c1:01:cc:
35:7c:c4:0c:1c:36:e5:a2:31:bc:d8:c6:09:a1:c7:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:0A:0A:68:DA:14:A6:7C:63:19:80:2C:B9:9D:B6:B3:00:73:5A
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/sjMKCmjaFKZ8YxmALLmdtrMAc1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.41.0/24
89.43.46.0/24
89.44.209.0/24
89.45.34.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.95.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
12:3e:70:58:0d:ff:9c:e6:01:96:56:9e:70:09:18:5b:a3:e8:
d5:9d:77:3d:2a:18:88:60:48:3c:5b:b6:13:c2:98:12:b3:a9:
07:ee:54:31:9d:f2:75:58:96:f0:f2:86:85:8b:c0:79:9e:5a:
54:64:ae:fa:9b:ed:9c:ca:70:31:50:c7:71:cc:7e:3c:8c:b0:
26:83:03:24:99:7a:b1:c2:6e:37:ed:73:10:98:18:78:1d:ed:
40:98:3f:9b:10:78:1e:de:bc:91:19:65:b1:bf:fe:f8:1e:53:
59:e6:96:7d:51:bd:e5:46:00:72:5b:83:dd:cb:6a:45:97:62:
42:c1:59:b8:12:af:a6:a6:8d:8a:5f:d1:93:4f:b9:5f:5b:02:
e8:a7:5c:5f:5b:2e:34:a6:f8:82:d3:da:25:3b:63:d6:21:49:
67:7a:f6:f0:1f:16:b8:8a:00:9b:68:b2:c4:92:15:98:fb:b6:
bc:4c:21:7f:ee:f1:0d:be:ed:bd:e4:62:8e:7d:5d:fb:63:e4:
34:17:ec:ae:f0:0f:b6:a4:e0:06:00:42:9b:25:82:b7:5f:73:
4d:38:b9:ee:22:ab:3e:55:ba:f7:17:fa:a8:e1:2a:38:c0:74:
af:1d:77:62:bc:88:7e:58:f7:ba:db:e5:cf:8a:14:05:4b:04:
15:27:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:20 2026 by rpki-client