Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/Z92yiTrhR0fQeo1Gpcv8VY0ix_Q.roa
File: Z92yiTrhR0fQeo1Gpcv8VY0ix_Q.roa (raw, json)
Hash identifier: X+YVIvMsha8DVgM98Sir2A7a/vrAXaN9NbnUzgvjneo=
Subject key identifier: 67:DD:B2:89:3A:E1:47:47:D0:7A:8D:46:A5:CB:FC:55:8D:22:C7:F4
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019EBCD3B582E60DF36F9181223277AF8FC6
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/Z92yiTrhR0fQeo1Gpcv8VY0ix_Q.roa
Signing time: Fri 12 Jun 2026 17:14:11 +0000
ROA not before: Fri 12 Jun 2026 17:14:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208893
IP address blocks: 45.88.64.0/24 maxlen: 24
46.255.74.0/24 maxlen: 24
46.255.75.0/24 maxlen: 24
91.92.197.0/24 maxlen: 24
93.123.20.0/24 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.64.0/24 maxlen: 24
94.156.65.0/24 maxlen: 24
94.156.175.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
194.238.74.0/24 maxlen: 24
194.238.75.0/24 maxlen: 24
2a14:e200::/44 maxlen: 44
2a14:e200::/48 maxlen: 48
2a14:e200:1::/48 maxlen: 48
2a14:e200:2::/48 maxlen: 48
2a14:e200:3::/48 maxlen: 48
2a14:e200:10::/44 maxlen: 44
2a14:e200:20::/44 maxlen: 44
2a14:e200:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:d3:b5:82:e6:0d:f3:6f:91:81:22:32:77:af:8f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Jun 12 17:14:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67ddb2893ae14747d07a8d46a5cbfc558d22c7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:5e:9a:9f:82:17:52:8f:04:79:55:11:9f:
50:4c:b9:92:71:ad:b4:91:7b:6c:f9:89:67:f1:4c:
20:67:d4:64:23:b2:86:5a:42:69:71:c5:8f:ca:be:
6d:94:98:76:62:a8:9b:44:77:83:83:54:fd:b7:24:
48:87:24:66:8e:3f:ad:fd:4b:21:e2:c6:c6:dd:5b:
24:49:53:4e:aa:67:2d:4b:92:e6:12:4c:9c:34:ea:
75:09:f5:92:53:09:89:d9:66:d3:7e:6f:50:b1:b4:
a8:f1:04:80:bd:ba:5e:ad:11:4f:db:54:18:bd:ff:
e6:8b:88:11:68:01:72:96:ed:cd:f4:65:ef:40:2f:
69:f3:ac:b7:c1:8f:1f:81:0c:d5:19:00:46:0a:ac:
15:0d:0a:b2:d5:65:09:74:ec:d6:15:35:7c:ec:d4:
ec:7f:49:65:7c:33:c0:6c:15:8c:da:9c:b6:ac:a7:
24:90:87:b1:f4:9a:e9:99:db:1c:da:75:cf:60:29:
6f:77:71:49:56:c5:b9:59:c3:24:c2:2c:af:f8:dc:
7f:6b:c4:05:5f:37:17:9d:c8:cd:e0:a8:47:d9:8a:
5f:37:7d:75:e4:10:e8:de:e6:10:19:ed:8d:6c:de:
64:37:2c:14:fd:85:1f:8a:26:d4:f7:36:cc:a0:bd:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DD:B2:89:3A:E1:47:47:D0:7A:8D:46:A5:CB:FC:55:8D:22:C7:F4
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/Z92yiTrhR0fQeo1Gpcv8VY0ix_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.64.0/24
46.255.74.0/23
91.92.197.0/24
93.123.20.0/24
94.154.173.0/24
94.156.64.0/23
94.156.175.0/24
94.156.253.0/24
193.222.98.0/24
194.238.74.0/23
IPv6:
2a14:e200::-2a14:e200:2f:ffff:ffff:ffff:ffff:ffff
2a14:e200:40::/44
Signature Algorithm: sha256WithRSAEncryption
6c:be:00:d8:21:af:47:0d:26:38:30:3e:3e:e4:cc:2b:c3:21:
ec:e4:d4:75:f2:bc:f7:95:e9:b3:ef:0d:4e:53:f3:55:e6:4b:
b9:0d:d5:58:05:22:13:ea:f3:df:44:10:5c:2f:2e:3f:53:85:
ae:09:70:c0:d4:83:9a:27:5d:82:4d:90:f9:fd:38:fb:3c:15:
25:0d:2f:ae:bc:1b:43:05:18:08:76:88:70:59:48:dc:59:ad:
26:5c:a9:70:1d:b9:26:cf:9a:21:ff:d5:28:3b:cd:a1:1e:e2:
ee:5c:49:13:6c:f5:ad:38:92:e7:01:15:9a:17:00:43:bf:c9:
a9:e1:63:e1:6f:11:a0:20:8a:cd:47:db:98:94:2b:fa:7a:69:
c5:11:49:43:79:ae:c8:8d:9a:26:42:51:8f:89:e6:89:20:d5:
9a:68:f0:77:5d:64:2c:25:6e:bd:c9:54:00:9d:e0:f4:87:eb:
af:d1:cf:28:b2:34:fa:e0:c8:3d:c2:8c:13:fe:ee:60:e9:3f:
61:99:6d:cf:44:64:17:13:61:68:72:d2:24:fe:c4:b8:1e:fb:
4c:49:53:86:f4:9b:56:28:71:94:60:63:a7:bc:b3:1c:35:2e:
50:c9:2e:ab:d1:49:d4:60:34:66:24:4b:16:48:42:20:74:9f:
74:52:6b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:47 2026 by rpki-client