Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/DyNt3o9uIabPGMyLwBL1LgyHrIg.roa
File: DyNt3o9uIabPGMyLwBL1LgyHrIg.roa (raw, json)
Hash identifier: gG5xZr77ZeZmjXnGAzSRXzAOpUijJO5uYNAWkPGYFA8=
Subject key identifier: 0F:23:6D:DE:8F:6E:21:A6:CF:18:CC:8B:C0:12:F5:2E:0C:87:AC:88
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 019BFE44A5BEA85151FBDA117EC88A256DF4
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/DyNt3o9uIabPGMyLwBL1LgyHrIg.roa
Signing time: Tue 27 Jan 2026 07:04:30 +0000
ROA not before: Tue 27 Jan 2026 07:04:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39442
IP address blocks: 92.39.104.0/21 maxlen: 21
185.125.72.0/22 maxlen: 22
185.183.48.0/22 maxlen: 22
185.183.48.0/23 maxlen: 23
188.247.32.0/19 maxlen: 19
188.247.40.0/24 maxlen: 24
188.247.44.0/22 maxlen: 22
188.247.44.0/24 maxlen: 24
188.247.54.0/24 maxlen: 24
188.247.55.0/24 maxlen: 24
188.247.56.0/21 maxlen: 21
213.234.0.0/20 maxlen: 20
213.234.0.0/24 maxlen: 24
213.234.1.0/24 maxlen: 24
213.234.5.0/24 maxlen: 24
213.234.6.0/24 maxlen: 24
213.234.8.0/24 maxlen: 24
213.234.10.0/24 maxlen: 24
213.234.11.0/24 maxlen: 24
213.234.16.0/21 maxlen: 21
213.234.16.0/22 maxlen: 22
213.234.16.0/24 maxlen: 24
213.234.18.0/23 maxlen: 23
213.234.20.0/24 maxlen: 24
213.234.21.0/24 maxlen: 24
213.234.22.0/24 maxlen: 24
217.149.176.0/20 maxlen: 20
217.149.176.0/21 maxlen: 21
217.149.176.0/22 maxlen: 22
217.149.176.0/24 maxlen: 24
217.149.177.0/24 maxlen: 24
217.149.178.0/24 maxlen: 24
217.149.179.0/24 maxlen: 24
217.149.181.0/24 maxlen: 24
217.149.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:44:a5:be:a8:51:51:fb:da:11:7e:c8:8a:25:6d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jan 27 07:04:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f236dde8f6e21a6cf18cc8bc012f52e0c87ac88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:58:7c:71:21:e8:7d:f0:c6:e0:79:26:3f:
f5:e6:ca:e4:49:04:2a:83:07:27:61:7a:e7:c7:a7:
cb:ec:fe:f8:74:d7:65:d2:7b:8a:43:1f:0a:95:5a:
0f:26:26:5f:1b:79:7c:c8:4c:11:9c:b1:45:c6:55:
de:04:1a:0e:c5:74:9e:73:cf:2e:79:50:d4:a5:43:
cb:3b:c1:b2:9c:0d:4d:05:c0:fd:fb:ce:5a:e1:16:
99:ab:57:37:b3:72:73:f9:4e:d1:8f:3a:48:ff:cc:
64:59:9e:0f:12:c2:da:64:a6:01:61:a8:ea:26:07:
a4:f7:1a:52:dc:65:41:e7:96:99:e0:0e:6b:96:1b:
5b:08:2f:f3:ed:c6:c8:5f:99:ee:c4:08:a4:5c:e7:
77:ac:5d:24:9f:4d:d5:de:ba:a3:51:17:73:e3:d2:
c9:d9:29:26:f9:41:10:b2:24:84:80:70:7d:85:50:
fb:a2:eb:c0:0c:d0:4a:2c:8d:ef:21:c4:db:ff:33:
7f:2d:83:7e:e7:a7:74:1f:89:af:56:c9:af:a1:7f:
66:cd:40:e1:9b:87:63:2b:2b:cd:7b:2a:16:48:db:
55:5f:68:ec:34:2b:22:ca:f5:df:5a:7f:2d:34:e4:
9f:0e:5e:d4:41:28:30:3a:f1:41:7b:67:48:90:3a:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:23:6D:DE:8F:6E:21:A6:CF:18:CC:8B:C0:12:F5:2E:0C:87:AC:88
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/DyNt3o9uIabPGMyLwBL1LgyHrIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.104.0/21
185.125.72.0/22
185.183.48.0/22
188.247.32.0/19
213.234.0.0-213.234.23.255
217.149.176.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:0b:ec:13:1e:80:ca:03:4c:46:29:08:d6:2e:a7:6d:3f:49:
a8:b1:85:53:eb:0e:21:43:9d:2c:05:ce:5f:bd:12:ba:dc:31:
54:59:c7:fe:ac:f5:fb:15:51:2b:5f:53:31:b8:84:77:1c:28:
62:c3:00:5b:8f:ae:57:d7:f3:90:de:42:3f:91:26:37:26:99:
1c:12:c1:c8:3a:13:57:4a:cf:d2:8a:4c:d0:15:7e:42:f9:75:
75:25:8f:d6:80:74:a4:e7:49:3f:3e:b5:62:d8:4d:bf:77:7d:
c0:82:7c:c5:8e:0d:8d:3f:ad:bd:b1:fb:28:11:13:fb:72:02:
6a:38:bd:08:dd:5c:2d:69:77:09:67:5c:df:52:5c:d6:80:f1:
4f:46:65:3a:e2:43:db:ef:1c:9d:2d:9a:36:8f:63:14:e7:52:
c1:47:6a:ec:07:d5:82:17:d1:1f:19:3a:9d:fe:d4:c0:8d:de:
ff:62:29:c2:fc:ad:e7:11:8a:7d:6f:3d:e3:5b:ec:0d:8f:83:
7a:3f:98:cb:17:2e:7e:dd:f7:37:e2:e9:2f:cb:a1:40:d1:dc:
26:8d:00:2c:d9:7e:7c:34:c0:29:8a:c5:53:ea:05:e2:60:12:
d0:19:bc:03:49:c6:5e:21:f9:c2:fc:0e:79:72:1d:19:55:7b:
ae:ee:0f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:03 2026 by rpki-client