Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Rr67ih9bEGLQGJTMg-vMhZ2Azwg.roa
File: Rr67ih9bEGLQGJTMg-vMhZ2Azwg.roa (raw, json)
Hash identifier: v3/IENdSa8OyjnUENK4zTVbFIGnNSEC4jJo2ZT+P0fw=
Subject key identifier: 46:BE:BB:8A:1F:5B:10:62:D0:18:94:CC:83:EB:CC:85:9D:80:CF:08
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A04233D3CF5EA3718414818F2A7FBD7324
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Rr67ih9bEGLQGJTMg-vMhZ2Azwg.roa
Signing time: Thu 27 Aug 2026 07:51:27 +0000
ROA not before: Thu 27 Aug 2026 07:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35153
IP address blocks: 185.212.136.0/22 maxlen: 24
185.212.137.0/24 maxlen: 24
185.212.138.0/24 maxlen: 24
185.212.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:33:d3:cf:5e:a3:71:84:14:81:8f:2a:7f:bd:73:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 27 07:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46bebb8a1f5b1062d01894cc83ebcc859d80cf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:6a:47:7a:7e:3c:40:5f:8f:4c:c7:50:87:
ec:f3:67:07:ff:0c:b7:a3:34:0f:71:c8:87:29:e8:
f1:3d:d3:8d:ce:4f:02:5b:8e:2b:28:cf:12:c5:e8:
95:99:12:8a:57:05:79:09:60:c7:69:82:35:3e:b4:
52:36:fd:79:0c:be:d4:8e:a9:bc:cd:58:36:71:fe:
7c:0e:cc:e1:43:93:cc:f7:67:ef:5a:49:d3:27:19:
88:9c:c2:d1:7b:02:7f:de:e8:2e:5c:d7:9a:b5:ae:
6f:b9:7a:9c:65:ce:55:e9:cd:46:74:73:96:40:89:
2e:ac:a5:2e:7e:e1:14:2e:f2:0f:1c:04:c1:7b:1c:
83:2e:6b:73:7f:3b:6c:31:a8:9e:0c:d1:e9:24:31:
94:20:00:71:2a:11:f1:cf:8d:41:4b:c7:15:7e:4d:
af:01:d9:12:95:f9:dd:cf:a8:f3:b1:0c:31:00:bf:
69:59:40:c5:0c:89:10:71:fe:27:12:78:8a:db:d9:
52:fa:74:1c:67:72:ed:ab:db:db:2c:14:ad:69:d6:
bb:f0:77:f5:58:0a:2d:f0:90:29:2d:b3:76:ce:f9:
0d:08:2a:3a:4d:b1:86:ce:a8:b8:50:8d:72:22:e3:
d1:e5:e1:ff:ea:47:8f:ef:e5:d5:22:1c:13:dc:94:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:BB:8A:1F:5B:10:62:D0:18:94:CC:83:EB:CC:85:9D:80:CF:08
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Rr67ih9bEGLQGJTMg-vMhZ2Azwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.136.0/22
Signature Algorithm: sha256WithRSAEncryption
04:7f:c6:0b:92:9f:34:d7:f0:9e:9c:78:34:36:7b:f1:91:62:
d5:f0:bc:0d:c8:cb:0a:22:0f:e7:ac:d3:7d:12:30:a7:8d:0c:
4d:91:20:0c:be:2b:e9:54:f0:41:8c:0a:0f:1b:f1:c9:ab:4f:
a0:87:e4:03:eb:ab:e5:b3:67:10:58:ad:fe:2d:01:26:94:db:
08:17:25:a8:a3:8f:33:e4:d6:b7:1c:1b:ee:2c:d4:66:42:17:
37:4f:46:5a:a7:5f:49:b7:80:9a:d7:d0:1b:a1:cd:7c:48:32:
79:34:1a:33:6b:f5:a9:3c:55:c6:2a:48:62:5d:ed:48:12:3f:
a5:80:d5:99:7f:0a:f3:9d:e5:b5:79:df:03:8b:69:61:15:07:
91:39:b2:bb:95:4d:75:d6:c6:f7:59:7f:e7:c3:bd:37:61:7f:
2c:15:1e:c0:57:52:ec:3e:71:bd:05:2f:39:93:6f:09:77:b4:
35:53:20:39:23:c0:52:db:5a:77:3e:09:ad:7d:6e:c8:92:9f:
c0:24:3a:18:1a:0c:de:73:7f:61:5d:af:4c:cc:44:36:d2:f4:
75:ed:fa:9a:c0:0f:3d:91:53:2a:53:4c:00:11:6f:f1:c6:8c:
2c:fa:6c:af:8d:8f:bc:99:35:89:eb:30:a5:de:59:96:e9:5e:
e8:66:44:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:18 2026 by rpki-client