Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa
File: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (raw, json)
Hash identifier: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=
Subject key identifier: D4:DF:8A:85:0C:EB:B8:C1:92:76:81:A2:67:B0:8E:E2:EE:DC:92:4F
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019C70284532B9282497A72609F69F719D09
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa
Signing time: Wed 18 Feb 2026 09:50:12 +0000
ROA not before: Wed 18 Feb 2026 09:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48135
IP address blocks: 94.127.80.0/22 maxlen: 22
94.127.81.0/24 maxlen: 24
94.127.83.0/24 maxlen: 24
94.127.84.0/22 maxlen: 22
94.127.85.0/24 maxlen: 24
94.127.86.0/23 maxlen: 23
94.127.86.0/24 maxlen: 24
94.127.87.0/24 maxlen: 24
151.89.0.0/16 maxlen: 16
151.89.0.0/17 maxlen: 17
151.89.54.0/24 maxlen: 24
151.89.55.0/24 maxlen: 24
151.89.56.0/24 maxlen: 24
151.89.120.0/22 maxlen: 22
151.89.128.0/17 maxlen: 17
151.89.232.0/22 maxlen: 22
185.51.12.0/24 maxlen: 24
185.51.13.0/24 maxlen: 24
185.51.14.0/24 maxlen: 24
185.51.15.0/24 maxlen: 24
193.111.46.0/24 maxlen: 24
193.169.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:28:45:32:b9:28:24:97:a7:26:09:f6:9f:71:9d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Feb 18 09:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4df8a850cebb8c1927681a267b08ee2eedc924f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:bf:82:37:78:d3:6f:18:ab:67:8b:91:ad:
35:75:88:6c:2d:82:27:8a:45:2a:7e:8d:eb:83:30:
0f:92:66:1c:e8:b6:13:3b:b9:cb:3b:a9:61:5d:e8:
60:73:ee:a7:87:3a:d9:44:c1:01:c7:76:7c:77:22:
ae:36:c9:bc:b0:f4:1f:8e:cd:b4:00:4d:c8:89:47:
81:6e:61:ee:4f:df:21:9e:09:ca:64:42:58:b1:e6:
80:62:27:41:5f:53:85:42:86:94:3f:5f:3a:f0:5e:
47:9a:7a:a5:f8:51:ce:5c:52:34:39:b8:44:13:a3:
31:29:17:7a:85:17:41:10:d1:85:12:82:cb:08:fd:
5f:11:c8:ea:4d:f6:cc:76:d0:a6:5a:32:cd:c7:0c:
c7:44:2a:ed:b8:86:c2:43:fc:05:d0:28:ad:31:92:
c5:69:7c:21:90:e4:3b:c9:2c:42:68:15:73:b6:f1:
db:b4:b7:a3:93:ba:64:48:48:76:51:c6:65:c7:ac:
80:87:f0:2e:d9:08:54:c7:be:39:e9:ed:8d:ba:16:
97:4f:07:6a:a2:d3:fc:f2:7a:99:81:e9:7f:ef:2a:
fc:82:10:4a:0e:90:16:52:12:e7:69:81:1d:30:f9:
e2:8a:6f:90:0f:af:2b:57:43:63:87:90:95:67:1f:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:8A:85:0C:EB:B8:C1:92:76:81:A2:67:B0:8E:E2:EE:DC:92:4F
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.80.0/21
151.89.0.0/16
185.51.12.0/22
193.111.46.0/24
193.169.150.0/23
Signature Algorithm: sha256WithRSAEncryption
30:90:e3:0e:1b:09:2e:ce:96:71:3a:83:19:9b:a1:b1:25:4a:
aa:79:69:32:08:03:36:b4:ba:c1:e8:ce:cd:4d:0a:b7:6f:07:
da:6e:93:a7:8e:89:bd:71:0a:a0:06:2a:da:db:4a:b7:ea:dd:
af:22:2a:3c:b7:b6:2e:4b:04:7e:43:dd:01:fe:5a:16:33:30:
2e:73:0d:f8:f8:7d:27:d5:0a:9d:f0:f1:7a:eb:22:9c:14:b7:
6f:82:d8:f2:5b:cc:e8:29:39:99:65:f4:03:4c:18:6b:e6:97:
88:e3:7e:0b:21:62:a1:36:1c:61:f0:d6:78:23:e8:a1:ac:30:
63:08:80:c7:9a:e0:a9:84:86:94:26:a6:04:23:48:3b:62:4f:
44:d8:67:91:d5:fa:53:f1:d6:4a:6a:91:98:9a:f5:2d:02:6a:
32:08:e5:d9:0a:f0:c7:8b:e0:74:fa:82:ae:40:ac:1f:66:d8:
1e:c8:1d:8d:e1:a4:db:0d:4a:7f:3c:5e:51:04:3b:95:97:4e:
2f:82:00:71:8a:66:61:3a:9d:c8:1e:45:22:76:25:d5:d9:d9:
a5:98:c7:f6:3e:ea:71:7a:c5:f9:b8:21:cb:5a:a2:e0:b2:ee:
e7:4c:57:d5:9f:5f:3b:9a:30:e3:f6:68:0f:e6:de:0d:9b:24:
41:e0:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:14 2026 by rpki-client