Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/RfdbavmQcT8mIQaqZ9oKJHaDxao.roa
File: RfdbavmQcT8mIQaqZ9oKJHaDxao.roa (raw, json)
Hash identifier: Nx9pU5kvqjdGo4y6nmuhAb86Wl01qIbkTY3uv0AJ+IU=
Subject key identifier: 45:F7:5B:6A:F9:90:71:3F:26:21:06:AA:67:DA:0A:24:76:83:C5:AA
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019C473839011D5A35E2451B3B3140E91AC3
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/RfdbavmQcT8mIQaqZ9oKJHaDxao.roa
Signing time: Tue 10 Feb 2026 11:03:12 +0000
ROA not before: Tue 10 Feb 2026 11:03:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3209
IP address blocks: 47.64.0.0/13 maxlen: 13
62.95.128.0/17 maxlen: 17
62.95.128.0/18 maxlen: 18
62.95.192.0/18 maxlen: 18
81.11.0.0/17 maxlen: 17
81.11.0.0/18 maxlen: 18
81.11.0.0/20 maxlen: 20
81.11.16.0/20 maxlen: 20
81.11.32.0/20 maxlen: 20
81.11.48.0/20 maxlen: 20
81.11.64.0/18 maxlen: 18
81.11.64.0/20 maxlen: 20
81.11.80.0/20 maxlen: 20
81.11.96.0/20 maxlen: 20
81.11.112.0/20 maxlen: 20
82.82.0.0/15 maxlen: 24
82.82.0.0/20 maxlen: 20
84.56.0.0/13 maxlen: 24
85.238.224.0/19 maxlen: 19
88.64.0.0/12 maxlen: 24
92.72.0.0/13 maxlen: 24
92.208.0.0/14 maxlen: 24
92.212.0.0/15 maxlen: 24
92.214.0.0/15 maxlen: 24
92.216.0.0/14 maxlen: 24
94.216.0.0/13 maxlen: 24
145.253.0.0/16 maxlen: 16
145.253.0.0/20 maxlen: 20
145.254.0.0/16 maxlen: 24
146.60.0.0/16 maxlen: 24
176.94.0.0/17 maxlen: 24
176.94.128.0/17 maxlen: 24
176.95.0.0/16 maxlen: 24
178.0.0.0/12 maxlen: 24
185.2.132.0/22 maxlen: 24
188.96.0.0/12 maxlen: 24
193.25.240.0/22 maxlen: 22
193.25.244.0/23 maxlen: 23
193.25.247.0/24 maxlen: 24
195.50.128.0/18 maxlen: 18
195.158.128.0/19 maxlen: 19
212.144.0.0/16 maxlen: 24
213.23.0.0/16 maxlen: 24
213.128.96.0/19 maxlen: 19
2a00::/22 maxlen: 22
2a00:20::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:38:39:01:1d:5a:35:e2:45:1b:3b:31:40:e9:1a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Feb 10 11:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45f75b6af990713f262106aa67da0a247683c5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:ff:1e:60:48:f6:b7:fb:49:75:b5:3e:a9:
11:a1:d5:38:f0:93:66:c1:4a:30:e1:80:d0:70:bf:
83:4f:1e:f9:e0:74:48:7b:fd:93:f1:26:32:e6:fe:
77:e8:b7:20:16:10:2f:c5:a0:a7:ba:63:77:ac:3a:
7f:03:45:af:1d:f6:60:37:c3:db:9a:50:8c:af:38:
46:25:a7:bd:2f:2c:da:ca:d4:93:f9:5f:7a:65:8f:
28:83:ae:e5:2f:7c:00:73:b3:cf:ea:61:a1:6c:5c:
04:99:e5:7a:cc:4c:ab:74:52:a1:24:62:c1:fe:69:
4f:c3:d8:f3:68:b5:09:13:77:18:f3:96:fc:39:a0:
29:ac:5a:17:b7:03:55:79:c4:c4:9f:a1:63:e5:66:
24:27:2b:7f:21:0c:80:b9:10:21:15:92:0f:8a:b5:
64:20:83:4b:aa:81:ce:b8:9f:42:ed:89:88:e4:67:
92:01:28:6f:97:c0:e3:42:53:17:c7:e8:df:43:6d:
d8:36:e9:d7:e5:39:f1:6f:38:3c:35:4b:6d:d9:26:
ad:d2:8e:82:2e:49:84:61:91:99:4f:20:97:44:66:
57:93:8c:84:06:e2:f2:ae:68:07:3f:4f:46:e2:8f:
5b:a7:9e:87:46:47:dd:a6:00:cb:11:67:f8:7d:ac:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F7:5B:6A:F9:90:71:3F:26:21:06:AA:67:DA:0A:24:76:83:C5:AA
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/RfdbavmQcT8mIQaqZ9oKJHaDxao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.64.0.0/13
62.95.128.0/17
81.11.0.0/17
82.82.0.0/15
84.56.0.0/13
85.238.224.0/19
88.64.0.0/12
92.72.0.0/13
92.208.0.0-92.219.255.255
94.216.0.0/13
145.253.0.0-145.254.255.255
146.60.0.0/16
176.94.0.0/15
178.0.0.0/12
185.2.132.0/22
188.96.0.0/12
193.25.240.0-193.25.245.255
193.25.247.0/24
195.50.128.0/18
195.158.128.0/19
212.144.0.0/16
213.23.0.0/16
213.128.96.0/19
IPv6:
2a00::/22
Signature Algorithm: sha256WithRSAEncryption
4b:68:f0:3e:c3:75:40:f6:f2:4f:77:96:8f:80:a1:30:c7:8a:
1c:d1:1b:45:27:68:1e:d5:21:91:61:a6:70:fe:74:58:79:3a:
82:24:5c:cf:7e:62:dc:14:b3:59:0b:7f:56:20:17:78:79:40:
4f:a6:41:6f:32:08:9b:7e:f1:50:87:f3:a7:81:99:b0:56:41:
8b:17:54:4b:28:66:05:6d:8f:d7:48:25:6f:77:d9:2f:2e:ff:
bc:1a:08:a1:4f:86:f7:a8:db:e7:72:4d:d5:b5:b9:fc:27:97:
a8:3e:02:e6:61:25:b7:bd:ac:f6:2c:9c:2d:98:31:1f:80:bd:
b0:2a:47:8a:51:17:9f:b6:78:07:2a:4e:61:3a:99:3e:17:fa:
e6:21:ef:75:11:0f:09:70:9f:5a:5a:73:2e:11:c4:3e:dd:73:
66:74:8b:71:8d:25:0f:0a:2e:13:2b:cd:79:55:6a:64:d3:51:
d2:d7:f0:31:ab:90:04:1b:10:6b:16:aa:e7:4d:2f:fc:45:27:
14:41:96:b5:c0:00:7a:40:31:5f:58:55:ed:74:e0:01:d1:83:
2d:7f:df:ee:2f:08:32:26:ff:30:e5:f5:ad:71:f8:be:8b:43:
86:f2:80:b9:48:ea:3a:3d:36:01:e7:4c:5c:6a:0a:89:2f:7e:
46:1a:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:26 2026 by rpki-client