Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/88YpHUQ6fLDeh74-HidaPCz4rbs.roa
File: 88YpHUQ6fLDeh74-HidaPCz4rbs.roa (raw, json)
Hash identifier: caUHmlgsNHqTmPixxtDsM5vYCINLVzDzb2yA6/5Oj2Y=
Subject key identifier: F3:C6:29:1D:44:3A:7C:B0:DE:87:BE:3E:1E:27:5A:3C:2C:F8:AD:BB
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019E8CC34131153EAD2ACC8AE6474CEACBE6
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/88YpHUQ6fLDeh74-HidaPCz4rbs.roa
Signing time: Wed 03 Jun 2026 09:14:26 +0000
ROA not before: Wed 03 Jun 2026 09:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197564
IP address blocks: 45.155.96.0/22 maxlen: 22
91.226.36.0/23 maxlen: 23
213.108.24.0/23 maxlen: 23
213.108.24.0/24 maxlen: 24
213.108.25.0/24 maxlen: 24
2001:67c:124c::/48 maxlen: 48
2a10:ba00:30::/48 maxlen: 48
2a10:ba00:bee0::/48 maxlen: 48
2a10:ba00:bee1::/48 maxlen: 48
2a10:ba00:bee2::/48 maxlen: 48
2a10:ba00:bee3::/48 maxlen: 48
2a10:ba00:bee4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:c3:41:31:15:3e:ad:2a:cc:8a:e6:47:4c:ea:cb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jun 3 09:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3c6291d443a7cb0de87be3e1e275a3c2cf8adbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:d5:02:1e:54:ee:6a:c9:38:96:0d:6d:0e:
0b:4f:43:ac:18:23:70:c0:52:5e:2c:f5:61:93:0b:
3a:29:27:68:69:25:7a:34:eb:76:d8:bb:40:4b:bb:
a5:e3:c7:1d:77:50:9c:80:78:9f:a7:69:b2:b0:60:
06:75:ca:bd:bf:91:cf:a8:91:59:2c:e7:95:5f:63:
69:8d:a3:68:d7:4a:ae:99:20:cc:67:87:ed:89:a4:
e3:4d:cd:dd:f9:f9:20:cc:7e:6d:38:2b:42:1a:68:
c7:32:fb:45:8c:26:a3:1b:22:4b:43:3a:b7:21:9c:
d5:90:76:f8:9f:9f:00:83:d0:31:c3:db:81:d2:e2:
76:b4:ee:53:aa:73:d0:9a:71:cf:ef:3c:3d:e5:71:
99:88:b0:73:d1:12:1b:99:17:27:3f:04:d7:52:47:
74:f2:6a:a4:6b:37:65:47:09:f7:7c:28:9d:0b:99:
d4:bc:12:f7:a8:68:46:d9:81:48:4e:6b:b3:1a:55:
5e:78:51:3b:21:40:8e:4f:ad:1f:6b:69:91:81:12:
2f:78:5a:0b:7c:1b:6f:d8:a6:25:a5:eb:38:ca:69:
a1:01:c5:cb:f7:db:d8:4f:24:cd:53:41:25:b4:0e:
8a:71:0b:ce:fd:e1:e9:81:ed:db:4a:81:db:63:da:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:29:1D:44:3A:7C:B0:DE:87:BE:3E:1E:27:5A:3C:2C:F8:AD:BB
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/88YpHUQ6fLDeh74-HidaPCz4rbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.96.0/22
91.226.36.0/23
213.108.24.0/23
IPv6:
2001:67c:124c::/48
2a10:ba00:30::/48
2a10:ba00:bee0::-2a10:ba00:bee4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:2c:0d:d8:27:3b:0f:de:9d:fc:e7:f6:c3:fc:57:d7:f0:63:
59:ab:0e:2b:14:78:b0:f7:d1:5c:c7:1e:7b:27:4c:67:80:c0:
f5:77:b7:98:ad:f0:a5:78:20:c0:8d:15:e3:36:cf:b4:35:07:
84:c2:7b:03:74:4c:df:2b:34:17:cb:30:5a:8a:b8:96:b0:e4:
cd:cd:bf:93:ad:8b:b2:ad:8f:8f:07:e8:f6:68:a0:be:44:47:
72:f2:57:d4:49:9e:08:2a:8e:6b:cd:32:a4:16:42:6b:d3:24:
2e:3b:43:d1:49:01:da:4b:ec:2c:12:6b:31:2b:8a:2b:de:ec:
49:cb:67:d6:e4:75:99:0b:da:6b:58:a2:ce:a1:e7:ac:54:6b:
a8:8f:5d:82:60:a4:cb:45:68:e2:c7:97:ea:4b:77:00:51:7b:
21:70:9d:43:60:b5:4b:63:49:c3:2f:56:b8:ed:2c:57:15:92:
9d:e5:08:6c:f1:33:5c:9f:f8:c8:ee:7a:d3:91:fe:f6:6e:b0:
d3:c6:2b:45:d2:51:2c:a8:d7:15:48:dd:2a:9d:96:93:da:6e:
d7:ed:0a:17:de:1e:94:5c:52:f0:1a:b2:34:18:e6:d1:c3:51:
8e:75:ef:41:b3:ae:3b:ab:6b:2b:7b:ac:08:ed:93:15:98:51:
6a:44:26:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:47:43 2026 by rpki-client