Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/UdLbtxYfg0qcp6oKraIWqqJlo0Q.roa
File: UdLbtxYfg0qcp6oKraIWqqJlo0Q.roa (raw, json)
Hash identifier: 0IIR0KYY7kKITTPMa5XAj61O5FwwF/8ZhNBpJMZ2PcY=
Subject key identifier: 51:D2:DB:B7:16:1F:83:4A:9C:A7:AA:0A:AD:A2:16:AA:A2:65:A3:44
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01A0A455E4E077A8FA7E147743EC03713A4C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/UdLbtxYfg0qcp6oKraIWqqJlo0Q.roa
Signing time: Tue 15 Sep 2026 09:11:27 +0000
ROA not before: Tue 15 Sep 2026 09:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199715
IP address blocks: 81.15.131.0/24 maxlen: 24
81.15.134.0/24 maxlen: 24
81.15.162.0/23 maxlen: 23
81.15.162.0/24 maxlen: 24
81.15.163.0/24 maxlen: 24
81.15.164.0/24 maxlen: 24
81.15.165.0/24 maxlen: 24
81.15.166.0/24 maxlen: 24
81.15.176.0/24 maxlen: 24
81.15.177.0/24 maxlen: 24
81.15.179.0/24 maxlen: 24
81.15.220.0/23 maxlen: 23
81.15.228.0/23 maxlen: 23
81.15.231.0/24 maxlen: 24
81.15.235.0/24 maxlen: 24
81.15.247.0/24 maxlen: 24
81.15.252.0/24 maxlen: 24
81.15.253.0/24 maxlen: 24
82.177.6.0/23 maxlen: 23
82.177.25.0/24 maxlen: 24
82.177.26.0/24 maxlen: 24
82.177.26.74/32 maxlen: 32
82.177.28.0/23 maxlen: 23
82.177.38.0/23 maxlen: 23
82.177.40.0/24 maxlen: 24
82.177.60.0/23 maxlen: 23
82.177.62.0/23 maxlen: 23
82.177.85.0/24 maxlen: 24
82.177.86.0/24 maxlen: 24
82.177.104.0/22 maxlen: 22
82.177.108.0/23 maxlen: 23
82.177.143.0/24 maxlen: 24
82.177.170.0/23 maxlen: 23
82.177.209.0/24 maxlen: 24
82.177.240.0/23 maxlen: 23
88.220.56.0/24 maxlen: 24
88.220.108.0/22 maxlen: 22
88.220.136.0/23 maxlen: 23
88.220.162.0/23 maxlen: 23
195.136.208.0/21 maxlen: 21
195.136.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:55:e4:e0:77:a8:fa:7e:14:77:43:ec:03:71:3a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Sep 15 09:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51d2dbb7161f834a9ca7aa0aada216aaa265a344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:e6:18:a4:a0:06:30:36:11:f5:d1:5b:bd:
53:33:e2:07:00:94:b4:d3:46:73:fe:eb:c6:d2:84:
2d:65:19:a5:23:89:db:74:74:7d:11:b1:9e:66:a4:
a3:e8:3c:66:43:33:89:f9:20:eb:bb:6b:bf:06:d9:
ba:31:3d:2b:e3:40:48:f0:ea:34:5f:ac:23:0c:0a:
22:6e:ae:9a:47:2d:0f:6e:df:c6:71:b1:77:32:f8:
91:d3:84:23:bb:80:35:e3:32:f2:3d:b4:37:5a:04:
79:fa:91:78:68:c8:65:1f:d7:27:2b:cd:0e:ce:3e:
8b:0b:55:fb:59:e2:ff:2b:8d:56:85:ca:77:56:0c:
1f:7e:d5:1e:60:68:b4:81:f8:e2:ce:dd:f5:56:62:
33:c8:94:e2:5d:ab:21:9c:8f:b0:de:6c:7f:c7:4a:
a0:fa:71:b0:67:37:c9:55:9b:96:8b:e2:dd:12:eb:
af:2b:2f:84:93:ec:bb:49:f5:0c:0f:da:7f:06:fc:
03:04:93:36:93:c9:9c:64:32:2c:79:0d:3e:e5:7c:
ec:59:92:4c:da:d6:96:43:3f:90:61:aa:e4:9f:c3:
1c:12:4d:15:8b:f9:7e:3b:52:9c:c0:e2:09:01:d4:
02:d7:33:85:83:4f:c9:84:c7:15:70:79:6a:e2:21:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D2:DB:B7:16:1F:83:4A:9C:A7:AA:0A:AD:A2:16:AA:A2:65:A3:44
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/UdLbtxYfg0qcp6oKraIWqqJlo0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.131.0/24
81.15.134.0/24
81.15.162.0-81.15.166.255
81.15.176.0/23
81.15.179.0/24
81.15.220.0/23
81.15.228.0/23
81.15.231.0/24
81.15.235.0/24
81.15.247.0/24
81.15.252.0/23
82.177.6.0/23
82.177.25.0-82.177.26.255
82.177.28.0/23
82.177.38.0-82.177.40.255
82.177.60.0/22
82.177.85.0-82.177.86.255
82.177.104.0-82.177.109.255
82.177.143.0/24
82.177.170.0/23
82.177.209.0/24
82.177.240.0/23
88.220.56.0/24
88.220.108.0/22
88.220.136.0/23
88.220.162.0/23
195.136.208.0/20
Signature Algorithm: sha256WithRSAEncryption
88:d3:e4:d8:73:4f:1a:34:45:a6:41:e7:4c:f9:da:cb:57:98:
3e:8e:19:aa:aa:22:77:5d:1a:80:fc:1b:c3:79:58:8d:13:0e:
9d:08:ee:69:dd:2a:70:16:88:35:65:ff:33:b8:c3:a9:cf:5c:
26:86:f8:20:39:4f:cf:6e:d3:43:aa:3e:09:6a:b1:ae:06:dd:
73:68:90:d4:2f:3e:cd:56:7f:53:7e:bf:82:9e:86:80:27:7c:
65:0b:6e:f2:54:3c:e7:4f:ea:b7:7c:fd:04:26:32:73:17:db:
59:7f:07:9a:c3:bb:74:ab:9b:8c:cf:03:a8:5c:5d:bd:0a:51:
93:6b:7f:20:59:32:cc:9a:f9:42:a6:f7:b1:3d:41:12:7d:41:
b7:e5:58:d3:e3:0f:1a:82:6c:b5:95:b7:21:16:af:03:38:33:
0c:3d:b2:66:0d:48:a9:bc:92:00:77:79:bc:15:20:96:a0:bf:
01:bb:00:f6:dd:df:a3:f1:03:8e:c4:db:f3:16:cf:ed:86:bb:
fb:20:ad:44:d1:76:30:4a:36:37:25:d5:3e:f0:cc:83:3e:db:
15:f3:8d:49:2b:73:1a:80:89:cb:e0:0d:16:91:98:61:77:dc:
33:73:35:00:82:34:d1:13:66:72:52:66:b0:f4:e2:f4:d2:d3:
84:b1:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:10:33 2026 by rpki-client