Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/jRge2qkWoaSsXp1Zw8j0h3Xqueg.roa
File: jRge2qkWoaSsXp1Zw8j0h3Xqueg.roa (raw, json)
Hash identifier: WWZ6cjlbPPONc3JCBCxXuaN0x8z9x2JVs4zwmdInc+0=
Subject key identifier: 8D:18:1E:DA:A9:16:A1:A4:AC:5E:9D:59:C3:C8:F4:87:75:EA:B9:E8
Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial: 019D96A665D1C286187BCD30EE8134F2B55C
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/jRge2qkWoaSsXp1Zw8j0h3Xqueg.roa
Signing time: Thu 16 Apr 2026 14:16:20 +0000
ROA not before: Thu 16 Apr 2026 14:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6461
IP address blocks: 5.133.172.0/22 maxlen: 24
46.231.8.0/21 maxlen: 24
85.95.32.0/19 maxlen: 24
91.214.228.0/22 maxlen: 24
91.229.222.0/23 maxlen: 24
146.255.104.0/21 maxlen: 24
151.249.64.0/20 maxlen: 24
164.138.80.0/21 maxlen: 24
185.16.224.0/22 maxlen: 24
185.44.248.0/22 maxlen: 24
185.47.216.0/22 maxlen: 24
185.56.40.0/22 maxlen: 24
185.113.0.0/22 maxlen: 24
185.168.144.0/22 maxlen: 24
209.35.128.0/20 maxlen: 24
2a0d:ea00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:a6:65:d1:c2:86:18:7b:cd:30:ee:81:34:f2:b5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Validity
Not Before: Apr 16 14:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d181edaa916a1a4ac5e9d59c3c8f48775eab9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:73:5c:32:8c:6f:a4:f2:32:e8:86:68:ce:
dc:dd:94:3a:68:e8:a9:51:25:f3:a8:79:88:f1:2e:
3e:77:92:99:c6:36:cf:10:34:69:72:a3:32:b9:fe:
1a:9f:59:d3:47:63:9f:94:ac:39:85:37:97:66:e3:
b6:0a:2b:e8:41:d2:67:c7:94:ce:b9:d6:61:90:27:
fa:04:e4:6a:f0:26:58:6b:5a:78:35:e5:55:a2:4b:
56:cf:56:3d:6d:73:f9:99:b4:56:5a:d4:40:5a:c9:
b0:ae:7d:72:be:e9:44:5e:bf:94:4a:3b:d2:7b:66:
5d:1c:df:51:87:23:52:98:ee:cd:fe:e7:96:5e:bb:
59:ff:ba:8f:7a:46:0e:2f:d9:9f:18:ec:18:3b:4b:
09:c4:c0:f0:85:5d:2f:52:87:76:4d:03:d9:b5:9d:
1c:75:8a:aa:22:6a:a0:8c:b4:59:66:97:46:95:28:
1f:c9:15:3f:27:e1:a0:fa:3e:71:29:af:dc:0f:42:
fc:28:ca:67:a4:89:74:f8:b5:43:b8:03:2d:c2:61:
a8:3a:56:62:1f:33:80:0b:b6:12:1f:61:0c:37:f6:
76:27:d2:19:c0:04:46:a9:34:36:e1:c7:8f:df:5d:
c2:d7:3f:9b:d6:5b:fe:9a:23:b6:44:87:bc:c6:fd:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:18:1E:DA:A9:16:A1:A4:AC:5E:9D:59:C3:C8:F4:87:75:EA:B9:E8
X509v3 Authority Key Identifier:
keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/jRge2qkWoaSsXp1Zw8j0h3Xqueg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.172.0/22
46.231.8.0/21
85.95.32.0/19
91.214.228.0/22
91.229.222.0/23
146.255.104.0/21
151.249.64.0/20
164.138.80.0/21
185.16.224.0/22
185.44.248.0/22
185.47.216.0/22
185.56.40.0/22
185.113.0.0/22
185.168.144.0/22
209.35.128.0/20
IPv6:
2a0d:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
57:db:b9:61:af:c1:d4:64:9f:a8:98:6f:a9:d8:f2:70:dd:ef:
cd:cb:93:ca:6a:06:8b:7e:52:c1:ee:a9:2d:c3:65:f6:7f:9a:
81:3f:35:20:b2:4b:30:df:31:bf:ba:1b:d5:55:10:5f:3e:5a:
62:58:71:ff:78:df:b1:80:d7:09:71:93:66:83:a0:bf:94:84:
20:93:cb:c9:47:89:03:0a:df:1c:b1:a1:10:43:55:32:8a:48:
8d:01:ac:b2:d2:76:52:5b:30:fe:30:ba:b0:91:90:c9:0c:4e:
be:22:37:74:95:23:f7:ae:3f:a9:80:b2:fb:3f:ab:f9:e8:d0:
26:44:7a:d1:29:27:7a:5a:39:e1:39:2c:7d:ed:f4:70:77:5f:
6a:ee:90:7a:53:86:05:db:49:b8:a9:7a:47:dc:27:25:99:f7:
ab:1a:40:6f:47:86:cc:6c:ab:83:52:80:0c:08:53:68:1c:20:
e8:8e:b1:40:f7:b3:f6:3a:ac:65:fe:4e:8c:81:e5:b7:99:f2:
ec:fa:28:ab:2d:b9:25:6d:a6:dd:da:a3:d7:63:e1:df:bd:32:
07:4a:5e:c1:2b:d1:73:27:b8:9f:dc:e4:2c:e2:fb:a7:09:65:
39:d7:c2:9d:96:bf:a4:62:a2:7f:dc:65:0f:77:86:c1:d4:3c:
10:23:45:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:35:47 2026 by rpki-client