Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-G4AiDnk4Oq4eFGhMzNCi8OGYH8.roa
File: 1-G4AiDnk4Oq4eFGhMzNCi8OGYH8.roa (raw, json)
Hash identifier: FiO8aMzJR1415snPWXCFt/okYlGwTNUjBFCvP71kB08=
Subject key identifier: F8:6E:00:88:39:E4:E0:EA:B8:78:51:A1:33:33:42:8B:C3:86:60:7F
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019EBC8066BEF35C0A840F89A5A7C9AD184F
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-G4AiDnk4Oq4eFGhMzNCi8OGYH8.roa
Signing time: Fri 12 Jun 2026 15:43:11 +0000
ROA not before: Fri 12 Jun 2026 15:43:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
86.54.213.0/24 maxlen: 24
185.248.134.0/24 maxlen: 24
185.248.134.0/26 maxlen: 26
185.248.134.64/26 maxlen: 26
185.248.134.128/26 maxlen: 26
185.248.134.192/26 maxlen: 26
194.46.57.0/24 maxlen: 24
2a12:bec0:7d::/48 maxlen: 48
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:e40::/44 maxlen: 44
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec0:7004::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec0:7007::/48 maxlen: 48
2a12:bec0:7008::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec1::/32 maxlen: 48
2a12:bec1:2::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec2::/48 maxlen: 48
2a12:bec2:b00b::/48 maxlen: 48
2a12:bec3:b00b::/48 maxlen: 48
2a12:bec4:20::/44 maxlen: 48
2a12:bec4:100::/44 maxlen: 44
2a12:bec4:1120::/44 maxlen: 44
2a12:bec4:1260::/44 maxlen: 44
2a12:bec4:1430::/44 maxlen: 44
2a12:bec4:1490::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:80:66:be:f3:5c:0a:84:0f:89:a5:a7:c9:ad:18:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 12 15:43:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f86e008839e4e0eab87851a13333428bc386607f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:dc:1e:be:e0:e9:d2:3a:bc:cd:22:35:4e:
62:62:93:62:f7:e2:ce:ad:b5:0f:ac:43:0b:c6:27:
ef:ef:6d:07:15:db:bb:27:e4:e7:2f:dd:bc:40:8c:
29:02:6c:66:dc:82:2c:80:d1:23:fb:2a:45:16:6c:
61:c3:0c:aa:d5:54:00:ff:cb:40:79:d3:77:6f:d8:
29:5f:c1:0d:57:75:ca:62:53:1a:79:fe:24:18:73:
80:26:3a:13:d8:b4:55:70:54:17:2a:41:aa:55:f6:
cc:31:fd:92:ec:5b:36:7e:5c:95:6a:d3:f2:f4:87:
6e:2e:17:48:a5:66:27:8e:8b:de:84:a8:d6:78:5a:
62:84:c7:95:f0:63:ea:49:97:23:12:6d:36:c6:84:
11:cc:1b:ce:96:87:45:b7:99:32:b8:5a:63:24:0b:
c7:63:f4:82:0d:82:b4:58:f3:76:8a:c0:ef:85:9f:
29:61:7e:9c:f1:dd:aa:c7:19:1f:9a:64:1a:4a:28:
e8:d3:da:ba:28:b6:5d:ff:34:58:ea:91:6c:f2:01:
44:3d:36:f8:4e:49:43:fe:b3:1e:1e:22:75:98:12:
15:43:34:57:02:b9:d9:90:ac:eb:a7:5f:b0:78:4f:
8b:33:5d:ef:da:27:b9:22:93:c7:d8:87:79:37:ea:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:00:88:39:E4:E0:EA:B8:78:51:A1:33:33:42:8B:C3:86:60:7F
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-G4AiDnk4Oq4eFGhMzNCi8OGYH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
86.54.213.0/24
185.248.134.0/24
194.46.57.0/24
IPv6:
2a12:bec0:7d::/48
2a12:bec0:d0::/44
2a12:bec0:e40::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::-2a12:bec0:7008:ffff:ffff:ffff:ffff:ffff
2a12:bec0:b00b::/48
2a12:bec1::-2a12:bec2:ffff:ffff:ffff:ffff:ffff:ffff
2a12:bec3:b00b::/48
2a12:bec4:20::/44
2a12:bec4:100::/44
2a12:bec4:1120::/44
2a12:bec4:1260::/44
2a12:bec4:1430::/44
2a12:bec4:1490::/44
Signature Algorithm: sha256WithRSAEncryption
84:c3:70:74:1a:03:fc:68:6e:27:2f:bf:be:c9:3c:7c:8e:72:
fe:78:bf:a0:b6:ad:cb:04:44:00:52:01:09:38:e3:5f:87:ce:
f3:ec:62:7b:6a:e4:61:2b:e3:45:19:49:dd:ba:ed:a1:0b:b2:
63:51:fb:c1:3b:6f:7c:3b:08:6a:89:47:ab:e2:f7:e2:80:82:
dc:0a:8c:4b:33:02:b9:41:d0:51:8d:34:eb:8a:45:6a:2b:c7:
15:f4:64:7f:e5:b8:cd:a2:3f:f2:f1:ce:d6:ba:54:2f:87:3b:
f9:1e:53:13:e1:67:c0:19:97:11:13:23:cd:46:a4:9d:95:87:
e6:46:c6:e3:de:75:73:00:ec:e6:e8:18:21:cf:0a:d6:03:90:
f7:45:4d:96:77:39:d7:97:8e:ec:a7:45:bf:13:9e:62:c9:b8:
a7:7c:78:5e:01:99:7e:94:90:83:57:d2:b5:7e:78:f1:14:1e:
3c:43:87:2c:97:0d:c8:3a:be:41:1a:84:cb:7d:93:27:81:11:
a3:e4:05:67:4a:88:9c:5c:d5:33:8b:8d:a5:17:2e:c1:62:3f:
6f:ac:0f:54:18:82:4c:71:dc:f1:a5:3d:43:96:fe:de:9a:9c:
70:00:20:b5:dc:84:51:df:24:bf:0c:0b:71:61:83:ab:48:98:
3e:d2:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:29:12 2026 by rpki-client