Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/B3ZkaLIo4wlScZVithXfJ7WBZh0.roa
File: B3ZkaLIo4wlScZVithXfJ7WBZh0.roa (raw, json)
Hash identifier: knbnHVoH+8hB05zSIWFIr8LSvfB+2nBJ8AWmnnfDRVc=
Subject key identifier: 07:76:64:68:B2:28:E3:09:52:71:95:62:B6:15:DF:27:B5:81:66:1D
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 01A1A8BF6720CA285583794AC2C8FB20A4EE
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/B3ZkaLIo4wlScZVithXfJ7WBZh0.roa
Signing time: Wed 04 Nov 2026 22:47:58 +0000
ROA not before: Wed 04 Nov 2026 22:47:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 2.59.132.0/22 maxlen: 24
45.145.40.0/22 maxlen: 24
45.157.232.0/22 maxlen: 24
62.192.153.0/24 maxlen: 24
89.124.251.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
104.167.24.0/24 maxlen: 24
153.56.228.0/24 maxlen: 24
153.56.229.0/24 maxlen: 24
153.56.230.0/24 maxlen: 24
153.56.231.0/24 maxlen: 24
159.200.230.0/24 maxlen: 24
159.200.231.0/24 maxlen: 24
176.96.136.0/22 maxlen: 24
185.94.29.0/24 maxlen: 24
185.219.84.0/24 maxlen: 24
185.229.207.0/24 maxlen: 24
185.254.96.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
193.148.253.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
194.107.126.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
2a0c:4ac0::/29 maxlen: 40
2a0c:4ac0:1300::/40 maxlen: 40
2a0d:1180::/29 maxlen: 29
2a0d:5940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:bf:67:20:ca:28:55:83:79:4a:c2:c8:fb:20:a4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Nov 4 22:47:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07766468b228e30952719562b615df27b581661d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:c1:1d:54:4c:e1:53:3a:0e:45:c6:d8:c4:
dd:6b:9f:41:bb:1f:49:c3:c6:1c:a9:9e:6f:e5:00:
c1:01:74:fc:ca:b7:8c:c2:95:a5:08:a8:c4:1e:55:
0d:db:03:2a:2a:bb:f4:06:f3:31:26:14:cf:66:8f:
b6:c5:65:df:ed:17:43:f0:1a:2b:8c:70:df:b0:6f:
ac:ba:9f:82:a2:63:d9:36:1f:da:f9:30:e6:21:d4:
31:96:6b:45:aa:f5:a6:b0:4d:62:58:f9:2e:6c:26:
54:29:0a:5d:d9:54:d9:f6:d6:d3:c8:50:55:2f:8a:
b8:51:4c:9d:64:86:49:ef:0a:df:32:95:40:cc:94:
91:c7:e9:79:d4:cd:83:30:f9:cb:ae:d0:8a:70:b1:
b9:fb:77:60:73:68:3e:ed:69:a7:15:72:c7:01:17:
71:d9:81:4c:53:05:b1:7a:49:85:ef:39:1e:40:fe:
24:a7:d9:a9:a0:d1:01:61:24:52:29:9e:49:e1:39:
7e:45:9a:1d:44:38:82:0d:9a:4a:a6:a0:9f:0d:5a:
cd:18:9e:ff:f7:a3:2b:49:ee:f5:87:09:23:63:15:
aa:bd:ae:7d:10:50:87:a1:cd:f5:51:d3:cb:c5:93:
07:ad:04:ad:2b:72:eb:22:a4:28:91:4c:ec:a6:33:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:64:68:B2:28:E3:09:52:71:95:62:B6:15:DF:27:B5:81:66:1D
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/B3ZkaLIo4wlScZVithXfJ7WBZh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.145.40.0/22
45.157.232.0/22
62.192.153.0/24
89.124.251.0/24
93.123.85.0/24
94.143.231.0/24
104.167.24.0/24
153.56.228.0/22
159.200.230.0/23
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.229.207.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
193.148.253.0/24
194.48.217.0/24
194.107.126.0/24
194.238.79.0/24
212.87.204.0/24
IPv6:
2a0c:4ac0::/29
2a0d:1180::/29
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
4e:38:ed:47:95:73:38:3b:1c:86:60:ce:5a:b0:1e:89:7e:35:
63:29:a1:b8:b4:70:51:19:db:04:49:8f:05:b0:de:92:97:a1:
b1:2d:75:69:ce:fa:01:e6:6f:4a:4f:51:e0:aa:6f:06:c8:e9:
2a:9f:a6:57:71:15:33:a1:03:ab:85:b1:07:a0:4d:5b:fc:0c:
ea:bf:e8:ec:96:6e:fe:f8:d1:3c:aa:ee:2b:24:39:b1:f6:8a:
40:d7:35:9b:6d:c6:5e:3e:47:d7:eb:70:22:4c:83:3c:e8:98:
54:3e:25:32:99:a0:b6:8b:bd:98:de:80:82:58:6f:98:0a:0b:
52:a4:76:70:71:08:50:0a:ac:65:47:31:27:df:2d:74:7c:00:
29:3f:56:f8:5f:99:48:c9:77:a0:e7:20:90:f1:87:ea:38:7e:
4a:8e:bf:1b:3f:cc:c3:07:4f:0b:a9:2a:32:66:3e:64:38:ff:
d7:59:86:62:9c:07:47:a3:48:90:d3:11:fc:ad:94:c5:d3:55:
b7:09:8e:ca:7c:3f:e9:55:ba:4a:cc:2e:7d:20:42:98:31:4c:
39:58:30:e1:14:1f:e8:ab:71:c2:d3:7a:14:0c:14:90:4f:c8:
7a:7a:e3:e9:c7:4d:2e:77:52:d1:a3:6d:31:c6:20:6b:19:93:
be:49:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:29:56 2026 by rpki-client