Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iQmOx98Y-img_bnnw-wXhW3Q1qw.roa
File: iQmOx98Y-img_bnnw-wXhW3Q1qw.roa (raw, json)
Hash identifier: ypIp3hUS+C11T3hWwiOYP9thuSxim4HP3EsF+4n5mnI=
Subject key identifier: 89:09:8E:C7:DF:18:FA:29:A0:FD:B9:E7:C3:EC:17:85:6D:D0:D6:AC
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019EA68B093565D43A129B19646146613B9D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iQmOx98Y-img_bnnw-wXhW3Q1qw.roa
Signing time: Mon 08 Jun 2026 09:23:10 +0000
ROA not before: Mon 08 Jun 2026 09:23:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.84.216.0/24 maxlen: 24
45.85.90.0/24 maxlen: 24
45.91.23.0/24 maxlen: 24
45.92.230.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
45.130.143.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
45.157.98.0/24 maxlen: 24
45.157.99.0/24 maxlen: 24
89.251.2.0/24 maxlen: 24
93.185.160.0/24 maxlen: 24
93.185.161.0/24 maxlen: 24
136.144.26.0/24 maxlen: 24
136.144.27.0/24 maxlen: 24
136.144.40.0/24 maxlen: 24
185.227.33.0/24 maxlen: 24
194.5.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:8b:09:35:65:d4:3a:12:9b:19:64:61:46:61:3b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 8 09:23:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89098ec7df18fa29a0fdb9e7c3ec17856dd0d6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:89:27:9c:5b:a0:55:42:88:06:56:c8:2c:f6:
da:64:75:fb:25:77:f1:f0:ba:14:bd:e2:e3:ee:03:
6c:e6:dc:77:22:21:bf:cb:da:77:c2:4b:34:c5:7c:
28:1b:4c:3e:19:e5:64:7a:be:48:30:4e:ab:bb:9d:
da:58:77:ce:b4:66:1a:75:54:58:5c:2a:e9:b4:30:
2f:52:e3:7f:82:ec:df:48:a4:d3:e4:25:29:5d:43:
0d:5b:b2:ab:af:53:f8:8e:95:bb:d6:a5:2a:fc:72:
03:eb:29:0d:34:a2:a4:51:46:66:64:f9:8c:13:71:
3e:02:61:93:b6:0b:b8:2e:1e:63:6e:7b:c1:8b:62:
e7:f9:d9:b7:14:3b:c9:79:14:01:d0:37:66:2e:09:
b4:7a:bf:55:e4:e2:85:98:49:56:c9:bc:af:0f:b3:
e5:a4:0f:d9:b6:60:f1:13:81:c1:54:f7:34:34:f0:
03:e3:b2:66:16:50:3d:f8:16:5c:45:63:f8:ed:e0:
e1:75:aa:92:d1:21:83:50:54:cc:15:c0:f0:25:1b:
7b:af:a2:dd:32:60:6d:e4:11:0a:02:c1:bb:02:a6:
78:66:7f:a2:68:59:25:b5:d9:8e:b2:66:b1:9f:18:
e3:49:d2:c8:84:37:04:08:09:4b:e6:35:97:a3:ca:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:09:8E:C7:DF:18:FA:29:A0:FD:B9:E7:C3:EC:17:85:6D:D0:D6:AC
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iQmOx98Y-img_bnnw-wXhW3Q1qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.85.90.0/24
45.91.23.0/24
45.92.230.0/24
45.95.243.0/24
45.130.143.0/24
45.146.53.0/24
45.148.25.0/24
45.157.98.0/23
89.251.2.0/24
93.185.160.0/23
136.144.26.0/23
136.144.40.0/24
185.227.33.0/24
194.5.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d0:15:97:bd:a5:e0:a9:c7:d2:f2:80:90:5a:be:51:77:2e:
a1:60:00:77:ad:5c:34:d7:c9:22:9e:0f:75:dc:f6:a4:27:d0:
95:de:15:2e:98:be:bc:1d:72:ae:3c:67:9b:b2:c7:12:2c:fc:
e4:57:4e:2f:32:a2:92:42:e1:7a:a0:e4:10:0d:8f:9b:87:8e:
9b:4a:c5:b5:c3:82:fb:41:ad:5a:4c:37:94:14:cf:b1:4e:4f:
1b:22:3f:82:ae:c0:01:4b:92:06:bb:d4:e3:6e:cb:7c:5e:c4:
9f:e5:e5:8a:56:af:54:7b:04:54:69:55:45:88:4c:70:89:95:
61:a3:2c:b8:f5:be:00:60:2c:54:fc:d1:26:30:79:0e:7b:ad:
88:61:7d:99:45:58:dc:b2:c3:17:b2:e5:a7:1d:63:4c:e7:24:
6d:f6:f5:d9:3a:c5:2f:28:de:03:a3:be:6d:25:bb:44:9a:b8:
55:a7:bf:12:92:3e:43:93:78:4d:53:64:10:34:51:3e:d8:56:
c3:77:8c:d3:f3:cf:d1:93:f1:1d:18:08:37:7b:07:a3:95:86:
9a:0c:83:2b:ea:fa:82:4e:1e:58:8f:ef:49:c5:38:34:1f:e1:
01:1b:78:d9:96:33:e6:22:57:d3:f4:fc:a7:06:e6:72:84:33:
c0:e8:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:22 2026 by rpki-client