Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/i2dJsmy2hT458Smig_BPsb5ebGI.roa
File: i2dJsmy2hT458Smig_BPsb5ebGI.roa (raw, json)
Hash identifier: 0voBvHzLpuWesn2jG16CnFZiBWLXb3G/1wpIjnXI0Lc=
Subject key identifier: 8B:67:49:B2:6C:B6:85:3E:39:F1:29:A2:83:F0:4F:B1:BE:5E:6C:62
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 01A19EADAB35D7813738EB8D16E3ED0E4DD7
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/i2dJsmy2hT458Smig_BPsb5ebGI.roa
Signing time: Mon 02 Nov 2026 23:52:24 +0000
ROA not before: Mon 02 Nov 2026 23:52:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.11.232.0/24 maxlen: 24
45.11.234.0/23 maxlen: 23
45.91.188.0/22 maxlen: 22
45.147.61.0/24 maxlen: 24
45.147.62.0/24 maxlen: 24
45.153.236.0/24 maxlen: 24
45.153.238.0/24 maxlen: 24
45.153.239.0/24 maxlen: 24
77.83.46.0/23 maxlen: 23
77.83.68.0/24 maxlen: 24
77.83.69.0/24 maxlen: 24
77.83.70.0/24 maxlen: 24
77.83.71.0/24 maxlen: 24
84.252.84.0/23 maxlen: 23
84.252.86.0/24 maxlen: 24
84.252.87.0/24 maxlen: 24
95.214.100.0/22 maxlen: 22
171.22.188.0/24 maxlen: 24
171.22.189.0/24 maxlen: 24
171.22.190.0/24 maxlen: 24
185.15.176.0/22 maxlen: 22
185.164.66.0/23 maxlen: 23
193.36.124.0/22 maxlen: 22
194.110.88.0/22 maxlen: 22
212.81.41.0/24 maxlen: 24
212.81.42.0/24 maxlen: 24
212.81.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:ad:ab:35:d7:81:37:38:eb:8d:16:e3:ed:0e:4d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Nov 2 23:52:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b6749b26cb6853e39f129a283f04fb1be5e6c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:07:75:87:33:9e:13:35:d1:b4:d7:8b:99:
74:e5:58:97:b0:46:c1:3c:e7:6f:67:09:28:df:05:
05:79:6d:14:f6:42:7f:6d:78:24:fc:8f:50:27:33:
49:2e:e3:72:58:8e:0f:f2:f5:27:b4:e8:29:30:2c:
ba:e2:b3:4b:a6:00:8c:7a:8f:48:7b:8a:a8:9f:d3:
71:df:9c:6f:d3:17:de:5d:73:71:85:fe:2b:e6:54:
be:a0:49:84:d1:74:7a:96:b4:c9:23:35:66:9e:2e:
ea:f1:cf:e5:68:a8:ff:c7:b4:8f:84:99:95:83:9f:
23:98:dd:ee:c8:11:ac:3c:f8:01:fe:24:57:03:6d:
89:df:c4:27:ff:97:37:be:1a:fd:ec:ba:60:82:58:
1f:fe:e0:78:4c:72:05:cc:77:a5:82:4e:c4:8a:89:
2d:fb:1d:70:40:ab:0d:c9:b3:14:b2:ab:35:90:90:
d2:a0:d1:f0:e1:20:65:d7:ce:97:60:9a:bd:b8:fc:
94:c0:b3:e5:62:92:c7:52:80:29:ca:2e:a5:e6:17:
f8:47:c7:62:94:17:d4:ed:cd:06:00:7e:b2:ab:72:
e0:2b:24:a2:ba:58:0b:1d:88:a9:ab:c5:33:da:5a:
34:14:54:8b:64:49:d4:41:fa:85:61:98:37:64:c7:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:67:49:B2:6C:B6:85:3E:39:F1:29:A2:83:F0:4F:B1:BE:5E:6C:62
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/i2dJsmy2hT458Smig_BPsb5ebGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.232.0/24
45.11.234.0/23
45.91.188.0/22
45.147.61.0-45.147.62.255
45.153.236.0/24
45.153.238.0/23
77.83.46.0/23
77.83.68.0/22
84.252.84.0/22
95.214.100.0/22
171.22.188.0-171.22.190.255
185.15.176.0/22
185.164.66.0/23
193.36.124.0/22
194.110.88.0/22
212.81.41.0-212.81.43.255
Signature Algorithm: sha256WithRSAEncryption
1d:ac:5d:5e:fb:71:e1:ea:7e:71:4c:22:8e:60:e1:69:6c:03:
a9:c1:75:17:3d:ef:da:65:79:27:d4:41:ad:ad:18:b7:c8:d6:
73:fa:f0:76:4d:d6:4f:4e:a6:fe:4c:88:1d:53:32:b3:a2:50:
97:a2:a8:ac:c4:48:9e:c9:35:e5:8e:a7:f6:50:39:8c:87:9a:
43:40:25:6f:9f:17:f2:86:4f:dc:ab:95:4b:61:6c:87:60:c4:
50:c4:f4:b2:39:cb:6c:f3:5c:b4:eb:20:10:b7:7f:9a:73:ce:
99:66:f0:94:aa:35:17:cd:58:2c:68:e3:d8:de:0c:e9:89:9f:
11:0e:0b:48:6e:6c:cf:86:db:27:a0:1f:4f:49:91:44:85:a5:
81:04:1f:01:26:96:59:15:63:dc:4d:11:b3:e7:cc:b1:f7:d6:
77:de:26:66:e4:4f:d7:5f:e4:69:d2:35:3e:76:45:da:1d:34:
f9:6e:02:11:6f:29:6e:7f:4b:15:e7:30:6d:ab:e7:8f:6c:ae:
23:e3:80:7e:7e:2c:c8:f0:19:f6:f1:20:72:ff:b3:c6:05:86:
e8:4f:91:c6:97:f0:63:d4:91:c0:d2:65:9c:db:19:f2:5a:b1:
6a:2c:aa:e4:e1:d6:60:ed:f2:5a:07:16:e3:6c:ac:9a:e1:6a:
6d:fd:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:35:36 2026 by rpki-client