Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sPDFEnms8keOVj1Phim3Y1jL048.roa
File: sPDFEnms8keOVj1Phim3Y1jL048.roa (raw, json)
Hash identifier: p1xoNDvee96fuZGx93jgvOxHb5YLNTBBydVJ3AhufZU=
Subject key identifier: B0:F0:C5:12:79:AC:F2:47:8E:56:3D:4F:86:29:B7:63:58:CB:D3:8F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019E93EBE4CB47BCDF85EB68901287137A8C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sPDFEnms8keOVj1Phim3Y1jL048.roa
Signing time: Thu 04 Jun 2026 18:36:10 +0000
ROA not before: Thu 04 Jun 2026 18:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2.56.117.0/24 maxlen: 24
5.180.23.0/24 maxlen: 24
45.9.5.0/24 maxlen: 24
45.9.17.0/24 maxlen: 24
45.66.164.0/24 maxlen: 24
45.82.253.0/24 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.170.0/24 maxlen: 24
45.88.171.0/24 maxlen: 24
45.88.178.0/24 maxlen: 24
45.88.179.0/24 maxlen: 24
45.88.181.0/24 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.98.0/24 maxlen: 24
45.89.197.0/24 maxlen: 24
45.89.198.0/24 maxlen: 24
45.89.199.0/24 maxlen: 24
45.136.115.0/24 maxlen: 24
45.149.112.0/24 maxlen: 24
92.118.229.0/24 maxlen: 24
95.214.248.0/24 maxlen: 24
139.28.234.0/23 maxlen: 24
141.98.167.0/24 maxlen: 24
171.22.110.0/23 maxlen: 24
185.161.70.0/24 maxlen: 24
185.166.152.0/24 maxlen: 24
194.36.38.0/24 maxlen: 24
213.59.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:eb:e4:cb:47:bc:df:85:eb:68:90:12:87:13:7a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 4 18:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0f0c51279acf2478e563d4f8629b76358cbd38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1a:73:79:d2:4c:db:60:0d:4c:03:e4:41:fa:
0a:36:19:81:f4:a9:ee:3a:fb:3f:58:2f:00:45:d6:
24:b0:b1:c0:6d:4b:ae:a0:0b:cc:b4:cd:55:51:e8:
a9:92:de:57:ff:e7:0b:70:fa:1b:23:fd:4f:51:45:
8e:e7:0d:41:1e:48:69:91:2d:84:ca:1c:0f:65:1e:
89:96:cd:be:0c:86:bf:a6:e9:a3:26:e9:06:21:b9:
18:b3:25:cf:8c:b3:da:1e:f4:32:1e:bd:aa:c7:5d:
6d:0f:93:e5:59:17:00:ce:6d:a2:69:3c:b3:17:4f:
56:5f:9d:33:dd:ee:31:56:89:d1:82:48:19:5b:f4:
ec:14:3f:4b:b3:77:d6:c0:c0:63:31:d6:c7:bd:18:
68:46:dd:cf:ac:b0:12:c3:a1:7a:45:cd:04:31:b1:
c1:3d:40:62:29:70:00:bb:d8:78:88:91:3d:b9:e0:
c3:40:87:5d:6a:3b:6f:24:98:20:56:5a:fb:8b:6b:
1a:d9:f1:73:49:b7:57:8b:ca:5a:02:6c:cf:c4:5e:
21:75:11:02:c1:89:15:2a:3a:17:c2:12:75:5f:54:
54:a0:35:2e:92:5a:62:81:a7:f3:86:37:d3:f5:33:
4a:77:08:b1:fd:b5:a6:75:89:ff:ba:7e:3a:aa:39:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F0:C5:12:79:AC:F2:47:8E:56:3D:4F:86:29:B7:63:58:CB:D3:8F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sPDFEnms8keOVj1Phim3Y1jL048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.117.0/24
5.180.23.0/24
45.9.5.0/24
45.9.17.0/24
45.66.164.0/24
45.82.253.0/24
45.88.160.0/22
45.88.170.0/23
45.88.178.0/23
45.88.181.0/24
45.89.96.0/24
45.89.98.0/24
45.89.197.0-45.89.199.255
45.136.115.0/24
45.149.112.0/24
92.118.229.0/24
95.214.248.0/24
139.28.234.0/23
141.98.167.0/24
171.22.110.0/23
185.161.70.0/24
185.166.152.0/24
194.36.38.0/24
213.59.112.0/24
Signature Algorithm: sha256WithRSAEncryption
95:76:0f:9d:68:d4:6b:dd:fc:e7:ec:00:01:74:65:1c:3d:e5:
ba:9a:f8:a7:b2:a9:2f:41:3e:34:c8:5f:e8:17:8a:d9:0b:06:
bb:3b:df:3d:dc:b6:de:51:0d:4c:55:7c:f9:cd:aa:33:40:36:
24:d3:b2:c6:e9:ee:ef:15:86:7c:de:c5:37:29:c9:75:a9:ac:
4a:64:98:05:c2:42:02:7a:06:1f:81:aa:90:9f:df:08:68:e3:
60:48:6d:d7:55:7e:aa:2d:29:4a:62:ae:61:fd:87:29:48:95:
fc:52:2f:9a:de:bb:a8:a8:52:7c:0a:8c:89:26:89:5e:63:26:
5c:87:3b:0c:8e:f0:ac:0d:fe:62:d5:2d:e4:e5:cb:b1:6c:9c:
b2:0c:fa:64:82:d3:ca:d2:41:ee:e7:ab:f1:bc:63:a0:ce:26:
3b:24:5f:5f:2a:6b:33:8f:f7:db:33:f9:87:bc:09:d6:f9:7a:
f4:30:98:af:57:46:53:e8:1c:48:d4:1d:8b:3c:c4:c7:9b:39:
01:72:e7:54:7b:17:3c:49:9f:4b:4b:cd:38:56:50:82:33:82:
72:12:26:48:cd:76:32:d4:67:7c:cd:6a:bd:25:e9:60:5a:5b:
6e:e9:34:74:22:f6:a8:1d:4c:85:48:0e:f8:4a:65:b6:b0:11:
b0:39:fe:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:04 2026 by rpki-client