Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ffLQyjgE477dEGsu4uYLdv7uxHo.roa
File: ffLQyjgE477dEGsu4uYLdv7uxHo.roa (raw, json)
Hash identifier: a3pbwETpJWbgYnXRHFD7Fnt7mt78GuHEqaL4pHRYUD0=
Subject key identifier: 7D:F2:D0:CA:38:04:E3:BE:DD:10:6B:2E:E2:E6:0B:76:FE:EE:C4:7A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019EAAF3E86562382374F722E742374D13FA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ffLQyjgE477dEGsu4uYLdv7uxHo.roa
Signing time: Tue 09 Jun 2026 05:56:11 +0000
ROA not before: Tue 09 Jun 2026 05:56:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2.58.148.0/24 maxlen: 24
2.58.149.0/24 maxlen: 24
2.58.150.0/24 maxlen: 24
2.58.151.0/24 maxlen: 24
37.46.149.0/24 maxlen: 24
45.91.149.0/24 maxlen: 24
45.129.132.0/24 maxlen: 24
45.129.133.0/24 maxlen: 24
45.135.184.0/24 maxlen: 24
45.135.187.0/24 maxlen: 24
45.143.53.0/24 maxlen: 24
45.145.44.0/24 maxlen: 24
45.145.45.0/24 maxlen: 24
45.145.47.0/24 maxlen: 24
62.197.144.0/24 maxlen: 24
62.197.147.0/24 maxlen: 24
62.197.148.0/24 maxlen: 24
62.197.150.0/24 maxlen: 24
62.197.151.0/24 maxlen: 24
62.197.152.0/24 maxlen: 24
62.197.159.0/24 maxlen: 24
84.247.25.0/24 maxlen: 24
84.247.26.0/24 maxlen: 24
87.101.3.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
89.36.22.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
89.43.199.0/24 maxlen: 24
89.46.92.0/24 maxlen: 24
92.62.121.0/24 maxlen: 24
93.115.254.0/24 maxlen: 24
93.115.255.0/24 maxlen: 24
94.103.249.0/24 maxlen: 24
94.103.250.0/24 maxlen: 24
185.121.121.0/24 maxlen: 24
185.121.122.0/24 maxlen: 24
185.121.123.0/24 maxlen: 24
185.150.0.0/24 maxlen: 24
185.184.134.0/24 maxlen: 24
185.205.190.0/24 maxlen: 24
185.239.241.0/24 maxlen: 24
185.239.243.0/24 maxlen: 24
185.244.137.0/24 maxlen: 24
185.245.5.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.240.68.0/24 maxlen: 24
188.240.74.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
193.218.32.0/24 maxlen: 24
193.239.164.0/24 maxlen: 24
193.239.165.0/24 maxlen: 24
194.169.169.0/24 maxlen: 24
212.119.34.0/24 maxlen: 24
220.158.198.0/24 maxlen: 24
2a11:140::/29 maxlen: 32
2a11:d40::/29 maxlen: 32
2a12:80::/29 maxlen: 32
2a12:680::/29 maxlen: 32
2a12:780::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:f3:e8:65:62:38:23:74:f7:22:e7:42:37:4d:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 9 05:56:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7df2d0ca3804e3bedd106b2ee2e60b76feeec47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:3e:aa:cc:1a:d2:1f:a2:19:5c:da:75:d0:
f5:b1:8e:98:35:55:37:3e:0d:9a:8a:f2:6b:34:30:
02:44:23:a1:be:45:f6:99:98:11:92:d9:64:d5:70:
27:8d:d0:77:e9:72:72:f8:7b:b9:2c:28:41:ed:0f:
e0:4b:d3:ca:13:35:a0:3d:d9:d6:b2:86:1f:e4:ed:
a5:d0:84:6a:73:2d:47:7c:10:50:d0:36:ae:5a:1f:
3b:b4:24:27:1b:e5:77:82:db:a8:8f:cc:9a:1a:48:
b1:57:ab:0f:ec:f2:72:17:c3:23:6f:35:9d:30:ab:
d9:7f:04:47:f4:d0:3a:bc:97:93:2b:ce:95:ef:d6:
ab:57:80:d2:e4:54:0c:37:66:ae:4b:8b:6f:71:e3:
eb:c0:d3:b7:f0:92:4f:2e:a7:eb:db:69:c6:38:d9:
ee:fc:b6:76:66:2d:e8:f0:e8:38:ff:a3:d3:d3:db:
9e:34:ac:4e:cf:ab:10:c7:3a:c4:ef:0d:3f:72:6a:
76:81:de:e3:e3:9c:17:ee:80:52:b1:83:fa:1b:55:
62:fe:23:5a:f8:26:12:e0:ca:57:d6:56:03:45:87:
c7:a8:03:ab:62:49:5c:8f:22:6a:9c:ee:79:8c:bd:
22:3d:d0:5e:61:31:f7:e4:4f:41:97:3a:84:f6:97:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F2:D0:CA:38:04:E3:BE:DD:10:6B:2E:E2:E6:0B:76:FE:EE:C4:7A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ffLQyjgE477dEGsu4uYLdv7uxHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.148.0/22
37.46.149.0/24
45.91.149.0/24
45.129.132.0/23
45.135.184.0/24
45.135.187.0/24
45.143.53.0/24
45.145.44.0/23
45.145.47.0/24
62.197.144.0/24
62.197.147.0-62.197.148.255
62.197.150.0-62.197.152.255
62.197.159.0/24
84.247.25.0-84.247.26.255
87.101.3.0/24
89.33.84.0/24
89.36.22.0/24
89.37.62.0/23
89.43.199.0/24
89.46.92.0/24
92.62.121.0/24
93.115.254.0/23
94.103.249.0-94.103.250.255
185.121.121.0-185.121.123.255
185.150.0.0/24
185.184.134.0/24
185.205.190.0/24
185.239.241.0/24
185.239.243.0/24
185.244.137.0/24
185.245.5.0/24
188.212.132.0/24
188.240.68.0/24
188.240.74.0/24
193.19.108.0/24
193.218.32.0/24
193.239.164.0/23
194.169.169.0/24
212.119.34.0/24
220.158.198.0/24
IPv6:
2a11:140::/29
2a11:d40::/29
2a12:80::/29
2a12:680::/29
2a12:780::/29
Signature Algorithm: sha256WithRSAEncryption
6c:d9:42:28:70:fc:8e:4f:f6:6d:c4:62:2c:4a:51:ab:26:97:
b1:67:4b:a5:6c:1d:e3:42:58:cc:f0:1f:c3:4f:d1:ef:86:d2:
06:fb:ec:3f:c4:c5:d9:b4:33:62:0c:25:82:83:d5:77:78:a9:
e3:0a:6f:af:7b:bd:4b:3a:09:d9:3a:eb:71:56:9a:05:80:b8:
78:bc:b6:ff:7b:d5:07:b7:e9:27:c5:c3:bc:2a:e5:09:01:a8:
44:88:62:09:cb:f3:58:bb:e9:a1:4a:ef:b8:c7:b5:25:f2:68:
89:64:25:bf:cc:60:d4:c0:91:97:53:6c:9d:56:0e:d8:b2:bc:
b2:b0:38:89:00:b5:35:0c:8f:c4:d4:bd:cc:13:31:0f:bb:70:
49:6b:a8:58:61:1e:b1:8f:3b:a3:91:c4:b0:d1:c5:39:2f:29:
73:71:f5:e1:39:9a:98:98:9b:d3:fa:37:40:84:1d:a0:0d:bc:
d7:e3:2f:95:6d:6d:7a:e6:35:7d:8d:1a:e8:bd:40:52:23:50:
67:aa:8c:cb:92:a7:c3:d2:53:4d:a8:0d:83:3b:a8:00:9d:ca:
41:7f:6b:94:ea:c3:5f:93:6f:10:cb:84:41:41:d8:85:3a:8a:
30:93:4a:89:d3:5a:41:17:b6:23:46:bc:e2:28:8a:3c:f8:72:
48:34:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:39 2026 by rpki-client