Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/R2U_cQMFZM4-GXgQbDyShKrCAGA.roa
File: R2U_cQMFZM4-GXgQbDyShKrCAGA.roa (raw, json)
Hash identifier: Ag9S/vdQiIdyQgvSbtnRDnW1NQNHuWeD+J3+pdenpE8=
Subject key identifier: 47:65:3F:71:03:05:64:CE:3E:19:78:10:6C:3C:92:84:AA:C2:00:60
Certificate issuer: /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial: 019B79EBC0DF4ACED576D1BADB1BA851ED22
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/R2U_cQMFZM4-GXgQbDyShKrCAGA.roa
Signing time: Thu 01 Jan 2026 14:17:32 +0000
ROA not before: Thu 01 Jan 2026 14:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201978
IP address blocks: 185.1.132.0/24 maxlen: 24
185.50.68.0/24 maxlen: 24
185.50.69.0/24 maxlen: 24
185.50.70.0/24 maxlen: 24
185.50.71.0/24 maxlen: 24
185.114.20.0/24 maxlen: 24
185.114.21.0/24 maxlen: 24
185.114.22.0/24 maxlen: 24
185.114.23.0/24 maxlen: 24
185.146.88.0/24 maxlen: 24
185.146.89.0/24 maxlen: 24
185.146.90.0/24 maxlen: 24
185.146.91.0/24 maxlen: 24
185.169.52.0/24 maxlen: 24
185.169.53.0/24 maxlen: 24
185.169.54.0/24 maxlen: 24
185.169.55.0/24 maxlen: 24
194.61.116.0/24 maxlen: 24
194.61.117.0/24 maxlen: 24
194.61.118.0/24 maxlen: 24
194.61.119.0/24 maxlen: 24
2a01:a420::/29 maxlen: 29
2a0a:3900::/29 maxlen: 29
2a0f:d500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:c0:df:4a:ce:d5:76:d1:ba:db:1b:a8:51:ed:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Validity
Not Before: Jan 1 14:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47653f71030564ce3e1978106c3c9284aac20060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:58:5e:99:18:2a:62:d1:96:f1:78:82:7c:
3a:d9:23:9a:ec:f9:a4:0b:f4:0c:95:49:89:ad:4d:
e4:b1:ff:81:8c:64:d8:da:34:7d:f5:59:cb:e4:ce:
1c:63:48:56:85:fa:b5:0e:8b:d5:13:5f:1b:62:fe:
c4:5e:e2:c9:72:aa:3b:6c:1d:10:7f:c1:d2:ba:cc:
cf:1a:2c:e9:95:31:c8:35:e3:87:5f:be:24:c5:3b:
26:42:7b:88:b7:ca:c6:f5:bb:96:79:1c:ec:f4:76:
d8:6a:d4:7c:22:85:f4:10:1f:20:d9:7b:7e:75:9e:
1f:c3:05:0b:d8:c3:df:de:4e:45:06:fa:95:02:65:
fc:da:c5:80:73:16:03:f1:dd:b6:64:d9:3b:d3:6d:
77:e8:d4:95:97:59:3f:14:d9:ce:d6:fc:ba:09:13:
0c:d3:27:4d:14:4a:1c:40:d8:d3:91:55:b4:2f:51:
f5:0b:d2:6a:f0:a3:65:be:42:5c:2f:76:c9:c7:05:
55:09:f0:6c:43:0b:02:77:5d:33:43:f9:f4:3b:a4:
c4:4c:f0:bb:04:4b:c1:e8:cd:6e:e4:3d:02:ab:92:
c7:98:3f:c7:d8:f3:d9:df:ab:f2:de:5d:da:37:ae:
f6:95:b4:f5:c7:60:57:3b:f4:a8:ad:f5:4f:fa:ec:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:65:3F:71:03:05:64:CE:3E:19:78:10:6C:3C:92:84:AA:C2:00:60
X509v3 Authority Key Identifier:
keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/R2U_cQMFZM4-GXgQbDyShKrCAGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.132.0/24
185.50.68.0/22
185.114.20.0/22
185.146.88.0/22
185.169.52.0/22
194.61.116.0/22
IPv6:
2a01:a420::/29
2a0a:3900::/29
2a0f:d500::/29
Signature Algorithm: sha256WithRSAEncryption
4d:6c:40:d0:66:00:a4:79:42:68:53:57:ec:25:a7:a1:d3:15:
ed:45:c2:03:89:ae:70:86:0c:56:da:cd:c2:42:6a:36:19:bd:
de:3e:66:1e:04:de:9b:93:52:0e:37:42:a9:6c:f0:60:00:20:
1e:62:ba:44:d8:04:e8:b2:91:9f:20:d6:18:40:e6:01:a3:b9:
18:85:13:88:45:f2:ee:82:38:97:47:75:1a:49:2e:c3:31:b2:
57:fc:37:c5:5d:3a:81:e8:07:8e:e2:dc:70:c5:a5:79:30:cb:
bd:81:67:cf:dd:bc:0c:d3:f2:5b:52:df:74:14:e7:89:2f:4c:
73:d6:07:ef:c1:3e:72:39:1e:69:44:42:b0:93:79:dd:0e:22:
ce:98:52:29:ed:3a:7d:b6:33:a0:1b:0e:16:d6:4f:96:b4:3b:
97:b0:7a:c9:b4:66:35:d2:e3:e6:fc:66:ae:b3:e0:d1:d6:37:
fd:8a:60:c9:09:83:de:c8:58:9c:33:19:4d:1c:70:04:5a:06:
83:46:2f:c0:ea:a3:c9:b7:a3:bb:af:15:a8:dd:f5:fb:23:f6:
d0:5a:13:8b:11:1c:f8:ef:7e:85:23:a7:38:9c:17:7d:71:1a:
1f:ce:8c:06:35:53:74:ba:2b:b6:f3:7b:74:2b:23:88:95:9a:
35:06:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:01 2026 by rpki-client