Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/E__INQQ-zkBv6VLv4wIa1FrgUx4.roa
File: E__INQQ-zkBv6VLv4wIa1FrgUx4.roa (raw, json)
Hash identifier: GxUaz5GBcWsV/ZQIaDh55TabdT+Uje/zHLoWucvFkZM=
Subject key identifier: 13:FF:C8:35:04:3E:CE:40:6F:E9:52:EF:E3:02:1A:D4:5A:E0:53:1E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019C63BCA6731DC39E5954823C57F2C439CD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/E__INQQ-zkBv6VLv4wIa1FrgUx4.roa
Signing time: Sun 15 Feb 2026 23:57:13 +0000
ROA not before: Sun 15 Feb 2026 23:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.144.101.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
185.227.240.0/24 maxlen: 32
185.227.241.0/24 maxlen: 32
185.227.242.0/24 maxlen: 32
185.227.243.0/24 maxlen: 32
193.201.209.0/24 maxlen: 32
193.201.210.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.64.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
194.124.67.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:63:bc:a6:73:1d:c3:9e:59:54:82:3c:57:f2:c4:39:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 15 23:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13ffc835043ece406fe952efe3021ad45ae0531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:93:60:ac:5d:c4:fb:f8:d0:5d:1a:31:16:
fc:3f:fc:aa:04:38:23:35:d9:42:90:21:92:96:af:
d3:23:69:4c:1c:d4:75:b8:2d:7b:a7:57:03:52:66:
4e:46:9d:69:f9:28:51:b5:c3:34:da:87:2c:a2:70:
93:7b:c7:df:42:4f:42:73:46:4c:8a:a0:f4:e4:96:
59:0f:46:1e:b3:c8:08:08:8a:f0:52:01:86:9b:4f:
f6:bb:ff:28:bf:d9:79:28:b3:cb:7c:a4:2f:62:76:
6f:19:25:6b:9d:d2:92:ba:27:e8:90:29:85:ac:63:
d1:49:a6:13:97:2c:a3:fa:61:70:b9:96:60:16:cf:
a2:d8:f5:8e:68:fa:91:0c:4e:a9:33:95:22:5d:e3:
dd:78:98:78:93:d3:ea:84:47:be:31:b1:c7:44:f5:
a3:2e:a0:a6:87:33:5c:cc:74:ab:fa:23:30:fc:d1:
3d:0f:b8:50:cb:17:70:b2:7a:76:96:63:67:7c:92:
23:44:39:03:a5:5d:29:ee:df:a3:fc:78:c7:c0:7f:
bd:0d:70:9a:f1:98:a6:1a:06:86:3c:44:a1:7b:b3:
13:4d:60:19:29:7f:f1:8d:83:97:c2:cb:8b:7a:05:
42:f2:b1:d2:c6:f5:8a:53:fb:08:c9:bd:c4:c2:a0:
c6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FF:C8:35:04:3E:CE:40:6F:E9:52:EF:E3:02:1A:D4:5A:E0:53:1E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/E__INQQ-zkBv6VLv4wIa1FrgUx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
45.136.2.0/23
128.0.119.0/24
185.117.21.0/24
185.117.23.0/24
185.144.101.0/24
185.211.48.0-185.211.50.255
185.227.240.0/22
193.201.209.0-193.201.211.255
194.36.102.0/23
194.124.64.0/24
194.124.66.0/23
195.85.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:94:9d:d1:eb:40:dc:cf:57:75:49:dd:5d:67:9f:dd:c8:c3:
d3:61:29:a1:ac:fd:4f:2e:3c:ff:5b:fe:0d:70:73:87:c8:bd:
63:0d:8f:9e:3e:3a:51:91:ad:d7:02:df:ed:fd:16:a1:f5:62:
58:bc:05:03:1a:bf:67:5e:6a:38:64:f2:70:c4:08:70:73:04:
2e:86:ac:3f:4b:25:3b:98:71:b1:d6:cb:40:22:5b:b6:92:66:
42:a0:87:24:ab:3b:ad:fd:92:d3:ec:46:14:45:e9:be:66:d2:
ac:1d:82:69:ee:9c:3d:df:94:6a:2b:a6:09:d9:1b:87:54:a2:
72:45:65:ea:fb:fe:03:b6:7d:6c:d2:db:72:7c:67:35:8f:53:
a3:13:7a:86:e1:ab:4a:ad:be:e9:0c:f1:92:0f:99:7a:55:c2:
a7:66:08:09:56:96:d8:45:8d:ed:42:00:05:09:75:f7:f6:ed:
2b:89:c6:f0:3c:dd:35:cc:42:49:bf:d1:ea:68:fb:ff:41:87:
95:97:1c:d7:6f:75:3f:a7:07:bb:76:64:b4:04:13:dd:8e:24:
52:07:cd:38:77:34:78:b5:8a:e4:cb:5a:ba:04:cc:a4:a7:cd:
72:1b:bb:b9:f1:e6:dd:7a:27:2b:22:d9:1a:d8:0d:bc:db:d8:
e6:2e:15:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:59 2026 by rpki-client