Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_SL2KzsfG-Xw4v6pUdY3Mgw6g40.roa
File: _SL2KzsfG-Xw4v6pUdY3Mgw6g40.roa (raw, json)
Hash identifier: DVC8mkNiyGin3ASNzA+ygfUtZ+rJCVLVif9Idju7BAM=
Subject key identifier: FD:22:F6:2B:3B:1F:1B:E5:F0:E2:FE:A9:51:D6:37:32:0C:3A:83:8D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019D525BF8F84EC1607431BC8B3BBCF0151D
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_SL2KzsfG-Xw4v6pUdY3Mgw6g40.roa
Signing time: Fri 03 Apr 2026 08:00:52 +0000
ROA not before: Fri 03 Apr 2026 08:00:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
88.223.44.0/24 maxlen: 24
88.223.46.0/24 maxlen: 24
88.223.169.0/24 maxlen: 24
95.173.49.0/24 maxlen: 24
95.173.51.0/24 maxlen: 24
95.173.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:5b:f8:f8:4e:c1:60:74:31:bc:8b:3b:bc:f0:15:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Apr 3 08:00:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd22f62b3b1f1be5f0e2fea951d637320c3a838d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:fe:df:fc:45:47:bc:3b:b5:77:9e:8c:50:
30:20:01:49:86:2a:3a:be:ee:a7:d0:6b:72:5c:21:
5f:e5:f3:95:9b:f7:55:38:a8:0e:1d:0d:22:89:08:
c4:ec:c4:0c:4b:fe:fd:2a:d3:39:79:ca:2d:2f:ff:
66:48:ea:0b:15:16:ef:1e:76:1c:6d:91:c3:11:40:
c0:0a:26:33:0c:2f:a2:3e:bb:42:a7:9f:c7:2a:64:
66:c0:1d:b0:d3:6b:3e:4c:c5:2c:41:6b:9c:94:50:
53:9a:0e:30:0b:66:d2:b4:cf:e3:62:f6:ca:87:b9:
ce:13:5a:0f:6f:ab:9a:73:12:9a:d3:67:46:57:e5:
9a:8f:83:96:5c:a6:b2:de:95:bf:43:cc:3e:53:db:
90:40:78:84:58:3f:cf:0f:5f:6b:4c:d3:c9:63:b3:
b8:bb:b9:a1:e1:0d:ab:95:c2:42:de:fd:07:85:62:
ec:6a:1d:ec:c7:6b:a6:11:51:7b:5a:f0:7e:eb:87:
93:ed:b3:00:5c:44:5b:ed:a8:ba:98:e8:8a:0c:b4:
a8:f2:31:9c:4e:b9:73:f8:81:bc:1a:ce:d8:8d:c1:
a5:2f:a7:d1:be:86:28:4c:12:90:6f:8f:03:87:dc:
34:63:6a:bf:bc:37:4a:dd:d5:08:58:f3:40:d9:aa:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:22:F6:2B:3B:1F:1B:E5:F0:E2:FE:A9:51:D6:37:32:0C:3A:83:8D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_SL2KzsfG-Xw4v6pUdY3Mgw6g40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
88.223.44.0/24
88.223.46.0/24
88.223.169.0/24
95.173.49.0/24
95.173.51.0/24
95.173.54.0/24
Signature Algorithm: sha256WithRSAEncryption
46:39:66:b3:ff:c1:0d:90:ca:a5:99:f5:23:eb:a5:9f:78:5c:
20:6a:f6:84:a9:58:5a:b5:28:89:2b:94:d8:54:d5:b2:21:e9:
d2:88:76:bc:f8:d8:75:36:81:c7:b3:2b:86:aa:bf:0b:1d:a6:
dc:70:47:e8:1f:0b:cb:6a:d1:5d:20:9a:4f:bc:f6:91:6b:55:
ab:e5:27:69:d3:03:7a:bb:0b:4b:9f:5b:79:dd:6b:da:24:56:
dc:01:df:f8:87:0f:7d:c7:10:44:0c:51:78:b9:48:97:8f:91:
ba:e1:40:14:c4:cf:2d:98:01:c2:ff:73:52:f1:05:ad:3a:73:
6d:57:56:fa:2a:38:d1:cc:4b:4c:a6:82:79:9a:1d:10:21:5b:
06:f3:de:90:ac:83:7d:7f:64:c3:16:26:a6:3f:11:4a:4a:cd:
2d:4c:70:26:78:f7:6c:db:7d:14:f4:10:20:f2:53:9c:69:c9:
43:5e:db:9f:2a:6c:ed:fa:ac:d5:e9:b7:b6:cf:a9:4c:9d:32:
0f:fd:aa:bf:c0:7d:ce:5f:92:b0:30:e9:13:77:36:75:13:dc:
09:df:ff:f8:57:a8:bf:ea:4e:96:2d:a3:b3:2f:a1:ba:b7:db:
d3:87:8a:7c:55:dd:ed:76:78:d7:b2:d1:b4:2f:ae:af:75:90:
79:12:a4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:23 2026 by rpki-client