Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_IfbCbXKPBGyR8Lpc8RVJr8yGNo.roa
File: _IfbCbXKPBGyR8Lpc8RVJr8yGNo.roa (raw, json)
Hash identifier: YwOHlyjtzXDqnGyTZE6OiTN0fxIf1hYPySmU7nbHxM8=
Subject key identifier: FC:87:DB:09:B5:CA:3C:11:B2:47:C2:E9:73:C4:55:26:BF:32:18:DA
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019E980C680EDAA5E4C0082281C84840068D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_IfbCbXKPBGyR8Lpc8RVJr8yGNo.roa
Signing time: Fri 05 Jun 2026 13:50:10 +0000
ROA not before: Fri 05 Jun 2026 13:50:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:0c:68:0e:da:a5:e4:c0:08:22:81:c8:48:40:06:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 5 13:50:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc87db09b5ca3c11b247c2e973c45526bf3218da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:84:ec:4c:6c:68:54:90:2e:6a:b5:e8:55:
c3:cf:fe:2c:86:3f:84:36:77:49:c8:f5:d3:16:31:
86:58:3f:52:b0:f6:0c:60:5b:94:b0:c3:55:4c:fd:
ed:0a:b8:07:2c:b8:03:7c:cd:2f:02:d3:7b:e8:6c:
86:77:ae:e7:8f:13:0e:78:42:d0:40:d3:e0:ac:b1:
fa:5f:16:e9:15:c8:31:b5:fd:85:9c:80:af:c3:83:
6d:31:78:4e:21:45:13:77:b4:06:16:d8:e1:97:a4:
e7:db:ce:fb:a0:64:41:b8:e8:fe:22:ab:e6:ea:f9:
ec:42:bb:34:d5:7f:28:92:58:73:10:7a:81:79:80:
3d:c4:e3:3a:1d:b1:b5:55:37:47:43:46:03:d8:ea:
28:cf:28:9a:a6:08:e3:4a:d3:d4:c5:72:68:5e:a4:
d9:a7:93:93:9a:15:93:1d:b2:ed:85:da:11:7c:7d:
fd:6d:76:a5:38:77:77:57:f1:42:e5:b6:8a:77:59:
de:a2:75:64:12:98:f8:bb:33:d8:44:c2:bd:f0:c1:
74:60:0e:72:82:2b:54:26:ac:41:b9:9a:7e:47:5f:
8b:59:b5:29:d1:a6:38:61:ec:1c:70:c7:86:71:2f:
de:14:f3:fe:b0:99:9c:2e:66:ec:7a:09:27:95:41:
f1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:87:DB:09:B5:CA:3C:11:B2:47:C2:E9:73:C4:55:26:BF:32:18:DA
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_IfbCbXKPBGyR8Lpc8RVJr8yGNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
77.242.154.0/24
88.151.61.0-88.151.63.255
88.209.196.0/24
88.209.209.0-88.209.210.255
88.209.212.0/22
88.209.219.0/24
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:9e:3c:c7:52:bc:d5:8a:e4:b5:df:e7:74:7b:b3:ab:1b:58:
09:da:a3:49:fc:f1:18:20:38:94:34:28:47:83:c2:cf:bc:9f:
6c:58:56:64:ea:47:f0:c4:f9:70:3a:15:77:1c:18:9c:6d:e7:
eb:d3:b5:ea:ab:8a:0c:4c:65:91:15:f1:dc:1a:f4:1b:c7:7d:
2e:d4:a9:ee:d4:d4:aa:68:e5:e4:ec:e0:ad:5d:05:a3:a0:5d:
fa:f0:c2:bc:91:dc:c8:9c:dc:a0:a2:c0:a9:bd:73:33:38:cb:
9e:ac:12:2c:46:a3:69:d0:f2:0d:a6:98:1e:b7:64:74:6b:b7:
ad:28:32:67:51:24:b6:1a:c5:f4:2a:76:10:20:a9:64:94:f4:
aa:12:8a:64:93:f0:8c:8e:b0:5d:a8:e0:78:3b:97:0c:27:19:
61:bc:4c:e8:2b:0b:24:70:04:47:2f:05:91:17:03:b1:f5:11:
89:5e:d9:50:58:ea:f5:79:74:1b:ae:a6:f4:5d:eb:7d:27:96:
d8:fb:b0:9b:90:64:06:d1:ae:7c:4f:34:27:49:5a:24:f9:91:
1a:c7:65:62:4c:98:05:42:97:e5:64:f7:06:e7:c1:26:36:c9:
fd:df:0c:92:1c:e9:45:7e:da:a4:b5:68:8e:54:d5:72:d6:2f:
7d:85:b9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:06 2026 by rpki-client