Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/t98OBQe0WNUYSBCzWPOvMNNdCCU.roa
File: t98OBQe0WNUYSBCzWPOvMNNdCCU.roa (raw, json)
Hash identifier: T3bx2AzYlPYawd2JV44/SVYg6RGUmJnlWF/n7EwddAA=
Subject key identifier: B7:DF:0E:05:07:B4:58:D5:18:48:10:B3:58:F3:AF:30:D3:5D:08:25
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 01A061BA64731B9DA2B366C6B88D5A82D982
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/t98OBQe0WNUYSBCzWPOvMNNdCCU.roa
Signing time: Wed 02 Sep 2026 10:46:40 +0000
ROA not before: Wed 02 Sep 2026 10:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42652
IP address blocks: 5.45.0.0/21 maxlen: 21
5.100.128.0/20 maxlen: 20
37.157.40.0/21 maxlen: 21
46.165.128.0/18 maxlen: 18
77.244.96.0/20 maxlen: 20
80.74.48.0/20 maxlen: 22
89.21.96.0/19 maxlen: 23
109.75.208.0/20 maxlen: 20
128.0.96.0/21 maxlen: 21
128.0.100.0/22 maxlen: 22
131.117.144.0/20 maxlen: 20
131.117.152.0/22 maxlen: 22
156.67.128.0/20 maxlen: 20
156.67.128.0/22 maxlen: 22
156.67.132.0/22 maxlen: 22
156.67.136.0/22 maxlen: 22
156.67.140.0/22 maxlen: 22
178.76.128.0/18 maxlen: 18
185.7.208.0/22 maxlen: 22
185.18.128.0/22 maxlen: 22
185.74.180.0/22 maxlen: 22
188.210.0.0/18 maxlen: 18
188.210.44.0/24 maxlen: 24
188.210.56.0/22 maxlen: 22
188.210.60.0/22 maxlen: 22
212.43.64.0/19 maxlen: 19
2a01:5c0::/32 maxlen: 32
2a01:5c0:64::/48 maxlen: 48
2a02:6d40::/32 maxlen: 32
2a03:4920::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:ba:64:73:1b:9d:a2:b3:66:c6:b8:8d:5a:82:d9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Sep 2 10:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7df0e0507b458d5184810b358f3af30d35d0825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:6c:ff:7f:59:02:4f:5c:6f:d6:01:1c:78:
d7:af:2c:16:c5:36:eb:14:21:45:ad:25:67:8b:eb:
28:c2:e5:9a:c3:3c:37:21:e0:17:92:f9:4a:a1:b1:
17:18:65:6b:c6:b1:48:fc:2c:52:c0:2e:c1:e8:a1:
76:49:71:66:64:86:49:4e:c1:b4:10:14:7a:cc:2a:
09:41:7d:53:f2:fe:b6:8b:00:8a:ef:f8:96:6a:35:
17:c5:fb:bc:2c:b0:18:1f:16:c0:2b:50:b8:59:41:
49:08:0e:d3:bb:75:34:26:42:66:d2:ae:94:56:66:
8e:8c:13:30:8a:d7:46:f8:82:74:07:4f:39:1b:e6:
e8:02:fe:5f:f2:8b:d6:3b:7a:26:35:e2:a4:8f:6c:
e5:3d:1e:90:28:a7:9d:26:77:76:ee:28:32:b0:12:
d2:6c:21:54:3a:49:eb:c1:5a:02:83:03:03:ff:f5:
fe:10:22:d5:ad:22:c0:57:3b:c8:3f:a9:d0:b6:5c:
5f:9f:a3:1a:d5:52:08:41:9a:65:bc:cb:59:4c:27:
f3:4c:77:56:0b:8f:3b:0b:7d:9c:40:dd:af:30:a7:
8b:fe:fe:41:80:03:06:f7:3f:32:c6:69:36:8f:d6:
1c:70:4f:98:c3:2d:db:71:67:d0:39:9f:46:a0:ca:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DF:0E:05:07:B4:58:D5:18:48:10:B3:58:F3:AF:30:D3:5D:08:25
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/t98OBQe0WNUYSBCzWPOvMNNdCCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.0.0/21
5.100.128.0/20
37.157.40.0/21
46.165.128.0/18
77.244.96.0/20
80.74.48.0/20
89.21.96.0/19
109.75.208.0/20
128.0.96.0/21
131.117.144.0/20
156.67.128.0/20
178.76.128.0/18
185.7.208.0/22
185.18.128.0/22
185.74.180.0/22
188.210.0.0/18
212.43.64.0/19
IPv6:
2a01:5c0::/32
2a02:6d40::/32
2a03:4920::/32
Signature Algorithm: sha256WithRSAEncryption
02:62:b8:02:2d:93:e8:de:1d:e3:06:fb:5f:ce:19:02:fb:99:
4b:93:c5:df:49:65:a0:c9:21:9f:af:60:ef:a4:78:50:3e:5e:
7e:3a:97:c9:53:79:bd:d6:a3:36:df:1e:3a:e6:33:14:3e:4e:
81:45:43:49:94:e9:e2:31:21:69:71:d5:d6:99:2f:52:8c:d0:
47:04:07:cd:7f:39:aa:49:e5:e8:51:60:67:55:45:0e:49:ed:
82:6b:35:0a:70:17:00:82:49:36:74:ac:76:b4:f3:ab:06:8c:
b2:69:ac:72:ee:9d:65:6b:8d:9d:07:53:ec:ae:b2:6b:db:da:
38:cf:e1:d7:85:5e:cd:88:b3:c3:f9:3d:a4:31:53:d6:52:7c:
fb:a2:0a:b7:32:d4:22:e9:99:36:cd:04:34:4e:d9:04:f4:06:
f1:48:53:dc:ac:40:aa:a7:73:7d:5b:94:32:c1:74:c4:1a:9a:
4a:50:27:d0:e7:3f:b4:97:f7:49:5c:05:ca:b5:34:61:10:61:
ed:47:71:9a:bd:81:71:ad:3c:9e:3b:c0:da:d4:07:76:99:2c:
e3:b2:f5:7a:ec:ea:ff:cf:4b:4b:23:08:e3:05:80:26:4d:b8:
f4:20:a3:d1:20:c5:43:9b:fd:19:54:22:21:25:48:e0:20:20:
24:1f:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:53:06 2026 by rpki-client