Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/us1GSIhm55Kw0WlTx_Qmja-c9Vg.roa
File: us1GSIhm55Kw0WlTx_Qmja-c9Vg.roa (raw, json)
Hash identifier: 2udVHZgWrsMsX5HZqlWRXTTnXgRNJReWWU+1z/MPcVA=
Subject key identifier: BA:CD:46:48:88:66:E7:92:B0:D1:69:53:C7:F4:26:8D:AF:9C:F5:58
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 01A061BA63A263AF4E734BCC089E9A80CF5C
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/us1GSIhm55Kw0WlTx_Qmja-c9Vg.roa
Signing time: Wed 02 Sep 2026 10:46:40 +0000
ROA not before: Wed 02 Sep 2026 10:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8899
IP address blocks: 5.45.0.0/21 maxlen: 21
5.100.128.0/20 maxlen: 20
37.157.40.0/21 maxlen: 21
46.165.128.0/18 maxlen: 18
77.244.96.0/20 maxlen: 20
80.74.48.0/20 maxlen: 22
89.21.96.0/19 maxlen: 23
109.75.208.0/20 maxlen: 20
128.0.96.0/21 maxlen: 21
128.0.100.0/22 maxlen: 22
131.117.144.0/20 maxlen: 20
156.67.128.0/20 maxlen: 20
156.67.132.0/22 maxlen: 22
156.67.140.0/22 maxlen: 22
178.76.128.0/18 maxlen: 18
185.7.208.0/22 maxlen: 22
185.18.128.0/22 maxlen: 22
185.74.180.0/22 maxlen: 22
188.210.0.0/18 maxlen: 18
188.210.60.0/22 maxlen: 22
212.43.64.0/19 maxlen: 19
212.43.80.0/21 maxlen: 21
2a01:5c0::/32 maxlen: 32
2a02:6d40::/32 maxlen: 32
2a03:4920::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:ba:63:a2:63:af:4e:73:4b:cc:08:9e:9a:80:cf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Sep 2 10:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bacd46488866e792b0d16953c7f4268daf9cf558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ce:70:a1:ca:e7:e4:57:43:e7:f9:bd:1c:52:
fd:02:b2:97:0a:e1:cc:da:98:a7:c6:b8:15:87:e5:
ac:7e:d9:d1:ab:9f:f4:58:a5:8b:83:b6:cb:82:24:
77:1a:f9:39:f6:46:25:95:87:a5:00:d0:df:b3:50:
b8:93:eb:fe:5b:01:a4:fb:b9:1e:1a:e9:bf:86:43:
ee:04:34:0b:cf:1c:1b:85:55:28:3a:95:9a:2f:24:
61:8a:6c:77:a4:b4:e2:32:a1:9c:eb:17:f2:23:32:
14:5a:08:6a:8f:f4:96:1f:a1:e6:4c:95:e5:0b:ed:
37:f3:92:2d:6e:1e:d3:f6:1f:dd:cb:38:c8:c6:57:
85:8d:9d:fc:94:f9:f0:af:7a:51:41:26:ef:27:62:
75:5a:64:3d:3d:bd:c0:a0:e9:db:00:2a:5d:3b:09:
4a:74:3d:b6:00:ed:d8:d6:dc:8a:63:d7:c5:4d:8a:
3c:c1:5b:4e:24:6a:27:da:2e:7e:7e:58:dc:d9:0d:
42:a9:52:09:10:dc:4e:7a:92:67:af:eb:43:18:a7:
bc:cc:a6:42:fd:ec:ce:0c:15:66:12:02:35:b9:9f:
6f:69:eb:02:8b:7f:3d:3c:c7:e1:f1:44:e4:9c:37:
fc:ce:c8:e9:31:a5:55:03:bc:4a:f5:c5:27:1b:ec:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CD:46:48:88:66:E7:92:B0:D1:69:53:C7:F4:26:8D:AF:9C:F5:58
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/us1GSIhm55Kw0WlTx_Qmja-c9Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.0.0/21
5.100.128.0/20
37.157.40.0/21
46.165.128.0/18
77.244.96.0/20
80.74.48.0/20
89.21.96.0/19
109.75.208.0/20
128.0.96.0/21
131.117.144.0/20
156.67.128.0/20
178.76.128.0/18
185.7.208.0/22
185.18.128.0/22
185.74.180.0/22
188.210.0.0/18
212.43.64.0/19
IPv6:
2a01:5c0::/32
2a02:6d40::/32
2a03:4920::/32
Signature Algorithm: sha256WithRSAEncryption
65:50:21:94:4e:09:44:b4:38:60:e6:69:cb:46:24:80:ae:5a:
b5:2f:e6:58:6b:2c:87:27:ac:55:83:a1:30:f9:99:13:64:12:
8d:4f:2c:e6:66:97:a0:2f:19:ce:f6:6e:f4:ec:e6:2b:c8:ca:
5c:56:3f:00:47:09:55:dd:a9:5f:0c:9f:37:d5:8f:e2:23:4d:
3e:78:14:27:de:7d:5a:55:f5:b9:14:7e:8b:f2:ad:2c:28:aa:
ee:e3:72:77:37:6e:ea:a3:a6:30:20:7a:da:04:4f:dd:49:45:
68:3f:01:5f:63:fd:a6:5f:18:ec:66:f3:0e:e3:74:14:bc:06:
b2:eb:e9:c8:60:85:0e:d9:58:da:03:18:55:d7:61:7e:9d:24:
ab:55:2b:f5:5a:9b:9e:3f:0f:9d:fe:6d:8e:1f:15:24:90:b1:
de:90:65:cf:c9:2d:7b:50:e0:02:3f:cb:04:ea:3a:60:eb:5f:
f0:85:38:30:bc:19:b2:d5:9b:4f:49:36:38:48:e3:af:89:d7:
0b:7b:e2:ad:08:15:40:7c:59:5c:d7:0e:37:b4:38:04:82:a2:
17:41:5e:ef:f9:30:1d:5d:19:97:35:db:48:bb:b1:fb:60:92:
6b:16:5a:99:8d:e4:d4:5d:7c:6e:b1:c7:c2:fb:3d:c0:15:2a:
63:fa:79:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:14:48 2026 by rpki-client