Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/b4ESO_pvGgCqVp88yRCz-5OoSf0.roa
File: b4ESO_pvGgCqVp88yRCz-5OoSf0.roa (raw, json)
Hash identifier: gzB0VXXq99U/xkP9oWFBiaWwqsbZ9lY1uOT5L1wm/Fk=
Subject key identifier: 6F:81:12:3B:FA:6F:1A:00:AA:56:9F:3C:C9:10:B3:FB:93:A8:49:FD
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 019ED050E52B53770EC0F384DEAC5BCD9B51
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/b4ESO_pvGgCqVp88yRCz-5OoSf0.roa
Signing time: Tue 16 Jun 2026 12:03:42 +0000
ROA not before: Tue 16 Jun 2026 12:03:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 84.246.64.0/21 maxlen: 21
129.26.0.0/16 maxlen: 16
129.233.128.0/18 maxlen: 18
129.233.202.0/24 maxlen: 24
129.233.210.0/24 maxlen: 24
129.233.224.0/20 maxlen: 20
153.96.0.0/16 maxlen: 16
153.97.0.0/16 maxlen: 16
192.35.149.0/24 maxlen: 24
192.35.150.0/24 maxlen: 24
192.35.151.0/24 maxlen: 24
192.35.152.0/24 maxlen: 24
192.35.153.0/24 maxlen: 24
192.44.5.0/24 maxlen: 24
192.44.6.0/24 maxlen: 24
192.44.8.0/24 maxlen: 24
192.44.9.0/24 maxlen: 24
192.44.12.0/24 maxlen: 24
192.44.15.0/24 maxlen: 24
192.44.18.0/24 maxlen: 24
192.44.20.0/23 maxlen: 23
192.44.23.0/24 maxlen: 24
192.44.25.0/24 maxlen: 24
192.44.26.0/24 maxlen: 24
192.44.28.0/24 maxlen: 24
192.44.29.0/24 maxlen: 24
192.44.30.0/23 maxlen: 23
192.44.36.0/24 maxlen: 24
192.44.37.0/24 maxlen: 24
192.44.38.0/24 maxlen: 24
192.44.39.0/24 maxlen: 24
192.44.40.0/24 maxlen: 24
192.54.34.0/23 maxlen: 23
192.76.148.0/24 maxlen: 24
192.76.241.0/24 maxlen: 24
192.76.245.0/24 maxlen: 24
192.76.246.0/23 maxlen: 23
192.76.248.0/24 maxlen: 24
192.88.108.0/24 maxlen: 24
192.102.150.0/23 maxlen: 23
192.102.152.0/23 maxlen: 23
192.102.156.0/24 maxlen: 24
192.102.158.0/23 maxlen: 23
192.102.160.0/24 maxlen: 24
192.102.161.0/24 maxlen: 24
192.102.162.0/23 maxlen: 23
192.102.164.0/24 maxlen: 24
192.102.167.0/24 maxlen: 24
192.102.168.0/24 maxlen: 24
192.102.169.0/24 maxlen: 24
192.102.170.0/24 maxlen: 24
192.102.172.0/24 maxlen: 24
192.102.174.0/24 maxlen: 24
192.102.175.0/24 maxlen: 24
192.102.176.0/23 maxlen: 23
192.109.177.0/24 maxlen: 24
212.44.192.0/19 maxlen: 19
2a03:db80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:50:e5:2b:53:77:0e:c0:f3:84:de:ac:5b:cd:9b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jun 16 12:03:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f81123bfa6f1a00aa569f3cc910b3fb93a849fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3e:47:01:ea:b2:15:77:35:5d:b8:3e:55:ba:
6f:19:c5:57:33:ff:d4:e8:cf:aa:65:62:8b:5b:7c:
f0:cc:0a:a8:5d:4f:c8:95:96:57:1d:01:f3:b0:8e:
24:59:6a:51:c6:06:46:8d:63:0f:a6:4e:ba:d2:4f:
da:3a:3f:77:fa:f7:01:eb:8c:9d:82:1b:c3:fc:75:
2f:d3:a6:1c:7e:b7:c2:e0:b4:a0:0d:e8:cd:d2:63:
e9:49:2e:56:88:ae:1b:0e:72:93:7c:1a:90:b8:d4:
db:eb:46:21:e1:2d:c6:3f:6d:59:25:8a:b3:cd:bd:
36:20:a0:90:6d:ba:8c:44:88:d6:2d:4b:3c:87:54:
d2:14:a6:ed:69:49:d7:92:d5:98:50:69:77:38:d3:
d0:58:5d:10:b3:7d:74:a0:d2:48:ac:a3:f6:e1:60:
8a:56:f3:b4:d0:7c:a9:d8:15:27:64:cb:6b:da:0d:
f4:79:e7:63:6c:4b:ef:f4:53:06:90:c0:72:87:af:
c3:be:b5:42:68:7c:e7:9c:27:ee:5a:33:5d:d5:68:
98:f7:f9:b0:bd:c3:c9:0c:3a:b0:53:d9:ae:9b:10:
5b:35:41:9a:91:69:b8:c2:27:0e:a0:82:f2:64:52:
3e:ad:95:46:e4:ea:c3:7f:1b:62:f5:38:b9:f2:00:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:81:12:3B:FA:6F:1A:00:AA:56:9F:3C:C9:10:B3:FB:93:A8:49:FD
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/b4ESO_pvGgCqVp88yRCz-5OoSf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.64.0/21
129.26.0.0/16
129.233.128.0/18
129.233.202.0/24
129.233.210.0/24
129.233.224.0/20
153.96.0.0/15
192.35.149.0-192.35.153.255
192.44.5.0-192.44.6.255
192.44.8.0/23
192.44.12.0/24
192.44.15.0/24
192.44.18.0/24
192.44.20.0/23
192.44.23.0/24
192.44.25.0-192.44.26.255
192.44.28.0/22
192.44.36.0-192.44.40.255
192.54.34.0/23
192.76.148.0/24
192.76.241.0/24
192.76.245.0-192.76.248.255
192.88.108.0/24
192.102.150.0-192.102.153.255
192.102.156.0/24
192.102.158.0-192.102.164.255
192.102.167.0-192.102.170.255
192.102.172.0/24
192.102.174.0-192.102.177.255
192.109.177.0/24
212.44.192.0/19
IPv6:
2a03:db80::/32
Signature Algorithm: sha256WithRSAEncryption
92:32:59:e7:57:fa:1f:da:33:9d:6a:c2:13:45:9e:a1:95:ae:
0e:c7:10:79:b5:79:06:4b:25:78:61:48:9e:41:a6:96:81:2b:
35:54:50:70:60:49:53:c7:5d:15:9e:03:e0:c1:b3:be:62:36:
f4:e2:3b:80:02:7d:ca:36:17:4e:b0:7d:ef:20:da:b4:ef:29:
6b:97:0b:f7:e7:5c:5e:4e:ad:f5:a9:de:c6:33:10:05:bb:08:
b3:db:ea:c6:20:85:64:ce:dd:ca:96:45:d6:1f:62:1c:c6:e1:
a0:38:9d:1e:a7:d3:19:2b:19:ee:90:95:da:77:99:db:c7:60:
f4:3c:9a:a0:b1:2d:be:55:a4:07:84:86:b0:e7:a9:bd:d0:48:
fd:6f:b4:74:d4:a2:a9:d2:67:d7:49:22:03:76:8a:32:85:2d:
7c:0e:1e:d5:66:78:50:f4:29:95:98:24:3f:37:12:18:66:75:
b7:1f:4f:83:55:62:44:c3:d5:97:31:d0:33:42:f5:fd:19:7a:
07:a5:d0:cc:24:d9:7c:9f:e3:54:c3:ed:50:33:55:51:c1:7c:
31:b2:b5:a9:04:a5:3a:52:50:fd:87:09:bf:70:93:10:98:4f:
3c:43:9f:24:e7:0f:b9:e6:fe:0c:f5:09:84:1d:f8:80:4f:f9:
74:7f:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:47:12 2026 by rpki-client