Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/W28N2aH7rJD1peqoBhtqKYPY7_E.roa
File: W28N2aH7rJD1peqoBhtqKYPY7_E.roa (raw, json)
Hash identifier: tOKsbKCK7g2h1Go/dLgwE5AYSeB8sdDLnvCMgHs+pfQ=
Subject key identifier: 5B:6F:0D:D9:A1:FB:AC:90:F5:A5:EA:A8:06:1B:6A:29:83:D8:EF:F1
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01A0388DBACCB2399C3FF5D6C5B43C5181E4
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/W28N2aH7rJD1peqoBhtqKYPY7_E.roa
Signing time: Tue 25 Aug 2026 10:53:27 +0000
ROA not before: Tue 25 Aug 2026 10:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9155
IP address blocks: 62.150.10.0/24 maxlen: 24
62.150.110.0/23 maxlen: 23
62.150.142.0/24 maxlen: 24
62.150.155.0/24 maxlen: 24
62.150.175.0/24 maxlen: 24
62.150.181.0/24 maxlen: 24
62.150.182.0/24 maxlen: 24
78.154.192.0/18 maxlen: 18
78.154.192.0/20 maxlen: 20
78.154.192.0/24 maxlen: 24
78.154.193.0/24 maxlen: 24
78.154.194.0/24 maxlen: 24
78.154.195.0/24 maxlen: 24
78.154.196.0/24 maxlen: 24
78.154.197.0/24 maxlen: 24
78.154.198.0/24 maxlen: 24
78.154.199.0/24 maxlen: 24
78.154.200.0/24 maxlen: 24
78.154.201.0/24 maxlen: 24
78.154.202.0/24 maxlen: 24
78.154.203.0/24 maxlen: 24
78.154.204.0/24 maxlen: 24
78.154.205.0/24 maxlen: 24
78.154.206.0/24 maxlen: 24
78.154.207.0/24 maxlen: 24
78.154.208.0/20 maxlen: 20
78.154.208.0/24 maxlen: 24
78.154.209.0/24 maxlen: 24
78.154.210.0/24 maxlen: 24
78.154.211.0/24 maxlen: 24
78.154.212.0/24 maxlen: 24
78.154.213.0/24 maxlen: 24
78.154.214.0/24 maxlen: 24
78.154.215.0/24 maxlen: 24
78.154.216.0/24 maxlen: 24
78.154.217.0/24 maxlen: 24
78.154.218.0/24 maxlen: 24
78.154.219.0/24 maxlen: 24
78.154.220.0/24 maxlen: 24
78.154.221.0/24 maxlen: 24
78.154.222.0/24 maxlen: 24
78.154.223.0/24 maxlen: 24
78.154.224.0/20 maxlen: 20
78.154.224.0/24 maxlen: 24
78.154.225.0/24 maxlen: 24
78.154.226.0/24 maxlen: 24
78.154.227.0/24 maxlen: 24
78.154.228.0/24 maxlen: 24
78.154.229.0/24 maxlen: 24
78.154.230.0/24 maxlen: 24
78.154.231.0/24 maxlen: 24
78.154.232.0/24 maxlen: 24
78.154.233.0/24 maxlen: 24
78.154.234.0/24 maxlen: 24
78.154.235.0/24 maxlen: 24
78.154.236.0/24 maxlen: 24
78.154.237.0/24 maxlen: 24
78.154.238.0/24 maxlen: 24
78.154.239.0/24 maxlen: 24
78.154.240.0/20 maxlen: 20
78.154.240.0/24 maxlen: 24
78.154.241.0/24 maxlen: 24
78.154.242.0/24 maxlen: 24
78.154.243.0/24 maxlen: 24
78.154.244.0/24 maxlen: 24
78.154.245.0/24 maxlen: 24
78.154.246.0/24 maxlen: 24
78.154.247.0/24 maxlen: 24
78.154.248.0/24 maxlen: 24
78.154.249.0/24 maxlen: 24
78.154.250.0/24 maxlen: 24
78.154.251.0/24 maxlen: 24
78.154.252.0/24 maxlen: 24
78.154.253.0/24 maxlen: 24
78.154.254.0/24 maxlen: 24
78.154.255.0/24 maxlen: 24
195.39.161.0/24 maxlen: 24
195.39.180.0/24 maxlen: 24
195.39.181.0/24 maxlen: 24
195.39.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:8d:ba:cc:b2:39:9c:3f:f5:d6:c5:b4:3c:51:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Aug 25 10:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b6f0dd9a1fbac90f5a5eaa8061b6a2983d8eff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:05:5c:9c:b9:bf:b7:22:92:86:cf:e1:25:
db:4a:0c:bb:46:e6:9d:d2:09:bb:43:6d:20:2c:8c:
07:ce:52:30:9c:26:98:f6:aa:6f:6c:63:85:5c:9c:
12:7a:70:ab:fc:e0:6a:67:c5:6f:73:38:09:db:78:
e5:e0:f8:d2:f4:f6:e7:25:71:d7:4c:a6:38:d5:97:
c3:15:70:ef:40:fa:3b:15:42:6c:c5:68:ac:ed:1e:
0e:b8:fe:87:50:40:ea:c9:b4:53:00:fb:19:b0:8f:
33:30:89:dd:b1:d0:64:51:14:db:a4:2d:f1:98:20:
d1:c9:6a:0e:93:32:39:97:ed:db:ec:2f:03:4c:0c:
2a:99:32:c0:fb:d7:01:59:2c:0e:9d:04:a4:67:2c:
41:46:53:e0:81:a8:22:ee:65:50:91:46:95:c3:fa:
81:a7:d5:69:53:6c:28:21:5f:03:4f:b2:8c:0b:6e:
0e:8d:15:af:4b:30:ac:08:30:32:34:00:24:20:20:
98:23:b0:03:8f:a7:e7:ba:4c:6b:67:8e:64:cd:89:
ac:f5:ec:8a:1c:d6:23:8c:28:cc:dd:fa:41:b2:72:
41:3b:1e:b8:f0:87:70:d8:7c:7f:81:8f:32:42:ec:
09:ec:3d:d0:59:80:dc:ae:53:3e:cf:05:c5:45:f9:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:0D:D9:A1:FB:AC:90:F5:A5:EA:A8:06:1B:6A:29:83:D8:EF:F1
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/W28N2aH7rJD1peqoBhtqKYPY7_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.150.10.0/24
62.150.110.0/23
62.150.142.0/24
62.150.155.0/24
62.150.175.0/24
62.150.181.0-62.150.182.255
78.154.192.0/18
195.39.161.0/24
195.39.180.0-195.39.182.255
Signature Algorithm: sha256WithRSAEncryption
9d:d6:16:22:46:1c:ee:4c:bb:5f:94:7c:6a:65:5d:4d:b1:59:
57:11:65:06:a5:77:b9:be:de:ca:da:e7:80:55:eb:f9:17:71:
f3:41:ba:59:5a:d2:57:92:5e:8f:1f:f4:fb:26:a1:68:bf:55:
fe:ee:87:e5:8f:8d:42:4e:7b:d0:df:41:f9:f2:86:9e:59:7b:
51:48:6f:e2:22:44:90:43:ab:d6:31:d3:5e:09:02:15:b1:65:
eb:e8:39:fd:34:6c:51:70:82:95:82:c6:fa:6c:71:93:4b:77:
6e:f6:4b:55:bf:92:ca:5c:b5:df:25:f7:6f:ef:11:d7:90:90:
3f:91:27:22:b5:da:7c:89:e2:9e:e9:bc:f8:ff:f7:de:ef:87:
88:2a:b8:65:dd:b3:ea:eb:e7:14:90:bd:89:99:8f:49:56:93:
22:34:c0:de:7a:33:a7:09:20:48:71:e2:c2:19:72:7c:86:21:
68:27:88:b3:44:9e:ea:59:f5:06:9c:37:bd:00:a6:60:d0:4f:
1e:c7:c8:6e:1c:c5:e9:cb:f0:dc:5a:7a:34:ba:7f:01:4e:27:
2c:fd:a5:b1:79:c8:df:e0:b9:00:b7:96:ea:26:9d:20:89:6a:
f7:69:67:71:b0:bb:55:74:b8:e0:55:7e:13:28:bb:9f:01:35:
a7:c2:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:23 2026 by rpki-client