Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rTSq4KP-86wsEtx1JEiUalOtkNI.roa
File: rTSq4KP-86wsEtx1JEiUalOtkNI.roa (raw, json)
Hash identifier: vH9ql4p0gs1HYPjUUwHGA9peQjDA2aB92bYCy1NDiUA=
Subject key identifier: AD:34:AA:E0:A3:FE:F3:AC:2C:12:DC:75:24:48:94:6A:53:AD:90:D2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0231FD69DCF55786A8E4BCB8511C24289
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rTSq4KP-86wsEtx1JEiUalOtkNI.roa
Signing time: Fri 21 Aug 2026 07:01:24 +0000
ROA not before: Fri 21 Aug 2026 07:01:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.230.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.152.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.42.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.58.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.192.249.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:1f:d6:9d:cf:55:78:6a:8e:4b:cb:85:11:c2:42:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 21 07:01:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad34aae0a3fef3ac2c12dc752448946a53ad90d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:91:14:ff:8e:47:03:85:8b:2b:d1:a4:8a:
ae:9d:4c:c0:86:de:64:ab:49:94:a7:b6:70:df:54:
a5:1a:11:b5:0f:01:ba:78:bf:f5:d9:61:14:c6:df:
c9:af:6a:36:7c:c7:87:d8:0a:7a:1d:4c:be:26:15:
84:e1:ab:16:1a:28:bc:55:c0:f0:95:ab:d4:88:12:
8f:19:3e:89:bd:23:44:6d:99:d0:ad:bf:6a:b1:ae:
89:da:64:34:49:fe:fd:86:5c:61:03:99:57:b3:fe:
bc:00:76:24:87:9a:3d:0c:88:84:f4:1f:4c:52:e7:
a5:dc:2c:7e:50:39:6e:52:85:b6:95:8a:50:df:c2:
f0:c4:98:23:69:e2:23:59:6a:84:9a:71:ee:f6:84:
57:3e:60:41:0c:e0:c1:5a:bd:39:c7:f7:e4:00:42:
99:36:29:2d:7f:01:25:cb:72:10:96:f4:f8:78:c1:
b8:c7:47:f4:6d:d2:3c:11:b0:8f:b0:e9:ac:84:c8:
f7:87:5f:e8:10:54:4d:37:48:e3:db:7c:c5:17:d0:
13:c8:cb:5c:98:c4:47:ad:20:cf:be:b8:ef:66:ae:
1f:0b:2b:e1:59:d9:15:c0:93:82:ab:49:69:5e:18:
93:4c:71:be:3c:7a:b0:fd:61:ec:73:ea:89:d2:90:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:34:AA:E0:A3:FE:F3:AC:2C:12:DC:75:24:48:94:6A:53:AD:90:D2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rTSq4KP-86wsEtx1JEiUalOtkNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
185.72.10.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0/24
193.124.94.0/24
193.124.206.0/24
194.58.58.0/24
194.58.67.0/24
194.58.155.0/24
194.87.1.0/24
194.87.3.0/24
194.87.6.0/23
194.87.53.0/24
194.87.59.0/24
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.152.0/24
194.87.160.0/24
194.87.163.0/24
194.87.166.0/24
194.87.179.0/24
194.87.182.0/23
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.133.12.0/24
195.133.19.0/24
195.133.24.0/23
195.133.29.0/24
195.133.40.0-195.133.42.255
195.133.50.0/23
195.133.58.0/24
195.133.72.0/24
195.133.80.0/24
195.133.82.0/24
195.133.92.0/23
212.192.241.0-212.192.242.255
212.192.247.0/24
212.192.249.0/24
212.192.251.0/24
212.193.0.0/24
212.193.10.0/24
212.193.15.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
16:56:28:ad:cd:b7:f4:4c:52:0d:96:66:33:6c:e5:77:40:b2:
62:34:04:89:61:a7:03:47:9c:06:11:55:83:d8:4e:0a:b0:da:
75:85:89:60:3c:50:05:1f:d8:08:18:c2:be:06:fc:b1:6b:db:
2b:7d:d8:07:39:47:d7:cb:97:fb:bb:91:32:73:96:a5:4b:a2:
a3:0d:a1:cc:02:2a:c1:01:cd:95:ad:33:51:63:b7:3e:dc:df:
28:80:13:c8:e3:93:e1:1b:a1:bb:46:2b:b7:e4:d0:ab:18:c4:
af:e3:9d:c8:0a:e5:85:3d:2c:fb:d3:f4:60:ae:95:49:11:17:
a2:28:46:59:b3:e2:df:3b:fd:d5:b5:43:ee:ba:9f:ad:66:14:
d7:89:b5:b9:1b:1c:71:b8:42:51:5f:11:13:b0:d1:6a:bd:dc:
df:c7:06:2c:5b:17:f8:c8:8c:6f:ac:bd:72:9e:b4:67:e2:fa:
fb:19:d9:86:13:41:73:c9:de:9c:b5:c3:4d:fe:f6:cd:b4:19:
78:c0:be:ea:78:aa:62:40:00:b6:5e:96:94:e2:4a:5e:bc:6d:
ed:0e:27:e1:d1:9c:a3:a8:66:f4:e7:50:31:5d:ae:cb:0e:7c:
24:0b:39:6d:e0:bd:46:ad:79:7c:79:4a:3c:9e:26:df:99:ac:
e6:fb:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:43:57 2026 by rpki-client