Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/F0porKGzWlYCBZw7Xu2saUWhl1A.roa
File: F0porKGzWlYCBZw7Xu2saUWhl1A.roa (raw, json)
Hash identifier: ZdCBSVOkMEDJhhwiLrNFHC3L84d8NO2l84eD5OsPqu4=
Subject key identifier: 17:4A:68:AC:A1:B3:5A:56:02:05:9C:3B:5E:ED:AC:69:45:A1:97:50
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019F75243652BDC79003658337EAF25CB910
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/F0porKGzWlYCBZw7Xu2saUWhl1A.roa
Signing time: Sat 18 Jul 2026 12:12:15 +0000
ROA not before: Sat 18 Jul 2026 12:12:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34927
IP address blocks: 45.134.88.0/24 maxlen: 24
45.134.89.0/24 maxlen: 24
45.134.91.0/24 maxlen: 24
143.246.140.0/22 maxlen: 24
193.37.139.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.251.0/24 maxlen: 24
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:1034::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1059::/48 maxlen: 48
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1072::/48 maxlen: 48
2a0c:9a40:1074::/48 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:2000::/40 maxlen: 48
2a0c:9a40:2100::/40 maxlen: 48
2a0c:9a40:2200::/40 maxlen: 48
2a0c:9a40:2300::/40 maxlen: 48
2a0c:9a40:2328::/48 maxlen: 48
2a0c:9a40:2400::/40 maxlen: 48
2a0c:9a40:2500::/40 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2700::/40 maxlen: 48
2a0c:9a40:2800::/40 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:2b00::/40 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2d00::/40 maxlen: 48
2a0c:9a40:2e00::/40 maxlen: 48
2a0c:9a40:2f00::/40 maxlen: 48
2a0c:9a40:3000::/36 maxlen: 48
2a0c:9a40:8a90::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:24:36:52:bd:c7:90:03:65:83:37:ea:f2:5c:b9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 18 12:12:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=174a68aca1b35a5602059c3b5eedac6945a19750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:43:1b:2d:5d:d6:93:74:ef:5f:a1:a6:24:
a7:59:31:75:e7:b6:e5:22:86:52:9b:27:cf:fa:8f:
d2:49:75:a9:25:2c:7a:1b:d6:dd:e0:ae:62:99:c9:
08:21:a7:1f:1a:19:3c:ba:a0:c5:58:fe:a7:fc:0b:
48:d5:1a:be:28:1c:82:4c:f2:44:18:4b:3b:97:cf:
30:86:b3:92:55:ab:a1:7b:27:4b:6e:73:10:40:44:
50:b6:a1:a0:ff:19:24:0c:92:56:22:ab:e5:1b:b2:
0a:c0:48:6b:e6:a7:a1:95:78:00:d1:69:c9:8a:0f:
74:90:2d:b2:b2:c2:3c:15:89:7f:79:f3:b4:a2:d4:
bf:6b:b6:de:cf:86:d3:55:16:27:b5:2b:4b:72:75:
b3:9a:29:3f:11:fd:27:77:f6:85:65:d4:c4:f5:1d:
bb:f0:fd:42:c6:f9:7c:4b:c0:50:f9:44:9a:33:02:
67:67:f0:84:8d:36:6f:c7:05:a8:2f:86:e0:41:3e:
74:99:2a:18:24:67:75:61:4f:02:7e:ca:a1:3b:a4:
90:f6:41:2e:84:76:12:eb:94:32:a7:45:f6:bb:d3:
04:15:0e:73:b1:f5:3c:7b:1e:4e:77:12:12:75:71:
40:6f:91:3a:d8:80:94:82:da:70:bd:81:a5:52:d3:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4A:68:AC:A1:B3:5A:56:02:05:9C:3B:5E:ED:AC:69:45:A1:97:50
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/F0porKGzWlYCBZw7Xu2saUWhl1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.88.0/23
45.134.91.0/24
143.246.140.0/22
193.37.139.0/24
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1059:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2000::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::-2a0c:9a40:3fff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:8a90::/48
2a0c:9a44::/48
Signature Algorithm: sha256WithRSAEncryption
7c:e5:16:85:29:99:6b:b2:41:02:48:86:1b:51:f6:94:e8:81:
ee:a5:b0:bf:81:8f:b2:8e:5f:25:67:ec:13:06:55:fa:6b:60:
62:83:83:41:3e:04:a0:27:16:a7:d4:71:f1:f3:a2:6a:56:e3:
fd:0a:77:19:e1:16:b3:63:55:2f:11:eb:c3:44:0a:bd:49:9e:
ba:3c:b5:79:46:a0:7e:fa:b7:bd:72:4e:4b:46:41:ec:94:3b:
d9:c2:6d:b3:d9:20:6f:bc:d3:0f:a2:3a:6c:8f:a6:90:e7:b3:
f9:4c:5f:ba:4c:17:d7:52:84:86:f1:bf:13:c8:66:a6:ff:b0:
9b:82:57:a7:75:3d:66:33:8d:6c:78:07:f3:21:61:29:dc:e5:
a9:91:21:0e:dd:10:88:5d:d2:ef:ca:fd:0b:7c:bb:9f:17:ad:
22:42:f1:fb:96:98:fa:00:a1:c4:09:64:23:76:80:88:a0:c4:
27:67:e8:38:d6:f3:47:2e:15:15:01:a6:11:a0:dd:e5:dc:b5:
cc:d4:af:74:13:98:a0:e3:79:f9:80:89:13:9b:00:a4:3d:09:
b9:34:25:5d:56:64:53:f6:6f:54:e5:68:66:39:dd:71:54:d3:
b7:18:fb:20:81:4c:f2:d2:79:49:40:12:7b:f8:c7:11:12:8f:
91:b7:26:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:30 2026 by rpki-client