Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/exOzc_f_1cWjcEVnxwrLp6Pz6ek.roa
File: exOzc_f_1cWjcEVnxwrLp6Pz6ek.roa (raw, json)
Hash identifier: cpev4QlZRscUMeINHxmW95Jv6ZdGgZyRlFV1/FIBpVk=
Subject key identifier: 7B:13:B3:73:F7:FF:D5:C5:A3:70:45:67:C7:0A:CB:A7:A3:F3:E9:E9
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 019F1E81147B28AA0826CE9DF84F9886955E
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/exOzc_f_1cWjcEVnxwrLp6Pz6ek.roa
Signing time: Wed 01 Jul 2026 16:26:43 +0000
ROA not before: Wed 01 Jul 2026 16:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60664
IP address blocks: 145.14.130.0/24 maxlen: 24
147.75.144.0/20 maxlen: 24
147.75.144.0/24 maxlen: 24
147.75.145.0/24 maxlen: 24
147.75.146.0/24 maxlen: 24
147.75.147.0/24 maxlen: 24
147.75.150.0/24 maxlen: 24
147.75.155.0/24 maxlen: 24
147.75.158.0/24 maxlen: 24
153.92.64.0/24 maxlen: 24
153.92.65.0/24 maxlen: 24
153.92.66.0/24 maxlen: 24
153.92.67.0/24 maxlen: 24
153.92.68.0/24 maxlen: 24
153.92.69.0/24 maxlen: 24
153.92.70.0/24 maxlen: 24
153.92.71.0/24 maxlen: 24
153.92.124.0/24 maxlen: 24
153.92.160.0/24 maxlen: 24
153.92.161.0/24 maxlen: 24
153.92.162.0/24 maxlen: 24
153.92.163.0/24 maxlen: 24
153.92.164.0/24 maxlen: 24
153.92.165.0/24 maxlen: 24
153.92.166.0/24 maxlen: 24
153.92.167.0/24 maxlen: 24
153.92.168.0/24 maxlen: 24
153.92.169.0/24 maxlen: 24
153.92.170.0/24 maxlen: 24
153.92.171.0/24 maxlen: 24
153.92.172.0/24 maxlen: 24
153.92.173.0/24 maxlen: 24
153.92.174.0/24 maxlen: 24
153.92.175.0/24 maxlen: 24
157.97.76.0/23 maxlen: 23
157.97.78.0/23 maxlen: 23
157.180.192.0/24 maxlen: 24
157.180.193.0/24 maxlen: 24
157.180.194.0/24 maxlen: 24
157.180.195.0/24 maxlen: 24
157.180.196.0/23 maxlen: 23
157.180.196.0/24 maxlen: 24
157.180.197.0/24 maxlen: 24
157.180.198.0/23 maxlen: 23
157.180.198.0/24 maxlen: 24
157.180.199.0/24 maxlen: 24
158.220.64.0/21 maxlen: 24
185.27.180.0/23 maxlen: 23
185.27.180.0/24 maxlen: 24
185.27.181.0/24 maxlen: 24
185.27.182.0/23 maxlen: 23
185.27.182.0/24 maxlen: 24
185.27.183.0/24 maxlen: 24
185.74.64.0/23 maxlen: 23
185.74.64.0/24 maxlen: 24
185.74.65.0/24 maxlen: 24
185.74.66.0/23 maxlen: 23
185.74.66.0/24 maxlen: 24
185.74.67.0/24 maxlen: 24
2a04:3b40::/48 maxlen: 64
2a04:3b40:1::/48 maxlen: 64
2a04:3b40:2::/48 maxlen: 64
2a04:3b41::/48 maxlen: 64
2a04:3b41:2::/48 maxlen: 64
2a04:3b42::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:81:14:7b:28:aa:08:26:ce:9d:f8:4f:98:86:95:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Jul 1 16:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b13b373f7ffd5c5a3704567c70acba7a3f3e9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:5d:7f:c2:8a:f5:ee:28:e7:cb:ee:d8:6b:
77:a6:19:fe:f3:6a:19:fa:cb:0b:b4:90:ce:ef:9a:
b0:cb:3a:d2:2d:32:6c:75:b0:be:01:06:9d:37:79:
45:0d:4d:29:c9:c0:0b:57:22:d5:6a:00:a8:0d:44:
0d:67:a0:6f:c9:ce:88:15:d8:09:be:54:8d:7f:10:
3e:b5:38:8d:40:d5:01:f8:ba:d8:47:c1:d4:bc:66:
17:fe:a4:cb:65:e0:e9:48:da:e2:40:7b:5c:46:f3:
21:8d:6b:13:61:ab:b2:91:3b:28:56:d8:8a:64:13:
44:a2:9d:b1:6d:b1:34:9c:34:57:43:35:3d:de:ab:
d8:92:3a:d5:e4:43:24:7f:4e:11:b1:70:b8:26:67:
31:23:3e:e1:e1:83:1e:01:81:cd:c5:b5:5c:78:2d:
5a:37:20:ac:2c:3b:02:38:be:84:53:fe:6b:61:82:
16:b6:39:c8:67:ea:ec:1b:3c:8f:91:75:f1:d5:c4:
a1:5f:9a:7f:fe:99:a3:61:c3:e1:e1:39:f1:ae:41:
79:f0:b5:95:91:c3:78:0f:e2:c2:c3:9c:5a:13:ad:
25:8d:4b:87:ad:88:9b:77:1a:31:00:8a:d6:65:a1:
d9:b0:f7:ba:10:4d:3e:c2:88:b5:87:45:61:4e:fb:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:B3:73:F7:FF:D5:C5:A3:70:45:67:C7:0A:CB:A7:A3:F3:E9:E9
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/exOzc_f_1cWjcEVnxwrLp6Pz6ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.130.0/24
147.75.144.0/20
153.92.64.0/21
153.92.124.0/24
153.92.160.0/20
157.97.76.0/22
157.180.192.0/21
158.220.64.0/21
185.27.180.0/22
185.74.64.0/22
IPv6:
2a04:3b40::-2a04:3b40:2:ffff:ffff:ffff:ffff:ffff
2a04:3b41::/48
2a04:3b41:2::/48
2a04:3b42::/56
Signature Algorithm: sha256WithRSAEncryption
56:a3:32:4d:f3:63:b0:65:96:ca:94:83:0c:79:7a:12:f2:e8:
c5:b5:19:9b:45:d5:3e:95:3f:db:21:20:bd:28:07:43:82:9a:
8c:7d:37:e7:68:29:e5:02:f0:60:d8:6c:99:63:d0:f6:ef:c2:
23:3f:e1:40:51:b1:c2:ab:a7:8f:16:98:2b:94:bf:64:d7:10:
c2:fe:de:07:60:31:63:ab:7e:f8:21:04:62:14:4d:e0:33:4c:
42:36:c4:8d:1f:66:44:5e:98:b2:ca:8e:3b:d0:a9:7f:79:18:
1d:00:6f:f4:d3:4f:db:ee:bc:8a:cb:8e:44:4a:9b:2c:cb:af:
83:60:8b:5e:50:ab:d3:91:63:7d:37:c0:80:c3:ca:36:d8:a9:
00:7b:44:6c:54:a0:5b:09:ae:99:f2:8b:03:5d:59:62:f9:a5:
47:05:9a:43:68:b6:4e:42:6f:47:82:34:21:8f:ee:00:e7:8f:
e7:7e:74:5a:89:65:41:4c:9f:1d:bc:20:68:03:e6:19:9b:c5:
51:47:62:0b:3c:a7:3d:0c:6d:ea:27:89:70:28:9a:b3:c0:5d:
ee:51:ec:24:3f:41:56:29:83:94:40:5b:20:87:b5:f9:77:ab:
d6:6b:00:15:fa:38:c5:c1:ae:99:b2:0e:23:eb:55:17:00:9b:
e5:3e:9b:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:50 2026 by rpki-client