Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/YEoEVaZZgvqaYQs0c-KsGpSetUI.roa
File: YEoEVaZZgvqaYQs0c-KsGpSetUI.roa (raw, json)
Hash identifier: skVAsfQ5Llg9Q4qr15jtmY0awC3+4GF+G11QXTFhMHI=
Subject key identifier: 60:4A:04:55:A6:59:82:FA:9A:61:0B:34:73:E2:AC:1A:94:9E:B5:42
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 019FD12D014707A5FB749463B1E23BC853B1
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/YEoEVaZZgvqaYQs0c-KsGpSetUI.roa
Signing time: Wed 05 Aug 2026 09:06:55 +0000
ROA not before: Wed 05 Aug 2026 09:06:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31638
IP address blocks: 5.144.184.0/21 maxlen: 24
5.144.184.0/22 maxlen: 22
5.144.188.0/22 maxlen: 22
5.144.188.0/24 maxlen: 24
5.144.190.0/24 maxlen: 24
37.156.96.0/22 maxlen: 23
37.156.96.0/23 maxlen: 23
37.156.98.0/23 maxlen: 23
37.156.148.0/22 maxlen: 24
37.156.148.0/23 maxlen: 23
37.156.150.0/23 maxlen: 23
37.156.168.0/22 maxlen: 24
37.156.168.0/23 maxlen: 23
37.156.170.0/23 maxlen: 23
37.156.208.0/22 maxlen: 24
37.156.208.0/23 maxlen: 23
37.156.210.0/23 maxlen: 23
46.255.80.0/21 maxlen: 24
46.255.80.0/22 maxlen: 22
46.255.80.0/24 maxlen: 24
46.255.83.0/24 maxlen: 24
46.255.84.0/22 maxlen: 22
46.255.85.0/24 maxlen: 24
86.104.6.0/24 maxlen: 24
86.104.229.0/24 maxlen: 24
86.105.8.0/24 maxlen: 24
86.105.179.0/24 maxlen: 24
89.33.232.0/24 maxlen: 24
89.34.6.0/24 maxlen: 24
89.39.92.0/24 maxlen: 24
89.39.224.0/20 maxlen: 21
89.39.224.0/21 maxlen: 21
89.39.232.0/21 maxlen: 21
89.42.230.0/24 maxlen: 24
89.44.206.0/24 maxlen: 24
89.45.24.0/21 maxlen: 24
89.45.24.0/24 maxlen: 24
89.45.25.0/24 maxlen: 24
89.45.26.0/24 maxlen: 24
89.45.27.0/24 maxlen: 24
89.45.95.0/24 maxlen: 24
89.45.216.0/22 maxlen: 23
89.47.32.0/23 maxlen: 24
93.113.89.0/24 maxlen: 24
93.115.170.0/23 maxlen: 24
93.115.170.0/24 maxlen: 24
93.115.171.0/24 maxlen: 24
93.118.37.0/24 maxlen: 24
94.177.18.0/23 maxlen: 23
94.177.151.0/24 maxlen: 24
176.223.164.0/24 maxlen: 24
185.82.168.0/22 maxlen: 23
185.82.168.0/23 maxlen: 23
185.82.169.0/24 maxlen: 24
185.82.170.0/23 maxlen: 23
185.82.170.0/24 maxlen: 24
185.82.171.0/24 maxlen: 24
188.209.80.0/20 maxlen: 24
188.209.80.0/21 maxlen: 21
188.209.80.0/24 maxlen: 24
188.209.81.0/24 maxlen: 24
188.209.82.0/24 maxlen: 24
188.209.83.0/24 maxlen: 24
188.209.86.0/24 maxlen: 24
188.209.87.0/24 maxlen: 24
188.209.88.0/21 maxlen: 21
188.209.88.0/24 maxlen: 24
188.209.89.0/24 maxlen: 24
188.210.239.0/24 maxlen: 24
188.212.153.0/24 maxlen: 24
188.215.44.0/22 maxlen: 24
188.215.45.0/24 maxlen: 24
188.215.65.0/24 maxlen: 24
188.215.247.0/24 maxlen: 24
188.215.248.0/24 maxlen: 24
188.241.4.0/23 maxlen: 24
188.241.190.0/23 maxlen: 24
195.62.160.0/19 maxlen: 20
195.62.160.0/20 maxlen: 20
195.62.176.0/20 maxlen: 20
2a02:20d8::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 12:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:2d:01:47:07:a5:fb:74:94:63:b1:e2:3b:c8:53:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Aug 5 09:06:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=604a0455a65982fa9a610b3473e2ac1a949eb542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:68:d0:0b:a4:d1:59:37:cb:7d:28:1a:ce:
4c:e1:a6:91:77:aa:c2:d8:3d:ca:dc:39:55:3e:8c:
b8:88:a1:71:ac:ba:3f:b1:1f:5d:87:4f:07:74:63:
e7:83:46:09:b1:dd:f3:d7:5a:a5:de:fb:2a:f4:f2:
6a:d1:96:7c:10:0d:0d:93:e2:cc:1d:20:5f:96:3c:
b3:b9:6e:e3:28:67:92:75:d6:15:24:5e:67:cb:ff:
f6:07:74:0e:d9:62:c4:1a:25:7c:10:22:af:04:8b:
e4:f3:16:c4:57:de:c6:7f:33:f8:63:19:76:78:bd:
ee:c5:8a:89:42:1a:15:4a:ad:86:5c:79:3b:6f:5a:
f7:01:cb:72:c2:74:27:c3:29:18:c1:d9:a6:97:4f:
1c:d6:83:c5:5c:d5:0b:3f:f0:75:12:a9:65:e8:03:
cc:00:2c:a5:1d:dd:17:92:f0:92:60:2e:76:71:89:
ee:d4:de:d4:91:c4:14:e5:dd:e1:39:d4:f1:80:1f:
5b:aa:12:bf:c6:e2:2a:53:d5:b2:af:bd:a7:0d:d0:
37:5b:2e:a9:6c:e5:ed:a2:80:1a:23:86:18:d8:f4:
48:24:0e:60:5d:b9:69:f7:a7:56:2e:ea:f5:7f:14:
a2:96:1a:be:48:cb:eb:dd:4e:c3:c0:af:13:71:d9:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:04:55:A6:59:82:FA:9A:61:0B:34:73:E2:AC:1A:94:9E:B5:42
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/YEoEVaZZgvqaYQs0c-KsGpSetUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.184.0/21
37.156.96.0/22
37.156.148.0/22
37.156.168.0/22
37.156.208.0/22
46.255.80.0/21
86.104.6.0/24
86.104.229.0/24
86.105.8.0/24
86.105.179.0/24
89.33.232.0/24
89.34.6.0/24
89.39.92.0/24
89.39.224.0/20
89.42.230.0/24
89.44.206.0/24
89.45.24.0/21
89.45.95.0/24
89.45.216.0/22
89.47.32.0/23
93.113.89.0/24
93.115.170.0/23
93.118.37.0/24
94.177.18.0/23
94.177.151.0/24
176.223.164.0/24
185.82.168.0/22
188.209.80.0/20
188.210.239.0/24
188.212.153.0/24
188.215.44.0/22
188.215.65.0/24
188.215.247.0-188.215.248.255
188.241.4.0/23
188.241.190.0/23
195.62.160.0/19
IPv6:
2a02:20d8::/29
Signature Algorithm: sha256WithRSAEncryption
60:a4:f4:3b:9e:c0:fa:6b:c0:96:2f:9f:12:be:9c:d2:d9:fc:
90:ee:07:a5:63:c5:3a:18:9a:2a:60:1e:d9:20:83:9e:8d:32:
9d:ea:6c:9f:ae:1b:47:d9:c4:1d:d7:a9:55:9b:0d:ad:26:e8:
0e:dc:41:9c:54:9a:6a:4c:e2:dc:48:ca:d9:da:10:8c:2f:24:
0b:fd:e5:7c:c7:bb:85:17:f8:f0:32:97:94:80:a3:76:78:0a:
81:a8:83:61:ff:1c:dd:bc:05:9f:30:42:fa:f2:47:d1:dd:5b:
39:ba:3a:7e:ad:ac:70:09:ec:e6:20:d1:23:2c:8e:85:a8:75:
68:30:c4:57:f0:37:e3:dd:9a:23:57:a2:94:3d:90:c3:f5:e7:
3d:26:6b:d5:43:e1:0c:13:80:b3:f7:7b:5c:6a:62:73:01:11:
58:06:cc:7d:a5:22:c5:5a:74:31:2e:16:74:ac:ee:08:08:fc:
d8:d9:7c:a4:81:6e:24:0a:f6:91:35:0f:4c:0a:18:7f:10:e4:
0e:d5:3f:ee:a4:eb:cc:8e:0d:ce:81:80:05:76:6e:ec:e3:b1:
ca:3b:91:ec:da:f4:33:19:56:3e:8d:e8:b5:51:ca:ca:5e:8d:
18:d7:2a:94:b5:7a:27:4c:00:1a:b5:5f:12:19:8b:a5:c0:ff:
7d:19:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 21:25:18 2026 by rpki-client