Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/VOjaP0vPiACD0uS-bICx9WGuZeI.roa
File: VOjaP0vPiACD0uS-bICx9WGuZeI.roa (raw, json)
Hash identifier: 9j4hZQlNE98hodvZ6eidQ8K7TvDH7tzFrNjO5UbEpFU=
Subject key identifier: 54:E8:DA:3F:4B:CF:88:00:83:D2:E4:BE:6C:80:B1:F5:61:AE:65:E2
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019FAE20379E18D0BBD0DEF7863229E225E3
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/VOjaP0vPiACD0uS-bICx9WGuZeI.roa
Signing time: Wed 29 Jul 2026 13:46:14 +0000
ROA not before: Wed 29 Jul 2026 13:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 186.247.72.0/24 maxlen: 24
186.247.185.0/24 maxlen: 24
187.13.19.0/24 maxlen: 24
187.13.210.0/24 maxlen: 24
187.13.215.0/24 maxlen: 24
187.13.216.0/24 maxlen: 24
187.14.116.0/24 maxlen: 24
187.14.117.0/24 maxlen: 24
187.15.100.0/24 maxlen: 24
187.15.102.0/24 maxlen: 24
187.15.117.0/24 maxlen: 24
187.15.119.0/24 maxlen: 24
187.15.134.0/24 maxlen: 24
187.15.135.0/24 maxlen: 24
187.15.136.0/24 maxlen: 24
187.15.162.0/24 maxlen: 24
187.40.17.0/24 maxlen: 24
187.40.18.0/24 maxlen: 24
187.40.226.0/24 maxlen: 24
2a13:240:300::/40 maxlen: 40
2a13:240:500::/40 maxlen: 40
2a13:240:700::/40 maxlen: 40
2a13:240:900::/40 maxlen: 40
2a13:240:b00::/40 maxlen: 40
2a13:240:2800::/40 maxlen: 40
2a13:240:2e00::/40 maxlen: 40
2a13:240:3200::/40 maxlen: 40
2a13:240:4d00::/40 maxlen: 40
2a13:240:5100::/40 maxlen: 40
2a13:240:5700::/40 maxlen: 40
2a13:240:8300::/40 maxlen: 40
2a13:240:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:20:37:9e:18:d0:bb:d0:de:f7:86:32:29:e2:25:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jul 29 13:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54e8da3f4bcf880083d2e4be6c80b1f561ae65e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:d5:8d:68:a1:00:16:df:03:dc:16:47:05:
45:cc:2a:81:b2:76:e2:cf:82:e1:39:73:2c:54:fd:
26:df:6b:13:f1:47:a4:9f:a1:65:d6:d9:06:2f:29:
53:e9:56:5f:33:3f:15:8a:c4:c3:35:3c:10:6f:22:
b1:2c:fe:a5:69:52:e4:f2:8e:4b:ac:1b:c4:d9:3e:
9e:6b:f5:f6:25:29:28:7e:11:47:c3:5e:23:74:15:
a9:1a:d0:54:21:44:b2:a1:ae:28:a7:ef:ef:a3:59:
33:dd:fa:26:82:c8:7f:a0:29:a5:92:df:dd:61:be:
fc:02:a2:0d:e7:29:e1:9b:72:f9:9d:bc:f6:b8:b0:
25:42:dc:18:bf:6a:d7:64:7b:03:35:aa:c4:45:6f:
74:a0:24:77:c9:02:86:52:01:98:c9:87:90:85:54:
2e:f3:e9:c2:cf:f7:63:40:f9:2b:68:1f:94:db:ce:
4d:77:69:05:c7:1f:74:3c:ee:2d:10:73:49:25:d2:
d7:08:70:59:29:b6:36:aa:50:73:c6:da:cc:f5:6e:
c8:03:2d:ee:a1:55:4d:9f:86:18:e7:fb:5b:79:00:
61:9f:33:0d:6b:69:b6:29:57:95:e3:ae:a9:9a:c3:
c9:14:04:82:2d:3b:99:69:de:e2:38:62:15:bc:f5:
7b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E8:DA:3F:4B:CF:88:00:83:D2:E4:BE:6C:80:B1:F5:61:AE:65:E2
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/VOjaP0vPiACD0uS-bICx9WGuZeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.72.0/24
186.247.185.0/24
187.13.19.0/24
187.13.210.0/24
187.13.215.0-187.13.216.255
187.14.116.0/23
187.15.100.0/24
187.15.102.0/24
187.15.117.0/24
187.15.119.0/24
187.15.134.0-187.15.136.255
187.15.162.0/24
187.40.17.0-187.40.18.255
187.40.226.0/24
IPv6:
2a13:240:300::/40
2a13:240:500::/40
2a13:240:700::/40
2a13:240:900::/40
2a13:240:b00::/40
2a13:240:2800::/40
2a13:240:2e00::/40
2a13:240:3200::/40
2a13:240:4d00::/40
2a13:240:5100::/40
2a13:240:5700::/40
2a13:240:8300::/40
2a13:240:9000::/40
Signature Algorithm: sha256WithRSAEncryption
a3:bf:c9:c4:7a:60:bf:c8:41:fa:e7:fa:bf:68:08:9c:83:f3:
cb:7f:2d:b3:4a:e5:9f:cd:db:b5:5e:64:11:64:c7:25:2b:a7:
5b:65:b4:a7:37:85:be:99:3c:8c:13:40:67:5d:9d:46:6a:af:
c2:c2:bb:00:ce:b6:98:5f:cb:1e:5c:3b:b0:1e:d2:07:78:44:
04:e5:12:8c:e2:29:b9:58:9b:13:dd:6b:47:17:99:fb:9b:02:
e2:d0:a6:6b:d5:f6:3d:29:8d:c3:d8:e4:45:7d:7e:0d:10:0a:
7f:62:3e:96:83:7b:56:09:ff:b1:ab:10:8b:3f:7c:94:e8:e7:
af:12:11:d6:3e:96:d8:f4:82:06:d1:88:60:f9:8d:d2:2b:ac:
f7:e2:6b:c2:33:a9:7a:58:2c:71:ae:a0:a8:83:cc:6b:b9:0d:
6d:76:76:24:db:99:42:95:f2:96:a2:ea:f5:16:f6:09:53:8f:
ba:5b:3a:ca:55:1a:e2:67:31:3f:ea:5c:8d:ed:b7:c7:e8:48:
63:e6:0b:68:2c:8e:98:fc:9e:63:06:ad:fb:a1:0f:3d:77:b7:
79:3a:fc:66:24:a7:5a:0b:8f:bf:b5:db:41:07:ca:c8:9c:1c:
ac:0f:85:99:d4:6d:ea:e3:54:a7:af:92:3f:da:6a:6f:32:87:
3f:28:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:08 2026 by rpki-client