Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/4o---97gZVBtyrkd7DCOKVWHe3s.roa
File: 4o---97gZVBtyrkd7DCOKVWHe3s.roa (raw, json)
Hash identifier: nuFNjtSMOLZpbag0RuWQmdke4RS8v2vbpcLzGcpI1hA=
Subject key identifier: E2:8F:BE:FB:DE:E0:65:50:6D:CA:B9:1D:EC:30:8E:29:55:87:7B:7B
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 019ED48132AFCAA714108B7AFD046481A53E
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/4o---97gZVBtyrkd7DCOKVWHe3s.roa
Signing time: Wed 17 Jun 2026 07:34:57 +0000
ROA not before: Wed 17 Jun 2026 07:34:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24940
IP address blocks: 2.28.0.0/16 maxlen: 24
2.29.0.0/16 maxlen: 24
5.9.0.0/16 maxlen: 24
5.75.128.0/17 maxlen: 24
5.161.0.0/16 maxlen: 24
23.88.0.0/17 maxlen: 24
37.27.0.0/16 maxlen: 24
46.4.0.0/16 maxlen: 24
46.62.128.0/17 maxlen: 24
46.224.0.0/15 maxlen: 24
49.12.0.0/16 maxlen: 24
49.13.0.0/16 maxlen: 24
62.238.0.0/17 maxlen: 24
65.21.0.0/16 maxlen: 24
65.108.0.0/16 maxlen: 24
65.109.0.0/16 maxlen: 24
77.42.0.0/17 maxlen: 24
78.46.0.0/15 maxlen: 24
85.10.192.0/18 maxlen: 24
88.99.0.0/16 maxlen: 24
88.198.0.0/16 maxlen: 24
89.167.0.0/17 maxlen: 24
91.98.0.0/16 maxlen: 24
91.99.0.0/16 maxlen: 24
91.107.128.0/17 maxlen: 24
94.130.0.0/16 maxlen: 24
95.216.0.0/16 maxlen: 24
95.217.0.0/16 maxlen: 24
116.202.0.0/16 maxlen: 24
116.203.0.0/16 maxlen: 24
128.140.0.0/17 maxlen: 24
135.181.0.0/16 maxlen: 24
138.199.128.0/17 maxlen: 24
142.132.128.0/17 maxlen: 24
157.90.0.0/16 maxlen: 24
157.180.0.0/17 maxlen: 24
159.69.0.0/16 maxlen: 24
162.55.0.0/16 maxlen: 24
167.233.0.0/16 maxlen: 24
167.235.0.0/16 maxlen: 24
168.119.0.0/16 maxlen: 24
176.9.0.0/16 maxlen: 24
178.63.0.0/16 maxlen: 24
178.104.0.0/15 maxlen: 24
185.12.64.0/22 maxlen: 24
188.34.128.0/17 maxlen: 24
188.40.0.0/16 maxlen: 24
188.245.0.0/16 maxlen: 24
195.201.0.0/16 maxlen: 24
204.168.128.0/17 maxlen: 24
213.133.96.0/19 maxlen: 24
213.239.192.0/18 maxlen: 24
2a01:4f8::/32 maxlen: 48
2a01:4f9::/32 maxlen: 48
2a01:4ff:ff01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:81:32:af:ca:a7:14:10:8b:7a:fd:04:64:81:a5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jun 17 07:34:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e28fbefbdee065506dcab91dec308e2955877b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:98:15:a8:f2:1e:a0:61:da:60:fd:33:d1:
f8:7b:2a:4c:9f:b6:8d:ae:35:14:c3:50:27:48:46:
ec:8e:82:e2:dd:8b:d9:76:b8:bf:4f:75:44:d0:e3:
48:d9:ae:b5:b5:ee:06:b0:ba:d9:b2:f4:7a:17:ee:
d7:d6:04:69:52:ec:95:ce:d0:9b:17:8b:94:6a:3f:
82:13:08:b5:fd:56:e5:22:85:16:3e:5e:4a:a3:21:
97:18:b5:74:ca:50:10:83:4b:0b:f2:d8:50:72:ee:
94:f2:cc:28:c0:85:33:df:7b:0e:24:bc:9e:d7:9f:
cb:0f:62:61:1f:41:6e:61:c0:f1:57:68:79:6d:73:
47:95:93:fd:28:fa:18:c9:36:82:23:af:81:b3:8c:
6d:1f:55:10:95:1c:ef:3c:1c:f8:a0:c9:71:e7:c3:
43:89:16:00:81:5b:4f:da:c5:a7:20:9c:25:1a:cf:
98:5c:5e:4a:c5:59:4b:64:54:8a:34:4b:0b:aa:df:
b4:d8:60:c4:a5:38:c2:23:fb:e9:a8:90:1a:19:c9:
6f:32:6c:f6:fc:49:fa:ba:28:93:f9:94:c1:c6:4a:
3b:b2:38:e0:4a:86:e9:2d:e5:ae:69:0a:73:b6:b3:
75:8b:57:dd:f8:40:00:a3:99:b2:88:7e:8d:76:cb:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8F:BE:FB:DE:E0:65:50:6D:CA:B9:1D:EC:30:8E:29:55:87:7B:7B
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/4o---97gZVBtyrkd7DCOKVWHe3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.28.0.0/15
5.9.0.0/16
5.75.128.0/17
5.161.0.0/16
23.88.0.0/17
37.27.0.0/16
46.4.0.0/16
46.62.128.0/17
46.224.0.0/15
49.12.0.0/15
62.238.0.0/17
65.21.0.0/16
65.108.0.0/15
77.42.0.0/17
78.46.0.0/15
85.10.192.0/18
88.99.0.0/16
88.198.0.0/16
89.167.0.0/17
91.98.0.0/15
91.107.128.0/17
94.130.0.0/16
95.216.0.0/15
116.202.0.0/15
128.140.0.0/17
135.181.0.0/16
138.199.128.0/17
142.132.128.0/17
157.90.0.0/16
157.180.0.0/17
159.69.0.0/16
162.55.0.0/16
167.233.0.0/16
167.235.0.0/16
168.119.0.0/16
176.9.0.0/16
178.63.0.0/16
178.104.0.0/15
185.12.64.0/22
188.34.128.0/17
188.40.0.0/16
188.245.0.0/16
195.201.0.0/16
204.168.128.0/17
213.133.96.0/19
213.239.192.0/18
IPv6:
2a01:4f8::/31
2a01:4ff:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
a2:4c:2b:8c:4c:0c:64:b2:11:30:3a:e4:4d:3d:a9:68:ab:c2:
0a:37:41:90:20:cb:4b:04:36:84:28:75:27:7b:b3:11:fb:8c:
c4:1a:84:ee:30:83:f5:6f:1c:f9:49:fb:a5:20:93:43:ef:53:
e5:4a:92:fd:37:6b:14:d5:35:fe:fc:02:b8:55:ee:e3:2c:6a:
f2:c0:29:ea:d2:44:1d:e9:d5:38:46:e3:85:28:77:a5:8c:93:
a1:52:cc:6f:d7:13:42:21:10:88:73:ec:cc:f5:25:57:13:6c:
14:45:14:ab:d2:f8:a1:80:96:79:a4:d6:a7:1a:34:c6:ba:88:
f1:d8:05:82:39:3e:60:f7:15:d1:73:0b:cf:50:66:60:40:2d:
10:fb:4d:76:57:66:ab:39:32:54:86:89:31:dc:97:4f:42:c1:
55:8a:8e:65:8a:61:60:6b:de:2f:2b:25:6e:99:c9:0f:9b:66:
72:4d:5f:ee:7e:15:11:28:11:43:b6:cb:d5:dc:51:5d:4e:a9:
1d:35:48:ae:73:39:16:b3:83:93:2f:90:8e:72:88:c8:34:b3:
3c:7f:59:72:40:55:25:a8:59:f7:34:98:84:00:c2:38:3d:e3:
84:af:11:73:4d:b1:38:b7:a3:df:83:2d:77:98:5a:77:81:32:
81:c2:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:53 2026 by rpki-client