Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/uL4cGH9AG30pYk7CgMWU5cvovug.roa
File: uL4cGH9AG30pYk7CgMWU5cvovug.roa (raw, json)
Hash identifier: YQx6iN3YW6G5UzZHEmhYZJ0tBhIhkpMoitrqcMp/AxA=
Subject key identifier: B8:BE:1C:18:7F:40:1B:7D:29:62:4E:C2:80:C5:94:E5:CB:E8:BE:E8
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A16403B5B4FBD62C0CD352C4B735E307F8
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/uL4cGH9AG30pYk7CgMWU5cvovug.roa
Signing time: Thu 22 Oct 2026 14:28:47 +0000
ROA not before: Thu 22 Oct 2026 14:28:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8315
IP address blocks: 5.100.224.0/22 maxlen: 24
5.100.228.0/23 maxlen: 24
79.99.184.0/21 maxlen: 24
83.98.128.0/19 maxlen: 24
83.98.166.0/23 maxlen: 24
83.98.168.0/21 maxlen: 24
83.98.176.0/20 maxlen: 24
83.98.200.0/22 maxlen: 24
83.98.208.0/20 maxlen: 24
85.92.128.0/21 maxlen: 24
85.92.138.0/23 maxlen: 24
85.92.144.0/22 maxlen: 24
85.158.160.0/21 maxlen: 24
85.222.192.0/22 maxlen: 24
85.222.196.0/23 maxlen: 24
89.18.160.0/22 maxlen: 24
89.18.168.0/21 maxlen: 24
89.18.180.0/22 maxlen: 24
89.30.128.0/21 maxlen: 24
89.30.144.0/21 maxlen: 24
89.30.152.0/22 maxlen: 24
89.30.156.0/23 maxlen: 24
89.30.168.0/22 maxlen: 24
89.30.192.0/22 maxlen: 24
89.30.196.0/23 maxlen: 24
89.30.208.0/20 maxlen: 24
89.30.224.0/21 maxlen: 24
91.200.48.0/23 maxlen: 24
91.200.51.0/24 maxlen: 24
91.216.113.0/24 maxlen: 24
91.216.141.0/24 maxlen: 24
93.175.176.0/20 maxlen: 24
94.198.24.0/21 maxlen: 24
134.0.88.0/21 maxlen: 24
162.248.196.0/22 maxlen: 24
162.251.32.0/21 maxlen: 24
176.62.192.0/21 maxlen: 24
178.251.192.0/21 maxlen: 24
185.12.132.0/22 maxlen: 24
185.30.236.0/22 maxlen: 24
185.38.156.0/22 maxlen: 24
185.74.76.0/24 maxlen: 24
185.74.77.0/24 maxlen: 24
185.77.120.0/22 maxlen: 24
185.113.52.0/22 maxlen: 24
185.113.196.0/22 maxlen: 24
185.113.224.0/22 maxlen: 24
185.116.72.0/22 maxlen: 24
193.34.150.0/23 maxlen: 24
194.105.128.0/23 maxlen: 24
194.165.34.0/24 maxlen: 24
195.234.173.0/24 maxlen: 24
213.171.128.0/19 maxlen: 24
213.171.144.0/20 maxlen: 24
213.189.0.0/21 maxlen: 24
213.189.16.0/20 maxlen: 20
213.189.20.0/24 maxlen: 24
213.189.28.0/22 maxlen: 24
213.214.96.0/24 maxlen: 24
213.214.101.0/24 maxlen: 24
213.214.103.0/24 maxlen: 24
213.214.107.0/24 maxlen: 24
213.214.112.0/20 maxlen: 24
213.247.32.0/21 maxlen: 24
213.247.40.0/22 maxlen: 24
213.247.48.0/23 maxlen: 24
213.247.52.0/24 maxlen: 24
213.247.58.0/24 maxlen: 24
213.247.59.0/24 maxlen: 24
217.195.112.0/20 maxlen: 24
2001:16f8::/32 maxlen: 48
2a00:1bd8::/32 maxlen: 48
2a01:40e0::/32 maxlen: 48
2a02:20b0::/32 maxlen: 32
2a02:20b1::/32 maxlen: 32
2a02:2858::/29 maxlen: 48
2a02:2858:200::/40 maxlen: 40
2a02:2858:300::/40 maxlen: 40
2a02:2858:400::/40 maxlen: 40
2a02:2858:500::/40 maxlen: 40
2a03:5500::/31 maxlen: 48
2a0d:5040::/29 maxlen: 29
2a0d:5040::/32 maxlen: 32
2a0d:5041::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:03:b5:b4:fb:d6:2c:0c:d3:52:c4:b7:35:e3:07:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 22 14:28:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8be1c187f401b7d29624ec280c594e5cbe8bee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:26:df:77:8c:c3:c1:b1:98:66:db:46:ac:
f7:0a:e4:5c:ce:32:1a:70:86:ee:30:69:e0:1b:76:
d2:f3:94:8f:e1:0e:3d:fb:c9:40:df:d4:a4:ad:75:
76:20:49:2d:f6:a2:f6:0e:04:12:83:1f:7d:65:e2:
93:06:3c:90:41:50:8d:89:23:e7:9f:b9:fa:e7:ec:
06:55:a6:ef:3b:d8:2c:24:4e:66:a5:fc:55:61:40:
00:58:39:ff:10:5c:2c:f1:f9:64:76:91:bc:84:7f:
4f:19:a0:4c:6c:19:0b:05:39:30:d1:e8:bf:b7:fd:
2a:32:77:fb:14:fa:73:6a:d6:05:ee:3d:d2:b8:94:
38:e6:2a:88:2f:13:df:7f:0c:f2:7c:76:b1:0e:91:
59:5d:88:a9:d7:eb:3b:04:f0:9e:7d:41:e0:c2:b1:
85:9e:62:30:00:df:b7:4a:7c:4b:d3:44:71:1e:c2:
a4:f0:3f:0d:ec:49:89:79:17:ce:16:d3:76:48:56:
91:2f:b3:8c:72:2e:0c:50:75:ad:98:25:68:30:e5:
91:64:6c:ca:a2:34:73:bd:65:94:d7:02:73:db:58:
a6:74:17:5e:d2:3a:c6:b7:96:3d:a4:03:f5:48:a3:
c6:ee:84:97:4b:1d:dd:a2:01:96:a5:05:e8:92:96:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BE:1C:18:7F:40:1B:7D:29:62:4E:C2:80:C5:94:E5:CB:E8:BE:E8
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/uL4cGH9AG30pYk7CgMWU5cvovug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.224.0-5.100.229.255
79.99.184.0/21
83.98.128.0/19
83.98.166.0-83.98.191.255
83.98.200.0/22
83.98.208.0/20
85.92.128.0/21
85.92.138.0/23
85.92.144.0/22
85.158.160.0/21
85.222.192.0-85.222.197.255
89.18.160.0/22
89.18.168.0/21
89.18.180.0/22
89.30.128.0/21
89.30.144.0-89.30.157.255
89.30.168.0/22
89.30.192.0-89.30.197.255
89.30.208.0-89.30.231.255
91.200.48.0/23
91.200.51.0/24
91.216.113.0/24
91.216.141.0/24
93.175.176.0/20
94.198.24.0/21
134.0.88.0/21
162.248.196.0/22
162.251.32.0/21
176.62.192.0/21
178.251.192.0/21
185.12.132.0/22
185.30.236.0/22
185.38.156.0/22
185.74.76.0/23
185.77.120.0/22
185.113.52.0/22
185.113.196.0/22
185.113.224.0/22
185.116.72.0/22
193.34.150.0/23
194.105.128.0/23
194.165.34.0/24
195.234.173.0/24
213.171.128.0/19
213.189.0.0/21
213.189.16.0/20
213.214.96.0/24
213.214.101.0/24
213.214.103.0/24
213.214.107.0/24
213.214.112.0/20
213.247.32.0-213.247.43.255
213.247.48.0/23
213.247.52.0/24
213.247.58.0/23
217.195.112.0/20
IPv6:
2001:16f8::/32
2a00:1bd8::/32
2a01:40e0::/32
2a02:20b0::/31
2a02:2858::/29
2a03:5500::/31
2a0d:5040::/29
Signature Algorithm: sha256WithRSAEncryption
68:01:6c:d3:dd:3c:61:62:95:9b:e4:d5:14:9d:03:6b:81:48:
b9:ba:40:8f:90:91:c3:e1:35:31:eb:e1:04:ba:1b:9c:42:4a:
b5:4f:f8:6f:f7:a9:7a:03:48:ab:00:0c:17:57:40:3c:e0:b6:
70:94:f9:83:e8:3a:81:7a:7a:5f:1e:48:44:5b:7d:04:85:8a:
34:58:e2:c4:5b:cd:75:02:c1:e0:93:c7:74:cf:8f:ef:b2:f2:
6a:c8:2e:03:65:52:a9:40:15:8f:f4:3e:d5:2e:23:ac:bc:a0:
fd:9e:a2:74:05:30:5a:10:d1:e0:68:d0:48:78:6a:57:88:c2:
dc:68:1a:2e:d2:cb:ca:df:81:e0:8e:21:8b:f3:9b:7b:31:63:
fe:e8:8e:61:7c:dc:4b:ae:6e:c3:db:1a:62:b2:18:81:ae:bc:
e4:d7:60:25:71:3f:61:a1:43:ea:0f:bf:e8:21:8f:8d:da:70:
78:e5:c1:03:b2:bb:01:ae:14:9d:5c:52:56:9d:e1:a2:1d:98:
dd:43:b1:54:68:47:29:f4:d9:fc:5c:a9:c9:dc:94:82:02:46:
50:76:d1:fd:88:60:1c:74:8a:20:a1:b3:96:07:4a:39:06:6c:
65:c4:8d:99:46:ad:8b:e9:5d:5c:81:5d:fe:f5:b6:92:10:bd:
34:66:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:42 2026 by rpki-client