Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jORzBfh7U-vqZYMBekHZsDfpQkY.roa
File: jORzBfh7U-vqZYMBekHZsDfpQkY.roa (raw, json)
Hash identifier: D3DGrK5dNhv4k8o5FoYiMJyFZOnduZ/ldkct+H8CRHY=
Subject key identifier: 8C:E4:73:05:F8:7B:53:EB:EA:65:83:01:7A:41:D9:B0:37:E9:42:46
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A1345B982B4D698B43688E1AE1F2FF2171
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jORzBfh7U-vqZYMBekHZsDfpQkY.roa
Signing time: Tue 13 Oct 2026 08:23:00 +0000
ROA not before: Tue 13 Oct 2026 08:23:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.84.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.182.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a11:2a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:5b:98:2b:4d:69:8b:43:68:8e:1a:e1:f2:ff:21:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 13 08:23:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ce47305f87b53ebea6583017a41d9b037e94246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:07:74:71:e0:38:99:c1:c4:93:3f:cc:65:
50:37:d0:a0:21:c7:ad:e9:4a:2c:3f:85:e7:bb:fd:
44:2f:9a:04:58:7e:4e:f5:a3:5d:41:60:d0:28:46:
92:aa:51:37:75:a9:09:2c:f3:d6:b3:bf:98:78:21:
b1:15:ea:f1:53:19:8f:f9:8b:54:ad:37:04:76:ab:
64:b1:c7:2f:d0:97:5b:0e:ae:2b:7a:52:8d:1c:8b:
04:7a:20:9a:58:41:78:52:bd:8e:18:39:bb:ac:49:
0e:ab:0c:de:cb:2f:c1:a4:f4:0e:07:4c:6a:93:d4:
92:b1:1e:3c:8a:49:03:68:6c:0a:66:3b:9c:af:73:
12:c2:17:f3:5b:79:29:a2:54:5f:86:80:ad:51:92:
06:64:87:32:04:5c:62:e4:2f:3c:9a:81:54:55:81:
b5:b5:b8:19:5e:f5:37:6c:6c:b6:7a:5c:6d:e1:40:
2b:44:f6:a6:e3:a6:fb:fb:2a:6a:28:ea:2d:08:e3:
d3:9d:54:42:2e:27:ab:66:a9:f8:da:68:5e:66:56:
0b:52:22:e2:19:13:43:c3:26:fe:a2:0a:9d:99:fe:
39:1e:50:03:dc:d7:6f:1b:78:c8:7c:d2:fc:20:7a:
92:9e:bf:5d:57:db:27:2f:7f:44:a6:04:6b:82:95:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E4:73:05:F8:7B:53:EB:EA:65:83:01:7A:41:D9:B0:37:E9:42:46
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jORzBfh7U-vqZYMBekHZsDfpQkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
45.9.29.0/24
45.13.189.0-45.13.190.255
45.94.171.0/24
45.138.182.0/24
146.19.125.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.92.0/24
195.177.94.0/23
195.211.188.0/23
195.211.191.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a11:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
13:f1:b6:47:c0:e1:3a:c5:e3:63:54:bc:a4:93:14:bf:06:bf:
98:58:b9:12:d2:e5:7d:51:6b:49:5b:2b:24:06:e9:e6:56:5d:
22:91:97:0e:28:8d:04:33:07:f3:6b:57:0c:b2:c1:39:cc:40:
81:d3:f4:f3:b3:b1:11:88:a9:21:ca:a2:b2:4e:84:9a:a3:d6:
88:0c:ea:84:73:ee:f0:83:21:1c:81:f1:5f:7d:aa:21:6e:a5:
0d:e8:d5:b4:cc:92:b9:35:8c:db:71:49:e3:ac:9e:c3:dd:4f:
2a:d9:55:a2:1c:a4:f0:98:3c:b5:ec:00:34:36:4a:09:e7:63:
39:3a:8e:93:d3:b7:05:a0:bb:30:d2:62:e7:b5:cd:e2:0b:3f:
9a:d7:05:83:07:b0:24:2f:4f:a8:0d:f0:3a:0a:a3:73:0a:87:
89:8e:87:ee:33:11:0f:da:34:f7:5a:53:09:fe:16:b9:2b:44:
6c:ec:f1:c6:a7:42:19:ef:57:dd:b5:6e:70:5c:77:6a:a8:04:
84:5e:0f:77:15:85:92:d3:fc:7f:c9:6d:3a:10:3b:32:41:c9:
27:82:6e:80:20:34:3f:74:02:61:cf:41:db:16:15:16:bd:4e:
8e:13:3f:be:30:2c:b6:ce:15:11:93:1a:2c:fa:61:67:13:b2:
07:94:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:08 2026 by rpki-client