Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/0b1pzaE2ZllXhpxayvQZpEJkKCg.roa
File: 0b1pzaE2ZllXhpxayvQZpEJkKCg.roa (raw, json)
Hash identifier: thvAXFPmSRPpbI/hqaYaXvdMuUFMHnGIJkNRLNuOG4w=
Subject key identifier: D1:BD:69:CD:A1:36:66:59:57:86:9C:5A:CA:F4:19:A4:42:64:28:28
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 01A13085D3F42BC893D0F1C457DBA3A9DA8C
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/0b1pzaE2ZllXhpxayvQZpEJkKCg.roa
Signing time: Mon 12 Oct 2026 14:30:39 +0000
ROA not before: Mon 12 Oct 2026 14:30:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197883
IP address blocks: 5.42.193.0/24 maxlen: 24
80.73.241.0/24 maxlen: 24
83.97.74.0/24 maxlen: 24
91.208.85.0/24 maxlen: 24
91.217.118.0/24 maxlen: 24
94.154.119.0/24 maxlen: 24
176.57.240.0/24 maxlen: 24
176.57.241.0/24 maxlen: 24
176.57.242.0/24 maxlen: 24
176.57.243.0/24 maxlen: 24
176.57.244.0/24 maxlen: 24
176.57.245.0/24 maxlen: 24
176.57.246.0/24 maxlen: 24
176.57.247.0/24 maxlen: 24
176.97.207.0/24 maxlen: 24
185.8.144.0/24 maxlen: 24
185.8.145.0/24 maxlen: 24
185.8.146.0/24 maxlen: 24
185.8.147.0/24 maxlen: 24
185.136.40.0/24 maxlen: 24
185.136.41.0/24 maxlen: 24
185.136.42.0/24 maxlen: 24
185.136.43.0/24 maxlen: 24
194.53.4.0/24 maxlen: 24
194.53.5.0/24 maxlen: 24
194.53.6.0/24 maxlen: 24
194.53.7.0/24 maxlen: 24
195.24.244.0/24 maxlen: 24
195.96.152.0/24 maxlen: 24
195.137.186.0/24 maxlen: 24
195.137.188.0/24 maxlen: 24
195.138.220.0/24 maxlen: 24
195.144.23.0/24 maxlen: 24
217.197.109.0/24 maxlen: 24
2a01:9d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:85:d3:f4:2b:c8:93:d0:f1:c4:57:db:a3:a9:da:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Oct 12 14:30:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1bd69cda136665957869c5acaf419a442642828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:7c:0b:fa:de:c7:46:73:ad:5c:0c:19:ff:
0d:a2:12:ac:bb:82:f3:6c:67:cb:ef:fd:f5:b5:21:
67:d1:7e:ab:c0:b5:cf:b8:3e:62:36:00:6e:53:5b:
8d:71:79:dc:46:1b:f3:f6:b0:9e:df:2f:5b:53:82:
f0:fa:af:8b:e0:65:96:a6:af:aa:10:1c:ab:63:e4:
2b:8c:e6:fb:36:a3:d7:46:ea:e0:7d:ad:1e:33:e3:
d9:93:95:ee:2b:a3:fb:77:33:7b:05:5d:b8:0f:93:
60:fc:bd:42:f1:66:00:85:a2:93:69:9c:af:41:b9:
98:f7:99:25:93:84:53:cb:fd:16:51:cb:8c:69:36:
8f:36:12:25:d9:06:e5:4b:c7:b5:79:2d:30:85:2c:
85:46:85:92:61:b0:93:53:a0:fd:a1:e3:c4:ea:64:
fa:0b:8a:bf:16:34:4c:94:e5:c1:e9:83:dc:89:02:
1f:ec:fb:6d:a4:96:9b:20:fe:f1:4c:2d:4e:d8:7f:
dc:4b:de:cd:09:3d:d7:c9:96:e7:23:9c:80:27:c2:
89:a5:ca:e1:47:f2:2e:0b:b4:0c:e6:d7:27:53:63:
38:af:ab:df:4f:e8:4b:d2:46:3f:cf:c1:33:ca:ca:
60:28:7f:31:3a:16:92:32:43:f6:4c:eb:fa:98:3e:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BD:69:CD:A1:36:66:59:57:86:9C:5A:CA:F4:19:A4:42:64:28:28
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/0b1pzaE2ZllXhpxayvQZpEJkKCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.193.0/24
80.73.241.0/24
83.97.74.0/24
91.208.85.0/24
91.217.118.0/24
94.154.119.0/24
176.57.240.0/21
176.97.207.0/24
185.8.144.0/22
185.136.40.0/22
194.53.4.0/22
195.24.244.0/24
195.96.152.0/24
195.137.186.0/24
195.137.188.0/24
195.138.220.0/24
195.144.23.0/24
217.197.109.0/24
IPv6:
2a01:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
1b:4e:b3:45:0a:b0:de:fb:a7:f8:d4:b8:44:46:b4:95:e5:9b:
a5:2c:31:b4:00:83:ef:c5:4b:8f:e4:fb:35:2f:23:45:c8:2c:
d9:b5:96:a8:3f:72:a1:16:36:d5:a1:1d:8e:30:70:67:38:31:
dd:d4:d3:a9:5a:c3:48:d4:9b:68:6d:0c:12:89:81:c1:6f:4a:
b1:f8:ae:0c:da:da:c0:15:fb:90:1d:c7:28:5b:b3:1a:32:c5:
4f:b7:80:d8:23:10:8c:1a:bf:1a:63:70:fd:ad:a4:8f:93:fe:
e4:6c:ed:2c:b7:fb:a2:89:f8:18:41:46:3b:49:85:70:d7:7a:
62:a9:fb:93:b5:3f:45:bf:7d:f8:97:16:f9:b3:9a:57:e8:24:
b6:f7:66:64:73:b3:e4:6a:04:ee:19:41:71:f3:2f:a7:3f:e1:
63:2e:9f:1c:d7:74:69:ed:f6:6e:2b:0c:fc:6f:d6:79:45:35:
54:21:1d:b2:57:7d:22:df:af:95:14:fc:85:79:36:08:9d:08:
63:bb:20:0d:6d:ad:50:bf:80:87:07:b3:f2:64:70:ed:82:56:
10:d3:e3:38:23:b6:d8:8e:ca:67:9c:39:b7:39:ea:2a:cc:4b:
96:3d:e3:cf:3a:7f:4b:0a:d2:bc:f5:75:19:dd:80:13:eb:7d:
24:10:0e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:24 2026 by rpki-client