Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/AHf6mC8P0cAPruGwEXDMytHsbrA.roa
File: AHf6mC8P0cAPruGwEXDMytHsbrA.roa (raw, json)
Hash identifier: ufdzCoNlLtlmBbxqL1J1LEEwglJXm8ibswwppoLAnVs=
Subject key identifier: 00:77:FA:98:2F:0F:D1:C0:0F:AE:E1:B0:11:70:CC:CA:D1:EC:6E:B0
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0657C9CFEFC06A9596D697FFB3FFC220F
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/AHf6mC8P0cAPruGwEXDMytHsbrA.roa
Signing time: Thu 03 Sep 2026 04:17:40 +0000
ROA not before: Thu 03 Sep 2026 04:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 61.14.224.0/24 maxlen: 24
61.14.227.0/24 maxlen: 24
62.106.64.0/24 maxlen: 24
79.110.177.0/24 maxlen: 24
79.110.178.0/23 maxlen: 24
79.110.180.0/22 maxlen: 24
85.202.172.0/24 maxlen: 24
85.202.174.0/23 maxlen: 24
91.132.84.0/24 maxlen: 32
91.132.87.0/24 maxlen: 32
103.203.40.0/23 maxlen: 24
103.203.43.0/24 maxlen: 24
103.205.84.0/23 maxlen: 24
103.205.86.0/24 maxlen: 24
103.207.161.0/24 maxlen: 24
103.207.162.0/24 maxlen: 24
121.46.124.0/22 maxlen: 24
146.19.82.0/24 maxlen: 24
160.238.96.0/24 maxlen: 24
160.238.99.0/24 maxlen: 24
185.93.4.0/24 maxlen: 24
185.105.10.0/24 maxlen: 24
185.118.132.0/24 maxlen: 24
185.118.135.0/24 maxlen: 24
185.145.44.0/24 maxlen: 24
185.145.46.0/24 maxlen: 24
185.157.232.0/22 maxlen: 24
185.176.89.0/24 maxlen: 24
185.176.90.0/24 maxlen: 24
185.176.91.0/24 maxlen: 24
185.190.59.0/24 maxlen: 24
185.196.24.0/24 maxlen: 24
185.202.44.0/23 maxlen: 24
185.202.47.0/24 maxlen: 24
185.206.20.0/23 maxlen: 24
185.209.128.0/23 maxlen: 24
185.209.130.0/24 maxlen: 24
185.214.140.0/23 maxlen: 24
185.214.142.0/24 maxlen: 24
185.218.185.0/24 maxlen: 24
185.219.21.0/24 maxlen: 32
185.219.22.0/24 maxlen: 32
185.225.12.0/23 maxlen: 24
185.225.15.0/24 maxlen: 24
185.227.254.0/24 maxlen: 24
185.228.44.0/22 maxlen: 24
185.232.42.0/24 maxlen: 24
185.235.120.0/24 maxlen: 24
185.235.122.0/24 maxlen: 24
193.3.16.0/24 maxlen: 24
193.31.112.0/24 maxlen: 24
193.31.115.0/24 maxlen: 24
193.163.35.0/24 maxlen: 24
193.176.116.0/24 maxlen: 24
193.176.119.0/24 maxlen: 24
193.187.180.0/22 maxlen: 24
194.8.134.0/24 maxlen: 24
194.50.192.0/23 maxlen: 24
194.50.195.0/24 maxlen: 24
194.69.161.0/24 maxlen: 24
195.216.150.0/24 maxlen: 32
195.245.74.0/23 maxlen: 24
213.109.157.0/24 maxlen: 24
217.18.56.0/23 maxlen: 24
217.18.58.0/24 maxlen: 24
2a07:4580::/29 maxlen: 29
2a07:4580::/32 maxlen: 48
2a07:4580:b0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:7c:9c:fe:fc:06:a9:59:6d:69:7f:fb:3f:fc:22:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 3 04:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0077fa982f0fd1c00faee1b01170cccad1ec6eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:d3:16:bf:0f:3c:40:f7:e4:e8:fa:c2:a3:
fa:bd:dd:48:73:b4:72:84:67:18:ae:51:4a:d0:85:
38:47:51:af:3d:59:05:47:c3:cc:42:b7:1f:ea:38:
3b:86:07:ff:45:76:f2:1b:5b:47:2a:62:fb:fe:f6:
8c:c8:bd:6f:c2:51:c3:34:01:d7:cd:62:77:2f:75:
f6:6d:94:83:73:cd:f2:29:a7:6e:77:56:ec:45:5a:
b0:a6:4b:35:10:1c:e5:41:33:e6:f0:30:09:d7:ab:
65:ed:24:10:e6:6a:a7:d6:a7:d9:cb:3f:99:9d:26:
2b:07:63:3d:fe:8c:8d:d3:58:c8:6a:25:48:8b:08:
72:4a:0f:db:31:cd:aa:44:50:7a:3e:7c:e6:c6:ff:
ed:69:56:36:87:4a:43:c4:04:16:b0:ad:46:2e:67:
16:cd:fa:3d:e2:8c:cc:27:91:d2:fe:88:76:7d:6c:
6b:b3:59:da:ee:09:4e:fb:1f:2d:a6:40:7f:42:1c:
c8:67:b5:b5:4c:10:40:a8:07:50:e0:94:4e:60:3c:
ba:a2:46:5d:dd:aa:3e:92:90:79:e9:07:02:bd:25:
b0:b4:cd:e2:71:aa:56:80:89:eb:0b:ea:29:76:82:
c4:b6:27:c1:79:6c:48:16:ff:fd:17:59:86:fa:3f:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:77:FA:98:2F:0F:D1:C0:0F:AE:E1:B0:11:70:CC:CA:D1:EC:6E:B0
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/AHf6mC8P0cAPruGwEXDMytHsbrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.224.0/24
61.14.227.0/24
62.106.64.0/24
79.110.177.0-79.110.183.255
85.202.172.0/24
85.202.174.0/23
91.132.84.0/24
91.132.87.0/24
103.203.40.0/23
103.203.43.0/24
103.205.84.0-103.205.86.255
103.207.161.0-103.207.162.255
121.46.124.0/22
146.19.82.0/24
160.238.96.0/24
160.238.99.0/24
185.93.4.0/24
185.105.10.0/24
185.118.132.0/24
185.118.135.0/24
185.145.44.0/24
185.145.46.0/24
185.157.232.0/22
185.176.89.0-185.176.91.255
185.190.59.0/24
185.196.24.0/24
185.202.44.0/23
185.202.47.0/24
185.206.20.0/23
185.209.128.0-185.209.130.255
185.214.140.0-185.214.142.255
185.218.185.0/24
185.219.21.0-185.219.22.255
185.225.12.0/23
185.225.15.0/24
185.227.254.0/24
185.228.44.0/22
185.232.42.0/24
185.235.120.0/24
185.235.122.0/24
193.3.16.0/24
193.31.112.0/24
193.31.115.0/24
193.163.35.0/24
193.176.116.0/24
193.176.119.0/24
193.187.180.0/22
194.8.134.0/24
194.50.192.0/23
194.50.195.0/24
194.69.161.0/24
195.216.150.0/24
195.245.74.0/23
213.109.157.0/24
217.18.56.0-217.18.58.255
IPv6:
2a07:4580::/29
Signature Algorithm: sha256WithRSAEncryption
47:b2:a9:c7:03:50:f3:64:e6:98:1d:62:40:af:35:3a:c3:d6:
b0:08:ed:8a:87:a1:7e:02:cc:02:a6:6e:f8:6f:af:98:1d:f7:
22:94:2d:64:c6:4c:9d:53:64:30:ec:fb:0f:b6:41:8a:a1:ca:
89:9c:47:45:70:29:ac:00:a8:26:24:ba:1f:03:fb:75:91:b1:
06:af:a8:35:17:bc:a9:1d:79:46:27:00:ab:09:22:87:ba:8f:
49:0a:2f:91:63:d8:a0:1d:05:e9:8a:92:fa:af:af:74:f1:15:
97:cc:f4:98:0a:3c:01:89:aa:ef:25:02:ce:db:21:2d:7c:bd:
4d:53:49:db:49:e8:51:b0:cd:8a:59:37:1f:fe:53:59:39:e3:
58:7b:6e:5f:84:ea:02:da:85:88:28:c7:e0:16:7f:3f:6a:0f:
fe:c3:50:e8:fd:87:b7:5a:b0:07:22:37:e0:f0:fa:9f:06:39:
81:69:b8:3d:fd:33:66:52:6f:78:72:72:7b:f5:14:4d:08:de:
ec:c3:ab:04:c3:c9:d7:28:3c:d6:c0:0c:19:10:9a:9a:1d:07:
18:9a:ec:79:1f:ca:66:8f:03:34:27:80:3e:bb:2e:f4:bb:ca:
9e:cd:85:98:d5:61:8f:d1:17:2b:af:25:b0:58:66:47:28:e2:
28:92:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:30 2026 by rpki-client