Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/9_fIp1CrRLVWNXP_yuAJPlq6MeM.roa
File: 9_fIp1CrRLVWNXP_yuAJPlq6MeM.roa (raw, json)
Hash identifier: fEfAioq58Qn6gkCRV5wbbyUYPTK8yDR4QNBJQS2uhgk=
Subject key identifier: F7:F7:C8:A7:50:AB:44:B5:56:35:73:FF:CA:E0:09:3E:5A:BA:31:E3
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A1346C8AE2B53372C0C7A91F496DAA88BC
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/9_fIp1CrRLVWNXP_yuAJPlq6MeM.roa
Signing time: Tue 13 Oct 2026 08:41:30 +0000
ROA not before: Tue 13 Oct 2026 08:41:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34471
IP address blocks: 2.59.108.0/22 maxlen: 24
2.59.109.0/24 maxlen: 24
2.59.110.0/24 maxlen: 24
2.59.111.0/24 maxlen: 24
5.134.32.0/20 maxlen: 20
31.25.176.0/21 maxlen: 24
37.122.216.0/22 maxlen: 24
37.122.219.0/24 maxlen: 24
45.92.132.0/22 maxlen: 24
46.28.160.0/21 maxlen: 24
46.28.163.0/24 maxlen: 24
46.28.166.0/23 maxlen: 23
89.40.84.0/22 maxlen: 24
89.44.36.0/22 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
176.56.64.0/19 maxlen: 24
176.56.78.0/23 maxlen: 23
176.56.80.0/22 maxlen: 22
176.56.85.0/24 maxlen: 24
176.56.86.0/23 maxlen: 23
176.56.88.0/23 maxlen: 23
176.56.88.0/24 maxlen: 24
176.56.89.0/24 maxlen: 24
176.56.92.0/24 maxlen: 24
185.4.32.0/22 maxlen: 24
185.5.84.0/22 maxlen: 24
185.70.152.0/22 maxlen: 24
185.84.204.0/22 maxlen: 22
185.84.206.0/24 maxlen: 24
185.85.255.0/24 maxlen: 24
185.98.32.0/22 maxlen: 22
185.102.204.0/22 maxlen: 24
185.103.148.0/22 maxlen: 24
185.110.212.0/22 maxlen: 24
185.111.0.0/22 maxlen: 22
185.111.0.0/24 maxlen: 24
185.111.1.0/24 maxlen: 24
185.111.2.0/24 maxlen: 24
185.111.3.0/24 maxlen: 24
185.142.44.0/22 maxlen: 24
185.153.16.0/22 maxlen: 24
185.157.4.0/22 maxlen: 22
185.157.4.0/24 maxlen: 24
185.157.7.0/24 maxlen: 24
185.176.104.0/22 maxlen: 22
185.176.104.0/24 maxlen: 24
185.176.105.0/24 maxlen: 24
185.176.106.0/24 maxlen: 24
185.176.107.0/24 maxlen: 24
185.205.252.0/22 maxlen: 22
185.205.252.0/24 maxlen: 24
185.205.253.0/24 maxlen: 24
185.205.254.0/24 maxlen: 24
185.205.255.0/24 maxlen: 24
185.212.136.0/22 maxlen: 24
185.223.216.0/22 maxlen: 22
185.223.216.0/24 maxlen: 24
185.228.124.0/22 maxlen: 24
185.228.124.0/24 maxlen: 24
185.228.125.0/24 maxlen: 24
185.228.126.0/24 maxlen: 24
185.228.127.0/24 maxlen: 24
185.239.160.0/22 maxlen: 22
185.239.160.0/24 maxlen: 24
185.239.161.0/24 maxlen: 24
185.239.162.0/23 maxlen: 23
185.243.136.0/22 maxlen: 24
193.108.206.0/23 maxlen: 24
193.108.206.0/24 maxlen: 24
193.108.230.0/23 maxlen: 24
193.246.156.0/23 maxlen: 24
194.156.72.0/22 maxlen: 24
194.156.73.0/24 maxlen: 24
194.156.75.0/24 maxlen: 24
2a02:5dc0::/32 maxlen: 32
2a02:5fc0::/32 maxlen: 48
2a03:440::/32 maxlen: 32
2a05:9b00::/29 maxlen: 29
2a05:a800::/29 maxlen: 29
2a06:3c00::/29 maxlen: 29
2a09:eac0::/29 maxlen: 29
2a0a:1280::/29 maxlen: 29
2a0b:c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:6c:8a:e2:b5:33:72:c0:c7:a9:1f:49:6d:aa:88:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Oct 13 08:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7f7c8a750ab44b5563573ffcae0093e5aba31e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:bc:cc:7f:7d:fc:a1:33:25:bd:c3:08:83:
31:f6:98:75:4a:fb:a1:56:8a:9e:73:8a:84:f4:e7:
c8:32:46:d1:61:12:89:64:7b:40:4d:25:4b:37:17:
2b:c2:b9:19:3d:58:e4:72:8b:7e:59:0c:71:9a:4c:
8b:a4:9a:67:ec:da:00:a1:f1:4d:46:d1:01:11:65:
6a:88:50:b8:70:1c:9c:45:d3:ce:8c:10:d2:8b:d1:
02:15:54:69:c4:2c:ea:70:82:ed:13:4c:15:81:fc:
0e:6a:56:62:a3:08:7b:98:3b:f4:8a:40:4c:5d:31:
90:9d:13:47:15:1d:cb:a8:fb:b8:9f:0b:d2:2d:43:
2c:15:26:c1:ed:40:57:66:53:79:87:85:b3:4f:cf:
21:9e:66:1c:52:6b:c2:b5:5f:b8:14:28:48:0c:88:
4b:93:03:60:6a:86:f2:55:d5:68:5e:2c:df:ab:cf:
26:a8:73:42:8c:46:8c:bc:c2:7b:e5:23:c4:b5:c6:
84:14:e2:51:61:80:2a:7c:b1:e4:92:6b:c3:92:03:
09:be:3e:52:3c:6b:51:86:df:7d:fd:fd:d4:41:3b:
f6:94:6f:6e:ee:cb:95:ef:2f:5a:0e:a1:a4:88:14:
8a:fb:44:d4:f5:73:e6:ed:91:19:84:04:1a:a8:6f:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F7:C8:A7:50:AB:44:B5:56:35:73:FF:CA:E0:09:3E:5A:BA:31:E3
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/9_fIp1CrRLVWNXP_yuAJPlq6MeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
5.134.32.0/20
31.25.176.0/21
37.122.216.0/22
45.92.132.0/22
46.28.160.0/21
89.40.84.0/22
89.44.36.0/22
91.242.148.0/22
109.235.16.0/21
176.56.64.0/19
185.4.32.0/22
185.5.84.0/22
185.70.152.0/22
185.84.204.0/22
185.85.255.0/24
185.98.32.0/22
185.102.204.0/22
185.103.148.0/22
185.110.212.0/22
185.111.0.0/22
185.142.44.0/22
185.153.16.0/22
185.157.4.0/22
185.176.104.0/22
185.205.252.0/22
185.212.136.0/22
185.223.216.0/22
185.228.124.0/22
185.239.160.0/22
185.243.136.0/22
193.108.206.0/23
193.108.230.0/23
193.246.156.0/23
194.156.72.0/22
IPv6:
2a02:5dc0::/32
2a02:5fc0::/32
2a03:440::/32
2a05:9b00::/29
2a05:a800::/29
2a06:3c00::/29
2a09:eac0::/29
2a0a:1280::/29
2a0b:c40::/29
Signature Algorithm: sha256WithRSAEncryption
7a:a5:93:44:3b:36:ce:c6:45:b0:e0:83:53:6e:5e:76:68:8c:
1f:b2:cd:4e:6d:67:09:38:43:f1:34:b0:18:09:4f:40:d6:36:
79:d2:3d:b7:5f:7a:d0:93:1b:15:58:99:a2:0b:c6:44:1b:a7:
92:bc:cf:7b:45:0a:a4:7d:4e:bd:f9:34:4e:ce:d0:69:d4:ab:
04:7a:f4:5b:45:28:f6:3a:eb:f0:24:eb:f3:bb:32:2a:45:4a:
59:0e:b6:9d:08:65:c1:91:fb:85:28:b7:b7:27:bf:51:f9:5e:
72:ba:f9:a7:d6:78:2a:fe:81:dd:73:99:e8:52:d1:db:fd:fd:
d0:94:6b:1e:8c:ec:f9:98:ff:af:79:08:3b:01:20:b3:08:bd:
16:95:ab:98:75:2a:a9:35:bc:23:24:95:75:36:0e:b8:ec:50:
13:e0:43:47:70:0d:bb:14:24:3a:d0:90:77:5c:4c:1a:06:90:
f6:44:25:1e:e3:8b:2b:fb:3f:f9:67:2d:c5:07:d8:46:39:a4:
e5:b9:5d:7b:c5:67:dd:99:34:84:f2:39:84:91:94:34:7c:27:
73:80:ea:20:c3:81:99:74:2f:97:f3:2f:0a:0b:42:a6:07:b3:
c4:07:c1:55:5e:48:c1:1c:7a:c3:30:49:79:66:7b:cb:dc:bf:
7a:bc:5c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:23 2026 by rpki-client