Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/qAogXUuuqj8o3A-aHvQwIyei20I.roa
File: qAogXUuuqj8o3A-aHvQwIyei20I.roa (raw, json)
Hash identifier: 6fxDe9+8X29kLHJCtc7r+GRvTgVNTddgHAn5KA1/Dfw=
Subject key identifier: A8:0A:20:5D:4B:AE:AA:3F:28:DC:0F:9A:1E:F4:30:23:27:A2:DB:42
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019FDBBC8A812E62C74EE57D9C5B778C59C6
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/qAogXUuuqj8o3A-aHvQwIyei20I.roa
Signing time: Fri 07 Aug 2026 10:19:54 +0000
ROA not before: Fri 07 Aug 2026 10:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.43.136.0/24 maxlen: 24
45.43.138.0/24 maxlen: 24
45.43.139.0/24 maxlen: 24
45.43.164.0/23 maxlen: 23
64.137.8.0/24 maxlen: 24
64.137.10.0/23 maxlen: 23
64.137.14.0/23 maxlen: 23
64.137.18.0/23 maxlen: 23
64.137.42.0/23 maxlen: 23
64.137.48.0/23 maxlen: 23
64.137.58.0/23 maxlen: 23
64.137.60.0/22 maxlen: 22
64.137.73.0/24 maxlen: 24
64.137.74.0/24 maxlen: 24
64.137.77.0/24 maxlen: 24
64.137.78.0/24 maxlen: 24
64.137.80.0/22 maxlen: 22
64.137.89.0/24 maxlen: 24
64.137.92.0/23 maxlen: 23
64.137.94.0/23 maxlen: 23
64.137.96.0/22 maxlen: 22
64.137.100.0/23 maxlen: 23
104.143.232.0/21 maxlen: 21
104.143.240.0/22 maxlen: 22
104.143.248.0/21 maxlen: 24
104.222.190.0/24 maxlen: 24
104.233.31.0/24 maxlen: 24
104.233.32.0/20 maxlen: 20
104.233.57.0/24 maxlen: 24
104.233.60.0/24 maxlen: 24
104.233.61.0/24 maxlen: 24
104.233.62.0/24 maxlen: 24
104.238.15.0/24 maxlen: 24
104.238.16.0/24 maxlen: 24
104.238.18.0/24 maxlen: 24
104.238.22.0/24 maxlen: 24
104.238.25.0/24 maxlen: 24
104.239.9.0/24 maxlen: 24
104.239.45.0/24 maxlen: 24
104.239.46.0/24 maxlen: 24
104.239.48.0/24 maxlen: 24
104.239.95.0/24 maxlen: 24
104.239.99.0/24 maxlen: 24
104.239.110.0/24 maxlen: 24
104.249.29.0/24 maxlen: 24
104.249.32.0/22 maxlen: 22
104.249.36.0/24 maxlen: 24
104.249.37.0/24 maxlen: 24
104.249.55.0/24 maxlen: 24
104.250.192.0/21 maxlen: 21
104.250.208.0/20 maxlen: 20
138.128.151.0/24 maxlen: 24
138.128.153.0/24 maxlen: 24
216.173.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 17:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:bc:8a:81:2e:62:c7:4e:e5:7d:9c:5b:77:8c:59:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 7 10:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a80a205d4baeaa3f28dc0f9a1ef4302327a2db42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:f9:cf:8a:4d:27:cf:bb:fe:28:4f:28:44:
29:2f:f6:21:db:cd:b6:9d:11:31:d6:c9:be:68:58:
16:1e:c5:5d:d4:50:8a:b8:df:f8:cc:a4:b6:19:e3:
64:9f:db:9a:34:49:93:8a:95:4d:54:e6:6d:53:31:
12:63:34:54:f4:c6:08:a0:24:f4:9d:e8:a9:9a:1b:
94:5b:ff:8c:5a:11:b4:a3:2c:04:7a:5d:f4:93:4d:
6d:a9:7f:d4:3a:3b:24:f9:56:ad:07:15:00:a1:dd:
11:21:3c:54:0a:84:7a:1b:0b:5d:d4:1b:d4:ee:54:
00:f5:91:51:54:12:ea:8c:10:92:ef:4f:95:f7:eb:
e4:39:80:d9:00:c0:f8:ff:d5:0f:9a:3c:da:7b:e8:
8d:5f:58:f5:3e:d1:67:14:e1:b3:68:cb:cd:8a:15:
42:6d:94:90:d6:80:a0:e1:07:3b:0e:92:57:1f:b2:
99:f0:39:26:1e:f1:f1:aa:f8:ca:b2:14:b8:9c:6c:
5c:5a:ed:9b:09:9b:a2:5e:2f:a3:15:fe:19:7b:c1:
a0:eb:60:b2:4e:fb:1f:98:07:c4:7c:8a:81:e3:04:
f0:e1:da:fc:50:12:79:e3:65:ec:83:2c:17:27:95:
f0:4e:75:a0:39:94:4c:38:9b:bd:d6:6d:8c:03:6c:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0A:20:5D:4B:AE:AA:3F:28:DC:0F:9A:1E:F4:30:23:27:A2:DB:42
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/qAogXUuuqj8o3A-aHvQwIyei20I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0/24
45.43.138.0/23
45.43.164.0/23
64.137.8.0/24
64.137.10.0/23
64.137.14.0/23
64.137.18.0/23
64.137.42.0/23
64.137.48.0/23
64.137.58.0-64.137.63.255
64.137.73.0-64.137.74.255
64.137.77.0-64.137.78.255
64.137.80.0/22
64.137.89.0/24
64.137.92.0-64.137.101.255
104.143.232.0-104.143.243.255
104.143.248.0/21
104.222.190.0/24
104.233.31.0-104.233.47.255
104.233.57.0/24
104.233.60.0-104.233.62.255
104.238.15.0-104.238.16.255
104.238.18.0/24
104.238.22.0/24
104.238.25.0/24
104.239.9.0/24
104.239.45.0-104.239.46.255
104.239.48.0/24
104.239.95.0/24
104.239.99.0/24
104.239.110.0/24
104.249.29.0/24
104.249.32.0-104.249.37.255
104.249.55.0/24
104.250.192.0/21
104.250.208.0/20
138.128.151.0/24
138.128.153.0/24
216.173.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a2:a7:13:ad:79:1b:6e:33:2a:48:98:4e:74:0f:58:ad:5b:
da:bb:e8:6e:37:c5:0f:22:01:16:f7:81:24:a6:09:10:4f:ff:
a2:35:e0:8a:b1:65:a6:9a:6c:0b:bc:3f:82:64:cd:08:05:99:
66:b7:a9:81:cb:2b:5a:bf:85:fe:a9:fd:9c:47:42:ba:0d:de:
78:32:71:63:9f:9d:e1:8d:a8:78:eb:33:c8:e7:51:0a:a6:62:
7e:b7:9d:98:2b:82:2a:eb:12:6a:dd:8e:b1:33:54:8c:c1:5d:
9c:53:4d:0b:f0:45:a8:86:57:13:ed:81:6b:3f:21:ef:0d:9e:
f2:ae:9d:ad:2d:4d:e7:7f:87:6a:f8:e1:a4:2f:21:71:9d:2a:
6e:db:6f:a3:d7:17:f1:d8:e7:61:ae:aa:39:ce:dd:d4:30:67:
1d:f0:26:62:b2:cf:65:4b:6e:f9:f9:ea:84:8d:84:d8:05:aa:
7a:ed:38:f1:e6:60:96:b1:30:bb:99:cf:d9:b2:00:dd:78:54:
23:76:84:bc:31:60:6c:cc:52:4e:74:be:35:59:09:dd:58:09:
14:bf:b2:f7:65:bd:a5:23:5a:79:67:dd:27:48:ee:c2:55:54:
43:94:c1:a7:81:8f:d1:65:55:66:26:36:cb:82:38:f5:2b:fe:
61:d7:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 00:13:04 2026 by rpki-client