Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DyrpQDldwJTFt9gPOBiqR0MLfxI.roa
File: DyrpQDldwJTFt9gPOBiqR0MLfxI.roa (raw, json)
Hash identifier: okMQNdeIm+hPO5Hc4z/nGqCYkGGoIviv0LShuXPM5x0=
Subject key identifier: 0F:2A:E9:40:39:5D:C0:94:C5:B7:D8:0F:38:18:AA:47:43:0B:7F:12
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019DBFD20BBEDD5F6159C10D469A4EACBA02
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DyrpQDldwJTFt9gPOBiqR0MLfxI.roa
Signing time: Fri 24 Apr 2026 14:08:27 +0000
ROA not before: Fri 24 Apr 2026 14:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 186.243.129.0/24 maxlen: 24
186.243.130.0/24 maxlen: 24
186.243.131.0/24 maxlen: 24
186.243.132.0/24 maxlen: 24
186.243.133.0/24 maxlen: 24
186.243.134.0/24 maxlen: 24
186.243.135.0/24 maxlen: 24
186.243.136.0/24 maxlen: 24
186.243.137.0/24 maxlen: 24
186.243.138.0/24 maxlen: 24
186.243.139.0/24 maxlen: 24
186.243.140.0/24 maxlen: 24
186.243.143.0/24 maxlen: 24
186.243.152.0/24 maxlen: 24
186.243.153.0/24 maxlen: 24
186.243.154.0/24 maxlen: 24
186.243.156.0/24 maxlen: 24
186.243.157.0/24 maxlen: 24
186.243.158.0/24 maxlen: 24
186.243.159.0/24 maxlen: 24
186.243.160.0/24 maxlen: 24
186.243.161.0/24 maxlen: 24
186.243.162.0/24 maxlen: 24
186.243.163.0/24 maxlen: 24
186.243.164.0/24 maxlen: 24
186.243.165.0/24 maxlen: 24
186.243.166.0/24 maxlen: 24
186.243.167.0/24 maxlen: 24
186.243.168.0/24 maxlen: 24
186.243.169.0/24 maxlen: 24
186.243.170.0/24 maxlen: 24
186.243.171.0/24 maxlen: 24
186.243.172.0/24 maxlen: 24
186.243.173.0/24 maxlen: 24
186.243.174.0/24 maxlen: 24
186.243.175.0/24 maxlen: 24
186.243.176.0/24 maxlen: 24
186.243.177.0/24 maxlen: 24
186.243.178.0/24 maxlen: 24
186.243.179.0/24 maxlen: 24
186.243.180.0/24 maxlen: 24
186.243.181.0/24 maxlen: 24
186.243.182.0/24 maxlen: 24
186.243.201.0/24 maxlen: 24
186.243.202.0/24 maxlen: 24
186.243.203.0/24 maxlen: 24
186.243.204.0/24 maxlen: 24
186.243.205.0/24 maxlen: 24
186.243.206.0/24 maxlen: 24
186.243.207.0/24 maxlen: 24
186.243.208.0/24 maxlen: 24
186.243.209.0/24 maxlen: 24
186.243.210.0/24 maxlen: 24
186.243.211.0/24 maxlen: 24
186.243.212.0/24 maxlen: 24
186.243.213.0/24 maxlen: 24
186.243.214.0/24 maxlen: 24
186.243.215.0/24 maxlen: 24
186.243.216.0/24 maxlen: 24
186.243.217.0/24 maxlen: 24
186.243.218.0/24 maxlen: 24
186.243.219.0/24 maxlen: 24
186.243.220.0/24 maxlen: 24
186.243.221.0/24 maxlen: 24
186.243.222.0/24 maxlen: 24
186.243.223.0/24 maxlen: 24
186.243.224.0/24 maxlen: 24
186.243.225.0/24 maxlen: 24
186.243.226.0/24 maxlen: 24
186.243.227.0/24 maxlen: 24
186.243.229.0/24 maxlen: 24
186.243.230.0/24 maxlen: 24
186.243.231.0/24 maxlen: 24
186.243.232.0/24 maxlen: 24
186.243.241.0/24 maxlen: 24
186.243.243.0/24 maxlen: 24
186.243.244.0/24 maxlen: 24
186.243.245.0/24 maxlen: 24
186.243.246.0/24 maxlen: 24
186.243.247.0/24 maxlen: 24
186.243.248.0/24 maxlen: 24
186.243.249.0/24 maxlen: 24
186.243.250.0/24 maxlen: 24
186.243.251.0/24 maxlen: 24
186.243.252.0/24 maxlen: 24
186.243.253.0/24 maxlen: 24
186.246.58.0/24 maxlen: 24
186.246.59.0/24 maxlen: 24
186.246.61.0/24 maxlen: 24
186.246.62.0/24 maxlen: 24
186.246.63.0/24 maxlen: 24
186.246.64.0/24 maxlen: 24
186.246.65.0/24 maxlen: 24
186.246.66.0/24 maxlen: 24
186.246.67.0/24 maxlen: 24
186.246.68.0/24 maxlen: 24
186.246.69.0/24 maxlen: 24
186.246.70.0/24 maxlen: 24
186.246.71.0/24 maxlen: 24
186.246.72.0/24 maxlen: 24
186.246.73.0/24 maxlen: 24
186.246.74.0/24 maxlen: 24
186.246.75.0/24 maxlen: 24
186.246.76.0/24 maxlen: 24
186.246.77.0/24 maxlen: 24
186.246.84.0/24 maxlen: 24
186.246.85.0/24 maxlen: 24
186.246.86.0/24 maxlen: 24
186.246.87.0/24 maxlen: 24
186.246.88.0/24 maxlen: 24
186.246.89.0/24 maxlen: 24
186.246.90.0/24 maxlen: 24
186.246.91.0/24 maxlen: 24
186.246.93.0/24 maxlen: 24
186.246.94.0/24 maxlen: 24
186.246.95.0/24 maxlen: 24
186.246.96.0/24 maxlen: 24
186.246.97.0/24 maxlen: 24
186.246.98.0/24 maxlen: 24
186.246.99.0/24 maxlen: 24
186.246.107.0/24 maxlen: 24
186.246.108.0/24 maxlen: 24
186.246.109.0/24 maxlen: 24
186.246.110.0/24 maxlen: 24
186.246.111.0/24 maxlen: 24
186.246.112.0/24 maxlen: 24
186.246.113.0/24 maxlen: 24
186.246.114.0/24 maxlen: 24
186.246.115.0/24 maxlen: 24
186.246.116.0/24 maxlen: 24
186.246.117.0/24 maxlen: 24
186.246.118.0/24 maxlen: 24
186.246.119.0/24 maxlen: 24
186.246.120.0/24 maxlen: 24
186.246.121.0/24 maxlen: 24
186.246.122.0/24 maxlen: 24
186.246.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:d2:0b:be:dd:5f:61:59:c1:0d:46:9a:4e:ac:ba:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 24 14:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f2ae940395dc094c5b7d80f3818aa47430b7f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:08:19:8e:ea:c5:12:2a:d9:0b:be:44:0b:
2e:68:3d:9c:a0:42:f1:be:f0:1d:c4:f5:04:07:87:
f8:37:11:4b:4e:89:fd:0e:1c:9b:f2:1e:34:52:a6:
b1:ff:d3:76:ac:79:6e:d8:94:f4:08:69:a0:db:a0:
ef:44:38:6b:5b:18:57:83:81:f3:dd:a9:0d:db:fb:
28:03:0d:64:25:6a:fd:c2:a3:2a:20:f1:54:ee:74:
e3:61:34:32:4a:64:99:c0:02:83:a3:92:60:6e:6f:
ce:dc:c8:85:3d:27:2a:f6:ce:be:5e:90:a8:af:a4:
13:96:dc:90:d8:91:66:bb:f6:2a:fd:f7:5b:0f:a5:
45:1f:57:a0:f3:c4:42:85:d0:70:e9:61:da:16:b5:
21:3e:e1:96:67:51:4d:ef:ec:0d:1d:b7:b8:df:e3:
e8:0f:7d:5f:10:b1:7b:a8:36:5a:95:0f:ea:39:23:
f3:c4:e6:47:77:a2:de:c7:66:86:c1:0c:11:75:1e:
df:ca:50:df:31:9f:40:68:db:52:e1:a8:42:ba:f2:
b5:42:38:4d:e4:90:0b:fb:28:d7:d6:b6:53:2e:1b:
de:ec:79:7c:49:ec:c3:97:49:fb:60:f1:d8:fd:e3:
47:1c:1d:a9:3b:12:e1:81:60:c4:b5:69:42:be:8a:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2A:E9:40:39:5D:C0:94:C5:B7:D8:0F:38:18:AA:47:43:0B:7F:12
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DyrpQDldwJTFt9gPOBiqR0MLfxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.243.129.0-186.243.140.255
186.243.143.0/24
186.243.152.0-186.243.154.255
186.243.156.0-186.243.182.255
186.243.201.0-186.243.227.255
186.243.229.0-186.243.232.255
186.243.241.0/24
186.243.243.0-186.243.253.255
186.246.58.0/23
186.246.61.0-186.246.77.255
186.246.84.0-186.246.91.255
186.246.93.0-186.246.99.255
186.246.107.0-186.246.122.255
186.246.126.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8a:76:98:9c:b8:07:45:6e:de:63:d5:25:00:3b:23:f9:6e:
c5:e5:02:a6:fa:e0:cd:24:90:f0:0e:2a:85:84:a3:0c:30:63:
8c:d7:b5:a1:81:ad:2d:ed:a4:07:cb:cf:95:30:4f:8a:84:a4:
63:c3:08:41:2b:3a:cd:8a:65:dc:a2:3e:9e:46:84:66:97:63:
c3:a9:44:45:05:79:e2:b8:d4:83:a9:b0:a2:17:ec:ca:d2:b2:
d3:c0:33:37:a0:09:fe:74:69:6b:ce:e1:2e:bf:94:d8:07:bb:
96:85:ed:78:19:0d:fd:5c:11:1a:5b:fe:e7:3b:04:7c:6f:eb:
83:4b:c4:43:2b:2b:99:c2:a5:a0:47:97:12:b3:ab:d7:3e:54:
74:5b:db:3e:a7:ae:ec:aa:19:38:37:d9:20:e1:b7:4c:db:84:
ef:00:c6:98:94:1d:da:7b:c5:46:65:95:21:00:67:4e:9c:76:
2e:48:85:18:d8:1f:a1:90:fe:67:d8:37:b6:e5:13:71:0f:ec:
75:20:8c:68:92:62:40:13:d3:bd:8c:84:5e:e3:3d:03:b2:fa:
2a:73:8f:75:ac:2d:10:9d:47:b9:cf:f1:81:5d:06:a5:71:93:
87:1d:97:13:5a:fa:ee:0f:1a:41:bc:78:81:44:fe:e6:6c:b5:
e6:66:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:15:18 2026 by rpki-client