Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/BtTsEzm1e4QtS6zSVmaB8DAQMQo.roa
File: BtTsEzm1e4QtS6zSVmaB8DAQMQo.roa (raw, json)
Hash identifier: mtVrLrYhk6uqSmhAjEOJwmtobN2n9Pkskxjnj6FvPpU=
Subject key identifier: 06:D4:EC:13:39:B5:7B:84:2D:4B:AC:D2:56:66:81:F0:30:10:31:0A
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01A13A594CBF16C42CD8C058669EDAAB99FB
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/BtTsEzm1e4QtS6zSVmaB8DAQMQo.roa
Signing time: Wed 14 Oct 2026 12:18:13 +0000
ROA not before: Wed 14 Oct 2026 12:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203061
IP address blocks: 72.63.4.0/23 maxlen: 23
72.63.16.0/23 maxlen: 23
72.63.36.0/23 maxlen: 23
72.63.52.0/23 maxlen: 23
72.63.76.0/23 maxlen: 23
72.63.84.0/23 maxlen: 23
72.63.96.0/23 maxlen: 23
72.63.108.0/23 maxlen: 23
72.63.128.0/23 maxlen: 23
72.63.212.0/23 maxlen: 23
72.63.244.0/23 maxlen: 23
72.63.252.0/23 maxlen: 23
189.81.10.0/23 maxlen: 23
189.81.12.0/23 maxlen: 23
189.81.100.0/23 maxlen: 23
189.81.102.0/23 maxlen: 23
189.81.114.0/23 maxlen: 23
189.81.124.0/23 maxlen: 23
189.81.126.0/23 maxlen: 23
189.81.144.0/23 maxlen: 23
189.81.150.0/23 maxlen: 23
189.81.156.0/23 maxlen: 23
189.81.162.0/23 maxlen: 23
189.81.192.0/23 maxlen: 23
189.81.210.0/23 maxlen: 23
189.81.214.0/23 maxlen: 23
189.81.236.0/23 maxlen: 23
189.81.238.0/23 maxlen: 23
189.104.20.0/23 maxlen: 23
189.104.46.0/23 maxlen: 23
189.104.50.0/23 maxlen: 23
189.104.52.0/23 maxlen: 23
189.104.84.0/23 maxlen: 23
189.104.90.0/23 maxlen: 23
189.104.92.0/23 maxlen: 23
189.104.108.0/23 maxlen: 23
189.104.178.0/23 maxlen: 23
189.104.198.0/23 maxlen: 23
189.104.212.0/23 maxlen: 23
189.104.220.0/23 maxlen: 23
189.104.238.0/23 maxlen: 23
189.104.244.0/23 maxlen: 23
189.104.246.0/23 maxlen: 23
193.84.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:59:4c:bf:16:c4:2c:d8:c0:58:66:9e:da:ab:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Oct 14 12:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06d4ec1339b57b842d4bacd2566681f03010310a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:d7:83:88:7e:4d:26:91:48:bd:23:3b:8d:
a0:a3:70:1d:67:7e:d1:84:3c:1c:b7:fb:25:7d:ca:
43:86:b5:e2:be:eb:79:b7:81:b0:a0:33:b0:48:f4:
2f:9f:40:41:8d:18:ef:95:37:ca:a7:2e:60:64:0c:
0e:43:6b:1f:93:8a:a5:3e:04:fa:58:bd:46:e3:c6:
28:72:86:b0:9a:b2:65:97:98:0e:1e:5b:ec:c5:01:
f6:5b:17:42:8a:79:92:6a:40:53:b6:2b:4b:71:42:
1e:a2:08:19:53:8c:25:e3:81:17:cc:85:d3:7c:90:
b4:a3:98:ac:c0:90:2e:c9:ba:1d:8e:94:55:bd:77:
bc:57:61:13:c8:ed:df:61:c2:da:7c:c3:3c:aa:a4:
de:e3:d3:d3:90:19:c8:ee:c4:26:10:de:12:4a:e8:
7c:10:97:9f:3d:2c:a3:00:79:55:c9:db:d6:f9:85:
4f:7e:3d:14:e2:7d:19:ee:d0:1e:ce:b7:9a:57:c3:
60:66:7d:c8:ed:8f:a0:25:4c:15:a8:8a:8e:14:0e:
f3:09:18:db:62:c1:33:17:b5:db:c3:ab:96:ac:b6:
d9:a5:4d:56:ad:a6:36:98:44:6a:04:ee:51:85:eb:
f9:f1:56:ca:21:67:f5:9b:d9:c9:5f:de:e1:bd:0f:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:EC:13:39:B5:7B:84:2D:4B:AC:D2:56:66:81:F0:30:10:31:0A
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/BtTsEzm1e4QtS6zSVmaB8DAQMQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.63.4.0/23
72.63.16.0/23
72.63.36.0/23
72.63.52.0/23
72.63.76.0/23
72.63.84.0/23
72.63.96.0/23
72.63.108.0/23
72.63.128.0/23
72.63.212.0/23
72.63.244.0/23
72.63.252.0/23
189.81.10.0-189.81.13.255
189.81.100.0/22
189.81.114.0/23
189.81.124.0/22
189.81.144.0/23
189.81.150.0/23
189.81.156.0/23
189.81.162.0/23
189.81.192.0/23
189.81.210.0/23
189.81.214.0/23
189.81.236.0/22
189.104.20.0/23
189.104.46.0/23
189.104.50.0-189.104.53.255
189.104.84.0/23
189.104.90.0-189.104.93.255
189.104.108.0/23
189.104.178.0/23
189.104.198.0/23
189.104.212.0/23
189.104.220.0/23
189.104.238.0/23
189.104.244.0/22
193.84.183.0/24
Signature Algorithm: sha256WithRSAEncryption
93:57:f2:9c:52:c1:0b:9a:ac:6f:0f:28:1d:2d:cf:3e:93:e8:
8d:67:bf:71:61:7a:49:07:78:3d:ff:84:ce:39:e5:0b:d7:01:
13:6f:23:46:23:ca:18:16:59:a3:a1:21:d5:fa:05:82:d9:be:
6b:9d:e6:2c:34:fe:89:cb:bd:e6:e6:8e:46:c5:42:d2:98:b5:
ba:dd:99:0c:4c:af:e4:81:93:2b:56:8a:26:77:69:2f:52:52:
bf:b6:cc:fb:98:ee:5f:72:28:26:ab:8e:fc:f4:ad:76:2e:c5:
2d:7e:ff:55:96:e0:66:5b:76:05:1e:b0:ac:1b:a1:2b:e6:d8:
27:4d:91:1d:01:85:61:85:02:b7:e6:6c:97:c9:07:02:f2:92:
88:e3:c8:bc:e2:8a:e7:00:90:8c:b2:aa:ce:b2:1d:2c:b6:dc:
31:30:dc:0c:d1:5d:95:08:4a:f8:9d:17:5e:55:10:d7:9b:4d:
83:af:ed:5a:87:f3:69:23:66:42:67:41:78:fb:cf:cf:df:9b:
40:bb:ac:5d:52:2a:2a:bb:15:09:58:a2:16:06:0d:9f:90:50:
66:65:16:91:fc:9b:5c:4b:1b:11:0f:69:ab:fa:45:54:a8:24:
cb:b0:09:f8:b9:83:c7:64:86:94:db:7b:ae:50:b4:a7:e8:97:
b3:30:6c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:02:13 2026 by rpki-client