Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/aa15nZfX27ubGWEeb2X5ayBEBXE.roa
File: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (raw, json)
Hash identifier: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=
Subject key identifier: 69:AD:79:9D:97:D7:DB:BB:9B:19:61:1E:6F:65:F9:6B:20:44:05:71
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01A01A3CCE8ED64E2DB29116A7EA4D6F90AC
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/aa15nZfX27ubGWEeb2X5ayBEBXE.roa
Signing time: Wed 19 Aug 2026 13:36:27 +0000
ROA not before: Wed 19 Aug 2026 13:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 72.63.6.0/23 maxlen: 23
72.63.78.0/23 maxlen: 23
72.63.88.0/22 maxlen: 22
72.63.98.0/23 maxlen: 23
72.63.248.0/22 maxlen: 22
72.63.254.0/23 maxlen: 23
189.81.6.0/23 maxlen: 23
189.81.70.0/23 maxlen: 23
189.81.108.0/23 maxlen: 23
189.81.142.0/23 maxlen: 23
189.81.196.0/23 maxlen: 23
189.81.206.0/23 maxlen: 23
189.81.234.0/23 maxlen: 23
189.104.6.0/23 maxlen: 23
189.104.36.0/23 maxlen: 23
189.104.54.0/23 maxlen: 23
189.104.68.0/23 maxlen: 23
189.104.80.0/23 maxlen: 23
189.104.104.0/23 maxlen: 23
189.104.118.0/23 maxlen: 23
189.104.134.0/23 maxlen: 23
189.104.148.0/23 maxlen: 23
189.104.158.0/23 maxlen: 23
189.104.164.0/23 maxlen: 23
189.104.174.0/23 maxlen: 23
189.104.204.0/23 maxlen: 23
189.104.210.0/23 maxlen: 23
189.104.234.0/23 maxlen: 23
205.188.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:3c:ce:8e:d6:4e:2d:b2:91:16:a7:ea:4d:6f:90:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Aug 19 13:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ad799d97d7dbbb9b19611e6f65f96b20440571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:1b:ac:f6:d3:20:7c:77:b7:cc:34:6e:24:
a5:92:7e:a5:c0:7a:69:83:87:52:1c:54:ce:e0:a4:
fa:01:1d:b3:c9:b3:30:ee:ff:9a:fe:da:94:ed:c6:
5a:fc:0d:b7:35:76:b1:dc:cc:b4:48:f2:85:2f:93:
51:61:da:bf:38:19:ec:d4:eb:45:79:70:9b:43:1e:
34:7d:6c:23:29:2c:c9:44:33:fc:a2:f7:ab:ca:c3:
96:18:1f:e1:23:cb:21:fc:6c:9a:0c:9b:ca:7d:16:
4b:2a:5b:53:8f:cd:49:65:35:a3:03:27:ba:7b:ac:
39:2e:89:f8:58:49:79:de:c1:53:c5:e0:0b:15:6d:
34:24:fc:8b:b9:32:0f:7c:3d:da:ca:e9:3e:be:e0:
8d:ec:3b:40:7c:cc:9c:70:82:eb:dd:18:b7:05:af:
34:9c:ff:91:01:e4:a6:b3:40:a4:c6:1c:00:20:a9:
0a:e2:a9:06:10:58:f7:82:ce:cc:a3:a9:27:57:40:
2c:59:bb:2f:5a:3c:1f:eb:14:e9:a0:7e:7f:01:9a:
7f:41:c9:f9:60:48:31:6e:d5:b8:7d:25:30:cd:e2:
19:54:ac:7b:08:0f:f0:e6:1d:25:21:74:e8:c6:df:
b4:22:ab:b2:9e:81:23:e1:15:5d:89:5c:a0:a1:c1:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AD:79:9D:97:D7:DB:BB:9B:19:61:1E:6F:65:F9:6B:20:44:05:71
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/aa15nZfX27ubGWEeb2X5ayBEBXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.63.6.0/23
72.63.78.0/23
72.63.88.0/22
72.63.98.0/23
72.63.248.0/22
72.63.254.0/23
189.81.6.0/23
189.81.70.0/23
189.81.108.0/23
189.81.142.0/23
189.81.196.0/23
189.81.206.0/23
189.81.234.0/23
189.104.6.0/23
189.104.36.0/23
189.104.54.0/23
189.104.68.0/23
189.104.80.0/23
189.104.104.0/23
189.104.118.0/23
189.104.134.0/23
189.104.148.0/23
189.104.158.0/23
189.104.164.0/23
189.104.174.0/23
189.104.204.0/23
189.104.210.0/23
189.104.234.0/23
205.188.100.0/22
Signature Algorithm: sha256WithRSAEncryption
67:bc:ab:39:ab:20:f8:55:b9:f9:66:1a:7b:20:33:8a:5b:fd:
bc:e0:9c:6b:ff:c6:7b:7a:cc:80:26:99:dd:92:b2:61:4b:b5:
67:49:1c:b9:00:b8:43:2b:3e:87:24:a9:93:44:b1:a0:90:fd:
42:04:2b:9a:86:5a:f9:4a:f8:6a:3c:03:f6:c1:49:cc:f2:71:
d6:18:45:be:8e:e1:93:6b:24:4f:92:89:34:ed:0b:a0:06:b9:
1e:a1:d5:f6:c5:18:0f:5f:8f:3a:68:8f:3d:2f:ac:25:c1:ab:
82:e1:0d:77:e4:fc:d7:ba:a6:3f:eb:d9:be:6d:93:c4:53:22:
bf:6d:b3:e9:ee:72:0b:aa:74:1b:db:5e:b8:21:14:1b:71:ab:
c4:40:48:56:6a:07:f4:00:b9:52:97:cd:f6:11:21:9f:4b:4f:
89:48:b7:e7:16:38:79:3f:b8:a0:13:61:24:23:2c:25:90:79:
a3:79:4a:35:46:58:1f:b1:d6:39:9f:3a:2b:a4:20:42:cc:fc:
60:0d:85:35:77:d2:db:85:1c:8c:98:25:79:10:0d:85:07:f5:
64:a9:3f:7c:05:bb:ea:da:02:70:b8:3f:95:72:16:e4:c7:0a:
40:0b:1f:9d:6e:51:db:fc:a6:fb:06:46:6c:f1:63:e9:74:27:
c8:1a:f4:02
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAaAaPM6O1k4tspEWp+pNb5CsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwODE5MTMzNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWFkNzk5ZDk3ZDdkYmJiOWIxOTYxMWU2ZjY1Zjk2YjIwNDQwNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk0brPbTIHx3t8w0biSlkn6lwHpp
g4dSHFTO4KT6AR2zybMw7v+a/tqU7cZa/A23NXax3My0SPKFL5NRYdq/OBns1OtF
eXCbQx40fWwjKSzJRDP8overysOWGB/hI8sh/GyaDJvKfRZLKltTj81JZTWjAye6
e6w5Lon4WEl53sFTxeALFW00JPyLuTIPfD3ayuk+vuCN7DtAfMyccILr3Ri3Ba80
nP+RAeSms0CkxhwAIKkK4qkGEFj3gs7Mo6knV0AsWbsvWjwf6xTpoH5/AZp/Qcn5
YEgxbtW4fSUwzeIZVKx7CA/w5h0lIXToxt+0IquynoEj4RVdiVygocGTMQIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFGmteZ2X19u7mxlhHm9l+WsgRAVxMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvYWExNW5aZlgyN3ViR1dFZWIyWDVheUJFQlhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4DBAFI
PwYDBAFIP04DBAJIP1gDBAFIP2IDBAJIP/gDBAFIP/4DBAG9UQYDBAG9UUYDBAG9
UWwDBAG9UY4DBAG9UcQDBAG9Uc4DBAG9UeoDBAG9aAYDBAG9aCQDBAG9aDYDBAG9
aEQDBAG9aFADBAG9aGgDBAG9aHYDBAG9aIYDBAG9aJQDBAG9aJ4DBAG9aKQDBAG9
aK4DBAG9aMwDBAG9aNIDBAG9aOoDBALNvGQwDQYJKoZIhvcNAQELBQADggEBAGe8
qzmrIPhVuflmGnsgM4pb/bzgnGv/xnt6zIAmmd2SsmFLtWdJHLkAuEMrPockqZNE
saCQ/UIEK5qGWvlK+Go8A/bBSczycdYYRb6O4ZNrJE+SiTTtC6AGuR6h1fbFGA9f
jzpojz0vrCXBq4LhDXfk/Ne6pj/r2b5tk8RTIr9ts+nucguqdBvbXrghFBtxq8RA
SFZqB/QAuVKXzfYRIZ9LT4lIt+cWOHk/uKATYSQjLCWQeaN5SjVGWB+x1jmfOiuk
IELM/GANhTV30tuFHIyYJXkQDYUH9WSpP3wFu+raAnC4P5VyFuTHCkALH51uUdv8
pvsGRmzxY+l0J8ga9AI=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:42 2026 by rpki-client