Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/oE74MoN2bW6fiMiut7Z-JHHL4Zo.roa
File: oE74MoN2bW6fiMiut7Z-JHHL4Zo.roa (raw, json)
Hash identifier: eaim3HM5ZdDDRgbNAkLs2CPrhY68/sGFs70q9m6jby4=
Subject key identifier: A0:4E:F8:32:83:76:6D:6E:9F:88:C8:AE:B7:B6:7E:24:71:CB:E1:9A
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01A0ED57F4E04485E8173DAAE70835F7F9F8
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/oE74MoN2bW6fiMiut7Z-JHHL4Zo.roa
Signing time: Tue 29 Sep 2026 13:25:59 +0000
ROA not before: Tue 29 Sep 2026 13:25:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201341
IP address blocks: 189.81.16.0/23 maxlen: 23
189.81.18.0/23 maxlen: 23
189.81.30.0/23 maxlen: 23
189.81.42.0/23 maxlen: 23
189.81.52.0/23 maxlen: 23
189.81.110.0/23 maxlen: 23
189.81.120.0/23 maxlen: 23
189.81.128.0/23 maxlen: 23
189.81.130.0/23 maxlen: 23
189.81.136.0/23 maxlen: 23
189.81.138.0/23 maxlen: 23
189.81.146.0/23 maxlen: 23
189.81.154.0/23 maxlen: 23
189.81.158.0/23 maxlen: 23
189.81.172.0/23 maxlen: 23
189.81.176.0/23 maxlen: 23
189.81.190.0/23 maxlen: 23
189.81.198.0/23 maxlen: 23
189.81.200.0/23 maxlen: 23
189.81.208.0/23 maxlen: 23
189.81.228.0/23 maxlen: 23
189.81.240.0/23 maxlen: 23
189.81.252.0/23 maxlen: 23
189.104.8.0/23 maxlen: 23
189.104.14.0/23 maxlen: 23
189.104.24.0/23 maxlen: 23
189.104.26.0/23 maxlen: 23
189.104.30.0/23 maxlen: 23
189.104.40.0/23 maxlen: 23
189.104.56.0/23 maxlen: 23
189.104.58.0/23 maxlen: 23
189.104.62.0/23 maxlen: 23
189.104.74.0/23 maxlen: 23
189.104.76.0/23 maxlen: 23
189.104.82.0/23 maxlen: 23
189.104.88.0/23 maxlen: 23
189.104.154.0/23 maxlen: 23
189.104.176.0/23 maxlen: 23
189.104.190.0/23 maxlen: 23
189.104.194.0/23 maxlen: 23
189.104.206.0/23 maxlen: 23
189.104.216.0/23 maxlen: 23
189.104.228.0/23 maxlen: 23
189.104.232.0/23 maxlen: 23
189.104.236.0/23 maxlen: 23
189.104.240.0/23 maxlen: 23
189.104.250.0/23 maxlen: 23
205.188.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:57:f4:e0:44:85:e8:17:3d:aa:e7:08:35:f7:f9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Sep 29 13:25:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a04ef83283766d6e9f88c8aeb7b67e2471cbe19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:de:b2:0a:02:94:b9:ba:b6:d3:b9:9b:07:
c0:d7:a5:36:ae:ea:b5:af:ef:24:f3:03:4d:50:23:
34:fa:05:91:bb:1c:42:d9:92:c6:0b:c8:7a:f8:19:
c3:56:15:42:5e:59:2c:3d:a8:f7:25:45:9c:51:f8:
34:a2:9a:da:21:09:a4:03:4b:28:d0:20:7e:04:62:
3a:6e:bd:3c:51:eb:f0:2a:db:93:ce:36:e2:e4:c1:
f6:e5:21:3b:f3:65:88:60:27:42:96:11:e1:8c:10:
19:aa:92:74:81:e0:70:2b:35:38:41:4c:91:3e:dd:
41:a2:9e:89:d0:9f:24:4a:94:d5:96:a1:fd:dd:3d:
08:83:da:52:2f:0b:72:3f:59:4f:55:6d:42:29:f9:
1b:78:fd:df:19:36:7a:d3:3c:64:c5:af:3a:a6:6b:
92:13:6a:48:1e:0b:84:dd:27:2e:81:17:da:d7:40:
c0:60:b7:10:de:ec:1b:61:69:75:6e:25:87:2c:cc:
96:f5:d7:54:c1:20:c0:c2:ef:9b:ca:73:78:e1:63:
b2:3b:e7:60:d3:84:94:21:ff:0f:c5:77:70:df:36:
49:4b:3b:a6:58:9c:c4:eb:e1:cf:83:49:e8:58:c5:
2c:ab:c8:fd:af:9e:36:57:4e:9d:bc:e0:33:e1:77:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4E:F8:32:83:76:6D:6E:9F:88:C8:AE:B7:B6:7E:24:71:CB:E1:9A
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/oE74MoN2bW6fiMiut7Z-JHHL4Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.81.16.0/22
189.81.30.0/23
189.81.42.0/23
189.81.52.0/23
189.81.110.0/23
189.81.120.0/23
189.81.128.0/22
189.81.136.0/22
189.81.146.0/23
189.81.154.0/23
189.81.158.0/23
189.81.172.0/23
189.81.176.0/23
189.81.190.0/23
189.81.198.0-189.81.201.255
189.81.208.0/23
189.81.228.0/23
189.81.240.0/23
189.81.252.0/23
189.104.8.0/23
189.104.14.0/23
189.104.24.0/22
189.104.30.0/23
189.104.40.0/23
189.104.56.0/22
189.104.62.0/23
189.104.74.0-189.104.77.255
189.104.82.0/23
189.104.88.0/23
189.104.154.0/23
189.104.176.0/23
189.104.190.0/23
189.104.194.0/23
189.104.206.0/23
189.104.216.0/23
189.104.228.0/23
189.104.232.0/23
189.104.236.0/23
189.104.240.0/23
189.104.250.0/23
205.188.108.0/23
Signature Algorithm: sha256WithRSAEncryption
42:87:78:4d:4a:cd:a4:fb:9e:2c:db:b2:40:90:7c:58:7b:a3:
33:fc:00:ff:c6:7e:e9:cf:b3:e8:dd:70:9e:ac:0e:16:9d:14:
f5:80:e6:bf:b1:1c:fe:d9:c4:79:2b:a7:90:fb:24:35:dd:0e:
d3:05:9c:e1:f9:12:eb:92:93:06:fd:46:4f:84:8a:47:83:37:
af:7d:56:38:7d:09:b8:c4:e5:6a:5e:d1:51:b1:c3:5a:aa:04:
67:98:98:3f:59:95:ad:09:0f:d1:ea:fb:00:64:b6:0f:b2:7b:
8b:79:f9:90:77:bd:d2:83:a2:cd:35:c8:b0:26:ee:f4:2b:fe:
48:7a:12:71:b3:81:84:c5:9b:46:23:af:f2:2a:16:ab:ea:ee:
b6:39:b4:51:54:da:2b:8a:c1:2b:5d:e2:73:9f:02:be:f7:d6:
9c:b7:dc:4e:15:ee:b4:a2:75:30:df:5b:0d:90:38:d0:58:f6:
a3:2e:dd:1e:8b:b8:ec:93:a8:6e:fc:e3:2a:49:a2:92:99:49:
66:30:e8:28:5c:bf:87:0a:80:51:e8:80:54:28:1e:e6:4c:9f:
cc:7e:08:a3:23:6c:7d:c3:ac:c5:91:96:44:08:44:c8:49:42:
bd:6c:d7:59:37:b9:a3:23:6e:a8:3e:08:50:1b:97:14:1f:2b:
31:39:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:36:33 2026 by rpki-client