Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/ck4fqmMue0bgQTx_C7e4u7qQu8Y.roa
File: ck4fqmMue0bgQTx_C7e4u7qQu8Y.roa (raw, json)
Hash identifier: 3P+Qk6FSe+iXFNy50RbYcBKfyRXeennfx5/RBemjyco=
Subject key identifier: 72:4E:1F:AA:63:2E:7B:46:E0:41:3C:7F:0B:B7:B8:BB:BA:90:BB:C6
Certificate issuer: /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial: 019FFF7CA997F5A27FCF4F629CEE8036014F
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/ck4fqmMue0bgQTx_C7e4u7qQu8Y.roa
Signing time: Fri 14 Aug 2026 08:56:27 +0000
ROA not before: Fri 14 Aug 2026 08:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 78.41.160.0/24 maxlen: 24
78.41.161.0/24 maxlen: 24
78.41.162.0/24 maxlen: 24
78.41.163.0/24 maxlen: 24
78.41.164.0/24 maxlen: 24
78.41.165.0/24 maxlen: 24
78.41.166.0/24 maxlen: 24
78.41.167.0/24 maxlen: 24
78.41.184.0/24 maxlen: 24
78.41.185.0/24 maxlen: 24
78.41.186.0/24 maxlen: 24
78.41.187.0/24 maxlen: 24
78.41.188.0/24 maxlen: 24
78.41.189.0/24 maxlen: 24
78.41.190.0/24 maxlen: 24
78.41.191.0/24 maxlen: 24
85.12.128.0/24 maxlen: 24
85.12.129.0/24 maxlen: 24
85.12.130.0/24 maxlen: 24
85.12.131.0/24 maxlen: 24
85.12.132.0/24 maxlen: 24
85.12.133.0/24 maxlen: 24
85.12.134.0/24 maxlen: 24
85.12.135.0/24 maxlen: 24
85.12.136.0/24 maxlen: 24
85.12.137.0/24 maxlen: 24
85.12.138.0/24 maxlen: 24
85.12.139.0/24 maxlen: 24
85.12.140.0/24 maxlen: 24
85.12.141.0/24 maxlen: 24
85.12.142.0/24 maxlen: 24
85.12.143.0/24 maxlen: 24
85.12.144.0/24 maxlen: 24
85.12.145.0/24 maxlen: 24
85.12.146.0/24 maxlen: 24
85.12.147.0/24 maxlen: 24
85.12.148.0/24 maxlen: 24
85.12.149.0/24 maxlen: 24
85.12.150.0/24 maxlen: 24
85.12.151.0/24 maxlen: 24
85.12.152.0/24 maxlen: 24
85.12.153.0/24 maxlen: 24
85.12.154.0/24 maxlen: 24
85.12.155.0/24 maxlen: 24
85.12.156.0/24 maxlen: 24
85.12.157.0/24 maxlen: 24
85.12.158.0/24 maxlen: 24
85.12.159.0/24 maxlen: 24
85.12.160.0/24 maxlen: 24
92.43.128.0/24 maxlen: 24
92.43.129.0/24 maxlen: 24
92.43.130.0/24 maxlen: 24
92.43.131.0/24 maxlen: 24
92.43.132.0/24 maxlen: 24
92.43.133.0/24 maxlen: 24
92.43.134.0/24 maxlen: 24
92.43.135.0/24 maxlen: 24
185.41.180.0/24 maxlen: 24
185.41.181.0/24 maxlen: 24
185.41.182.0/24 maxlen: 24
185.41.183.0/24 maxlen: 24
193.19.216.0/24 maxlen: 24
193.19.217.0/24 maxlen: 24
193.19.218.0/24 maxlen: 24
193.19.219.0/24 maxlen: 24
193.42.213.0/24 maxlen: 24
193.46.203.0/24 maxlen: 24
194.246.101.0/24 maxlen: 24
195.62.42.0/24 maxlen: 24
195.62.43.0/24 maxlen: 24
195.137.248.0/24 maxlen: 24
195.137.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:7c:a9:97:f5:a2:7f:cf:4f:62:9c:ee:80:36:01:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Validity
Not Before: Aug 14 08:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=724e1faa632e7b46e0413c7f0bb7b8bbba90bbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:15:4e:52:80:04:70:e7:c2:07:f9:aa:bd:
f1:37:83:93:7d:32:7f:d3:f7:82:62:c1:83:21:c0:
ad:0f:d2:24:81:0b:d1:37:f8:d0:c9:f0:7b:27:7e:
dd:60:99:10:02:18:97:51:a4:cb:e7:bb:a4:52:ff:
6f:82:e6:4d:ba:a6:f4:e5:d0:1f:a4:37:f5:a0:96:
81:81:36:8a:67:14:e7:49:41:a4:4e:81:fa:18:87:
b1:03:e0:c5:f3:5e:bb:67:05:a9:f7:2e:00:29:2b:
40:1a:aa:3d:fe:64:06:20:42:06:46:ec:3c:3b:a4:
48:75:bc:b7:77:24:a4:a4:ff:ef:42:d9:0b:78:67:
de:a5:84:7f:24:34:da:e3:dc:24:1a:0d:9e:3a:47:
ed:0c:a0:ba:2b:d3:9d:af:43:6d:8e:2a:62:b6:18:
6b:44:ea:30:bc:83:96:f3:ef:7f:bc:f0:af:5f:7a:
cf:f1:83:06:89:ab:82:71:9b:39:fe:22:7c:3b:7f:
e1:08:83:e4:a4:77:c3:82:8e:05:20:62:7e:13:1f:
f1:7d:c0:94:ce:8b:71:f7:f6:73:32:ae:fb:d6:2a:
f9:bb:4a:10:4f:12:85:6a:7a:b6:91:c9:f5:69:9b:
e8:06:dd:74:fc:c2:5d:7f:a7:06:8c:16:ce:f8:e0:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4E:1F:AA:63:2E:7B:46:E0:41:3C:7F:0B:B7:B8:BB:BA:90:BB:C6
X509v3 Authority Key Identifier:
keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/ck4fqmMue0bgQTx_C7e4u7qQu8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.160.0/21
78.41.184.0/21
85.12.128.0-85.12.160.255
92.43.128.0/21
185.41.180.0/22
193.19.216.0/22
193.42.213.0/24
193.46.203.0/24
194.246.101.0/24
195.62.42.0/23
195.137.248.0/23
Signature Algorithm: sha256WithRSAEncryption
56:67:20:17:7e:8d:73:9d:2d:a4:00:38:dc:9b:34:16:e3:f8:
96:2b:e1:6c:bb:c1:04:cd:9e:df:2c:cb:41:23:3f:66:c1:50:
81:f2:f1:cd:ae:ea:40:ab:40:f8:47:86:59:39:f6:69:b3:f5:
c3:15:24:1a:3b:24:29:15:8d:3a:87:6a:d0:43:f7:68:92:ca:
84:b8:c5:53:46:86:b2:b6:a0:fb:cd:58:2d:55:cc:24:04:e2:
53:10:ea:34:f6:aa:f6:72:39:2e:bd:3d:62:95:9d:1f:4d:88:
fc:51:20:58:6e:32:0a:60:6d:55:56:48:51:6c:b0:00:dc:26:
61:6f:f1:00:38:07:d5:db:fc:c4:21:ba:f5:6e:fd:c1:fb:6b:
49:7e:39:23:9d:ff:eb:cf:98:31:ed:31:d4:ec:bc:64:8b:a7:
78:9c:b3:63:f2:60:9a:b5:0a:1b:fb:29:97:82:72:01:c2:8c:
20:79:31:90:cb:59:41:55:a8:42:47:54:e0:fb:22:5c:31:a2:
b7:84:1f:20:4c:3c:bf:3c:4e:e8:0b:c1:b7:45:41:5a:87:f1:
02:70:0d:f5:d3:ff:fb:5f:ab:a7:27:ad:39:8e:1a:90:e8:0e:
62:0c:67:ad:c7:0d:1f:06:07:38:d0:38:9f:09:45:96:07:95:
54:6e:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:33 2026 by rpki-client