Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ChRoEZvAjp_ID5nVThoO_irBtGM.roa
File: ChRoEZvAjp_ID5nVThoO_irBtGM.roa (raw, json)
Hash identifier: qeTbacdrnAktK16DZDKpHbybV/1SZw3I+pNRzWMwiHI=
Subject key identifier: 0A:14:68:11:9B:C0:8E:9F:C8:0F:99:D5:4E:1A:0E:FE:2A:C1:B4:63
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A094280C801985C25BF9537FDE2CF2DA76
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ChRoEZvAjp_ID5nVThoO_irBtGM.roa
Signing time: Sat 12 Sep 2026 05:47:27 +0000
ROA not before: Sat 12 Sep 2026 05:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 134.49.67.0/24 maxlen: 24
134.49.69.0/24 maxlen: 24
134.49.72.0/24 maxlen: 24
134.49.76.0/24 maxlen: 24
134.49.80.0/24 maxlen: 24
134.49.83.0/24 maxlen: 24
134.49.85.0/24 maxlen: 24
134.49.88.0/24 maxlen: 24
136.176.168.0/24 maxlen: 24
136.176.177.0/24 maxlen: 24
136.176.185.0/24 maxlen: 24
145.63.161.0/24 maxlen: 24
145.63.163.0/24 maxlen: 24
145.63.165.0/24 maxlen: 24
145.63.168.0/24 maxlen: 24
145.63.172.0/24 maxlen: 24
145.63.181.0/24 maxlen: 24
145.63.184.0/24 maxlen: 24
145.63.186.0/24 maxlen: 24
145.63.187.0/24 maxlen: 24
145.63.189.0/24 maxlen: 24
147.90.22.0/24 maxlen: 24
147.90.34.0/24 maxlen: 24
147.90.52.0/24 maxlen: 24
147.90.77.0/24 maxlen: 24
147.90.183.0/24 maxlen: 24
147.90.194.0/24 maxlen: 24
147.90.204.0/24 maxlen: 24
147.90.215.0/24 maxlen: 24
147.90.228.0/24 maxlen: 24
147.90.233.0/24 maxlen: 24
158.173.185.0/24 maxlen: 24
158.173.200.0/24 maxlen: 24
158.173.202.0/24 maxlen: 24
158.173.207.0/24 maxlen: 24
158.173.213.0/24 maxlen: 24
158.173.226.0/24 maxlen: 24
173.209.1.0/24 maxlen: 24
173.209.3.0/24 maxlen: 24
173.209.9.0/24 maxlen: 24
173.209.14.0/24 maxlen: 24
173.209.15.0/24 maxlen: 24
173.209.17.0/24 maxlen: 24
173.209.20.0/24 maxlen: 24
173.209.23.0/24 maxlen: 24
173.209.26.0/24 maxlen: 24
173.209.27.0/24 maxlen: 24
173.209.29.0/24 maxlen: 24
185.161.110.0/24 maxlen: 24
203.188.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:28:0c:80:19:85:c2:5b:f9:53:7f:de:2c:f2:da:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 12 05:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a1468119bc08e9fc80f99d54e1a0efe2ac1b463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:8f:3f:01:3c:ca:44:b6:06:5a:27:b2:03:
6e:08:bf:7d:7a:61:eb:7f:c8:fa:44:4d:34:31:71:
1f:12:42:83:96:d8:1e:28:4c:68:9f:c5:fa:02:6c:
3a:8f:8a:46:1d:8a:82:03:d5:dd:71:db:6f:08:36:
16:63:80:b3:d5:6d:4b:b0:84:dd:0e:da:07:e3:e2:
9a:86:26:67:e0:5a:06:91:eb:57:cc:b0:38:8e:20:
1d:90:50:5a:d7:2c:0a:35:f2:0f:03:7f:f8:92:da:
80:3f:2e:69:47:08:5e:f7:20:fd:62:c0:76:14:58:
6c:90:45:92:4e:4d:64:a6:b7:b8:b1:d4:67:fe:ea:
f9:3a:f4:0a:f8:f2:74:21:39:b9:98:5a:24:b8:ce:
f9:12:f7:2b:57:82:0d:b2:58:a2:86:9d:29:8a:76:
26:2c:73:42:03:a6:96:90:5f:b1:8a:d6:66:39:6e:
2c:9b:a6:54:12:a9:ff:75:3c:53:12:02:44:52:b2:
7d:45:39:2e:60:16:ee:3d:76:9f:9e:26:ee:60:1c:
a8:3c:a8:d2:56:31:90:eb:fb:38:c3:cc:57:91:d1:
6d:6e:d7:33:58:1d:d7:f9:8a:c2:7f:22:bd:f0:9f:
29:5a:7c:33:7d:98:38:89:d8:d8:e7:ac:47:da:02:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:14:68:11:9B:C0:8E:9F:C8:0F:99:D5:4E:1A:0E:FE:2A:C1:B4:63
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ChRoEZvAjp_ID5nVThoO_irBtGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.49.67.0/24
134.49.69.0/24
134.49.72.0/24
134.49.76.0/24
134.49.80.0/24
134.49.83.0/24
134.49.85.0/24
134.49.88.0/24
136.176.168.0/24
136.176.177.0/24
136.176.185.0/24
145.63.161.0/24
145.63.163.0/24
145.63.165.0/24
145.63.168.0/24
145.63.172.0/24
145.63.181.0/24
145.63.184.0/24
145.63.186.0/23
145.63.189.0/24
147.90.22.0/24
147.90.34.0/24
147.90.52.0/24
147.90.77.0/24
147.90.183.0/24
147.90.194.0/24
147.90.204.0/24
147.90.215.0/24
147.90.228.0/24
147.90.233.0/24
158.173.185.0/24
158.173.200.0/24
158.173.202.0/24
158.173.207.0/24
158.173.213.0/24
158.173.226.0/24
173.209.1.0/24
173.209.3.0/24
173.209.9.0/24
173.209.14.0/23
173.209.17.0/24
173.209.20.0/24
173.209.23.0/24
173.209.26.0/23
173.209.29.0/24
185.161.110.0/24
203.188.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bd:ba:0a:5d:bf:98:3f:67:85:60:6e:33:8e:22:26:ff:0b:
cf:49:7d:98:8d:31:01:13:92:f2:a1:b6:18:7a:01:f0:f0:40:
07:82:20:ba:c8:94:52:bf:93:1b:9e:db:4f:e1:47:dd:09:9b:
d1:62:71:de:59:56:fc:0b:f4:a0:63:fc:99:8a:90:20:9d:40:
9a:98:b7:60:cf:28:8f:a0:3e:45:2f:90:ac:c4:1c:f2:0f:98:
e7:19:70:d7:ab:9f:d4:2a:8c:c7:d6:30:de:11:45:3b:96:20:
87:09:2d:df:b8:44:0a:52:61:85:56:2e:83:74:35:c0:94:55:
76:b0:27:dc:ba:d8:9d:4a:84:a4:67:22:e0:7e:3d:11:23:fe:
88:30:b5:1b:8c:21:28:ab:ab:c1:57:4f:c8:4b:ea:19:2c:3b:
90:8e:f0:bf:26:54:59:01:f1:61:a0:bd:e9:75:54:75:c1:7e:
c0:0f:fc:4d:a6:54:d7:9d:04:bb:ca:a0:6b:67:28:d1:d1:02:
63:48:b0:bb:12:61:9d:83:75:d8:72:6a:f7:8d:3a:e3:25:c3:
12:07:88:61:c9:0b:fd:b3:39:07:fe:70:41:00:81:47:0a:3e:
63:e0:15:57:2d:2b:46:16:ba:df:66:d3:42:07:7d:a7:1a:5e:
1b:e3:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 01:24:56 2026 by rpki-client