Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_1HHUiwtguzm33xpni3O5slL8tk.roa
File: _1HHUiwtguzm33xpni3O5slL8tk.roa (raw, json)
Hash identifier: FKc+U+vRC1CLsfW3s1EBmfX/GzyzmHfJHPRLpJ1E5xo=
Subject key identifier: FF:51:C7:52:2C:2D:82:EC:E6:DF:7C:69:9E:2D:CE:E6:C9:4B:F2:D9
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01A162AF227D05C3B16431CF04703DF70742
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_1HHUiwtguzm33xpni3O5slL8tk.roa
Signing time: Thu 22 Oct 2026 08:16:47 +0000
ROA not before: Thu 22 Oct 2026 08:16:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20804
IP address blocks: 81.15.128.0/17 maxlen: 17
81.15.136.0/23 maxlen: 23
81.15.156.0/24 maxlen: 24
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
81.15.182.0/23 maxlen: 23
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.198.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.202.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
81.15.209.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
81.15.216.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/23 maxlen: 23
81.15.218.0/24 maxlen: 24
81.15.222.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.224.0/22 maxlen: 22
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.230.0/24 maxlen: 24
81.15.232.0/24 maxlen: 24
81.15.236.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.238.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.240.0/23 maxlen: 23
81.15.242.0/24 maxlen: 24
81.15.244.0/23 maxlen: 23
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.0.0/16 maxlen: 16
82.177.0.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
82.177.9.0/24 maxlen: 24
82.177.10.0/23 maxlen: 23
82.177.14.0/23 maxlen: 23
82.177.16.0/24 maxlen: 24
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.48.0/21 maxlen: 21
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.52.0/23 maxlen: 23
82.177.54.0/24 maxlen: 24
82.177.59.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
82.177.72.0/21 maxlen: 21
82.177.80.0/21 maxlen: 21
82.177.102.0/23 maxlen: 24
82.177.108.0/23 maxlen: 23
82.177.112.0/22 maxlen: 22
82.177.140.0/23 maxlen: 23
82.177.164.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/22 maxlen: 22
82.177.196.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.252.0/24 maxlen: 24
88.220.0.0/17 maxlen: 17
88.220.60.0/23 maxlen: 23
88.220.81.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.89.0/24 maxlen: 24
88.220.95.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
88.220.113.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
194.183.56.0/23 maxlen: 23
195.136.0.0/16 maxlen: 16
195.136.4.0/22 maxlen: 22
195.136.16.0/22 maxlen: 22
195.136.21.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.32.158/32 maxlen: 32
195.136.32.201/32 maxlen: 32
195.136.34.0/23 maxlen: 23
195.136.38.0/23 maxlen: 23
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.113.0/24 maxlen: 24
195.136.145.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
195.136.164.0/23 maxlen: 23
195.136.174.0/23 maxlen: 23
195.136.176.0/22 maxlen: 22
213.172.160.0/19 maxlen: 19
2a00:4120::/32 maxlen: 32
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:5::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:af:22:7d:05:c3:b1:64:31:cf:04:70:3d:f7:07:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Oct 22 08:16:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff51c7522c2d82ece6df7c699e2dcee6c94bf2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:15:6d:6e:d6:70:48:c1:98:07:14:2a:e9:
91:b4:78:b0:ac:f4:b1:95:ef:97:07:7e:f6:dd:d8:
99:34:19:ff:68:bc:55:d4:50:be:a8:f2:28:76:43:
cc:cf:4e:ab:f8:d6:8f:5f:2a:38:0a:c5:32:ea:1c:
3e:ad:7b:fb:69:21:b5:ad:93:be:20:87:d3:83:11:
11:e4:0f:85:58:cd:36:bc:a6:a4:8b:44:f8:fb:94:
15:86:55:a4:6a:40:ff:a5:38:fb:d5:16:b8:14:31:
e2:7b:3a:22:79:e5:63:9b:7c:ca:ac:58:bb:49:7c:
e9:44:53:87:3a:6c:18:18:e8:18:92:2f:4f:3c:57:
9d:26:52:d2:ff:d8:a3:99:f0:33:63:1d:2d:ec:b0:
52:4d:01:a7:1e:f3:26:4d:08:59:b2:70:c4:fb:fc:
eb:53:92:3d:61:70:3b:17:00:83:64:58:ce:50:10:
82:e5:5b:25:64:eb:12:c5:10:81:d1:50:af:b9:94:
e4:d0:a3:43:0b:62:4d:a9:77:57:da:0c:97:0e:f9:
f9:95:67:dc:7c:34:1b:ce:be:83:36:76:62:50:48:
d9:5b:d3:e2:7b:fb:79:c2:d4:ba:7f:04:16:63:2e:
6e:48:bd:88:57:7f:29:26:a0:c5:73:3f:51:15:d7:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:51:C7:52:2C:2D:82:EC:E6:DF:7C:69:9E:2D:CE:E6:C9:4B:F2:D9
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_1HHUiwtguzm33xpni3O5slL8tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
65:51:9a:59:b9:07:4b:0f:e0:49:32:02:1c:d7:d5:22:ed:8a:
49:75:db:ea:37:5f:4b:ac:8b:72:9e:f4:0c:34:ca:8f:43:4f:
9e:68:f7:6e:bd:c7:25:63:c6:48:f1:6f:77:38:74:d1:b1:89:
69:3b:05:0c:bc:79:ff:c3:fd:ff:42:38:c4:c1:06:a4:62:46:
dc:7c:ab:b3:c0:fe:30:e5:f0:5b:7c:cd:dd:42:f3:95:ec:a5:
33:f8:ef:b9:65:68:63:4d:94:df:20:54:0a:5f:b6:dc:56:dc:
25:9f:d6:c7:cc:fe:8d:94:af:d7:b1:6a:64:a8:4d:98:cc:30:
93:99:a5:7f:e6:4c:95:73:34:95:ba:ad:49:30:3b:89:14:b9:
ed:d6:bf:15:a2:15:34:a5:fe:d0:e6:6c:db:dc:89:97:e6:9f:
45:bf:dc:60:91:2b:3b:40:cc:4a:fd:14:a6:57:85:ed:39:39:
42:27:ab:91:1c:1c:ca:66:94:5e:54:1f:84:cc:68:e6:b4:85:
44:13:ad:ee:7e:a3:b4:a2:41:9a:91:2f:1b:05:da:c1:ef:a5:
ae:02:59:04:71:37:8f:f6:5f:e8:b7:8b:22:08:b3:43:67:6d:
47:59:d1:72:e2:dc:c8:c5:82:4d:6a:63:0a:e3:a5:ec:13:aa:
5f:84:e6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:08 2026 by rpki-client