Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/odWfHvEg4Zg2JOxTLhpw9CKHP4A.roa
File: odWfHvEg4Zg2JOxTLhpw9CKHP4A.roa (raw, json)
Hash identifier: 8y7DNpC1p7d3tYIjdawPey2BxVW1e7hLJ0NVHxEaHpk=
Subject key identifier: A1:D5:9F:1E:F1:20:E1:98:36:24:EC:53:2E:1A:70:F4:22:87:3F:80
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019FDC0D111530BC8F69B07BEAD67A69CDF3
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/odWfHvEg4Zg2JOxTLhpw9CKHP4A.roa
Signing time: Fri 07 Aug 2026 11:47:51 +0000
ROA not before: Fri 07 Aug 2026 11:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20804
IP address blocks: 81.15.128.0/17 maxlen: 17
81.15.136.0/23 maxlen: 23
81.15.156.0/24 maxlen: 24
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
81.15.182.0/23 maxlen: 23
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.198.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.202.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
81.15.209.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
81.15.216.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/23 maxlen: 23
81.15.218.0/24 maxlen: 24
81.15.222.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.224.0/22 maxlen: 22
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.230.0/24 maxlen: 24
81.15.232.0/22 maxlen: 22
81.15.232.0/24 maxlen: 24
81.15.236.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.238.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.240.0/23 maxlen: 23
81.15.242.0/24 maxlen: 24
81.15.244.0/23 maxlen: 23
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.0.0/16 maxlen: 16
82.177.0.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
82.177.4.0/22 maxlen: 22
82.177.9.0/24 maxlen: 24
82.177.10.0/23 maxlen: 23
82.177.14.0/23 maxlen: 23
82.177.16.0/24 maxlen: 24
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.48.0/21 maxlen: 21
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.52.0/23 maxlen: 23
82.177.54.0/24 maxlen: 24
82.177.59.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
82.177.72.0/21 maxlen: 21
82.177.80.0/21 maxlen: 21
82.177.102.0/23 maxlen: 24
82.177.108.0/23 maxlen: 23
82.177.112.0/22 maxlen: 22
82.177.140.0/23 maxlen: 23
82.177.164.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/22 maxlen: 22
82.177.196.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.252.0/24 maxlen: 24
88.220.0.0/17 maxlen: 17
88.220.60.0/23 maxlen: 23
88.220.81.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.89.0/24 maxlen: 24
88.220.95.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
88.220.113.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
194.183.56.0/23 maxlen: 23
195.136.0.0/16 maxlen: 16
195.136.4.0/22 maxlen: 22
195.136.16.0/22 maxlen: 22
195.136.21.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.32.158/32 maxlen: 32
195.136.32.201/32 maxlen: 32
195.136.34.0/23 maxlen: 23
195.136.38.0/23 maxlen: 23
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.113.0/24 maxlen: 24
195.136.145.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
195.136.164.0/23 maxlen: 23
195.136.174.0/23 maxlen: 23
195.136.176.0/22 maxlen: 22
213.172.160.0/19 maxlen: 19
2a00:4120::/32 maxlen: 32
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:5::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:0d:11:15:30:bc:8f:69:b0:7b:ea:d6:7a:69:cd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Aug 7 11:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1d59f1ef120e1983624ec532e1a70f422873f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:24:f3:46:0b:7b:78:54:be:06:3d:05:4f:
0d:39:84:fc:58:c2:66:25:45:37:79:33:22:62:2b:
86:39:33:bf:73:b7:01:19:a6:ba:69:26:87:7b:3d:
f1:ca:fe:4a:7b:91:8d:f5:5d:4a:bd:48:a7:47:43:
e6:1c:86:88:ca:ab:3e:50:c9:87:45:50:3d:e5:bd:
22:b5:bc:d7:dd:5b:d4:69:5b:84:f8:d8:ac:61:45:
7f:a7:78:44:9b:f1:e9:7b:68:57:41:87:87:e3:50:
a7:af:02:b2:bc:fc:c9:63:4c:2c:cd:5d:d7:36:7a:
94:0f:ab:e6:1a:bd:a7:e3:24:18:0e:9c:85:3c:8f:
f6:19:76:d5:ca:6f:0b:4f:80:5c:43:6c:b7:24:b0:
b4:aa:ed:3d:9c:2e:7c:cf:1d:fa:24:58:c1:36:0c:
e7:1d:e2:87:bd:2f:4f:5d:e0:10:7b:ad:81:a4:8e:
25:72:51:2e:52:34:b3:5a:52:6c:fe:c4:02:96:3c:
cc:c3:de:a3:a8:29:5b:79:a5:7b:7f:94:77:2c:24:
ef:9b:d4:e7:6b:a6:8c:7e:08:22:7f:ae:7d:1e:8e:
dd:27:a6:0d:b2:e7:ad:7b:a8:24:b8:b0:15:4d:5e:
38:74:dd:61:29:da:59:4c:e1:6e:36:02:40:e3:8c:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D5:9F:1E:F1:20:E1:98:36:24:EC:53:2E:1A:70:F4:22:87:3F:80
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/odWfHvEg4Zg2JOxTLhpw9CKHP4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
4f:bf:60:07:07:30:17:e5:21:7b:55:1d:7b:91:7a:b8:51:b5:
ad:c9:ed:62:5b:2b:44:c7:c9:6a:ff:cd:e1:2d:75:49:84:0c:
86:4a:b2:e8:b9:fd:9a:e4:88:64:8b:c1:e0:72:64:57:97:e9:
db:8c:68:14:8c:12:7c:eb:8e:98:02:0f:fc:ce:60:8c:8b:4e:
0a:95:4c:c0:df:d5:e8:7e:16:44:a4:db:17:78:cc:29:25:3a:
a1:44:e9:cc:aa:72:3b:8c:67:10:c3:b6:65:e8:fb:49:8f:39:
16:a2:5f:48:9b:db:75:ab:cf:8e:9b:72:45:90:61:a5:a2:f4:
de:09:00:0b:49:fd:a0:72:a4:76:e9:fc:69:a1:db:73:a3:02:
10:dd:e5:40:40:e0:39:51:ee:c2:82:bd:4a:84:b0:b8:e0:2a:
6e:3a:b9:0a:9e:32:0f:ac:97:e5:2d:62:b4:e2:32:45:d3:92:
d3:34:43:06:ee:eb:49:39:da:73:f9:3b:0d:98:c5:18:64:05:
b7:2e:dd:a7:82:5c:ae:ec:fa:a2:20:37:ce:7a:0f:86:3f:68:
37:b7:08:ae:fc:98:79:ab:9c:48:d2:ca:f5:3f:1a:70:45:5e:
c2:d2:ad:cb:d8:0c:2a:94:54:d9:3e:17:60:8b:3e:aa:a2:66:
67:fa:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:31 2026 by rpki-client