Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/7drmdAJ15T6i4kYe-A_swxHC8nI.roa
File: 7drmdAJ15T6i4kYe-A_swxHC8nI.roa (raw, json)
Hash identifier: C5PISbRvWJUbWPnFcmcDWqyhXX2b1jPQLRXD9uyapnM=
Subject key identifier: ED:DA:E6:74:02:75:E5:3E:A2:E2:46:1E:F8:0F:EC:C3:11:C2:F2:72
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 01A001D1ED7C9DABAF6952A56CA9AAF8B26C
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/7drmdAJ15T6i4kYe-A_swxHC8nI.roa
Signing time: Fri 14 Aug 2026 19:48:49 +0000
ROA not before: Fri 14 Aug 2026 19:48:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 5.2.128.0/17 maxlen: 17
5.12.0.0/14 maxlen: 14
31.14.224.0/22 maxlen: 22
62.231.64.0/18 maxlen: 18
62.231.79.0/24 maxlen: 24
62.231.120.0/24 maxlen: 24
79.114.0.0/15 maxlen: 15
79.118.0.0/15 maxlen: 15
79.118.155.0/24 maxlen: 24
81.18.64.0/19 maxlen: 19
81.196.0.0/16 maxlen: 16
81.196.205.0/24 maxlen: 24
82.76.0.0/14 maxlen: 14
82.76.58.0/24 maxlen: 24
82.76.114.0/24 maxlen: 24
82.76.243.0/24 maxlen: 24
82.76.254.0/23 maxlen: 23
82.78.137.0/24 maxlen: 24
82.79.10.0/24 maxlen: 24
82.79.119.0/24 maxlen: 24
82.137.0.0/18 maxlen: 18
82.137.0.0/21 maxlen: 21
82.137.16.0/20 maxlen: 20
82.137.32.0/19 maxlen: 19
84.232.128.0/17 maxlen: 17
84.232.149.0/24 maxlen: 24
84.232.181.0/24 maxlen: 24
86.120.0.0/13 maxlen: 13
86.121.222.0/24 maxlen: 24
86.123.114.0/24 maxlen: 24
86.127.54.0/24 maxlen: 24
86.127.59.0/24 maxlen: 24
89.35.216.0/21 maxlen: 21
89.43.180.0/23 maxlen: 23
89.45.72.0/22 maxlen: 22
89.46.12.0/22 maxlen: 22
93.113.40.0/22 maxlen: 22
94.176.220.0/22 maxlen: 22
185.79.92.0/22 maxlen: 22
185.129.36.0/22 maxlen: 22
188.24.0.0/15 maxlen: 15
188.26.0.0/17 maxlen: 17
188.26.128.0/18 maxlen: 18
188.26.224.0/19 maxlen: 19
188.27.0.0/16 maxlen: 16
188.27.120.0/24 maxlen: 24
193.111.232.0/24 maxlen: 24
194.102.80.0/24 maxlen: 24
194.102.81.0/24 maxlen: 24
212.54.96.0/19 maxlen: 19
212.54.120.0/24 maxlen: 24
212.54.122.0/24 maxlen: 24
212.54.123.0/24 maxlen: 24
212.54.127.0/24 maxlen: 24
212.93.128.0/19 maxlen: 19
212.93.143.0/24 maxlen: 24
213.154.96.0/19 maxlen: 24
213.154.100.0/24 maxlen: 24
213.154.128.0/19 maxlen: 24
213.157.160.0/19 maxlen: 19
213.157.165.0/24 maxlen: 24
213.157.189.0/24 maxlen: 24
2a02:2f00::/28 maxlen: 28
2a02:2f01:100::/48 maxlen: 48
2a02:2f09:3100::/48 maxlen: 48
2a02:2f0c:8002::/48 maxlen: 48
2a02:2f0f:309::/48 maxlen: 48
2a02:2f0f:571::/48 maxlen: 48
2a03:9c20::/32 maxlen: 32
2a03:9c20:1000::/48 maxlen: 48
2a03:9c20:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:d1:ed:7c:9d:ab:af:69:52:a5:6c:a9:aa:f8:b2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Aug 14 19:48:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eddae6740275e53ea2e2461ef80fecc311c2f272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:42:4a:69:db:82:52:99:70:c7:92:d7:eb:
e3:c5:cd:9d:08:f5:e4:7f:12:4a:8a:b6:ee:56:39:
26:7d:ea:48:2d:12:36:ac:f3:ac:3a:fe:af:e3:81:
28:87:ae:48:c7:d7:28:61:c2:04:e9:9a:f8:48:5f:
9a:ba:5f:40:50:20:15:e4:98:1a:f9:5b:f7:48:e4:
2f:2a:c0:70:0d:20:80:35:00:57:f0:23:ba:91:03:
34:be:15:50:72:d1:46:6a:2a:e1:74:f6:6d:e3:4a:
5f:10:5b:69:6c:7c:38:5c:d4:ef:25:08:f5:30:65:
10:8b:de:9a:56:19:a4:8f:56:ec:e9:e2:c5:80:f1:
49:7c:ba:dc:70:7c:08:83:3e:d3:1a:93:a0:00:c4:
1f:fa:33:c7:d5:e0:18:68:d4:90:0b:29:e3:e2:8c:
94:75:84:d4:97:84:01:44:72:cb:ee:82:23:ec:67:
36:b3:f0:11:e4:c0:fd:71:4d:88:7b:00:db:f5:01:
4a:22:20:7d:30:21:0d:3e:78:46:30:bd:6b:69:c2:
a4:78:49:3c:12:b2:fd:72:58:b6:4b:ca:66:81:e9:
3d:ce:51:d9:ce:0d:5d:fd:95:1b:c4:22:58:10:48:
06:a3:57:fc:66:8d:67:0c:7e:c7:19:55:e2:4d:be:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DA:E6:74:02:75:E5:3E:A2:E2:46:1E:F8:0F:EC:C3:11:C2:F2:72
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/7drmdAJ15T6i4kYe-A_swxHC8nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.128.0/17
5.12.0.0/14
31.14.224.0/22
62.231.64.0/18
79.114.0.0/15
79.118.0.0/15
81.18.64.0/19
81.196.0.0/16
82.76.0.0/14
82.137.0.0/18
84.232.128.0/17
86.120.0.0/13
89.35.216.0/21
89.43.180.0/23
89.45.72.0/22
89.46.12.0/22
93.113.40.0/22
94.176.220.0/22
185.79.92.0/22
185.129.36.0/22
188.24.0.0-188.26.191.255
188.26.224.0-188.27.255.255
193.111.232.0/24
194.102.80.0/23
212.54.96.0/19
212.93.128.0/19
213.154.96.0-213.154.159.255
213.157.160.0/19
IPv6:
2a02:2f00::/28
2a03:9c20::/32
Signature Algorithm: sha256WithRSAEncryption
2a:fd:b5:32:a0:50:8a:21:35:e0:98:fd:4e:de:d8:80:1d:0c:
15:f7:b4:49:16:f2:33:86:4e:93:c3:aa:f4:8b:4a:fe:48:bf:
21:dc:e1:ad:6e:6e:64:9d:dc:1b:70:51:25:8a:55:d0:e1:51:
1d:bd:fa:07:a0:cb:ea:e9:db:40:8a:e1:77:e0:e1:81:75:16:
ee:2a:d5:2e:45:c4:1c:34:36:fb:b4:d2:b6:db:96:87:25:b6:
20:02:26:67:5d:47:6d:49:61:e5:0a:d0:7b:0f:24:ca:29:2b:
62:30:7d:8b:e9:53:b3:5c:2b:de:98:75:1b:df:19:34:72:c3:
82:26:0f:79:60:eb:86:c0:f8:47:f2:57:d2:ee:96:ee:ca:2c:
0b:6e:19:92:ec:ad:ef:af:0f:80:6b:09:a7:00:f6:c4:f4:4a:
43:a7:5a:22:d1:a0:78:0c:19:08:f7:88:9c:ef:28:82:67:f1:
6b:2f:49:23:5c:54:cf:8e:79:0f:42:48:88:87:42:81:5c:76:
1e:b1:e8:b6:17:64:70:88:12:76:ff:82:99:cd:85:a2:fa:b0:
10:c0:e8:9c:1b:84:8e:91:9c:8d:59:5a:b7:14:25:f3:08:2c:
d0:f8:cf:d9:50:cb:88:e2:88:d3:3c:19:c8:1f:88:cb:db:42:
2d:18:7f:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:28:40 2026 by rpki-client