Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/h33gEtehiXmWUrxKHxMZg4iyrYM.roa
File: h33gEtehiXmWUrxKHxMZg4iyrYM.roa (raw, json)
Hash identifier: xU5aHl53TGR5OtCe3VcmHULk74gDDp45IynVuZQzdbw=
Subject key identifier: 87:7D:E0:12:D7:A1:89:79:96:52:BC:4A:1F:13:19:83:88:B2:AD:83
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 01A0F6A6C27B312A51CECDC63CF0AC970D36
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/h33gEtehiXmWUrxKHxMZg4iyrYM.roa
Signing time: Thu 01 Oct 2026 08:48:38 +0000
ROA not before: Thu 01 Oct 2026 08:48:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 5.2.128.0/17 maxlen: 17
5.12.0.0/14 maxlen: 14
31.14.224.0/22 maxlen: 22
62.231.64.0/18 maxlen: 18
62.231.79.0/24 maxlen: 24
62.231.120.0/24 maxlen: 24
79.114.0.0/15 maxlen: 15
79.118.0.0/15 maxlen: 15
79.118.155.0/24 maxlen: 24
81.18.64.0/19 maxlen: 19
81.196.0.0/16 maxlen: 16
81.196.205.0/24 maxlen: 24
82.76.0.0/14 maxlen: 14
82.76.58.0/24 maxlen: 24
82.76.114.0/24 maxlen: 24
82.76.243.0/24 maxlen: 24
82.76.254.0/23 maxlen: 23
82.78.137.0/24 maxlen: 24
82.79.10.0/24 maxlen: 24
82.79.119.0/24 maxlen: 24
82.137.0.0/18 maxlen: 18
82.137.0.0/21 maxlen: 21
82.137.16.0/20 maxlen: 20
82.137.32.0/19 maxlen: 19
84.232.128.0/17 maxlen: 17
84.232.149.0/24 maxlen: 24
84.232.181.0/24 maxlen: 24
86.120.0.0/13 maxlen: 13
86.121.222.0/24 maxlen: 24
86.123.114.0/24 maxlen: 24
86.127.54.0/24 maxlen: 24
86.127.59.0/24 maxlen: 24
89.35.216.0/21 maxlen: 21
89.43.180.0/23 maxlen: 23
89.46.12.0/22 maxlen: 22
93.113.40.0/22 maxlen: 22
94.176.220.0/22 maxlen: 22
185.79.92.0/22 maxlen: 22
185.129.36.0/22 maxlen: 22
188.24.0.0/15 maxlen: 15
188.26.0.0/17 maxlen: 17
188.26.128.0/18 maxlen: 18
188.26.224.0/19 maxlen: 19
188.27.0.0/16 maxlen: 16
188.27.120.0/24 maxlen: 24
193.111.232.0/24 maxlen: 24
194.102.80.0/24 maxlen: 24
194.102.81.0/24 maxlen: 24
212.54.96.0/19 maxlen: 19
212.54.120.0/24 maxlen: 24
212.54.122.0/24 maxlen: 24
212.54.123.0/24 maxlen: 24
212.54.127.0/24 maxlen: 24
212.93.128.0/19 maxlen: 19
212.93.143.0/24 maxlen: 24
213.154.96.0/19 maxlen: 24
213.154.100.0/24 maxlen: 24
213.154.128.0/19 maxlen: 24
213.157.160.0/19 maxlen: 19
213.157.165.0/24 maxlen: 24
213.157.189.0/24 maxlen: 24
2a02:2f00::/28 maxlen: 28
2a02:2f01:100::/48 maxlen: 48
2a02:2f09:3100::/48 maxlen: 48
2a02:2f0c:8002::/48 maxlen: 48
2a02:2f0f:309::/48 maxlen: 48
2a02:2f0f:571::/48 maxlen: 48
2a03:9c20::/32 maxlen: 32
2a03:9c20:1000::/48 maxlen: 48
2a03:9c20:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a6:c2:7b:31:2a:51:ce:cd:c6:3c:f0:ac:97:0d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Oct 1 08:48:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=877de012d7a189799652bc4a1f13198388b2ad83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:4c:48:18:70:fd:d7:fa:37:0f:35:d6:e5:
bd:67:06:e1:97:13:3a:77:b9:4b:e1:6f:47:17:2e:
dd:dd:09:51:c5:45:32:fe:6d:b5:3d:ba:9d:52:eb:
35:92:f6:8e:91:98:d7:b8:1e:d0:e0:48:62:1f:66:
ce:07:92:60:e5:36:c3:34:fa:ce:de:7f:e9:40:95:
1f:a6:98:61:14:8b:2a:4a:5f:4f:c8:fa:88:b7:90:
72:1a:7a:7f:81:17:a7:fa:0c:ac:39:3e:90:61:5b:
cf:bf:80:98:fa:c4:9c:91:21:ff:a0:17:c5:ae:4c:
48:56:76:13:56:8b:6e:91:7a:5f:ef:0f:c6:91:54:
a3:f7:72:93:74:b4:74:f0:25:92:e9:53:5e:41:2d:
7d:b4:0a:11:96:fb:f5:f4:b8:01:a7:2d:14:79:74:
11:71:ac:e4:0d:bb:f1:d3:dc:94:1c:f2:be:99:d0:
69:20:9c:9c:c5:c7:9b:c0:bf:c2:58:d6:c8:38:3d:
62:73:3e:0b:cd:e1:0d:4e:a4:c6:6c:e2:3d:31:2e:
19:0b:a3:b1:87:b5:90:6a:f0:72:78:d5:45:e9:05:
b8:ba:9e:1b:14:b9:ef:30:5e:b8:ee:a6:0b:7d:37:
ad:38:91:3d:ef:5b:a1:ae:f8:80:c8:ef:5f:ae:29:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7D:E0:12:D7:A1:89:79:96:52:BC:4A:1F:13:19:83:88:B2:AD:83
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/h33gEtehiXmWUrxKHxMZg4iyrYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.128.0/17
5.12.0.0/14
31.14.224.0/22
62.231.64.0/18
79.114.0.0/15
79.118.0.0/15
81.18.64.0/19
81.196.0.0/16
82.76.0.0/14
82.137.0.0/18
84.232.128.0/17
86.120.0.0/13
89.35.216.0/21
89.43.180.0/23
89.46.12.0/22
93.113.40.0/22
94.176.220.0/22
185.79.92.0/22
185.129.36.0/22
188.24.0.0-188.26.191.255
188.26.224.0-188.27.255.255
193.111.232.0/24
194.102.80.0/23
212.54.96.0/19
212.93.128.0/19
213.154.96.0-213.154.159.255
213.157.160.0/19
IPv6:
2a02:2f00::/28
2a03:9c20::/32
Signature Algorithm: sha256WithRSAEncryption
18:b6:5d:44:25:6e:47:b5:16:df:c2:0f:01:f9:f7:38:73:c1:
38:a5:fa:55:3e:95:3a:2b:33:72:a6:58:56:e5:2e:d8:13:f8:
61:80:ee:67:3b:c4:7b:12:7d:61:7f:59:5c:2b:3a:af:eb:17:
97:d3:eb:1e:63:3d:e4:ab:4e:bf:24:67:ff:c1:fa:f2:34:d6:
d3:e9:58:49:c9:fc:dd:fc:d4:56:b1:77:65:3d:98:1a:91:7c:
6c:80:3d:d7:c4:29:58:db:90:40:70:89:ba:27:7d:c3:78:de:
76:96:42:1b:f9:32:9c:4e:79:96:0d:af:ec:a0:98:33:2b:e0:
5b:2a:4d:f6:66:d1:c7:1d:a4:53:4f:f4:da:b8:3a:17:87:0e:
4c:3c:f3:a2:b0:39:73:c0:64:18:4f:5d:72:fb:e2:fe:4c:47:
06:53:0e:3a:b2:80:2d:a4:ee:3a:f0:c1:90:49:19:93:75:9b:
ab:49:28:91:bc:e6:22:15:15:3c:28:02:5b:d7:03:9c:3b:e3:
b9:67:c5:06:9f:64:e3:3e:21:c6:39:11:6d:92:95:32:4b:31:
ad:4b:11:cd:e7:8e:ca:17:9c:e0:a0:1e:9f:68:2b:f5:55:75:
93:d5:63:19:ea:7b:4a:0f:e9:21:4b:71:5b:ba:8c:e3:0c:4a:
ce:ee:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:56 2026 by rpki-client