Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/8ajq7d5uKNDIJ_Y7HPZUY0MhNG4.roa
File: 8ajq7d5uKNDIJ_Y7HPZUY0MhNG4.roa (raw, json)
Hash identifier: 1IXVwb35XZEmQhlX0vzyPsQm6rywCvpDrCEouj1mEt4=
Subject key identifier: F1:A8:EA:ED:DE:6E:28:D0:C8:27:F6:3B:1C:F6:54:63:43:21:34:6E
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 019ECB774CA8BBB125D0D066EF42CE9542D4
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/8ajq7d5uKNDIJ_Y7HPZUY0MhNG4.roa
Signing time: Mon 15 Jun 2026 13:27:33 +0000
ROA not before: Mon 15 Jun 2026 13:27:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 65.38.102.0/23 maxlen: 32
65.38.104.0/23 maxlen: 32
66.45.17.0/24 maxlen: 32
66.45.18.0/23 maxlen: 32
66.45.38.0/23 maxlen: 32
66.45.61.0/24 maxlen: 32
66.45.63.0/24 maxlen: 32
66.45.114.0/23 maxlen: 32
66.179.36.0/23 maxlen: 32
66.179.88.0/23 maxlen: 32
66.179.99.0/24 maxlen: 32
66.179.106.0/23 maxlen: 32
66.179.161.0/24 maxlen: 32
66.179.204.0/23 maxlen: 32
66.179.207.0/24 maxlen: 32
66.179.213.0/24 maxlen: 32
66.179.247.0/24 maxlen: 32
67.202.232.0/24 maxlen: 32
69.48.213.0/24 maxlen: 32
69.71.220.0/24 maxlen: 32
69.161.128.0/20 maxlen: 32
69.161.144.0/20 maxlen: 32
69.161.144.0/24 maxlen: 24
69.161.145.0/24 maxlen: 24
69.161.146.0/23 maxlen: 32
69.161.146.0/24 maxlen: 32
69.161.147.0/24 maxlen: 32
69.161.148.0/23 maxlen: 23
69.161.150.0/24 maxlen: 24
69.161.151.0/24 maxlen: 24
69.161.152.0/24 maxlen: 24
69.161.153.0/24 maxlen: 24
69.161.154.0/23 maxlen: 23
69.161.156.0/24 maxlen: 24
69.161.157.0/24 maxlen: 24
69.161.158.0/24 maxlen: 32
69.161.159.0/24 maxlen: 24
69.164.84.0/23 maxlen: 32
69.164.87.0/24 maxlen: 32
69.164.88.0/23 maxlen: 32
69.164.96.0/24 maxlen: 32
74.205.245.0/24 maxlen: 32
108.60.0.0/20 maxlen: 32
153.52.192.0/19 maxlen: 32
161.104.68.0/22 maxlen: 32
161.104.72.0/22 maxlen: 22
173.209.230.0/23 maxlen: 32
209.46.56.0/23 maxlen: 32
216.177.153.0/24 maxlen: 32
216.177.154.0/24 maxlen: 32
216.183.118.0/23 maxlen: 32
216.183.126.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:77:4c:a8:bb:b1:25:d0:d0:66:ef:42:ce:95:42:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jun 15 13:27:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1a8eaedde6e28d0c827f63b1cf654634321346e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:8a:e5:2c:76:bf:4e:de:45:bf:5a:b0:76:
9d:f4:d6:c7:9c:01:8b:b3:8d:aa:08:42:90:ae:99:
da:02:6d:13:0c:1b:6d:bb:76:0d:0c:df:91:1a:f3:
bd:5a:ea:4f:5d:42:79:fe:02:1e:c7:c9:17:f7:58:
74:95:58:4f:d7:d1:ac:21:bd:38:91:88:f7:42:0f:
87:82:81:99:df:8d:34:99:ca:70:9e:fd:ba:b0:14:
7c:52:c7:42:15:90:f4:e5:28:5f:87:cb:13:80:93:
b1:05:74:d7:66:8b:6b:fd:a1:35:03:af:fe:c7:bb:
dd:71:c7:c1:70:e6:1c:bc:27:08:56:a0:45:d5:75:
e9:7c:04:eb:67:ed:1e:cf:24:25:4f:71:75:cc:76:
92:9c:b0:8d:09:3f:a1:8d:80:8c:c2:c2:13:14:8a:
b5:26:5a:94:4d:34:8a:52:3c:cd:87:a8:dd:49:e3:
d4:e7:91:b6:7d:16:ae:f2:f9:7a:ca:ef:f5:4b:48:
99:c1:78:c1:ef:12:f0:9a:1a:c3:fb:a9:58:3b:86:
99:09:23:34:3b:45:2b:f9:70:f3:df:f2:82:f1:50:
45:05:40:ec:2b:80:07:08:4e:ed:cb:90:37:e3:56:
3e:3c:dd:af:c0:16:d3:5b:15:cd:ed:d2:83:99:1a:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A8:EA:ED:DE:6E:28:D0:C8:27:F6:3B:1C:F6:54:63:43:21:34:6E
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/8ajq7d5uKNDIJ_Y7HPZUY0MhNG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.38.102.0-65.38.105.255
66.45.17.0-66.45.19.255
66.45.38.0/23
66.45.61.0/24
66.45.63.0/24
66.45.114.0/23
66.179.36.0/23
66.179.88.0/23
66.179.99.0/24
66.179.106.0/23
66.179.161.0/24
66.179.204.0/23
66.179.207.0/24
66.179.213.0/24
66.179.247.0/24
67.202.232.0/24
69.48.213.0/24
69.71.220.0/24
69.161.128.0/19
69.164.84.0/23
69.164.87.0-69.164.89.255
69.164.96.0/24
74.205.245.0/24
108.60.0.0/20
153.52.192.0/19
161.104.68.0-161.104.75.255
173.209.230.0/23
209.46.56.0/23
216.177.153.0-216.177.154.255
216.183.118.0/23
216.183.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:64:eb:f7:39:10:50:87:f7:01:e2:c2:1b:d7:75:b5:ca:7e:
08:c3:0e:8c:90:02:c5:7b:d6:f8:6d:b8:13:5c:78:cf:7c:37:
f2:1d:97:55:62:3b:85:3e:65:44:b1:5c:9d:25:52:01:e3:89:
6c:1a:53:06:66:87:a9:b9:be:68:06:73:86:73:e1:df:d5:3f:
02:18:6f:5f:b2:3c:63:2a:7c:cd:63:0b:48:ac:f7:45:0e:e3:
27:ef:1a:a5:41:9a:64:f6:26:3a:7d:ea:46:18:d6:c3:8f:0e:
23:f0:da:32:87:bb:a0:34:27:1b:97:e7:26:e7:e1:0b:e3:65:
e7:d0:a3:42:c9:89:ba:a9:a7:9a:0e:77:fb:f6:6f:0e:ac:1c:
94:c3:18:3a:0c:c9:49:dc:e3:45:dd:40:d1:03:41:d1:c5:92:
2b:90:c4:52:6f:65:24:97:3e:83:d4:d1:04:4c:24:7c:59:f6:
80:d2:33:6d:da:6b:27:b6:78:c1:d4:4f:79:7f:e2:ce:3f:22:
59:4e:51:81:8b:ab:69:85:9f:78:dc:ae:6b:f9:16:87:13:21:
0e:86:02:e4:37:1c:23:73:71:fd:cd:fa:3c:2e:7a:a4:28:d6:
2a:aa:db:7a:48:44:2e:13:4d:6d:6c:1a:d5:89:8d:2d:99:0e:
a4:81:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:24 2026 by rpki-client