Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dCYXV19RJ5h1JVBytEUq5zICe64.roa
File: dCYXV19RJ5h1JVBytEUq5zICe64.roa (raw, json)
Hash identifier: B8H4tjBdlsqaofOAhii3HMm1Md9CZME43l1EdK5Be7A=
Subject key identifier: 74:26:17:57:5F:51:27:98:75:25:50:72:B4:45:2A:E7:32:02:7B:AE
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A13324E6E2BBA44647ED106F26FB293497
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dCYXV19RJ5h1JVBytEUq5zICe64.roa
Signing time: Tue 13 Oct 2026 02:43:38 +0000
ROA not before: Tue 13 Oct 2026 02:43:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 9.142.0.0/16 maxlen: 24
9.142.64.0/20 maxlen: 20
9.142.76.0/23 maxlen: 23
9.142.78.0/24 maxlen: 24
9.142.79.0/24 maxlen: 24
9.142.80.0/21 maxlen: 21
9.142.92.0/23 maxlen: 23
9.142.94.0/24 maxlen: 24
9.142.95.0/24 maxlen: 24
9.142.128.0/19 maxlen: 19
9.142.160.0/19 maxlen: 19
9.142.224.0/20 maxlen: 20
9.142.224.0/21 maxlen: 21
9.142.236.0/23 maxlen: 23
9.142.238.0/24 maxlen: 24
9.142.239.0/24 maxlen: 24
9.142.240.0/21 maxlen: 21
9.142.248.0/22 maxlen: 22
9.142.252.0/23 maxlen: 23
9.142.254.0/24 maxlen: 24
9.142.255.0/24 maxlen: 24
9.151.128.0/18 maxlen: 18
9.151.236.0/22 maxlen: 22
9.232.80.0/20 maxlen: 20
9.232.96.0/19 maxlen: 19
9.249.0.0/21 maxlen: 21
9.249.0.0/22 maxlen: 22
9.249.4.0/22 maxlen: 22
9.249.8.0/21 maxlen: 21
9.249.24.0/22 maxlen: 22
9.249.72.0/22 maxlen: 22
9.249.72.0/23 maxlen: 23
9.249.74.0/23 maxlen: 23
135.132.0.0/19 maxlen: 24
135.132.97.0/24 maxlen: 24
135.132.99.0/24 maxlen: 24
135.132.100.0/24 maxlen: 24
135.132.102.0/24 maxlen: 24
135.132.104.0/23 maxlen: 23
135.132.104.0/24 maxlen: 24
135.132.105.0/24 maxlen: 24
135.132.106.0/24 maxlen: 24
135.132.108.0/23 maxlen: 23
135.132.108.0/24 maxlen: 24
135.132.109.0/24 maxlen: 24
135.132.110.0/24 maxlen: 24
135.132.112.0/24 maxlen: 24
135.132.114.0/23 maxlen: 23
135.132.114.0/24 maxlen: 24
135.132.115.0/24 maxlen: 24
135.132.117.0/24 maxlen: 24
135.132.118.0/24 maxlen: 24
135.132.120.0/23 maxlen: 23
135.132.120.0/24 maxlen: 24
135.132.121.0/24 maxlen: 24
135.132.123.0/24 maxlen: 24
135.132.124.0/24 maxlen: 24
135.132.126.0/24 maxlen: 24
135.132.160.0/20 maxlen: 20
138.226.32.0/20 maxlen: 20
138.226.80.0/21 maxlen: 21
138.226.120.0/21 maxlen: 21
138.226.128.0/18 maxlen: 18
138.226.200.0/21 maxlen: 21
151.145.128.0/21 maxlen: 21
151.145.136.0/21 maxlen: 21
151.145.144.0/21 maxlen: 21
151.145.152.0/21 maxlen: 21
151.145.160.0/19 maxlen: 19
158.120.48.0/24 maxlen: 24
158.120.49.0/24 maxlen: 24
158.120.50.0/24 maxlen: 24
158.120.51.0/24 maxlen: 24
158.120.52.0/24 maxlen: 24
158.120.53.0/24 maxlen: 24
158.120.54.0/24 maxlen: 24
158.120.55.0/24 maxlen: 24
158.120.56.0/24 maxlen: 24
158.120.57.0/24 maxlen: 24
158.120.58.0/24 maxlen: 24
158.120.59.0/24 maxlen: 24
158.120.60.0/24 maxlen: 24
158.120.61.0/24 maxlen: 24
158.120.62.0/24 maxlen: 24
158.120.63.0/24 maxlen: 24
170.100.148.0/23 maxlen: 23
170.100.150.0/23 maxlen: 23
170.100.152.0/21 maxlen: 21
170.100.152.0/22 maxlen: 22
170.100.156.0/22 maxlen: 22
192.6.64.0/23 maxlen: 23
192.6.66.0/23 maxlen: 23
192.6.172.0/23 maxlen: 23
192.6.174.0/23 maxlen: 23
192.6.252.0/23 maxlen: 23
192.6.254.0/23 maxlen: 23
192.25.180.0/23 maxlen: 23
192.25.182.0/23 maxlen: 23
192.25.200.0/23 maxlen: 23
192.25.202.0/23 maxlen: 23
192.25.208.0/23 maxlen: 23
192.25.210.0/23 maxlen: 23
192.25.232.0/23 maxlen: 23
192.25.234.0/23 maxlen: 23
192.25.244.0/23 maxlen: 23
192.25.246.0/23 maxlen: 23
192.46.184.0/21 maxlen: 21
192.46.184.0/22 maxlen: 22
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
192.53.64.0/22 maxlen: 22
192.53.68.0/22 maxlen: 22
192.53.136.0/22 maxlen: 22
192.53.140.0/22 maxlen: 22
192.137.24.0/23 maxlen: 23
192.137.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:24:e6:e2:bb:a4:46:47:ed:10:6f:26:fb:29:34:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Oct 13 02:43:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=742617575f51279875255072b4452ae732027bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:9f:96:36:37:39:9a:72:3b:02:57:5f:df:
71:f1:c2:7b:85:49:2d:40:c9:a8:f1:4e:a1:7b:c7:
16:2f:96:97:86:88:43:11:12:77:91:8a:58:ae:4c:
52:9b:86:1a:a8:52:5e:67:30:54:eb:9e:72:ee:79:
b4:79:f3:5e:d2:ab:02:6b:47:41:5c:bb:62:4e:3e:
14:44:53:63:cc:4c:43:02:f8:d9:03:85:30:9b:b9:
0d:c8:5c:c0:05:48:4d:e8:3b:4d:52:2e:ca:cd:b4:
87:30:89:9f:b6:94:3e:e4:ed:a2:c7:be:db:c7:ee:
d8:bc:e0:35:cb:86:02:a9:77:02:20:b8:c1:1d:ad:
8c:d5:10:20:68:c9:28:52:d9:8b:72:15:58:3a:12:
93:13:5d:c6:83:24:78:5e:93:12:da:7c:4d:33:e6:
06:76:6a:84:68:c0:23:b2:79:3a:fd:e9:7f:ba:94:
bf:82:d6:be:23:a6:f3:48:1a:47:f7:45:d6:03:09:
29:b2:c8:f7:a3:ee:c8:e8:09:11:28:ab:05:01:9b:
27:ed:ad:83:b6:9c:11:dc:d7:73:0a:65:f7:95:c0:
c3:56:b6:f5:08:2f:90:87:c2:cf:9f:28:29:17:ae:
b0:49:ea:14:0f:c8:37:ae:9d:ea:cf:7e:3c:2b:03:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:26:17:57:5F:51:27:98:75:25:50:72:B4:45:2A:E7:32:02:7B:AE
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dCYXV19RJ5h1JVBytEUq5zICe64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.0.0/16
9.151.128.0/18
9.151.236.0/22
9.232.80.0-9.232.127.255
9.249.0.0/20
9.249.24.0/22
9.249.72.0/22
135.132.0.0/19
135.132.97.0/24
135.132.99.0-135.132.100.255
135.132.102.0/24
135.132.104.0-135.132.106.255
135.132.108.0-135.132.110.255
135.132.112.0/24
135.132.114.0/23
135.132.117.0-135.132.118.255
135.132.120.0/23
135.132.123.0-135.132.124.255
135.132.126.0/24
135.132.160.0/20
138.226.32.0/20
138.226.80.0/21
138.226.120.0-138.226.191.255
138.226.200.0/21
151.145.128.0/18
158.120.48.0/20
170.100.148.0-170.100.159.255
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.46.184.0/21
192.46.200.0/22
192.53.64.0/21
192.53.136.0/21
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:f9:86:0b:01:ae:72:f7:34:fa:e1:4d:45:f7:58:09:af:ea:
1d:43:57:8d:01:20:51:7b:6f:46:7d:fc:42:34:77:4c:5a:36:
8f:7c:b6:2e:4c:a2:0b:c1:bc:21:05:2e:58:a5:bb:af:0c:82:
b9:ef:33:08:0b:09:d3:9a:2d:65:48:01:b9:fb:ae:7d:42:a0:
d8:20:c9:2b:81:48:ea:a3:90:8e:a7:c0:b6:32:c8:b7:fe:aa:
7c:1d:28:d9:f0:1a:8e:46:e6:7b:71:8c:f9:b0:7d:21:fa:1c:
cf:09:4d:8f:13:7b:4b:17:d3:0a:f3:3b:f0:8c:9d:30:8f:71:
83:b5:40:34:91:11:ff:0e:1e:6c:eb:a8:37:01:be:14:52:90:
d4:1a:49:9a:e9:b0:f1:07:d4:71:55:3f:06:e2:3d:86:04:4d:
54:e3:68:89:ce:7c:0b:1d:82:d2:d1:5c:b1:a6:58:61:c7:71:
cd:db:7c:20:05:ec:a4:17:ef:b3:8b:6b:60:e9:ae:3b:b1:59:
89:ef:aa:16:e9:c4:1a:81:d4:78:22:f7:28:53:10:e9:13:2a:
92:45:d7:75:7d:77:f3:77:e4:fe:62:31:06:48:bf:39:ad:75:
20:6c:9b:9d:ea:e8:25:b3:10:94:fd:66:31:43:80:cb:5d:ee:
b3:05:6d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:45:47 2026 by rpki-client