Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/fNUWbCvNGUQ8jPZjNppUGXZxd4A.roa
File: fNUWbCvNGUQ8jPZjNppUGXZxd4A.roa (raw, json)
Hash identifier: eG4qYPQpc6AQYEEEZitdHnldp7Q4agADqFpsp/9Fdhc=
Subject key identifier: 7C:D5:16:6C:2B:CD:19:44:3C:8C:F6:63:36:9A:54:19:76:71:77:80
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A0601C93D84F2DA456AC694B4B898D1B80
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/fNUWbCvNGUQ8jPZjNppUGXZxd4A.roa
Signing time: Wed 02 Sep 2026 03:14:40 +0000
ROA not before: Wed 02 Sep 2026 03:14:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 9.142.0.0/16 maxlen: 24
9.142.64.0/20 maxlen: 20
9.142.76.0/23 maxlen: 23
9.142.78.0/24 maxlen: 24
9.142.79.0/24 maxlen: 24
9.142.80.0/21 maxlen: 21
9.142.92.0/23 maxlen: 23
9.142.94.0/24 maxlen: 24
9.142.95.0/24 maxlen: 24
9.142.128.0/19 maxlen: 19
9.142.160.0/19 maxlen: 19
9.142.224.0/20 maxlen: 20
9.142.224.0/21 maxlen: 21
9.142.236.0/23 maxlen: 23
9.142.238.0/24 maxlen: 24
9.142.239.0/24 maxlen: 24
9.142.240.0/21 maxlen: 21
9.142.248.0/22 maxlen: 22
9.142.252.0/23 maxlen: 23
9.142.254.0/24 maxlen: 24
9.142.255.0/24 maxlen: 24
9.151.128.0/18 maxlen: 18
9.151.236.0/22 maxlen: 22
9.232.80.0/20 maxlen: 20
9.232.96.0/19 maxlen: 19
9.249.0.0/21 maxlen: 21
9.249.8.0/21 maxlen: 21
9.249.24.0/22 maxlen: 22
9.249.72.0/22 maxlen: 22
135.132.0.0/19 maxlen: 24
135.132.97.0/24 maxlen: 24
135.132.99.0/24 maxlen: 24
135.132.100.0/24 maxlen: 24
135.132.102.0/24 maxlen: 24
135.132.104.0/23 maxlen: 23
135.132.106.0/24 maxlen: 24
135.132.108.0/23 maxlen: 23
135.132.110.0/24 maxlen: 24
135.132.112.0/24 maxlen: 24
135.132.114.0/23 maxlen: 23
135.132.117.0/24 maxlen: 24
135.132.118.0/24 maxlen: 24
135.132.120.0/23 maxlen: 23
135.132.123.0/24 maxlen: 24
135.132.124.0/24 maxlen: 24
135.132.126.0/24 maxlen: 24
135.132.160.0/20 maxlen: 20
138.226.32.0/20 maxlen: 20
138.226.80.0/21 maxlen: 21
138.226.120.0/21 maxlen: 21
138.226.128.0/18 maxlen: 18
138.226.200.0/21 maxlen: 21
151.145.160.0/19 maxlen: 19
158.120.49.0/24 maxlen: 24
158.120.51.0/24 maxlen: 24
158.120.53.0/24 maxlen: 24
158.120.55.0/24 maxlen: 24
158.120.57.0/24 maxlen: 24
158.120.59.0/24 maxlen: 24
158.120.61.0/24 maxlen: 24
158.120.63.0/24 maxlen: 24
170.100.148.0/23 maxlen: 23
170.100.150.0/23 maxlen: 23
170.100.152.0/21 maxlen: 21
192.6.64.0/23 maxlen: 23
192.6.66.0/23 maxlen: 23
192.6.172.0/23 maxlen: 23
192.46.184.0/21 maxlen: 21
192.46.184.0/22 maxlen: 22
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
192.53.64.0/22 maxlen: 22
192.53.68.0/22 maxlen: 22
192.53.136.0/22 maxlen: 22
192.53.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:1c:93:d8:4f:2d:a4:56:ac:69:4b:4b:89:8d:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 2 03:14:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cd5166c2bcd19443c8cf663369a541976717780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:2a:fe:b2:61:e5:5a:15:fb:ad:d5:04:61:
be:81:a5:42:50:68:4d:60:e6:af:c9:13:67:46:de:
4d:53:79:08:f4:9a:4d:41:68:d7:ba:0f:1b:72:1a:
c5:17:04:24:2e:2f:21:7f:16:74:81:63:96:5c:b2:
3e:73:f0:3a:e3:b0:cd:dc:7a:38:24:b3:a5:f7:d7:
9a:96:39:4d:30:14:7a:18:85:ef:69:2d:61:36:ec:
ec:23:90:5a:d5:57:ea:db:fc:02:54:d9:d7:2e:51:
0e:42:17:6b:7a:4c:d9:46:27:44:fb:bf:20:62:b1:
70:79:96:49:53:61:53:8d:21:7b:2b:21:e6:5e:6e:
13:54:b3:79:26:b1:a7:45:69:f4:18:d8:0a:33:a3:
0c:60:8c:a5:7a:b8:56:06:2f:24:ac:95:74:87:68:
40:f0:cc:04:be:37:6f:9f:d2:b9:a2:57:e4:4b:25:
2c:ab:43:87:70:a3:ac:b6:82:e8:4f:c0:d1:8e:26:
52:f1:2f:da:3f:b0:6d:b5:a7:f5:bd:ca:77:72:81:
32:e0:a1:65:c0:68:e4:5d:4f:06:3f:f5:e3:4a:64:
3a:54:ee:8f:9a:9a:2f:a8:01:ed:2c:0e:97:a2:95:
59:df:76:1b:dc:41:d9:e8:a3:6b:5a:f3:63:73:cf:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:16:6C:2B:CD:19:44:3C:8C:F6:63:36:9A:54:19:76:71:77:80
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/fNUWbCvNGUQ8jPZjNppUGXZxd4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.0.0/16
9.151.128.0/18
9.151.236.0/22
9.232.80.0-9.232.127.255
9.249.0.0/20
9.249.24.0/22
9.249.72.0/22
135.132.0.0/19
135.132.97.0/24
135.132.99.0-135.132.100.255
135.132.102.0/24
135.132.104.0-135.132.106.255
135.132.108.0-135.132.110.255
135.132.112.0/24
135.132.114.0/23
135.132.117.0-135.132.118.255
135.132.120.0/23
135.132.123.0-135.132.124.255
135.132.126.0/24
135.132.160.0/20
138.226.32.0/20
138.226.80.0/21
138.226.120.0-138.226.191.255
138.226.200.0/21
151.145.160.0/19
158.120.49.0/24
158.120.51.0/24
158.120.53.0/24
158.120.55.0/24
158.120.57.0/24
158.120.59.0/24
158.120.61.0/24
158.120.63.0/24
170.100.148.0-170.100.159.255
192.6.64.0/22
192.6.172.0/23
192.46.184.0/21
192.46.200.0/22
192.53.64.0/21
192.53.136.0/21
Signature Algorithm: sha256WithRSAEncryption
17:53:21:bd:f4:68:c3:26:29:31:aa:71:9d:6e:35:42:38:87:
9f:79:f3:8a:d2:a0:65:ea:1a:0f:fd:89:7c:06:7a:1d:05:eb:
43:13:db:1d:09:da:be:01:a1:0d:67:45:b8:7e:45:da:6e:a9:
78:e8:ef:bf:df:a4:c0:38:f3:d4:50:34:cc:51:6d:ad:44:37:
cd:38:e3:d1:c4:4d:68:a2:2a:fb:99:f1:ef:7a:2e:c7:cf:d6:
d9:4f:a0:9b:31:58:01:5e:c4:be:5f:56:19:58:cf:9e:04:4c:
26:14:79:d5:c2:10:44:e5:38:01:55:53:48:5b:d0:98:d2:aa:
ac:a2:6f:4f:2f:75:31:8f:21:7e:99:d1:ce:19:a2:fe:8f:b6:
a6:45:24:da:fc:1c:5d:c8:80:d8:89:9b:af:19:b6:e4:41:94:
cd:3b:3f:fc:61:d1:dd:23:b6:f3:38:bf:c7:eb:0f:3e:62:1b:
bf:79:4b:b2:9e:32:3e:93:1c:80:27:03:a5:32:35:71:63:1b:
4f:62:fe:70:e5:40:fa:e0:77:b4:a3:65:90:40:c3:a6:78:ed:
f1:9e:66:e2:5e:bb:d0:13:3b:03:b6:df:20:ca:9f:4b:55:29:
a1:1e:eb:ce:e5:75:12:00:b0:16:f4:23:b4:5c:c4:6a:54:12:
7b:44:d5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:57:02 2026 by rpki-client