Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/ihYg0cYS3IjGpvHqoGNoZQ5E0Rk.roa
File: ihYg0cYS3IjGpvHqoGNoZQ5E0Rk.roa (raw, json)
Hash identifier: WqAbMWiTVqKl0l8/bg/FAXvQEDwuUTFFygVL/CNd5Zw=
Subject key identifier: 8A:16:20:D1:C6:12:DC:88:C6:A6:F1:EA:A0:63:68:65:0E:44:D1:19
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A06A8FBE47BE1275C61719FAEC74CF1FF3
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/ihYg0cYS3IjGpvHqoGNoZQ5E0Rk.roa
Signing time: Fri 04 Sep 2026 03:56:40 +0000
ROA not before: Fri 04 Sep 2026 03:56:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 9.142.0.0/16 maxlen: 24
9.142.64.0/20 maxlen: 20
9.142.76.0/23 maxlen: 23
9.142.78.0/24 maxlen: 24
9.142.79.0/24 maxlen: 24
9.142.80.0/21 maxlen: 21
9.142.92.0/23 maxlen: 23
9.142.94.0/24 maxlen: 24
9.142.95.0/24 maxlen: 24
9.142.128.0/19 maxlen: 19
9.142.160.0/19 maxlen: 19
9.142.224.0/20 maxlen: 20
9.142.224.0/21 maxlen: 21
9.142.236.0/23 maxlen: 23
9.142.238.0/24 maxlen: 24
9.142.239.0/24 maxlen: 24
9.142.240.0/21 maxlen: 21
9.142.248.0/22 maxlen: 22
9.142.252.0/23 maxlen: 23
9.142.254.0/24 maxlen: 24
9.142.255.0/24 maxlen: 24
9.151.128.0/18 maxlen: 18
9.151.236.0/22 maxlen: 22
9.232.80.0/20 maxlen: 20
9.232.96.0/19 maxlen: 19
9.249.0.0/21 maxlen: 21
9.249.8.0/21 maxlen: 21
9.249.24.0/22 maxlen: 22
9.249.72.0/22 maxlen: 22
135.132.0.0/19 maxlen: 24
135.132.97.0/24 maxlen: 24
135.132.99.0/24 maxlen: 24
135.132.100.0/24 maxlen: 24
135.132.102.0/24 maxlen: 24
135.132.104.0/23 maxlen: 23
135.132.106.0/24 maxlen: 24
135.132.108.0/23 maxlen: 23
135.132.110.0/24 maxlen: 24
135.132.112.0/24 maxlen: 24
135.132.114.0/23 maxlen: 23
135.132.117.0/24 maxlen: 24
135.132.118.0/24 maxlen: 24
135.132.120.0/23 maxlen: 23
135.132.123.0/24 maxlen: 24
135.132.124.0/24 maxlen: 24
135.132.126.0/24 maxlen: 24
135.132.160.0/20 maxlen: 20
138.226.32.0/20 maxlen: 20
138.226.80.0/21 maxlen: 21
138.226.120.0/21 maxlen: 21
138.226.128.0/18 maxlen: 18
138.226.200.0/21 maxlen: 21
151.145.160.0/19 maxlen: 19
158.120.49.0/24 maxlen: 24
158.120.51.0/24 maxlen: 24
158.120.53.0/24 maxlen: 24
158.120.55.0/24 maxlen: 24
158.120.57.0/24 maxlen: 24
158.120.59.0/24 maxlen: 24
158.120.61.0/24 maxlen: 24
158.120.63.0/24 maxlen: 24
170.100.148.0/23 maxlen: 23
170.100.150.0/23 maxlen: 23
170.100.152.0/21 maxlen: 21
192.6.64.0/23 maxlen: 23
192.6.66.0/23 maxlen: 23
192.6.172.0/23 maxlen: 23
192.6.174.0/23 maxlen: 23
192.6.252.0/23 maxlen: 23
192.6.254.0/23 maxlen: 23
192.25.180.0/23 maxlen: 23
192.25.182.0/23 maxlen: 23
192.25.200.0/23 maxlen: 23
192.25.202.0/23 maxlen: 23
192.25.208.0/23 maxlen: 23
192.25.210.0/23 maxlen: 23
192.25.232.0/23 maxlen: 23
192.25.234.0/23 maxlen: 23
192.25.244.0/23 maxlen: 23
192.25.246.0/23 maxlen: 23
192.46.184.0/21 maxlen: 21
192.46.184.0/22 maxlen: 22
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
192.53.64.0/22 maxlen: 22
192.53.68.0/22 maxlen: 22
192.53.136.0/22 maxlen: 22
192.53.140.0/22 maxlen: 22
192.137.24.0/23 maxlen: 23
192.137.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:8f:be:47:be:12:75:c6:17:19:fa:ec:74:cf:1f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 4 03:56:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a1620d1c612dc88c6a6f1eaa06368650e44d119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:3f:c3:f6:60:bf:a6:75:6d:e4:22:73:11:
14:ea:9c:7e:4b:84:77:71:94:28:60:ae:bd:02:eb:
f2:ec:be:b8:b1:1a:0f:18:68:ef:f4:f2:d5:e9:fc:
23:89:88:19:ac:03:06:89:a2:18:f0:b4:a4:ee:e5:
f4:4c:c5:e7:94:eb:03:e6:52:46:92:9a:e6:0e:bd:
c6:2d:d7:fb:bb:31:37:70:3b:5e:eb:26:7f:7b:7b:
08:86:40:fa:64:a9:15:9b:a9:e5:d7:36:1c:ce:63:
c9:4b:17:38:bc:f1:78:65:8b:62:63:cb:53:85:e0:
61:36:8d:4e:1b:0d:14:45:a9:c8:9a:f3:e5:0e:f8:
08:72:1c:a0:56:cf:8d:a0:8c:fb:eb:8e:56:e8:cb:
c9:ad:cf:53:1e:e3:c2:e8:77:ae:cd:82:1c:a3:bb:
6e:3d:b8:a8:2f:31:d7:2c:99:9d:63:c4:6b:f0:95:
24:cb:a2:f8:3b:67:d5:5a:17:ed:95:7c:aa:b7:24:
41:68:86:3f:3f:53:38:e9:25:ef:d3:45:c9:80:49:
e0:67:ef:a2:9b:8a:05:bf:d4:b1:4c:8b:a2:21:cf:
d0:11:d9:35:e4:06:b6:7c:73:92:82:c0:ca:46:37:
c7:28:32:1c:17:f6:f0:97:c1:49:27:26:2b:1d:9c:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:20:D1:C6:12:DC:88:C6:A6:F1:EA:A0:63:68:65:0E:44:D1:19
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/ihYg0cYS3IjGpvHqoGNoZQ5E0Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.0.0/16
9.151.128.0/18
9.151.236.0/22
9.232.80.0-9.232.127.255
9.249.0.0/20
9.249.24.0/22
9.249.72.0/22
135.132.0.0/19
135.132.97.0/24
135.132.99.0-135.132.100.255
135.132.102.0/24
135.132.104.0-135.132.106.255
135.132.108.0-135.132.110.255
135.132.112.0/24
135.132.114.0/23
135.132.117.0-135.132.118.255
135.132.120.0/23
135.132.123.0-135.132.124.255
135.132.126.0/24
135.132.160.0/20
138.226.32.0/20
138.226.80.0/21
138.226.120.0-138.226.191.255
138.226.200.0/21
151.145.160.0/19
158.120.49.0/24
158.120.51.0/24
158.120.53.0/24
158.120.55.0/24
158.120.57.0/24
158.120.59.0/24
158.120.61.0/24
158.120.63.0/24
170.100.148.0-170.100.159.255
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.46.184.0/21
192.46.200.0/22
192.53.64.0/21
192.53.136.0/21
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
34:3c:bc:bd:27:2f:68:50:85:1b:6d:76:68:9e:62:27:0b:8b:
5f:02:91:f5:c0:a7:ad:a8:e4:19:5d:25:84:82:83:d2:20:c9:
c0:ed:06:51:5d:95:2e:a7:bc:49:29:3e:af:a0:af:5e:a1:47:
de:18:b8:9f:47:16:ee:77:30:d4:f4:b1:00:43:0c:76:62:78:
2e:aa:d8:a1:b5:83:1b:65:de:bb:e8:a7:c4:94:57:77:31:af:
66:93:34:78:c9:2c:9a:d3:6b:23:19:a5:22:fa:c6:17:fb:6e:
14:4f:92:3f:2a:8d:6e:c3:cb:ba:70:7f:3e:d1:d4:93:e7:53:
11:21:4e:7e:1d:56:36:12:bc:01:39:9d:3c:87:f7:f7:6b:0e:
24:a8:22:9a:dc:3e:3a:5a:3d:5b:29:98:4a:ec:10:39:1b:59:
0b:ae:37:6d:ee:95:29:55:a4:4a:a8:87:4c:0a:b7:8c:23:e7:
94:fb:55:f0:98:9e:8c:cc:1f:5b:a1:eb:42:52:d1:48:80:5f:
6a:66:63:3c:8f:79:ab:e3:4e:38:14:86:c0:42:7c:e6:b6:3f:
1f:39:72:2e:f6:1a:35:75:cd:b1:b5:50:98:c2:44:09:ca:85:
02:be:8e:e9:93:df:f2:71:1b:f0:c2:66:48:a7:5f:72:c3:f6:
7a:2b:fa:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:17:03 2026 by rpki-client