Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pdqEw5iuF312Fx4Gh8FELse0F7U.roa
File: pdqEw5iuF312Fx4Gh8FELse0F7U.roa (raw, json)
Hash identifier: 8o38Pb+iHo0bLN38JuwTjQeNKV2+jFf2jL93DcY8rhY=
Subject key identifier: A5:DA:84:C3:98:AE:17:7D:76:17:1E:06:87:C1:44:2E:C7:B4:17:B5
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A06BF2F7F7FD94A5BBC63B7E58F1DF1A2A
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pdqEw5iuF312Fx4Gh8FELse0F7U.roa
Signing time: Fri 04 Sep 2026 10:24:40 +0000
ROA not before: Fri 04 Sep 2026 10:24:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7843
IP address blocks: 9.233.0.0/19 maxlen: 24
9.233.64.0/19 maxlen: 24
9.233.192.0/18 maxlen: 24
9.237.48.0/20 maxlen: 24
9.237.64.0/20 maxlen: 24
135.132.104.0/24 maxlen: 24
135.132.105.0/24 maxlen: 24
135.132.108.0/24 maxlen: 24
135.132.109.0/24 maxlen: 24
135.132.114.0/24 maxlen: 24
135.132.115.0/24 maxlen: 24
135.132.120.0/24 maxlen: 24
135.132.121.0/24 maxlen: 24
151.145.160.0/20 maxlen: 20
151.145.176.0/20 maxlen: 20
170.100.148.0/23 maxlen: 23
170.100.150.0/23 maxlen: 23
170.100.152.0/22 maxlen: 22
170.100.156.0/22 maxlen: 22
170.100.204.0/24 maxlen: 24
170.100.206.0/24 maxlen: 24
170.100.207.0/24 maxlen: 24
192.6.64.0/23 maxlen: 23
192.6.66.0/23 maxlen: 23
192.6.172.0/23 maxlen: 23
192.6.174.0/23 maxlen: 23
192.6.252.0/23 maxlen: 23
192.6.254.0/23 maxlen: 23
192.25.180.0/23 maxlen: 23
192.25.182.0/23 maxlen: 23
192.25.200.0/23 maxlen: 23
192.25.202.0/23 maxlen: 23
192.25.208.0/23 maxlen: 23
192.25.210.0/23 maxlen: 23
192.25.232.0/23 maxlen: 23
192.25.234.0/23 maxlen: 23
192.25.244.0/23 maxlen: 23
192.25.246.0/23 maxlen: 23
192.137.24.0/23 maxlen: 23
192.137.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:f2:f7:f7:fd:94:a5:bb:c6:3b:7e:58:f1:df:1a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 4 10:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5da84c398ae177d76171e0687c1442ec7b417b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:dd:d3:a6:60:34:26:77:73:31:4a:66:8d:
1d:d2:b1:df:fb:68:61:fe:5e:71:d7:cf:90:e7:3c:
39:ca:95:1b:ec:2c:55:84:a8:a7:7e:f2:b4:8e:81:
cd:a9:fa:af:c2:ac:4a:aa:c4:07:6b:5c:b7:fc:9b:
0c:3e:3a:32:0c:bb:be:e8:42:ec:0c:82:f9:e9:0f:
a1:9f:55:10:e6:f9:56:09:3a:1f:93:db:28:3e:93:
72:d8:ae:b8:5c:5e:da:cc:6a:52:ac:cc:d1:79:4e:
d1:55:9a:f3:5a:6d:e5:af:a7:12:5c:da:a5:21:cc:
8f:41:b5:46:c3:88:fe:8a:8b:60:b9:81:16:2c:16:
e6:49:5f:81:c4:18:d3:a9:ed:18:06:3c:cc:b6:3f:
52:0d:39:69:bf:6d:59:08:5f:e2:6a:fd:b4:99:34:
30:f8:c4:a8:d2:29:36:3b:32:48:90:a7:f0:dd:d7:
48:79:bb:04:ce:74:27:e3:58:7c:7f:ab:77:6d:b2:
fb:f8:0e:37:07:2c:23:c7:ed:f5:e5:17:7a:ff:d4:
98:36:c8:2e:2b:fe:f3:54:45:d5:bb:79:ab:88:53:
bb:b0:5f:85:75:fa:30:15:5b:df:65:40:c8:cc:b2:
87:8b:be:7a:4d:36:6a:a1:ea:e2:4f:85:74:63:5f:
3a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DA:84:C3:98:AE:17:7D:76:17:1E:06:87:C1:44:2E:C7:B4:17:B5
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pdqEw5iuF312Fx4Gh8FELse0F7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.233.0.0/19
9.233.64.0/19
9.233.192.0/18
9.237.48.0-9.237.79.255
135.132.104.0/23
135.132.108.0/23
135.132.114.0/23
135.132.120.0/23
151.145.160.0/19
170.100.148.0-170.100.159.255
170.100.204.0/24
170.100.206.0/23
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
01:01:61:bc:4d:a5:42:8b:34:ef:49:84:af:0a:be:41:09:4b:
c3:7d:22:67:15:35:9e:55:72:00:7a:96:1a:f2:85:86:53:e5:
ec:d5:aa:60:0e:30:83:a6:29:0c:bb:fc:bf:da:2e:6c:8b:3f:
63:34:d8:86:33:4a:a1:39:42:c0:9d:fe:60:fc:f9:b2:4e:48:
ae:8a:ed:60:58:01:ce:93:9f:46:a9:dd:d8:4c:b4:5c:16:96:
0a:fe:39:d5:3e:32:1b:1b:5e:33:32:c7:54:01:6b:a1:2e:7d:
e5:62:1a:2c:fe:3a:46:12:dd:db:72:0c:c3:c4:39:6a:e0:cb:
b2:66:73:35:82:d7:9d:24:fb:6c:2a:0d:76:f7:eb:ee:36:86:
5e:72:3d:c3:c3:37:19:fc:38:34:f9:73:56:58:ce:f3:fd:33:
e6:4d:0c:f1:ac:e2:42:05:59:6f:5b:9b:0e:ef:5e:01:7e:a1:
1c:34:91:47:b0:84:fd:ae:e5:8b:77:60:1e:f9:04:01:91:e7:
3e:5e:be:b9:fd:95:be:47:65:9e:8e:2c:d9:93:20:8c:97:68:
43:bf:5a:e6:ca:e2:4f:49:6e:f4:ba:de:6a:ec:4a:d6:66:2c:
86:c7:3c:84:3b:1e:cd:a7:e3:5e:98:0e:eb:30:ee:4f:eb:9f:
08:a8:f1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:58 2026 by rpki-client