Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/o6X1xXFcVuNeFtHtNbTAwmHed4o.roa
File: o6X1xXFcVuNeFtHtNbTAwmHed4o.roa (raw, json)
Hash identifier: 5N9Ci5RBIs/RxRxfkx3BB13wY8BUdFcia7okNDTuesU=
Subject key identifier: A3:A5:F5:C5:71:5C:56:E3:5E:16:D1:ED:35:B4:C0:C2:61:DE:77:8A
Certificate issuer: /CN=55075ef3c225feba36ac6335e62977c1a6d8e736
Certificate serial: 01A061FF6A60FE3B4B63113AE7268ACD5F92
Authority key identifier: 55:07:5E:F3:C2:25:FE:BA:36:AC:63:35:E6:29:77:C1:A6:D8:E7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/o6X1xXFcVuNeFtHtNbTAwmHed4o.roa
Signing time: Wed 02 Sep 2026 12:02:03 +0000
ROA not before: Wed 02 Sep 2026 12:02:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50867
IP address blocks: 5.180.174.0/23 maxlen: 23
5.180.174.0/24 maxlen: 24
5.180.175.0/24 maxlen: 24
31.192.104.0/21 maxlen: 21
31.192.104.0/24 maxlen: 24
31.192.105.0/24 maxlen: 24
31.192.106.0/24 maxlen: 24
31.192.107.0/24 maxlen: 24
31.192.108.0/24 maxlen: 24
31.192.109.0/24 maxlen: 24
31.192.110.0/24 maxlen: 24
31.192.111.0/24 maxlen: 24
91.210.104.0/22 maxlen: 22
91.210.104.0/23 maxlen: 23
91.210.106.0/24 maxlen: 24
91.210.107.0/24 maxlen: 24
91.218.112.0/22 maxlen: 22
91.218.112.0/24 maxlen: 24
91.218.113.0/24 maxlen: 24
91.218.114.0/24 maxlen: 24
91.218.115.0/24 maxlen: 24
91.218.244.0/22 maxlen: 22
91.218.244.0/24 maxlen: 24
91.218.245.0/24 maxlen: 24
91.218.246.0/24 maxlen: 24
91.218.247.0/24 maxlen: 24
91.237.249.0/24 maxlen: 24
141.105.64.0/21 maxlen: 21
141.105.64.0/24 maxlen: 24
141.105.65.0/24 maxlen: 24
141.105.66.0/24 maxlen: 24
141.105.66.70/32 maxlen: 32
141.105.67.0/24 maxlen: 24
141.105.68.0/24 maxlen: 24
141.105.69.0/24 maxlen: 24
141.105.70.0/24 maxlen: 24
141.105.71.0/24 maxlen: 24
158.255.0.0/21 maxlen: 21
158.255.0.0/24 maxlen: 24
158.255.1.0/24 maxlen: 24
158.255.2.0/24 maxlen: 24
158.255.3.0/24 maxlen: 24
158.255.4.0/24 maxlen: 24
158.255.5.0/24 maxlen: 24
158.255.6.0/24 maxlen: 24
158.255.7.0/24 maxlen: 24
185.70.104.0/22 maxlen: 22
185.70.104.0/24 maxlen: 24
185.70.105.0/24 maxlen: 24
185.70.106.0/24 maxlen: 24
185.70.107.0/24 maxlen: 24
185.130.212.0/22 maxlen: 22
185.130.212.0/24 maxlen: 24
185.130.213.0/24 maxlen: 24
185.130.214.0/24 maxlen: 24
185.130.215.0/24 maxlen: 24
193.247.73.0/24 maxlen: 24
194.34.237.0/24 maxlen: 24
194.34.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:ff:6a:60:fe:3b:4b:63:11:3a:e7:26:8a:cd:5f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55075ef3c225feba36ac6335e62977c1a6d8e736
Validity
Not Before: Sep 2 12:02:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3a5f5c5715c56e35e16d1ed35b4c0c261de778a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d0:13:c7:e1:dc:54:31:41:74:ce:b0:21:12:
f2:aa:00:97:67:00:3f:da:d3:3c:4c:35:00:4a:eb:
08:1a:bd:d3:1c:10:0d:ff:0a:32:0c:e9:30:52:31:
3e:23:98:e4:b5:4c:da:98:cd:cb:2f:1e:f3:89:2f:
92:32:44:49:c6:a6:30:14:4f:7b:ba:17:4f:f3:c5:
b3:c7:e3:90:55:43:c8:2d:b3:e7:80:3b:a3:fd:76:
71:7b:80:51:fd:27:48:55:46:02:8e:57:55:49:86:
80:0e:cb:00:d1:91:66:c4:1e:84:05:9c:12:03:87:
d6:16:15:43:f8:28:22:65:18:3d:42:3e:59:48:0c:
e7:c2:7c:93:dd:5a:b1:25:06:32:93:10:6b:d8:90:
b5:e9:3a:2a:e4:b6:ee:80:97:10:ca:b1:0a:29:d6:
47:4b:78:84:aa:f9:f3:41:25:00:ec:c2:d0:08:e6:
b1:3e:9a:64:b5:bf:c8:70:54:a9:5f:c8:41:e1:65:
81:88:71:cc:86:61:9f:0d:12:48:cb:18:53:05:b9:
95:35:34:46:95:3e:ea:05:ef:fe:77:98:5b:6c:60:
c9:6d:d7:6b:58:84:bf:b1:ad:08:99:79:c8:68:fa:
a4:0e:94:70:71:4a:a3:8e:99:3a:5a:a8:37:4b:df:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:F5:C5:71:5C:56:E3:5E:16:D1:ED:35:B4:C0:C2:61:DE:77:8A
X509v3 Authority Key Identifier:
keyid:55:07:5E:F3:C2:25:FE:BA:36:AC:63:35:E6:29:77:C1:A6:D8:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQde88Il_ro2rGM15il3wabY5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/o6X1xXFcVuNeFtHtNbTAwmHed4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dc89a-3333-4c59-8e72-bddb031016cb/1/VQde88Il_ro2rGM15il3wabY5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.174.0/23
31.192.104.0/21
91.210.104.0/22
91.218.112.0/22
91.218.244.0/22
91.237.249.0/24
141.105.64.0/21
158.255.0.0/21
185.70.104.0/22
185.130.212.0/22
193.247.73.0/24
194.34.237.0/24
194.34.239.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:3f:36:3d:89:cd:40:b5:7b:02:77:10:c9:70:19:f2:ac:75:
02:47:2a:b7:c1:b4:99:eb:b4:07:25:b8:7e:37:28:7b:ae:a4:
9f:cf:41:ab:e7:1e:46:d9:c5:2e:1d:57:f9:17:b8:63:6e:27:
52:ad:12:f3:9a:76:89:ff:52:1f:c6:ac:7b:5f:2e:5d:31:4a:
2a:1f:4d:6b:2e:47:f6:f2:0e:1c:5b:c5:8c:a4:2f:1f:95:c4:
8a:1c:e0:c3:d3:55:f6:1e:d7:84:d8:dd:b2:d7:f9:17:55:16:
b9:de:83:35:ed:32:b7:7e:01:f1:fb:37:6c:8d:ef:a1:e9:15:
d5:ce:b9:bd:2f:d0:dc:ce:1c:9b:32:9b:9d:95:21:e1:c2:51:
7e:d1:9a:e7:aa:90:6b:26:6d:55:ba:ee:a7:53:11:91:34:f5:
ec:51:db:33:06:42:6c:e3:4e:30:c5:b1:3c:9f:56:72:b2:d4:
f6:47:07:9c:55:47:1f:53:3f:7f:d2:9b:a5:ea:12:50:4a:cd:
90:81:b6:9a:b4:b1:71:71:c3:7f:dc:73:e5:11:69:dc:19:45:
9d:80:1d:0e:74:83:0e:9c:2d:9b:94:4d:86:fe:eb:f5:df:a1:
b7:92:69:cc:96:ec:3b:ca:03:ca:90:09:88:92:b7:49:c0:72:
da:92:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:05 2026 by rpki-client