Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/q8aWYgzPANfq_FU3Wslb9BjXuGI.roa
File: q8aWYgzPANfq_FU3Wslb9BjXuGI.roa (raw, json)
Hash identifier: 7fZsLMqJmp/WSTZU11jwBj12B9GD/xPsg0y2yL59gwI=
Subject key identifier: AB:C6:96:62:0C:CF:00:D7:EA:FC:55:37:5A:C9:5B:F4:18:D7:B8:62
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019E8492B45144B656A2287CB0B8EE287E18
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/q8aWYgzPANfq_FU3Wslb9BjXuGI.roa
Signing time: Mon 01 Jun 2026 19:04:27 +0000
ROA not before: Mon 01 Jun 2026 19:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 5.183.253.0/24 maxlen: 24
45.10.164.0/24 maxlen: 24
45.10.165.0/24 maxlen: 24
45.10.166.0/24 maxlen: 24
45.132.185.0/24 maxlen: 24
45.138.100.0/24 maxlen: 24
45.138.101.0/24 maxlen: 24
45.138.102.0/24 maxlen: 24
45.138.103.0/24 maxlen: 24
45.148.125.0/24 maxlen: 24
45.148.127.0/24 maxlen: 24
45.151.233.0/24 maxlen: 24
46.21.80.0/24 maxlen: 24
46.21.81.0/24 maxlen: 24
46.21.82.0/24 maxlen: 24
46.21.83.0/24 maxlen: 24
83.171.224.0/24 maxlen: 24
83.171.225.0/24 maxlen: 24
83.171.226.0/24 maxlen: 24
83.171.227.0/24 maxlen: 24
92.118.169.0/24 maxlen: 24
92.118.170.0/24 maxlen: 24
93.177.116.0/24 maxlen: 24
93.177.117.0/24 maxlen: 24
109.122.194.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
141.98.84.0/24 maxlen: 24
141.98.85.0/24 maxlen: 24
141.98.86.0/24 maxlen: 24
141.98.87.0/24 maxlen: 24
147.78.181.0/24 maxlen: 24
185.58.115.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
185.68.185.0/24 maxlen: 24
185.68.246.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
185.77.221.0/24 maxlen: 24
185.79.138.0/24 maxlen: 24
185.79.139.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
185.88.37.0/24 maxlen: 24
185.88.101.0/24 maxlen: 24
185.95.231.0/24 maxlen: 24
185.113.139.0/24 maxlen: 24
193.221.203.0/24 maxlen: 24
194.104.9.0/24 maxlen: 24
194.104.10.0/24 maxlen: 24
213.108.1.0/24 maxlen: 24
213.108.2.0/24 maxlen: 24
213.108.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:92:b4:51:44:b6:56:a2:28:7c:b0:b8:ee:28:7e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jun 1 19:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abc696620ccf00d7eafc55375ac95bf418d7b862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:eb:9c:35:73:c2:03:93:45:53:f4:ae:08:
6a:2f:3a:f1:af:1f:0d:fe:bc:c0:ab:b2:05:45:49:
6f:2f:04:93:16:c1:0e:50:fe:4c:f2:d5:4c:c2:d3:
13:3c:42:0f:4a:22:3d:fc:5f:64:a1:81:6e:35:13:
e5:a8:8d:2b:d2:cd:55:be:3e:3b:d3:c2:46:7d:d0:
e6:ee:3a:9d:73:b3:ed:79:fa:d1:e3:5f:ae:64:4e:
6c:ce:92:c5:c1:ff:eb:49:42:2c:2c:19:4d:e3:a8:
8f:34:22:e0:b3:87:85:15:cc:c0:dc:7d:cc:33:36:
b1:d1:2c:51:20:6b:69:4b:fe:45:71:ac:8e:90:a3:
19:96:22:6c:e3:da:48:37:a6:b8:e2:ef:7c:a5:62:
6f:9d:19:79:2d:67:f0:c5:d8:02:15:9d:7c:2a:2e:
f0:93:1f:de:21:34:c6:f6:30:7d:ae:14:e2:cd:2f:
6d:86:65:5f:cf:7e:5e:7d:b7:fc:b3:e9:45:71:13:
f1:3e:0d:bc:41:cf:e0:ad:76:da:6c:25:51:e0:e9:
dd:d9:2b:33:ea:ce:0f:c7:96:65:13:3f:ce:5a:d8:
d0:bc:ac:2f:12:47:5d:a2:25:fc:ea:2c:45:7a:a2:
26:97:95:f7:38:6f:2d:82:e7:3f:0c:1f:6c:f5:cc:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C6:96:62:0C:CF:00:D7:EA:FC:55:37:5A:C9:5B:F4:18:D7:B8:62
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/q8aWYgzPANfq_FU3Wslb9BjXuGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.253.0/24
45.10.164.0-45.10.166.255
45.132.185.0/24
45.138.100.0/22
45.148.125.0/24
45.148.127.0/24
45.151.233.0/24
46.21.80.0/22
83.171.224.0/22
92.118.169.0-92.118.170.255
93.177.116.0/23
109.122.194.0/23
141.98.84.0/22
147.78.181.0/24
185.58.115.0/24
185.68.184.0/23
185.68.246.0/23
185.77.221.0/24
185.79.138.0/23
185.88.36.0/23
185.88.101.0/24
185.95.231.0/24
185.113.139.0/24
193.221.203.0/24
194.104.9.0-194.104.10.255
213.108.1.0-213.108.3.255
Signature Algorithm: sha256WithRSAEncryption
4e:04:a6:44:38:4c:e2:00:1c:1a:23:b8:9f:8d:62:41:b7:13:
18:8a:39:68:2d:1e:cb:55:73:0c:e6:4c:e7:2e:7c:b5:37:56:
57:1b:50:72:1c:96:5b:e5:43:62:3e:0e:9f:99:db:cf:ff:fd:
2e:b9:62:8a:dc:75:67:ea:62:2b:e4:2d:87:a4:52:f4:37:c4:
07:00:18:de:1e:24:08:48:c2:5d:9f:73:62:8a:65:57:cc:0f:
20:7e:15:47:30:3a:3d:07:73:7c:5b:00:ee:51:a8:c5:5c:33:
32:0c:0b:19:10:6c:d5:72:f1:c9:16:48:25:25:04:af:4d:8e:
b8:a9:a4:04:9d:27:5b:d1:33:e1:76:1c:6d:ad:5f:f0:e1:9b:
bc:2f:4a:6b:4f:80:0b:80:5f:bc:e5:c8:cc:37:96:36:e0:e2:
32:7b:57:7e:ea:38:36:db:3d:df:b7:82:ef:b9:41:63:aa:4c:
b5:c5:d7:6f:6e:f6:e0:a0:72:de:93:5f:d6:88:6e:4a:ec:f3:
e0:6d:c4:2c:02:47:39:91:e1:e7:53:1c:ca:44:9d:b7:48:ae:
63:40:96:d6:a6:28:5e:cd:2e:be:52:f9:60:3b:95:0a:9c:37:
cf:c3:9f:d1:2e:a9:13:53:fc:24:09:6a:cf:27:b9:85:09:1d:
07:e6:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:30:56 2026 by rpki-client