Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/6w8v2X9Khbo68K_Ll4sKz6SPZ9c.roa
File: 6w8v2X9Khbo68K_Ll4sKz6SPZ9c.roa (raw, json)
Hash identifier: DbZOwauxJS0Nbe5W5myzZFJGTvWfPMKZqkuyBipX5PA=
Subject key identifier: EB:0F:2F:D9:7F:4A:85:BA:3A:F0:AF:CB:97:8B:0A:CF:A4:8F:67:D7
Certificate issuer: /CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Certificate serial: 019FD60EAE94CD0E1211ABA397574119015B
Authority key identifier: EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/6w8v2X9Khbo68K_Ll4sKz6SPZ9c.roa
Signing time: Thu 06 Aug 2026 07:51:54 +0000
ROA not before: Thu 06 Aug 2026 07:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54994
IP address blocks: 134.49.232.0/24 maxlen: 24
134.49.233.0/24 maxlen: 24
134.49.234.0/24 maxlen: 24
134.49.235.0/24 maxlen: 24
134.49.236.0/24 maxlen: 24
134.49.237.0/24 maxlen: 24
134.49.238.0/24 maxlen: 24
134.49.239.0/24 maxlen: 24
140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.8.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.11.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.13.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.15.0/24 maxlen: 24
140.150.16.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.20.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.26.0/24 maxlen: 24
140.150.27.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
140.150.40.0/24 maxlen: 24
140.150.41.0/24 maxlen: 24
140.150.42.0/24 maxlen: 24
140.150.43.0/24 maxlen: 24
140.150.44.0/24 maxlen: 24
140.150.46.0/24 maxlen: 24
140.150.47.0/24 maxlen: 24
142.99.24.0/24 maxlen: 24
142.99.25.0/24 maxlen: 24
142.99.26.0/24 maxlen: 24
142.99.27.0/24 maxlen: 24
142.99.28.0/24 maxlen: 24
142.99.29.0/24 maxlen: 24
142.99.30.0/24 maxlen: 24
142.99.31.0/24 maxlen: 24
146.103.64.0/24 maxlen: 24
146.103.65.0/24 maxlen: 24
146.103.66.0/24 maxlen: 24
146.103.67.0/24 maxlen: 24
146.103.68.0/24 maxlen: 24
146.103.71.0/24 maxlen: 24
146.103.72.0/24 maxlen: 24
146.103.73.0/24 maxlen: 24
146.103.74.0/24 maxlen: 24
146.103.75.0/24 maxlen: 24
146.103.76.0/24 maxlen: 24
146.103.77.0/24 maxlen: 24
146.103.78.0/24 maxlen: 24
146.103.79.0/24 maxlen: 24
146.103.80.0/24 maxlen: 24
146.103.81.0/24 maxlen: 24
146.103.82.0/24 maxlen: 24
146.103.83.0/24 maxlen: 24
146.103.84.0/24 maxlen: 24
146.103.85.0/24 maxlen: 24
146.103.86.0/24 maxlen: 24
146.103.87.0/24 maxlen: 24
146.103.88.0/24 maxlen: 24
146.103.89.0/24 maxlen: 24
146.103.90.0/24 maxlen: 24
146.103.91.0/24 maxlen: 24
146.103.92.0/24 maxlen: 24
146.103.93.0/24 maxlen: 24
146.103.94.0/24 maxlen: 24
146.103.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:0e:ae:94:cd:0e:12:11:ab:a3:97:57:41:19:01:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Validity
Not Before: Aug 6 07:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb0f2fd97f4a85ba3af0afcb978b0acfa48f67d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:04:bf:48:da:ad:98:29:be:02:2f:d9:37:
66:75:57:e6:f7:45:2f:f6:22:e7:c3:0c:c8:b6:db:
44:a6:a8:84:bc:6e:b5:cd:cf:f1:c3:7f:e1:07:2f:
57:5d:b5:3d:aa:fd:e5:55:1f:c3:b2:bc:b2:62:16:
eb:a7:4c:3b:ed:69:25:25:0c:8f:3f:87:83:2d:85:
73:c0:f8:6b:9f:f4:6b:d8:e3:03:41:c0:76:e7:b9:
7a:3d:33:1f:85:5c:4b:e9:e1:59:40:61:3f:12:25:
c4:6f:f8:c3:54:ae:df:e5:b8:d1:2c:c5:c2:81:da:
b2:68:ce:ff:56:80:40:2f:af:28:b4:55:59:84:c8:
19:ac:88:37:b7:45:0e:3b:c8:87:d0:47:2f:f6:ce:
ce:58:1d:1c:a5:8e:ac:c0:42:0c:6c:76:1d:4f:05:
3f:5b:cd:31:f4:bb:f2:12:0d:5e:3c:e1:5a:d5:89:
57:fc:3e:5f:9d:2b:62:28:fb:b1:7b:e9:50:df:93:
4a:e8:af:b2:07:30:23:47:59:db:c9:13:46:d3:32:
57:90:76:33:01:72:f7:10:39:c8:02:24:53:57:3d:
d2:df:3c:c6:03:f9:15:7d:9e:39:3f:ca:bc:d2:4a:
39:3f:7d:de:6d:58:c1:63:76:b0:51:70:41:ba:eb:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0F:2F:D9:7F:4A:85:BA:3A:F0:AF:CB:97:8B:0A:CF:A4:8F:67:D7
X509v3 Authority Key Identifier:
keyid:EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/6w8v2X9Khbo68K_Ll4sKz6SPZ9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.49.232.0/21
140.150.0.0-140.150.8.255
140.150.10.0-140.150.16.255
140.150.18.0-140.150.38.255
140.150.40.0-140.150.44.255
140.150.46.0/23
142.99.24.0/21
146.103.64.0-146.103.68.255
146.103.71.0-146.103.95.255
Signature Algorithm: sha256WithRSAEncryption
84:dc:ef:29:b7:3b:3e:5e:8e:91:a2:44:d9:0b:e8:42:f0:58:
7f:26:22:03:98:73:ad:da:68:25:86:5d:3f:65:cf:f9:f2:26:
d7:db:e8:ff:45:6d:3a:2a:96:38:ce:39:93:e2:02:64:c9:74:
79:bc:49:1d:ea:5d:49:04:ac:fe:d0:f4:10:ce:fd:3d:0c:b7:
91:4a:fd:69:4c:ff:11:4c:94:83:52:1d:dd:b0:ea:1e:60:c0:
16:bd:ad:f8:91:40:49:cd:ec:9f:c2:31:cc:da:02:dd:7f:4f:
b7:d1:a4:aa:c0:bc:01:8d:fe:11:a1:d4:07:b0:33:16:1a:8c:
94:0e:b8:75:7f:0d:44:27:ba:49:1e:af:db:43:8a:1a:15:7d:
fc:d7:46:4f:c4:54:76:f9:46:38:9e:7c:1a:ce:f0:7e:5d:b0:
32:1c:84:82:59:c1:20:00:55:a9:bf:9c:15:04:a7:71:0f:a6:
d4:4c:bf:11:8a:5e:06:59:fd:52:d5:44:d9:26:3f:16:44:af:
a8:73:b3:60:13:65:27:71:ba:dd:47:63:73:b0:1b:7c:94:ec:
1e:83:19:b7:24:64:80:a7:1d:1f:d9:d7:f6:26:f8:51:c0:eb:
64:89:df:5d:44:03:9c:d2:9c:08:b9:5c:56:3a:05:82:85:15:
b9:d5:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 01:53:32 2026 by rpki-client