Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/g-0OBByPctwGMoiSp7Ius3ERPd4.roa
File: g-0OBByPctwGMoiSp7Ius3ERPd4.roa (raw, json)
Hash identifier: 7grKgnJNYRu+Mi3jBPcTs7JlkWsOZWG3+pqSyc+rfEE=
Subject key identifier: 83:ED:0E:04:1C:8F:72:DC:06:32:88:92:A7:B2:2E:B3:71:11:3D:DE
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01A19DD4B0C980AD382781756F07D1E80830
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/g-0OBByPctwGMoiSp7Ius3ERPd4.roa
Signing time: Mon 02 Nov 2026 19:55:24 +0000
ROA not before: Mon 02 Nov 2026 19:55:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208172
IP address blocks: 72.251.208.0/24 maxlen: 24
72.251.209.0/24 maxlen: 24
72.251.210.0/24 maxlen: 24
72.251.211.0/24 maxlen: 24
72.251.212.0/24 maxlen: 24
72.251.213.0/24 maxlen: 24
72.251.214.0/24 maxlen: 24
72.251.215.0/24 maxlen: 24
72.251.216.0/24 maxlen: 24
72.251.217.0/24 maxlen: 24
72.251.218.0/24 maxlen: 24
72.251.219.0/24 maxlen: 24
72.251.220.0/24 maxlen: 24
72.251.221.0/24 maxlen: 24
72.251.222.0/24 maxlen: 24
80.47.32.0/24 maxlen: 24
80.47.33.0/24 maxlen: 24
80.47.34.0/24 maxlen: 24
80.47.35.0/24 maxlen: 24
80.47.36.0/24 maxlen: 24
80.47.37.0/24 maxlen: 24
80.47.38.0/24 maxlen: 24
80.47.39.0/24 maxlen: 24
80.47.40.0/24 maxlen: 24
80.47.41.0/24 maxlen: 24
80.47.42.0/24 maxlen: 24
80.47.43.0/24 maxlen: 24
80.47.44.0/24 maxlen: 24
80.47.45.0/24 maxlen: 24
80.47.46.0/24 maxlen: 24
80.47.47.0/24 maxlen: 24
80.47.48.0/24 maxlen: 24
80.47.49.0/24 maxlen: 24
80.47.50.0/24 maxlen: 24
80.47.51.0/24 maxlen: 24
81.27.86.0/24 maxlen: 24
134.82.68.0/24 maxlen: 24
134.82.69.0/24 maxlen: 24
134.82.70.0/24 maxlen: 24
134.82.71.0/24 maxlen: 24
134.82.73.0/24 maxlen: 24
134.82.74.0/24 maxlen: 24
134.82.75.0/24 maxlen: 24
134.82.77.0/24 maxlen: 24
134.82.78.0/24 maxlen: 24
134.82.79.0/24 maxlen: 24
153.75.48.0/24 maxlen: 24
153.75.49.0/24 maxlen: 24
153.75.50.0/24 maxlen: 24
153.75.51.0/24 maxlen: 24
153.75.52.0/24 maxlen: 24
153.75.53.0/24 maxlen: 24
153.75.57.0/24 maxlen: 24
153.75.58.0/24 maxlen: 24
153.75.60.0/24 maxlen: 24
153.75.61.0/24 maxlen: 24
159.26.96.0/24 maxlen: 24
159.26.97.0/24 maxlen: 24
159.26.98.0/24 maxlen: 24
159.26.99.0/24 maxlen: 24
159.26.100.0/24 maxlen: 24
159.26.101.0/24 maxlen: 24
159.26.102.0/24 maxlen: 24
159.26.103.0/24 maxlen: 24
159.26.104.0/24 maxlen: 24
159.26.105.0/24 maxlen: 24
159.26.106.0/24 maxlen: 24
159.26.107.0/24 maxlen: 24
159.26.108.0/24 maxlen: 24
159.26.109.0/24 maxlen: 24
159.26.110.0/24 maxlen: 24
159.26.111.0/24 maxlen: 24
159.26.112.0/24 maxlen: 24
159.26.113.0/24 maxlen: 24
159.26.114.0/24 maxlen: 24
159.26.115.0/24 maxlen: 24
159.26.116.0/24 maxlen: 24
159.26.117.0/24 maxlen: 24
159.26.118.0/24 maxlen: 24
159.26.119.0/24 maxlen: 24
159.26.120.0/24 maxlen: 24
159.26.121.0/24 maxlen: 24
159.26.122.0/24 maxlen: 24
159.26.123.0/24 maxlen: 24
159.26.124.0/24 maxlen: 24
159.26.125.0/24 maxlen: 24
159.26.126.0/24 maxlen: 24
159.26.127.0/24 maxlen: 24
205.147.16.0/24 maxlen: 24
205.147.17.0/24 maxlen: 24
205.147.18.0/24 maxlen: 24
205.147.19.0/24 maxlen: 24
205.147.20.0/24 maxlen: 24
205.147.21.0/24 maxlen: 24
205.147.22.0/24 maxlen: 24
205.147.23.0/24 maxlen: 24
205.147.27.0/24 maxlen: 24
205.147.28.0/24 maxlen: 24
205.147.29.0/24 maxlen: 24
205.147.30.0/24 maxlen: 24
205.147.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:d4:b0:c9:80:ad:38:27:81:75:6f:07:d1:e8:08:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Nov 2 19:55:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83ed0e041c8f72dc06328892a7b22eb371113dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:48:e3:1b:a7:ab:52:8d:ab:e5:a9:74:78:
a6:44:c3:00:9a:92:2e:44:2f:e0:bc:a1:2f:02:87:
61:42:c6:2b:4c:bb:e4:73:d9:b9:6b:8f:b8:10:cf:
b6:9a:12:cf:89:ef:c3:7f:11:d6:e9:f4:be:32:87:
4d:a1:c7:11:4b:e1:66:dc:ea:37:4a:9e:2f:cc:73:
42:1a:70:27:b5:40:93:2a:a7:6f:a0:c2:02:20:88:
07:39:e4:f7:d8:d4:06:ea:99:99:84:0e:2b:97:15:
39:57:63:24:65:14:f0:61:86:22:02:6b:b6:31:9e:
b4:20:9d:90:b6:3c:b5:68:4a:df:88:51:a8:47:9e:
09:40:3b:0e:bd:f9:ae:1d:e6:b2:aa:bd:e5:4a:77:
93:9e:09:57:a9:12:6a:a3:40:b9:68:bb:83:49:e7:
fb:b0:52:b8:4f:84:4b:bd:d1:75:25:ee:c1:af:98:
2a:7c:b7:05:75:b6:f9:d7:8c:c2:c1:20:5f:a3:b6:
75:87:74:57:8c:f8:86:9f:ab:b3:58:84:69:c8:8e:
7b:b0:42:5a:01:cc:92:3c:3b:bd:44:fe:6a:76:2f:
58:0e:d8:32:a5:80:1a:34:9d:c4:08:be:05:b6:44:
73:f4:ce:1c:00:93:ae:53:ca:db:a2:24:ab:16:f3:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:0E:04:1C:8F:72:DC:06:32:88:92:A7:B2:2E:B3:71:11:3D:DE
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/g-0OBByPctwGMoiSp7Ius3ERPd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.251.208.0-72.251.222.255
80.47.32.0-80.47.51.255
81.27.86.0/24
134.82.68.0/22
134.82.73.0-134.82.75.255
134.82.77.0-134.82.79.255
153.75.48.0-153.75.53.255
153.75.57.0-153.75.58.255
153.75.60.0/23
159.26.96.0/19
205.147.16.0/21
205.147.27.0-205.147.31.255
Signature Algorithm: sha256WithRSAEncryption
9c:5d:96:04:8a:b5:8e:0c:3e:28:e6:37:1c:91:d3:3a:67:07:
52:55:67:68:cd:05:72:b8:9e:1b:a9:68:3f:88:90:27:96:90:
2b:3f:34:99:b6:e9:b8:56:5e:35:c6:3d:9b:a5:7f:0c:8c:e0:
7b:61:5d:fc:af:1d:f6:0d:25:55:ca:10:18:e3:c7:c2:d9:b3:
08:87:97:b2:80:a4:5f:48:b2:45:e1:55:56:e4:a2:1c:2f:3b:
38:d1:65:40:bc:64:e2:a2:32:6d:cf:57:9b:e5:9b:58:3d:82:
cf:29:9a:46:90:0d:fb:62:5a:ff:5a:72:2c:41:55:e8:10:1f:
7d:22:78:25:11:f9:74:00:f6:23:3f:93:8a:a4:3e:04:22:31:
95:69:3b:2b:4d:d4:d0:bd:a0:c7:f7:53:01:ce:fb:21:22:bb:
1a:cb:de:bb:59:00:07:2f:be:5e:ca:c1:1b:f2:39:fc:25:c0:
00:cc:a9:b8:c1:f2:06:83:06:15:b8:d2:e1:c5:96:fe:44:f3:
4b:62:b8:d5:b8:83:62:44:d3:8f:3c:e2:51:ae:74:d4:66:81:
3c:ee:b6:aa:2b:e5:c7:93:6f:23:e0:93:48:3b:9a:4c:ee:4a:
00:cb:c5:35:e4:8c:89:ef:ee:ed:79:17:4e:39:8a:1c:a4:df:
68:97:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:38:39 2026 by rpki-client