Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/0NpTpfDTUuDm08hz6BS3MiY2NMQ.roa
File: 0NpTpfDTUuDm08hz6BS3MiY2NMQ.roa (raw, json)
Hash identifier: 0KoBuk++usLKZoeuj/K7XpH2sYJYq6flI1/K8KbWSIk=
Subject key identifier: D0:DA:53:A5:F0:D3:52:E0:E6:D3:C8:73:E8:14:B7:32:26:36:34:C4
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 01A17DC3BA0BD9324701C440C6D8675B21F0
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/0NpTpfDTUuDm08hz6BS3MiY2NMQ.roa
Signing time: Tue 27 Oct 2026 14:29:01 +0000
ROA not before: Tue 27 Oct 2026 14:29:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8434
IP address blocks: 46.194.0.0/15 maxlen: 15
62.13.0.0/17 maxlen: 17
62.65.64.0/18 maxlen: 18
62.119.0.0/16 maxlen: 16
62.127.0.0/16 maxlen: 16
78.82.0.0/16 maxlen: 16
79.102.0.0/16 maxlen: 16
80.68.96.0/20 maxlen: 20
81.26.224.0/19 maxlen: 19
82.182.0.0/15 maxlen: 15
83.226.0.0/15 maxlen: 15
84.216.0.0/14 maxlen: 14
85.224.0.0/13 maxlen: 13
92.32.0.0/14 maxlen: 14
92.244.0.0/19 maxlen: 19
94.137.96.0/19 maxlen: 19
94.234.0.0/16 maxlen: 16
109.104.0.0/19 maxlen: 19
178.28.0.0/14 maxlen: 14
178.78.192.0/18 maxlen: 18
185.86.100.0/22 maxlen: 22
195.43.192.0/18 maxlen: 18
195.54.96.0/19 maxlen: 19
195.58.96.0/19 maxlen: 19
195.66.32.0/19 maxlen: 19
212.73.0.0/19 maxlen: 19
212.73.160.0/19 maxlen: 19
212.75.64.0/19 maxlen: 19
212.105.0.0/17 maxlen: 17
212.107.128.0/19 maxlen: 19
213.112.0.0/14 maxlen: 14
213.150.128.0/19 maxlen: 19
213.163.128.0/19 maxlen: 19
213.204.128.0/18 maxlen: 18
213.214.192.0/18 maxlen: 18
213.238.192.0/18 maxlen: 18
213.242.128.0/18 maxlen: 18
217.174.64.0/19 maxlen: 19
2a01:3b8::/32 maxlen: 32
2a02:1400::/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:c3:ba:0b:d9:32:47:01:c4:40:c6:d8:67:5b:21:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Oct 27 14:29:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0da53a5f0d352e0e6d3c873e814b732263634c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:91:f6:65:a0:39:5b:58:ba:43:9d:6a:b7:
52:51:be:ef:06:39:f1:a2:f4:42:09:45:1a:7c:29:
ff:79:53:03:4a:51:d4:01:c4:50:18:3a:db:5d:bc:
81:b1:98:44:7c:2a:4c:e4:48:eb:9b:7e:48:49:7c:
ea:4f:40:08:27:38:b2:45:72:ea:32:b4:90:32:d2:
d3:76:21:2b:dd:e3:5a:68:6f:25:af:e9:94:c5:c5:
bf:5f:3a:ac:0d:9b:3b:3d:30:a7:27:78:6c:68:72:
28:04:c0:bb:d7:ff:77:e2:4d:5f:05:e5:d3:67:53:
30:33:7d:da:c8:af:ec:9f:f2:ae:28:68:ee:02:6f:
d4:5a:70:08:f1:b8:ea:b7:af:eb:8c:0d:61:b8:e1:
61:07:d5:37:ac:e9:3c:48:df:8d:e4:86:da:b4:44:
d1:b7:7b:f3:85:76:ab:e3:99:54:d0:84:9b:a1:b6:
43:c0:19:d9:89:7d:79:4d:a7:7a:13:72:cd:00:9f:
22:f4:cb:ad:b6:35:3b:ad:f0:59:ae:58:c4:09:63:
4e:f1:7e:9a:9c:7f:8d:a5:c7:a4:80:81:8a:b5:f5:
3d:0b:1c:7d:ac:7b:f0:35:a0:d8:fd:d8:09:2a:c2:
6f:39:cc:63:98:e3:67:b3:4e:29:8b:24:bf:f9:be:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DA:53:A5:F0:D3:52:E0:E6:D3:C8:73:E8:14:B7:32:26:36:34:C4
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/0NpTpfDTUuDm08hz6BS3MiY2NMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.194.0.0/15
62.13.0.0/17
62.65.64.0/18
62.119.0.0/16
62.127.0.0/16
78.82.0.0/16
79.102.0.0/16
80.68.96.0/20
81.26.224.0/19
82.182.0.0/15
83.226.0.0/15
84.216.0.0/14
85.224.0.0/13
92.32.0.0/14
92.244.0.0/19
94.137.96.0/19
94.234.0.0/16
109.104.0.0/19
178.28.0.0/14
178.78.192.0/18
185.86.100.0/22
195.43.192.0/18
195.54.96.0/19
195.58.96.0/19
195.66.32.0/19
212.73.0.0/19
212.73.160.0/19
212.75.64.0/19
212.105.0.0/17
212.107.128.0/19
213.112.0.0/14
213.150.128.0/19
213.163.128.0/19
213.204.128.0/18
213.214.192.0/18
213.238.192.0/18
213.242.128.0/18
217.174.64.0/19
IPv6:
2a01:3b8::/32
2a02:1400::/26
Signature Algorithm: sha256WithRSAEncryption
a0:22:43:98:42:1c:d1:81:30:87:e9:01:f4:b6:e6:98:ab:c1:
a6:89:f1:38:a2:80:84:3b:dd:6c:54:5c:4a:87:eb:e7:fb:b9:
67:e8:21:20:45:cb:08:ed:f5:1b:54:9f:25:95:f3:05:3f:dc:
d0:c1:c6:6b:c0:87:45:31:56:06:d2:07:3d:d7:d2:ec:85:6a:
81:b6:70:b8:28:8d:a0:ec:db:28:2d:99:32:1f:44:14:51:b0:
b4:b0:cf:bd:11:ea:4e:25:7f:67:24:6d:fe:24:f3:88:18:d1:
3b:c1:01:70:fa:d9:87:d9:5f:95:76:47:a2:bd:00:77:f3:a0:
dc:ff:1c:27:4c:03:ab:04:7a:54:4b:fe:ce:33:fd:6b:4b:b1:
5f:90:2d:fe:bc:a8:ff:d3:cd:03:3e:a4:ef:af:7b:ed:88:77:
14:01:71:a7:90:20:74:d0:f0:93:eb:50:f7:c8:b6:32:56:4d:
2f:9c:36:73:9e:b0:fc:ac:78:cb:c7:52:76:3e:72:d5:0e:44:
2f:85:b8:b9:54:73:c9:fc:6c:b4:92:da:69:eb:8c:b2:48:a2:
2d:b3:87:61:90:f1:3a:53:9a:22:4a:1e:6e:12:47:8d:5e:c9:
36:99:d7:bf:08:86:58:e7:a1:48:0f:b3:b7:68:49:92:93:38:
9c:ff:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:06 2026 by rpki-client