Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/6Mkl-omsDLx9m0bO1mz3oa6tBSo.roa
File: 6Mkl-omsDLx9m0bO1mz3oa6tBSo.roa (raw, json)
Hash identifier: Zk0U1/P1vQOMHHn2ahaAoT0XpDq9M1hljHTDc0qZE1E=
Subject key identifier: E8:C9:25:FA:89:AC:0C:BC:7D:9B:46:CE:D6:6C:F7:A1:AE:AD:05:2A
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 01A002975676F23242C5F3944C149958375C
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/6Mkl-omsDLx9m0bO1mz3oa6tBSo.roa
Signing time: Fri 14 Aug 2026 23:24:27 +0000
ROA not before: Fri 14 Aug 2026 23:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213122
IP address blocks: 5.252.165.0/24 maxlen: 24
5.252.166.0/24 maxlen: 24
5.252.167.0/24 maxlen: 24
31.216.59.0/24 maxlen: 24
45.87.60.0/24 maxlen: 24
45.87.61.0/24 maxlen: 24
45.87.62.0/24 maxlen: 24
45.87.63.0/24 maxlen: 24
45.130.152.0/24 maxlen: 24
45.130.153.0/24 maxlen: 24
45.130.154.0/24 maxlen: 24
45.130.155.0/24 maxlen: 24
45.143.144.0/24 maxlen: 24
45.143.145.0/24 maxlen: 24
45.143.146.0/24 maxlen: 24
45.143.147.0/24 maxlen: 24
89.36.230.0/24 maxlen: 24
89.37.100.0/24 maxlen: 24
89.46.43.0/24 maxlen: 24
103.104.248.0/24 maxlen: 24
103.104.249.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
103.104.251.0/24 maxlen: 24
103.202.52.0/24 maxlen: 24
103.202.53.0/24 maxlen: 24
103.202.54.0/24 maxlen: 24
103.202.55.0/24 maxlen: 24
135.136.128.0/19 maxlen: 32
153.52.160.0/19 maxlen: 32
185.162.74.0/24 maxlen: 24
185.162.75.0/24 maxlen: 24
188.210.236.0/24 maxlen: 24
189.12.224.0/19 maxlen: 32
191.219.128.0/19 maxlen: 32
194.49.68.0/24 maxlen: 24
194.49.69.0/24 maxlen: 24
194.49.78.0/24 maxlen: 24
194.49.79.0/24 maxlen: 24
207.189.0.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:97:56:76:f2:32:42:c5:f3:94:4c:14:99:58:37:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Aug 14 23:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8c925fa89ac0cbc7d9b46ced66cf7a1aead052a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ae:07:36:af:dd:24:3e:ea:ef:90:63:d5:76:
5b:b3:94:2b:f4:71:6c:5a:9c:00:b8:30:d0:02:15:
72:9b:3c:3f:79:10:e6:3d:07:d2:88:3d:c5:6e:e7:
13:26:fe:c5:fd:b2:4e:5c:c2:41:de:31:9a:f6:40:
1f:77:c1:71:8c:e2:9e:5c:80:b1:9f:9e:83:f8:29:
2c:60:15:50:7d:2f:a2:ff:c9:3c:86:9c:5f:ad:52:
72:e7:49:46:20:12:92:d6:e1:6c:57:fa:da:de:c1:
58:1d:29:1c:b6:6e:9e:11:45:3c:9e:f2:ca:a7:f3:
0e:1c:65:29:f6:4e:ba:8f:f1:aa:e9:2c:98:ba:a7:
9b:18:6a:70:07:84:ec:3b:2a:4c:52:7a:85:89:7a:
95:61:b3:4b:ec:ec:b4:79:59:e6:aa:af:10:1f:3a:
ad:b1:43:9f:a3:c3:a0:82:32:f5:31:af:79:5b:59:
42:50:29:d7:eb:e8:02:7d:d6:51:0e:a0:81:87:e9:
24:9a:06:0f:88:e3:33:ac:3e:91:e9:6f:5c:31:c8:
ca:c9:bd:75:2c:b5:7d:cd:11:84:7a:45:90:d0:2a:
b9:48:18:a3:7b:75:f4:ad:a9:40:6b:7f:79:17:f4:
e2:87:50:52:bc:70:73:be:85:cf:e7:03:69:80:fc:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C9:25:FA:89:AC:0C:BC:7D:9B:46:CE:D6:6C:F7:A1:AE:AD:05:2A
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/6Mkl-omsDLx9m0bO1mz3oa6tBSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.165.0-5.252.167.255
31.216.59.0/24
45.87.60.0/22
45.130.152.0/22
45.143.144.0/22
89.36.230.0/24
89.37.100.0/24
89.46.43.0/24
103.104.248.0/22
103.202.52.0/22
135.136.128.0/19
153.52.160.0/19
185.162.74.0/23
188.210.236.0/24
189.12.224.0/19
191.219.128.0/19
194.49.68.0/23
194.49.78.0/23
207.189.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:cc:94:bf:61:a5:ef:8d:9c:5b:21:5b:b0:ef:6b:5c:1c:73:
36:b5:32:20:f5:29:82:11:85:b8:67:8b:f7:b5:13:5f:a7:c8:
cc:f2:06:50:84:5d:78:62:9d:0f:62:e6:63:96:c3:83:cd:15:
28:8b:23:46:44:0d:b9:54:13:0e:67:70:a4:f7:d3:06:9c:48:
eb:fb:ff:6f:60:7d:00:64:2e:d2:c6:d0:4b:29:82:e8:0b:d4:
d5:de:f7:15:51:ec:38:4e:22:dc:33:a5:c9:8c:7e:07:ff:bd:
b7:6e:f1:8b:d7:78:75:b0:bd:26:cf:c7:45:5c:4e:36:43:cd:
8d:64:1f:2d:ea:77:eb:62:29:fb:c3:50:16:fd:a3:7f:5c:4d:
a7:38:d6:9f:0e:e0:e2:10:a2:98:91:a5:c0:a2:64:51:ae:6a:
c7:6b:52:39:b7:1c:dc:22:fa:b3:5a:eb:66:15:36:33:71:97:
4a:dc:bc:16:2f:09:74:29:e7:7f:ca:4f:2c:a5:61:55:5b:b5:
93:65:c7:a7:35:ce:f8:92:c7:5d:71:84:8d:56:f0:8b:ab:3b:
81:85:be:e9:0c:68:0a:6b:91:5a:ae:f5:86:62:0c:e7:2d:c3:
3b:d1:39:db:33:3d:fc:ec:85:18:9a:01:43:34:07:2b:8e:0f:
ee:96:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:51 2026 by rpki-client