Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/p-lwY80kWRy0amaVOuZoN-IZfZM.roa
File: p-lwY80kWRy0amaVOuZoN-IZfZM.roa (raw, json)
Hash identifier: 2g7rAV/oXLUF71ogQq8F8S6iVgMgpUpdukvxc9GjOgQ=
Subject key identifier: A7:E9:70:63:CD:24:59:1C:B4:6A:66:95:3A:E6:68:37:E2:19:7D:93
Certificate issuer: /CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Certificate serial: 01A11FF6F814E37E3415A96E1BD316098397
Authority key identifier: 4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/p-lwY80kWRy0amaVOuZoN-IZfZM.roa
Signing time: Fri 09 Oct 2026 09:20:41 +0000
ROA not before: Fri 09 Oct 2026 09:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 5.79.64.0/18 maxlen: 18
37.48.64.0/18 maxlen: 18
62.212.64.0/19 maxlen: 19
81.17.47.0/24 maxlen: 24
81.17.49.0/24 maxlen: 24
81.17.50.0/24 maxlen: 24
81.17.51.0/24 maxlen: 24
81.17.52.0/24 maxlen: 24
81.17.53.0/24 maxlen: 24
81.17.54.0/24 maxlen: 24
81.17.55.0/24 maxlen: 24
81.171.0.0/19 maxlen: 19
82.192.64.0/19 maxlen: 19
83.149.64.0/18 maxlen: 18
85.17.0.0/16 maxlen: 16
89.149.192.0/18 maxlen: 18
89.149.192.0/20 maxlen: 20
94.75.192.0/18 maxlen: 18
95.168.160.0/20 maxlen: 20
95.211.0.0/16 maxlen: 16
95.211.51.0/24 maxlen: 24
95.211.85.0/24 maxlen: 24
142.91.64.0/21 maxlen: 21
142.91.80.0/21 maxlen: 21
173.234.68.0/22 maxlen: 22
178.162.128.0/18 maxlen: 23
178.162.162.0/23 maxlen: 23
178.162.164.0/22 maxlen: 22
178.162.168.0/22 maxlen: 22
178.162.176.0/20 maxlen: 20
185.17.184.0/22 maxlen: 22
212.7.192.0/20 maxlen: 20
212.7.208.0/22 maxlen: 22
212.32.224.0/19 maxlen: 19
213.227.128.0/19 maxlen: 19
2001:1af8::/32 maxlen: 32
2001:1af8:8000::/36 maxlen: 36
2001:1af8:8000::/40 maxlen: 40
2001:1af8:8100::/44 maxlen: 44
2001:1af8:8110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:f6:f8:14:e3:7e:34:15:a9:6e:1b:d3:16:09:83:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Validity
Not Before: Oct 9 09:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7e97063cd24591cb46a66953ae66837e2197d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:b4:d7:ed:5b:65:e7:76:d0:75:9d:d0:eb:
25:21:8f:d7:72:5b:2b:50:fb:10:d1:83:9c:69:57:
b4:43:16:ac:dc:9f:e5:f5:62:68:93:88:61:94:c4:
cf:d4:d3:de:b4:79:ba:3b:d0:06:6d:9d:4c:8f:f1:
5f:3e:4b:32:04:b1:8b:9f:96:69:69:3a:ad:2c:a1:
61:ef:08:7b:7f:d8:19:cf:e3:a0:d1:58:96:0a:3a:
4e:88:d5:db:db:64:3e:3c:ae:b5:01:aa:c6:b2:eb:
41:87:ca:13:df:0d:25:17:7c:e8:2c:3f:91:02:06:
93:36:df:fc:4c:0c:e7:ab:31:c7:ad:54:24:b2:2e:
7d:81:8c:30:22:82:b0:43:08:f4:27:87:30:c0:d8:
74:82:7f:e3:83:e7:32:1e:66:0c:14:9d:88:22:c4:
b1:9f:c2:c7:18:7e:0c:c0:86:ad:ca:a5:74:c5:21:
cf:50:ed:68:c6:35:48:9f:96:b7:5d:b0:02:9a:71:
dc:1b:7f:9a:78:97:fe:be:3c:3d:ff:81:db:57:b0:
2b:ae:f3:9b:97:8e:34:34:51:24:c7:24:96:2d:69:
d3:a5:3f:aa:75:26:5c:29:af:8f:cd:df:bf:0f:7b:
de:37:f0:c5:34:03:32:c2:1c:bb:1b:ac:b8:bb:c3:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E9:70:63:CD:24:59:1C:B4:6A:66:95:3A:E6:68:37:E2:19:7D:93
X509v3 Authority Key Identifier:
keyid:4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/p-lwY80kWRy0amaVOuZoN-IZfZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.79.64.0/18
37.48.64.0/18
62.212.64.0/19
81.17.47.0/24
81.17.49.0-81.17.55.255
81.171.0.0/19
82.192.64.0/19
83.149.64.0/18
85.17.0.0/16
89.149.192.0/18
94.75.192.0/18
95.168.160.0/20
95.211.0.0/16
142.91.64.0/21
142.91.80.0/21
173.234.68.0/22
178.162.128.0/18
185.17.184.0/22
212.7.192.0-212.7.211.255
212.32.224.0/19
213.227.128.0/19
IPv6:
2001:1af8::/32
Signature Algorithm: sha256WithRSAEncryption
8c:ce:b1:88:d8:f0:9e:75:13:d5:ae:5d:03:03:33:6c:01:5a:
7a:ef:e4:85:16:47:5f:3f:1f:9d:4d:bf:3e:a5:c2:7a:f3:48:
0a:94:3d:3d:53:70:77:78:69:10:db:db:4b:4b:ec:a1:c3:86:
83:8e:d5:f5:e0:16:23:8f:8a:4b:70:29:ae:d5:6e:eb:af:2b:
7e:f8:bf:ab:a3:b7:10:06:00:1f:87:62:41:dc:8f:04:bc:ec:
96:6c:36:e6:5b:79:00:25:8d:b8:b6:72:38:2b:43:79:8d:89:
cf:d7:fb:f1:bd:d5:67:f5:c7:19:92:04:f3:23:6b:fa:5e:6c:
e6:4a:d9:a5:85:09:86:67:80:6e:18:09:e9:67:62:c5:0f:df:
58:cf:be:6a:16:00:fb:fe:b8:95:e6:63:65:50:7e:9e:b8:0d:
fc:d1:9b:cd:84:15:05:39:57:91:2e:0c:4e:9c:54:a3:0b:08:
b3:b4:a2:ca:de:36:3c:f7:12:1a:95:01:63:1a:80:94:1a:fc:
d3:1d:57:24:31:c2:5d:b2:ac:76:e8:6c:91:6b:ca:81:b5:c3:
d1:28:ed:97:d0:5c:7f:78:91:08:00:9b:b7:9f:4b:93:a0:88:
1b:94:1d:ed:48:c2:25:57:e1:04:07:fc:30:f4:31:00:e9:10:
64:d4:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:29 2026 by rpki-client