Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/dGWFlJ7W7KgxmoQieTtE38uohEE.roa
File: dGWFlJ7W7KgxmoQieTtE38uohEE.roa (raw, json)
Hash identifier: lbkU01uoBxNDRnB1JfGRWbHlYxb03RF1Vm6tXomt19A=
Subject key identifier: 74:65:85:94:9E:D6:EC:A8:31:9A:84:22:79:3B:44:DF:CB:A8:84:41
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 01A03917F9B2C892BFE0287DEE89BB7568EA
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/dGWFlJ7W7KgxmoQieTtE38uohEE.roa
Signing time: Tue 25 Aug 2026 13:24:27 +0000
ROA not before: Tue 25 Aug 2026 13:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216129
IP address blocks: 81.30.105.0/24 maxlen: 24
95.215.56.0/24 maxlen: 24
107.161.154.0/24 maxlen: 24
121.127.37.0/24 maxlen: 24
148.253.208.0/24 maxlen: 24
148.253.209.0/24 maxlen: 24
148.253.210.0/24 maxlen: 24
148.253.211.0/24 maxlen: 24
148.253.212.0/24 maxlen: 24
148.253.213.0/24 maxlen: 24
148.253.214.0/24 maxlen: 24
148.253.215.0/24 maxlen: 24
185.28.84.0/24 maxlen: 24
185.28.85.0/24 maxlen: 24
185.56.162.0/24 maxlen: 24
194.164.245.0/24 maxlen: 24
199.83.103.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
203.31.40.0/24 maxlen: 24
2a13:d200::/32 maxlen: 32
2a13:d200:6::/48 maxlen: 48
2a13:d200:7::/48 maxlen: 48
2a13:d200:8::/48 maxlen: 48
2a13:d200:9::/48 maxlen: 48
2a13:d200:10::/48 maxlen: 48
2a13:d200:11::/48 maxlen: 48
2a13:d200:13::/48 maxlen: 48
2a13:d200:14::/48 maxlen: 48
2a13:d200:15::/48 maxlen: 48
2a13:d201::/48 maxlen: 48
2a13:d201:1::/48 maxlen: 48
2a13:d201:2::/48 maxlen: 48
2a13:d201:3::/48 maxlen: 48
2a13:d201:6::/48 maxlen: 48
2a13:d201:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:17:f9:b2:c8:92:bf:e0:28:7d:ee:89:bb:75:68:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Aug 25 13:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=746585949ed6eca8319a8422793b44dfcba88441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:05:d0:56:b8:91:cf:b9:4a:5b:bc:fe:b0:6f:
d0:27:9f:e7:11:d4:f2:e9:17:1e:f8:5c:09:78:67:
d1:48:2a:bf:aa:17:04:b0:e7:28:da:18:3c:81:54:
02:e0:60:bf:a2:d9:64:50:2d:ca:f2:0f:43:d2:14:
d7:fa:b5:9e:6c:5e:3f:f0:21:66:bf:37:1a:d4:2c:
3b:5f:2d:4f:fa:4c:03:f8:3b:0d:0e:0b:84:40:eb:
20:6d:93:8d:84:b8:8d:6a:5e:c5:32:3f:62:f8:ca:
bd:7b:f7:ad:94:38:d9:0e:e2:6f:bf:21:a7:1b:2e:
5b:ae:68:f6:5d:64:93:3e:e3:3d:18:13:07:6a:e1:
5c:0c:4d:c7:d0:aa:34:5b:d0:7e:d8:33:b8:3d:6c:
67:d0:df:64:3c:80:48:68:ec:22:df:b8:34:b8:ec:
1a:98:de:b6:c0:4d:bd:f4:f4:ca:fe:b3:15:31:08:
59:ee:cf:4b:59:44:da:a8:65:70:ab:58:a0:c7:ca:
02:63:f5:c4:c7:8a:fb:0a:76:5e:e2:6c:71:ec:c3:
fc:40:ac:14:9f:03:24:3a:08:25:a4:7e:9e:07:3f:
c6:98:b9:86:10:dd:ed:a3:8e:15:04:41:fa:b3:12:
4f:5d:7d:db:68:d7:ba:c7:33:a9:dd:17:ed:bb:01:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:85:94:9E:D6:EC:A8:31:9A:84:22:79:3B:44:DF:CB:A8:84:41
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/dGWFlJ7W7KgxmoQieTtE38uohEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.105.0/24
95.215.56.0/24
107.161.154.0/24
121.127.37.0/24
148.253.208.0/21
185.28.84.0/23
185.56.162.0/24
194.164.245.0/24
199.83.103.0/24
202.181.148.0/24
202.181.188.0/24
203.31.40.0/24
IPv6:
2a13:d200::-2a13:d201:3:ffff:ffff:ffff:ffff:ffff
2a13:d201:6::/47
Signature Algorithm: sha256WithRSAEncryption
26:b4:08:96:c6:b1:50:15:c4:7e:de:86:ef:4a:90:bd:f6:e1:
b1:d1:d9:d1:99:43:27:85:eb:67:49:17:7a:81:7f:4a:01:39:
e8:5a:81:e3:75:df:95:d7:5a:ea:fa:3a:d1:da:29:ed:0d:6e:
9e:1f:33:bc:e9:6f:ba:6f:06:03:2b:4f:66:4d:a7:e3:9d:1b:
8b:f1:4d:d2:47:af:6d:b3:8e:1d:e4:2b:04:3a:81:90:25:bf:
d5:54:12:67:f1:af:d4:6d:1b:d6:6f:a0:af:e6:8e:54:45:3f:
00:ee:9a:7e:7d:4c:fc:47:63:94:16:98:e9:22:73:20:d0:f3:
6f:f9:3e:ec:1b:d1:9e:1c:d5:8f:b0:47:11:54:a4:1f:41:8c:
af:c0:2f:b5:2f:c5:cd:60:7f:ce:99:13:c2:69:c1:dc:3b:8c:
e8:45:23:4f:74:c6:92:6c:49:0b:59:d3:16:77:78:47:ff:9b:
da:01:af:18:3a:5a:0c:17:07:05:ee:6c:a4:d2:a9:75:3c:1c:
57:f4:dc:44:04:ac:c6:3a:bb:39:5a:dc:ec:8e:af:d3:89:22:
03:67:b2:95:8a:6c:01:bb:0f:85:a7:0e:e9:f2:71:96:6c:1d:
b7:d9:a1:f3:d3:0b:af:99:85:ce:29:d8:cf:98:7d:65:18:7c:
d9:8f:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:34 2026 by rpki-client