Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/9qVysKkpJcousd0uhgObfap5vOI.roa
File: 9qVysKkpJcousd0uhgObfap5vOI.roa (raw, json)
Hash identifier: 7wb1dM8oWCdmIGCbBq7UC2/K0TDx+6ruYxVeiWGJSIg=
Subject key identifier: F6:A5:72:B0:A9:29:25:CA:2E:B1:DD:2E:86:03:9B:7D:AA:79:BC:E2
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019EAB246C8DA4E010163CB004F2005B5116
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/9qVysKkpJcousd0uhgObfap5vOI.roa
Signing time: Tue 09 Jun 2026 06:49:11 +0000
ROA not before: Tue 09 Jun 2026 06:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398781
IP address blocks: 14.102.0.0/24 maxlen: 24
14.102.83.0/24 maxlen: 24
45.74.224.0/20 maxlen: 24
46.33.24.0/23 maxlen: 32
70.40.128.0/21 maxlen: 24
79.108.168.0/21 maxlen: 32
79.108.176.0/21 maxlen: 32
79.108.184.0/21 maxlen: 32
79.108.192.0/21 maxlen: 32
82.158.64.0/21 maxlen: 32
82.158.72.0/21 maxlen: 32
82.158.80.0/21 maxlen: 32
82.158.208.0/20 maxlen: 24
82.198.36.0/22 maxlen: 32
84.234.48.0/22 maxlen: 32
84.234.52.0/22 maxlen: 32
84.234.60.0/22 maxlen: 32
84.238.176.0/23 maxlen: 32
85.137.216.0/22 maxlen: 24
85.137.224.0/22 maxlen: 24
91.238.12.0/22 maxlen: 32
94.228.16.0/20 maxlen: 24
95.36.16.0/20 maxlen: 32
95.36.32.0/20 maxlen: 32
95.36.48.0/20 maxlen: 32
103.5.188.0/22 maxlen: 24
109.175.232.0/23 maxlen: 32
109.175.244.0/23 maxlen: 32
114.69.232.0/22 maxlen: 24
139.100.128.0/19 maxlen: 24
150.251.16.0/20 maxlen: 24
150.251.192.0/20 maxlen: 24
151.185.0.0/19 maxlen: 24
161.104.128.0/19 maxlen: 24
161.104.224.0/19 maxlen: 24
167.150.180.0/22 maxlen: 32
167.150.188.0/22 maxlen: 32
167.150.208.0/22 maxlen: 32
167.150.236.0/22 maxlen: 32
178.213.128.0/21 maxlen: 24
185.18.72.0/22 maxlen: 24
185.165.24.0/22 maxlen: 32
185.182.120.0/22 maxlen: 24
198.13.200.0/21 maxlen: 32
199.182.80.0/20 maxlen: 32
203.89.96.0/23 maxlen: 24
206.206.16.0/20 maxlen: 24
209.16.224.0/21 maxlen: 32
209.16.232.0/21 maxlen: 32
209.16.240.0/21 maxlen: 32
209.16.248.0/21 maxlen: 32
213.5.20.0/22 maxlen: 32
213.130.88.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:24:6c:8d:a4:e0:10:16:3c:b0:04:f2:00:5b:51:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jun 9 06:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6a572b0a92925ca2eb1dd2e86039b7daa79bce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:aa:e5:b9:55:91:41:4c:bd:6b:94:36:34:
b4:4a:8a:a9:88:1d:77:f4:42:ba:e3:c7:a8:b7:f8:
0e:fe:82:62:31:79:44:f2:cc:48:45:64:fb:6b:a7:
4e:cf:d6:72:01:a7:46:a2:6d:13:8f:34:e8:f2:32:
cf:aa:a5:c3:05:e6:16:f4:fa:b3:ad:4f:86:c9:25:
a9:32:fa:a2:e1:bf:06:19:c9:25:5c:72:83:e3:51:
2a:4f:af:3f:a7:c5:8c:46:52:0d:47:05:02:3c:d7:
47:c4:29:06:03:71:85:66:ba:38:c7:59:c1:58:28:
f3:9c:88:64:2f:a8:ca:7a:4d:9c:41:87:37:64:2c:
aa:d0:2a:c1:b6:8c:4e:06:cb:3b:43:84:39:c6:fe:
0c:77:cf:c3:85:d6:a8:bc:e5:1e:76:9d:ee:c6:04:
09:c8:3d:56:0e:98:78:11:8b:74:14:61:88:10:1b:
ca:9a:4f:f2:be:25:91:bf:a5:7d:c6:c7:7e:09:51:
f2:2e:13:c8:ca:da:32:44:28:dd:db:58:f2:bb:9b:
ae:ea:fe:0c:a7:ce:89:77:db:14:51:e4:49:b8:73:
3b:e9:6e:d4:24:d2:92:21:0b:92:8a:c5:45:75:22:
50:83:de:57:e0:b8:62:3b:4c:2d:e1:2c:c9:14:fd:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A5:72:B0:A9:29:25:CA:2E:B1:DD:2E:86:03:9B:7D:AA:79:BC:E2
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/9qVysKkpJcousd0uhgObfap5vOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.0.0/24
14.102.83.0/24
45.74.224.0/20
46.33.24.0/23
70.40.128.0/21
79.108.168.0-79.108.199.255
82.158.64.0-82.158.87.255
82.158.208.0/20
82.198.36.0/22
84.234.48.0/21
84.234.60.0/22
84.238.176.0/23
85.137.216.0/22
85.137.224.0/22
91.238.12.0/22
94.228.16.0/20
95.36.16.0-95.36.63.255
103.5.188.0/22
109.175.232.0/23
109.175.244.0/23
114.69.232.0/22
139.100.128.0/19
150.251.16.0/20
150.251.192.0/20
151.185.0.0/19
161.104.128.0/19
161.104.224.0/19
167.150.180.0/22
167.150.188.0/22
167.150.208.0/22
167.150.236.0/22
178.213.128.0/21
185.18.72.0/22
185.165.24.0/22
185.182.120.0/22
198.13.200.0/21
199.182.80.0/20
203.89.96.0/23
206.206.16.0/20
209.16.224.0/19
213.5.20.0/22
213.130.88.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:29:05:af:65:66:e7:49:a8:d7:d2:d3:44:75:22:be:b8:7f:
5a:4b:9a:5c:25:29:6a:1c:d0:d4:1e:8e:de:6b:d4:e0:20:31:
1e:66:1d:c1:de:75:18:ba:04:73:90:24:ed:7d:25:9c:49:d4:
2f:5c:ba:84:cd:c5:77:7f:ad:20:44:fc:c9:91:80:37:90:f2:
17:4f:ad:4f:6c:dd:55:ab:91:21:97:b0:e6:5b:8e:36:ff:0f:
59:bc:b2:b1:a2:8a:18:73:15:56:03:15:5a:90:44:6b:d4:d0:
fd:4d:3e:ff:04:72:f9:46:13:1a:43:9e:bb:8f:2a:e9:f2:eb:
4a:42:fd:08:3c:3a:b5:86:7d:eb:51:6b:77:f7:2f:03:16:99:
7b:e8:9b:35:c2:8d:b3:75:f9:8d:5b:15:34:bb:3d:83:c8:a2:
e9:de:f1:eb:3a:f5:be:bb:2e:a0:79:dc:9a:19:77:9e:ad:db:
42:a1:a5:2d:34:6a:70:14:dd:8a:10:d7:b8:97:fc:13:27:b1:
c4:5e:13:fc:6f:e2:ee:48:0c:be:40:aa:d4:19:5c:bc:cb:d8:
ab:33:53:06:f8:41:61:cd:50:48:04:f5:d4:a0:65:a6:b2:26:
c1:39:0b:23:dd:a2:bf:dd:65:a8:ae:0f:91:58:33:8d:ef:70:
be:8f:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:01:01 2026 by rpki-client