Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/exMa0r-11knHjbI86BFOGQR2vYU.roa
File: exMa0r-11knHjbI86BFOGQR2vYU.roa (raw, json)
Hash identifier: kCMDc56HIIFSXG06RDpZ06BWI2fMDyz3ssK/1Gg2AMs=
Subject key identifier: 7B:13:1A:D2:BF:B5:D6:49:C7:8D:B2:3C:E8:11:4E:19:04:76:BD:85
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019E47479FAF8E6198082C536D6CFA68ABBB
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/exMa0r-11knHjbI86BFOGQR2vYU.roa
Signing time: Wed 20 May 2026 21:25:36 +0000
ROA not before: Wed 20 May 2026 21:25:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 5.35.192.0/21 maxlen: 24
31.187.92.0/22 maxlen: 24
66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
74.124.204.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.139.52.0/22 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
88.135.96.0/20 maxlen: 24
89.39.172.0/23 maxlen: 24
91.210.80.0/22 maxlen: 24
93.119.184.0/21 maxlen: 24
94.26.64.0/23 maxlen: 24
94.26.110.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
95.178.8.0/21 maxlen: 24
95.215.144.0/22 maxlen: 24
116.50.16.0/21 maxlen: 24
121.127.48.0/20 maxlen: 24
121.127.48.0/21 maxlen: 24
141.193.108.0/22 maxlen: 24
162.250.216.0/22 maxlen: 24
168.75.224.0/20 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
188.215.12.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
194.149.76.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 May 2026 21:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:47:47:9f:af:8e:61:98:08:2c:53:6d:6c:fa:68:ab:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: May 20 21:25:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b131ad2bfb5d649c78db23ce8114e190476bd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:24:ac:04:45:d4:fa:4a:91:2c:f8:64:6d:e6:
ef:42:ff:3e:95:d0:4c:93:32:ba:eb:a1:ab:74:10:
7b:8e:27:b7:8e:6a:ae:43:02:22:ff:cd:04:cd:84:
28:0b:b8:8f:cd:2d:b5:10:66:3e:31:98:ec:07:12:
4c:50:f1:68:1b:05:66:15:7c:a4:99:73:a2:5e:4a:
6d:7e:9c:d7:ce:49:4f:12:29:50:ba:a6:22:d9:bd:
43:74:6c:1b:b4:5c:24:28:bf:d7:2a:59:60:3f:64:
e9:45:33:54:70:a6:75:0d:74:19:b8:a3:82:ea:9f:
9e:52:9e:83:da:fb:b0:69:34:68:d2:e2:e5:1c:df:
32:eb:ae:0b:17:8f:4e:af:cf:91:bf:23:80:bf:b5:
78:52:07:65:85:fe:3f:47:1e:50:16:46:21:16:ec:
31:74:33:38:0c:e7:a2:7a:de:f3:b9:c8:cf:8f:4f:
b9:33:cc:23:48:9d:f5:83:8b:34:30:ea:c7:76:87:
bc:4d:72:a6:9f:b6:50:6e:06:0a:68:48:ce:8f:32:
8d:99:7e:ad:62:34:c0:0f:e7:e3:c7:ba:45:4c:4d:
d8:1e:d1:fa:5b:3d:84:d3:db:7d:39:23:bb:43:e5:
37:cc:79:05:b2:5b:e9:a9:45:d7:9d:35:4c:6f:6e:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:1A:D2:BF:B5:D6:49:C7:8D:B2:3C:E8:11:4E:19:04:76:BD:85
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/exMa0r-11knHjbI86BFOGQR2vYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
31.187.92.0/22
66.9.96.0/20
66.117.8.0/22
74.124.204.0/22
77.223.192.0-77.223.201.255
79.139.52.0/22
79.139.64.0/23
83.142.200.0/21
85.204.160.0/22
88.135.96.0/20
89.39.172.0/23
91.210.80.0/22
93.119.184.0/21
94.26.64.0/23
94.26.110.0/23
94.101.103.0/24
95.178.8.0/21
95.215.144.0/22
116.50.16.0/21
121.127.48.0/20
141.193.108.0/22
162.250.216.0/22
168.75.224.0/20
176.222.48.0/22
178.216.184.0/21
188.215.12.0/22
192.109.205.0/24
194.149.76.0/22
195.133.202.0/23
198.14.16.0/20
198.145.112.0/22
205.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
73:f7:54:39:5f:39:c4:23:5b:a0:59:a0:f0:24:62:7b:c2:1b:
78:90:db:35:14:6b:a1:80:94:68:c5:8f:ef:32:de:fb:40:66:
15:9f:aa:12:4a:05:29:93:97:06:4d:2e:4a:e1:49:77:e2:06:
ba:e8:6c:02:c8:07:d5:e5:91:0c:6f:8f:93:bf:2f:7c:dd:f0:
da:84:31:36:b8:5a:bd:ce:3a:3a:02:25:74:b7:25:09:37:83:
b5:32:14:97:c9:1e:e3:73:af:f4:e1:39:f5:63:d1:c3:95:f6:
8e:bd:e9:d6:f1:5c:5b:e7:87:46:65:db:45:01:9c:b4:5b:b2:
d4:b5:00:b4:a0:13:05:81:89:b8:c3:4d:ec:1b:65:dd:eb:98:
58:3a:b1:f9:63:3b:5e:34:5b:84:1a:97:08:13:99:2f:e1:1a:
a2:dd:21:36:11:50:2e:e2:50:60:c0:29:02:a3:68:8e:5f:be:
5d:90:fe:db:f0:46:78:0d:b2:45:bc:ee:b5:a0:76:c3:cc:49:
24:4c:ce:c9:32:85:2b:f8:35:65:d6:2b:dc:dc:06:24:11:b2:
85:e3:95:d8:76:34:10:88:5c:17:55:d7:96:d3:20:60:86:5f:
66:57:58:56:a9:f1:49:1a:ea:f0:9e:6b:34:57:f1:65:28:10:
de:d4:72:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 21 04:14:01 2026 by rpki-client