Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/thN-cehawE7rIRoh-bBxRf9tqmg.roa
File: thN-cehawE7rIRoh-bBxRf9tqmg.roa (raw, json)
Hash identifier: 0ApMyMmUWTE0kFsmGZcEWTTYr/RajSpSxY3A2NX+Uvs=
Subject key identifier: B6:13:7E:71:E8:5A:C0:4E:EB:21:1A:21:F9:B0:71:45:FF:6D:AA:68
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A0909AEDEC6DFA9A58B3CFFAA2B930302D
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/thN-cehawE7rIRoh-bBxRf9tqmg.roa
Signing time: Fri 11 Sep 2026 13:14:27 +0000
ROA not before: Fri 11 Sep 2026 13:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 5.35.192.0/21 maxlen: 24
31.187.92.0/22 maxlen: 24
66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
74.124.204.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.139.52.0/22 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
88.135.96.0/20 maxlen: 24
91.210.80.0/22 maxlen: 24
93.119.184.0/21 maxlen: 24
94.26.64.0/23 maxlen: 24
94.26.110.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
95.178.8.0/21 maxlen: 24
95.215.144.0/22 maxlen: 24
116.50.16.0/21 maxlen: 24
121.127.48.0/20 maxlen: 24
121.127.48.0/21 maxlen: 24
141.193.108.0/22 maxlen: 24
162.250.216.0/22 maxlen: 24
168.75.224.0/20 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
188.215.12.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
194.149.76.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:9a:ed:ec:6d:fa:9a:58:b3:cf:fa:a2:b9:30:30:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Sep 11 13:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6137e71e85ac04eeb211a21f9b07145ff6daa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:8d:5e:c9:a7:b9:27:2a:9d:8f:1b:4e:db:
17:f6:85:fd:f0:4b:27:bf:78:49:af:aa:28:d5:71:
5a:4d:a7:79:18:25:f7:d0:0d:f9:b1:42:be:fc:26:
87:49:87:fd:5d:02:17:f1:a6:bf:e3:22:37:71:ed:
68:c8:4a:2f:a8:33:e5:63:83:7e:4a:8b:39:c3:f5:
a5:fc:ac:4a:89:21:23:81:24:48:f1:cd:9c:94:42:
99:5e:f8:c5:b4:b0:79:00:e6:07:41:e6:15:c9:51:
54:32:62:7f:9a:78:d4:ed:7c:be:cf:8a:a5:50:58:
49:da:79:d2:74:8d:2a:e0:47:48:90:0e:e8:ce:19:
5c:cb:95:ea:32:1f:61:e7:1e:04:f7:41:f6:99:1c:
db:87:4e:c4:8d:46:27:fd:87:68:0e:87:0d:65:5d:
46:15:d0:26:2d:d9:b7:d9:ba:90:6f:0f:b8:e8:75:
ed:1b:a6:27:c7:d1:f0:59:7e:11:6c:25:f4:1d:01:
e2:f6:87:d3:27:c8:68:9d:eb:e0:3c:b5:2a:96:a1:
47:05:7e:2d:dc:3b:0a:51:3c:2b:13:de:f7:80:17:
63:85:c5:b1:c1:22:13:9d:a3:dc:5a:6b:e2:c2:e8:
31:4c:f7:3e:a7:8b:12:e7:36:3e:72:5a:78:ba:76:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:13:7E:71:E8:5A:C0:4E:EB:21:1A:21:F9:B0:71:45:FF:6D:AA:68
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/thN-cehawE7rIRoh-bBxRf9tqmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
31.187.92.0/22
66.9.96.0/20
66.117.8.0/22
74.124.204.0/22
77.223.192.0-77.223.201.255
79.139.52.0/22
79.139.64.0/23
83.142.200.0/21
85.204.160.0/22
88.135.96.0/20
91.210.80.0/22
93.119.184.0/21
94.26.64.0/23
94.26.110.0/23
94.101.103.0/24
95.178.8.0/21
95.215.144.0/22
116.50.16.0/21
121.127.48.0/20
141.193.108.0/22
162.250.216.0/22
168.75.224.0/20
176.222.48.0/22
178.216.184.0/21
188.215.12.0/22
192.109.205.0/24
194.149.76.0/22
195.133.202.0/23
198.14.16.0/20
198.145.112.0/22
205.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
40:c9:fc:71:7a:75:be:96:74:e9:19:ad:86:37:ad:45:3c:ed:
08:1b:e6:15:5f:73:a2:84:31:09:83:c0:46:df:6a:ed:85:20:
5d:7a:27:1e:00:9c:07:80:92:b6:e1:1c:39:3c:44:d8:e1:d5:
30:78:50:d6:6c:4d:20:69:33:92:2b:63:b9:3c:5d:13:5a:88:
d0:32:18:98:dc:22:85:ba:25:4f:79:64:1a:da:ff:3e:ae:b0:
2b:b9:42:ea:57:34:e0:84:90:81:d3:ec:5d:b7:6d:86:22:74:
cd:16:6c:12:88:d8:34:6c:ae:ba:a7:f9:b3:8a:90:13:f7:da:
2b:53:fe:9a:a7:9c:c7:b1:e8:52:0e:13:a0:71:92:6d:07:f3:
7c:d4:60:16:05:cd:ed:5e:b2:0b:37:23:d4:43:2d:7d:f3:54:
c2:99:a3:06:ac:42:ff:db:58:75:3c:c4:af:55:a2:d9:d7:14:
39:1c:64:e0:a0:74:6d:cd:05:b1:22:cc:4c:a4:70:00:7c:34:
48:d5:bd:b4:7a:1c:bc:5b:9a:98:95:9f:ac:1d:db:8d:33:d5:
69:9c:4c:b8:de:76:40:58:bf:e4:a6:85:82:0f:f6:04:cf:ff:
b4:11:b1:0a:36:c1:1a:39:d1:16:71:d4:86:02:0a:a4:f2:82:
78:f9:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:25:26 2026 by rpki-client