Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/AV7Zqoz_I8_VtA4jvx2_5ASct5c.roa
File: AV7Zqoz_I8_VtA4jvx2_5ASct5c.roa (raw, json)
Hash identifier: atMPgRGqsPQYurIN2nF56uTQOvoNuMbY4V1WXvm2t6k=
Subject key identifier: 01:5E:D9:AA:8C:FF:23:CF:D5:B4:0E:23:BF:1D:BF:E4:04:9C:B7:97
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01A143B3BA381FA271ECD3912EC3D7287145
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/AV7Zqoz_I8_VtA4jvx2_5ASct5c.roa
Signing time: Fri 16 Oct 2026 07:53:34 +0000
ROA not before: Fri 16 Oct 2026 07:53:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.174.0/23 maxlen: 23
80.75.215.0/24 maxlen: 24
85.158.108.0/24 maxlen: 24
85.158.109.0/24 maxlen: 24
85.158.110.0/24 maxlen: 24
89.44.80.0/24 maxlen: 24
89.150.40.0/24 maxlen: 24
89.150.45.0/24 maxlen: 24
89.150.48.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
91.220.8.0/24 maxlen: 24
94.126.224.0/24 maxlen: 24
94.126.225.0/24 maxlen: 24
94.126.226.0/24 maxlen: 24
94.126.227.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.221.222.0/24 maxlen: 24
185.221.223.0/24 maxlen: 24
185.223.57.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
185.253.116.0/24 maxlen: 24
185.253.117.0/24 maxlen: 24
185.253.118.0/24 maxlen: 24
193.24.121.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
193.111.208.0/24 maxlen: 24
194.33.28.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
212.2.32.0/24 maxlen: 24
212.2.33.0/24 maxlen: 24
212.2.34.0/24 maxlen: 24
212.2.35.0/24 maxlen: 24
212.2.36.0/24 maxlen: 24
212.2.37.0/24 maxlen: 24
212.2.39.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:15::/48 maxlen: 48
2a01:8640:17::/48 maxlen: 48
2a01:8640:18::/48 maxlen: 48
2a01:8640:1a::/48 maxlen: 48
2a01:8640:1b::/48 maxlen: 48
2a01:8640:1c::/48 maxlen: 48
2a01:8640:1d::/48 maxlen: 48
2a01:8640:25::/48 maxlen: 48
2a01:8640:26::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:b3:ba:38:1f:a2:71:ec:d3:91:2e:c3:d7:28:71:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Oct 16 07:53:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=015ed9aa8cff23cfd5b40e23bf1dbfe4049cb797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:6a:54:a3:9a:12:f3:ef:30:0f:51:cd:35:
bc:bf:e0:57:42:4f:eb:a9:0d:2e:77:2c:c3:2b:30:
01:aa:9b:e7:fc:ce:f4:0a:24:6f:d7:c9:eb:3c:c8:
c2:1f:73:69:70:15:aa:1d:ae:7f:86:af:05:80:a2:
12:48:6e:8f:54:c8:ca:5b:20:12:91:f6:b4:dd:2b:
47:5d:b3:1e:fb:aa:39:27:f8:7c:ed:03:3d:fe:aa:
e3:da:32:2b:a8:a9:08:86:1e:73:38:ff:3b:75:0a:
5e:51:19:80:f3:6b:10:3d:f5:48:b3:ce:eb:bc:37:
4b:24:ed:e5:b8:ff:41:86:18:f0:da:3a:33:df:d6:
bb:f4:87:fb:7b:fd:de:c3:e2:a8:65:73:93:9a:73:
21:51:25:57:9b:bd:01:f4:e3:85:58:e6:dc:3a:96:
59:1f:95:81:19:f2:24:c0:b1:af:ba:07:bd:05:97:
98:1c:3b:6e:b7:9b:81:a5:53:87:fd:9b:26:52:ac:
cb:73:31:93:bd:38:ed:62:db:80:8c:11:22:8b:36:
4d:b4:ba:15:60:b3:49:d6:59:91:c3:71:5e:5c:ca:
7a:98:81:da:7a:67:59:35:5d:78:44:a6:2f:a1:52:
b7:aa:82:4a:f1:08:91:26:26:00:36:c1:40:6f:ca:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:D9:AA:8C:FF:23:CF:D5:B4:0E:23:BF:1D:BF:E4:04:9C:B7:97
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/AV7Zqoz_I8_VtA4jvx2_5ASct5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.174.0/23
80.75.215.0/24
85.158.108.0-85.158.110.255
89.44.80.0/24
89.150.40.0/24
89.150.45.0/24
89.150.48.0/24
89.150.57.0/24
91.193.18.0/24
91.220.8.0/24
94.126.224.0/22
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.221.222.0/23
185.223.57.0/24
185.235.137.0-185.235.138.255
185.253.116.0-185.253.118.255
193.24.121.0/24
193.42.36.0/24
193.42.39.0/24
193.111.208.0/24
194.33.28.0/24
195.95.155.0/24
212.2.32.0-212.2.37.255
212.2.39.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
2a01:8640:17::-2a01:8640:18:ffff:ffff:ffff:ffff:ffff
2a01:8640:1a::-2a01:8640:1d:ffff:ffff:ffff:ffff:ffff
2a01:8640:25::-2a01:8640:26:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0c:91:8a:1b:89:73:20:4f:0c:17:8f:10:51:7f:c5:2f:ae:35:
03:3e:cf:a5:41:bf:ef:0f:d0:05:0d:e0:e6:c0:f0:0d:d2:1c:
8b:1c:40:27:66:44:3e:1c:a8:c7:5e:25:e5:3e:71:11:8a:bf:
66:61:0f:4c:36:4d:80:4d:1d:5f:27:d8:85:22:cb:f2:69:d8:
08:01:25:de:43:b3:28:2e:91:81:50:2e:5c:f8:75:64:0a:82:
dd:64:1f:fe:f2:26:ea:fe:72:d3:99:c9:df:2c:1a:fc:87:cf:
01:35:98:e6:30:34:47:9d:5e:8d:79:ae:14:8f:7e:a2:2d:d3:
68:cf:50:92:3b:c5:27:86:52:2d:88:07:70:fe:ea:7b:52:3e:
1a:bd:e5:8a:1a:b9:6d:2b:cd:26:c3:f6:c2:1e:d0:50:03:b8:
93:5b:6b:ed:23:d4:e3:5f:bb:27:ec:64:d0:99:8f:de:d9:39:
1a:57:05:9c:52:a5:c8:05:71:7f:65:d3:06:ea:1e:db:2a:ba:
88:74:f0:70:0c:51:a7:9f:0c:58:d1:3d:ef:1a:f5:f2:86:3d:
6a:f8:79:a6:d2:6b:37:18:13:e1:aa:df:5e:4e:df:fc:d4:63:
b6:7a:bf:0a:e2:62:ff:e9:c7:05:ed:f6:62:8b:e7:4c:03:2f:
c8:2c:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:48 2026 by rpki-client