Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0YUDAiE-yuhK94EMmLyzQMgIlF0.roa
File: 0YUDAiE-yuhK94EMmLyzQMgIlF0.roa (raw, json)
Hash identifier: rsg5CjblS2OIdnbLSyR6XK4Mryfl50YgeWhG09XSsvk=
Subject key identifier: D1:85:03:02:21:3E:CA:E8:4A:F7:81:0C:98:BC:B3:40:C8:08:94:5D
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A1480030F14CD8777712D8974C8389C816
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0YUDAiE-yuhK94EMmLyzQMgIlF0.roa
Signing time: Sat 17 Oct 2026 03:55:34 +0000
ROA not before: Sat 17 Oct 2026 03:55:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.196.0/24 maxlen: 24
92.249.29.0/24 maxlen: 24
94.154.171.0/24 maxlen: 24
103.130.176.0/24 maxlen: 24
103.130.177.0/24 maxlen: 24
103.210.14.0/24 maxlen: 24
103.210.15.0/24 maxlen: 24
103.216.198.0/24 maxlen: 24
104.232.36.0/24 maxlen: 24
162.218.92.0/24 maxlen: 24
185.52.139.0/24 maxlen: 24
185.161.190.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
185.187.215.0/24 maxlen: 24
185.201.42.0/24 maxlen: 24
185.208.152.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.253.120.0/24 maxlen: 24
185.253.121.0/24 maxlen: 24
212.60.12.0/24 maxlen: 24
2a0a:8f40:3::/48 maxlen: 48
2a0a:8f40:4::/48 maxlen: 48
2a0a:8f40:6::/48 maxlen: 48
2a0a:8f40:8::/48 maxlen: 48
2a0a:8f40:9::/48 maxlen: 48
2a0a:8f40:a::/48 maxlen: 48
2a0a:8f40:b::/48 maxlen: 48
2a0a:8f40:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:00:30:f1:4c:d8:77:77:12:d8:97:4c:83:89:c8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Oct 17 03:55:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1850302213ecae84af7810c98bcb340c808945d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:29:fb:0f:ed:02:38:0f:36:5e:2e:e1:09:
33:b9:6c:12:fb:7e:31:53:be:71:1f:62:29:c2:da:
52:3e:bc:e3:31:ec:65:81:a6:e4:90:ca:20:3a:a5:
57:0c:cc:e8:3a:58:53:49:8c:d1:ff:ee:1a:08:a1:
1f:c5:17:0b:bc:e7:c3:7d:a5:31:9b:4a:a5:5b:85:
8a:74:84:98:ab:3f:b4:07:e7:64:bc:dd:ee:09:8d:
9a:d3:b6:9b:82:a5:30:43:37:1e:89:1f:24:49:d2:
db:f2:d9:9f:34:d7:60:a7:18:df:d0:0d:83:4b:ae:
f0:91:73:c2:19:32:fb:d7:48:f0:cf:c1:64:31:33:
a7:c2:a2:ff:0e:73:b9:1f:7d:e7:b1:92:f9:0b:b3:
87:30:7a:4c:a7:0a:7b:e3:d0:c0:e4:0b:a0:ab:11:
39:62:62:69:47:ee:94:63:f9:13:ac:f7:b9:6b:4f:
4b:8c:9c:4e:1b:b8:40:e5:31:a3:a1:34:1c:2c:31:
77:2d:a7:d5:c8:79:6c:da:aa:07:25:29:79:dd:6f:
54:3a:2b:b5:ba:59:35:19:a4:99:2e:31:62:65:12:
bf:6f:fd:37:30:fb:f0:1e:1c:61:d6:df:5f:ce:36:
fe:ea:b9:b3:8d:b2:a6:fb:68:f4:ad:63:c6:58:9d:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:85:03:02:21:3E:CA:E8:4A:F7:81:0C:98:BC:B3:40:C8:08:94:5D
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0YUDAiE-yuhK94EMmLyzQMgIlF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.196.0/24
92.249.29.0/24
94.154.171.0/24
103.130.176.0/23
103.210.14.0/23
103.216.198.0/24
104.232.36.0/24
162.218.92.0/24
185.52.139.0/24
185.161.190.0/24
185.187.214.0/23
185.201.42.0/24
185.208.152.0/23
185.230.121.0/24
185.253.120.0/23
212.60.12.0/24
IPv6:
2a0a:8f40:3::-2a0a:8f40:4:ffff:ffff:ffff:ffff:ffff
2a0a:8f40:6::/48
2a0a:8f40:8::-2a0a:8f40:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3c:fe:0f:28:76:6e:0b:25:1c:74:d1:d5:34:a7:26:f1:d9:95:
0a:1c:af:dc:70:cb:f9:f6:40:0a:a3:f0:77:ed:ab:87:60:60:
49:87:69:5c:3d:60:e5:20:ab:f8:85:4a:a0:2a:1a:ce:f9:f1:
73:51:03:f3:63:8a:1c:88:5d:77:2b:33:ab:33:e5:d4:82:d8:
af:e2:7b:77:ef:d6:ba:7b:e8:b6:41:76:a7:88:1c:9d:56:00:
5b:dc:3d:cd:2e:78:86:6c:9c:0e:3c:44:e5:e5:7e:64:f2:2a:
21:b3:3d:65:4f:32:79:89:9f:97:eb:a9:d8:87:3b:19:fc:44:
4f:2b:c2:4b:92:d9:64:6b:80:4f:b6:7c:81:41:4b:96:2c:19:
50:aa:28:88:3d:0f:dc:70:b1:71:34:09:2d:d3:3c:43:7b:46:
fc:c2:20:f6:5e:04:ce:08:e8:7d:2f:ef:5a:82:34:df:bd:80:
1b:d9:e8:36:7c:cc:df:32:2a:95:a1:9c:fa:cc:c5:76:39:92:
ba:a2:fe:db:fe:73:82:85:8d:8b:11:c9:26:2e:0a:13:10:13:
ec:c5:ce:d4:ce:53:48:dc:c9:9c:23:59:a1:13:d0:42:e9:ba:
f6:41:b4:e3:3b:0d:2b:25:3c:92:f0:db:a0:1b:87:08:3e:2f:
06:93:3a:f5
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAaFIADDxTNh3dxLYl0yDicgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYxMDE3MDM1NTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTg1MDMwMjIxM2VjYWU4NGFmNzgxMGM5OGJjYjM0MGM4MDg5NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OEp+w/tAjgPNl4u4QkzuWwS+34x
U75xH2IpwtpSPrzjMexlgabkkMogOqVXDMzoOlhTSYzR/+4aCKEfxRcLvOfDfaUx
m0qlW4WKdISYqz+0B+dkvN3uCY2a07abgqUwQzceiR8kSdLb8tmfNNdgpxjf0A2D
S67wkXPCGTL710jwz8FkMTOnwqL/DnO5H33nsZL5C7OHMHpMpwp749DA5AugqxE5
YmJpR+6UY/kTrPe5a09LjJxOG7hA5TGjoTQcLDF3LafVyHls2qoHJSl53W9UOiu1
ulk1GaSZLjFiZRK/b/03MPvwHhxh1t9fzjb+6rmzjbKm+2j0rWPGWJ0OuQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFNGFAwIhPsroSveBDJi8s0DICJRdMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvMFlVREFpRS15dWhLOTRFTW1MeXpRTWdJbEYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTBmBAIAATBgAwQABbbE
AwQAXPkdAwQAXpqrAwQBZ4KwAwQBZ9IOAwQAZ9jGAwQAaOgkAwQAotpcAwQAuTSL
AwQAuaG+AwQBubvWAwQAuckqAwQBudCYAwQAueZ5AwQBuf14AwQA1DwMMDcEAgAC
MDEwEgMHACoKj0AAAwMHACoKj0AABAMHACoKj0AABjASAwcDKgqPQAAIAwcAKgqP
QAAMMA0GCSqGSIb3DQEBCwUAA4IBAQA8/g8odm4LJRx00dU0pybx2ZUKHK/ccMv5
9kAKo/B37auHYGBJh2lcPWDlIKv4hUqgKhrO+fFzUQPzY4ociF13KzOrM+XUgtiv
4nt379a6e+i2QXaniBydVgBb3D3NLniGbJwOPETl5X5k8iohsz1lTzJ5iZ+X66nY
hzsZ/ERPK8JLktlka4BPtnyBQUuWLBlQqiiIPQ/ccLFxNAkt0zxDe0b8wiD2XgTO
COh9L+9agjTfvYAb2eg2fMzfMiqVoZz6zMV2OZK6ov7b/nOChY2LEckmLgoTEBPs
xc7UzlNI3MmcI1mhE9BC6br2QbTjOw0rJTyS8NugG4cIPi8Gkzr1
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:05 2026 by rpki-client