Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/aUzygNT70ghxXMs2blCL8OpX4no.roa
File: aUzygNT70ghxXMs2blCL8OpX4no.roa (raw, json)
Hash identifier: w8qkTYZVrMlkxX1sq0YTNVOgTaepwdMRBG9/wQ7wpb0=
Subject key identifier: 69:4C:F2:80:D4:FB:D2:08:71:5C:CB:36:6E:50:8B:F0:EA:57:E2:7A
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019FBCC2431A1C2011FCEE0DC377A550AAEA
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/aUzygNT70ghxXMs2blCL8OpX4no.roa
Signing time: Sat 01 Aug 2026 09:57:55 +0000
ROA not before: Sat 01 Aug 2026 09:57:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.203.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.3.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.13.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
213.220.18.0/24 maxlen: 24
213.220.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bc:c2:43:1a:1c:20:11:fc:ee:0d:c3:77:a5:50:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Aug 1 09:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=694cf280d4fbd208715ccb366e508bf0ea57e27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:e7:2b:c0:21:f7:ab:c0:bd:34:59:96:fb:
a7:50:42:32:61:43:50:16:c1:79:a5:69:f1:2f:0d:
d6:61:7a:1e:63:7f:3e:43:43:5d:36:ef:4d:18:74:
f2:47:12:f6:8c:9d:62:39:54:a2:66:fe:83:b6:51:
c9:d0:9c:70:e6:be:4d:19:e6:ab:bf:9a:fd:51:91:
e1:99:d8:8d:37:b8:05:f1:47:62:81:0b:ad:1f:56:
2e:ea:ad:cb:bf:91:60:6f:d9:92:29:95:e8:41:b2:
fa:68:61:b1:ec:85:6b:60:86:5c:29:45:88:f3:88:
2e:45:c1:36:d4:a9:f3:8b:80:35:65:9e:9a:99:33:
1b:fa:76:6c:18:b8:60:74:29:f6:cb:c8:cc:12:cd:
6f:5f:9e:37:27:b8:6c:44:fd:e8:2e:05:df:12:f0:
a8:52:16:59:35:d0:5f:29:4c:15:fd:2e:96:e4:88:
f2:c8:94:0b:07:82:35:aa:dd:66:49:2b:25:10:d2:
4b:6e:89:1d:4c:f0:c1:3e:78:85:8d:6a:26:04:15:
c8:25:97:f0:9a:09:66:7e:32:ff:2a:6f:65:13:fa:
44:ff:85:47:4a:91:42:de:15:ae:81:03:f5:4e:29:
99:d7:05:ff:3b:d1:70:50:9c:04:99:2b:93:db:d9:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4C:F2:80:D4:FB:D2:08:71:5C:CB:36:6E:50:8B:F0:EA:57:E2:7A
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/aUzygNT70ghxXMs2blCL8OpX4no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.203.0/24
194.143.205.0/24
194.143.209.0/24
194.143.217.0-194.143.218.255
194.143.221.0-194.143.223.255
195.114.192.0/24
195.114.195.0-195.114.198.255
195.114.200.0/24
195.114.202.0/23
195.114.205.0/24
213.220.0.0/24
213.220.2.0-213.220.4.255
213.220.6.0/24
213.220.11.0/24
213.220.13.0-213.220.14.255
213.220.18.0/24
213.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:98:4e:53:48:75:cf:b2:36:57:e6:09:0a:d8:18:4c:90:7c:
5c:2c:1b:d4:e3:f4:07:9f:96:93:72:33:a6:4a:22:42:66:06:
73:3f:30:d1:07:68:f5:95:24:81:f0:c1:80:a6:2a:f2:76:ea:
14:05:e3:a7:66:d4:c6:9d:21:c7:10:ea:68:d5:85:32:ff:6d:
c0:b0:41:2b:98:b9:f8:68:b3:5c:53:d1:d1:b3:e8:dd:91:6a:
4c:c6:bf:7e:85:77:85:df:79:03:37:97:55:7c:7b:13:ba:bc:
91:af:43:8e:d3:1f:e8:a3:9e:d8:5d:71:6c:59:65:a9:0b:2f:
46:32:29:70:1d:ce:c1:8b:2e:23:4d:9c:07:b9:8f:61:c2:f8:
02:78:58:28:97:99:82:91:56:e0:5b:22:f1:f0:6e:a1:60:c4:
95:99:78:d9:2d:0e:73:0a:1d:34:44:46:86:7c:f2:06:ea:be:
6e:2e:51:23:89:0d:f7:32:59:6f:54:2d:36:2f:70:08:4f:21:
73:0d:1b:bd:bb:2e:88:83:32:f1:dd:f8:64:c2:9c:e4:83:6e:
0d:80:da:4b:53:be:f9:a0:b9:64:32:87:92:65:dd:e9:1f:bd:
0e:1f:67:0a:07:39:09:a2:f1:f9:35:5c:73:dd:85:02:63:32:
58:4b:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:56 2026 by rpki-client