Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/dANWkRCCHuBBFlFGWa8d8ypBMTw.roa
File: dANWkRCCHuBBFlFGWa8d8ypBMTw.roa (raw, json)
Hash identifier: GTvH+k2+GKl5Ck2oK//xlFuwXDGpMb+fH35y7U42rl0=
Subject key identifier: 74:03:56:91:10:82:1E:E0:41:16:51:46:59:AF:1D:F3:2A:41:31:3C
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 019EF5C8C34B142CB94A108FE42D32D2108D
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/dANWkRCCHuBBFlFGWa8d8ypBMTw.roa
Signing time: Tue 23 Jun 2026 18:40:35 +0000
ROA not before: Tue 23 Jun 2026 18:40:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14593
IP address blocks: 9.246.0.0/16 maxlen: 24
87.251.24.0/21 maxlen: 24
91.102.180.0/22 maxlen: 24
145.224.64.0/18 maxlen: 24
145.224.64.0/21 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.80.0/21 maxlen: 24
145.224.88.0/22 maxlen: 24
145.224.92.0/23 maxlen: 24
145.224.94.0/23 maxlen: 24
145.224.96.0/21 maxlen: 24
145.224.108.0/22 maxlen: 24
145.224.124.0/22 maxlen: 24
150.228.0.0/17 maxlen: 24
162.43.192.0/22 maxlen: 24
169.155.224.0/19 maxlen: 24
176.116.124.0/23 maxlen: 24
188.92.248.0/21 maxlen: 24
188.95.144.0/23 maxlen: 24
209.198.128.0/19 maxlen: 24
212.105.128.0/19 maxlen: 24
216.128.0.0/19 maxlen: 24
217.65.136.0/21 maxlen: 24
217.65.136.0/22 maxlen: 24
217.142.16.0/20 maxlen: 24
2a0d:3340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:c8:c3:4b:14:2c:b9:4a:10:8f:e4:2d:32:d2:10:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Jun 23 18:40:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7403569110821ee04116514659af1df32a41313c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:b0:0d:3d:bf:f3:d7:33:d7:5a:18:fb:a8:
f4:ad:5a:f8:e3:af:6d:df:02:82:d4:14:8d:aa:de:
1f:34:10:e7:a0:ed:38:66:fd:01:6b:18:b1:fe:9b:
8d:6a:a9:33:ea:72:a6:83:3f:a2:b5:f1:00:79:1b:
8d:96:1c:9f:8a:52:59:ee:f8:9a:1a:41:85:1b:37:
ca:94:a1:1c:5e:41:98:fe:00:37:4e:1f:bd:1c:f0:
5d:56:c4:08:ed:f8:db:54:c2:23:73:f4:32:92:f1:
3f:49:6e:4d:36:a0:db:a1:8c:8f:bf:5b:86:93:03:
64:5a:be:82:ef:95:ea:ea:6e:c0:f9:11:46:b6:a1:
ff:39:06:b3:8c:73:0f:6a:ef:c4:bc:54:3b:0a:f2:
c8:73:98:48:a9:d7:8a:64:bd:49:00:d8:57:7f:dc:
27:82:c8:21:f3:cc:73:4f:52:13:0c:c2:4e:36:23:
04:e5:b0:ae:ca:8a:39:6e:99:da:86:b6:b0:90:75:
95:54:44:20:ad:fd:0f:75:80:c5:ba:7f:d3:ab:50:
08:9d:c5:96:39:9a:50:5a:ee:bb:fe:16:77:70:54:
d1:17:d6:ed:06:16:29:81:5f:5d:25:3f:ea:13:38:
1b:0e:e6:35:f4:1c:ef:58:8f:90:bd:21:b9:5c:81:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:03:56:91:10:82:1E:E0:41:16:51:46:59:AF:1D:F3:2A:41:31:3C
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/dANWkRCCHuBBFlFGWa8d8ypBMTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.246.0.0/16
87.251.24.0/21
91.102.180.0/22
145.224.64.0/18
150.228.0.0/17
162.43.192.0/22
169.155.224.0/19
176.116.124.0/23
188.92.248.0/21
188.95.144.0/23
209.198.128.0/19
212.105.128.0/19
216.128.0.0/19
217.65.136.0/21
217.142.16.0/20
IPv6:
2a0d:3340::/29
Signature Algorithm: sha256WithRSAEncryption
39:49:8e:27:66:ba:35:5a:2e:97:9b:11:e9:0a:01:6c:12:b5:
17:e1:be:22:33:2a:c0:66:93:f8:7b:ac:d7:fa:e5:52:1f:52:
d5:7f:53:b4:14:15:0a:85:f0:83:9a:e0:6a:d6:38:95:09:f6:
c2:d0:97:b8:0a:4a:fd:0b:cd:6e:10:e1:61:a3:8e:9d:81:cb:
78:e5:c1:bb:99:14:f8:14:a5:47:17:83:29:be:6e:8a:be:47:
2f:aa:44:96:b0:95:75:22:7f:14:56:fa:1d:7f:a1:f0:b1:b0:
39:b2:f0:16:20:69:fd:4b:6b:64:04:11:5f:cb:de:b2:79:8c:
14:a9:43:e6:f1:c5:87:34:f8:d7:44:ec:5f:27:96:11:c5:11:
bd:91:05:d3:68:b7:b4:6b:07:88:58:0f:b2:98:e0:99:e2:db:
98:6e:0f:a9:aa:de:09:3b:33:e5:97:a0:44:f0:1c:c1:89:79:
01:9a:c4:91:a8:e9:54:20:41:bd:e0:44:8c:a7:3a:1a:eb:71:
ac:c4:33:13:c8:23:ca:bc:b0:4e:e4:02:f2:71:8a:f8:94:e7:
1b:51:65:a1:a1:45:28:af:99:82:4e:f4:6c:ae:dd:fb:02:ad:
17:ad:74:90:6f:77:5f:e0:40:73:1d:8f:77:90:5e:ec:61:20:
95:01:82:32
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZ71yMNLFCy5ShCP5C0y0hCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTliMzI3ZGQ2Y2RhMWFkMzdiYzFjMjI0YTQ1NGIwMmRl
YTJhZmMwHhcNMjYwNjIzMTg0MDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDAzNTY5MTEwODIxZWUwNDExNjUxNDY1OWFmMWRmMzJhNDEzMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtawDT2/89cz11oY+6j0rVr4469t
3wKC1BSNqt4fNBDnoO04Zv0Baxix/puNaqkz6nKmgz+itfEAeRuNlhyfilJZ7via
GkGFGzfKlKEcXkGY/gA3Th+9HPBdVsQI7fjbVMIjc/QykvE/SW5NNqDboYyPv1uG
kwNkWr6C75Xq6m7A+RFGtqH/OQazjHMPau/EvFQ7CvLIc5hIqdeKZL1JANhXf9wn
gsgh88xzT1ITDMJONiME5bCuyoo5bpnahrawkHWVVEQgrf0PdYDFun/Tq1AIncWW
OZpQWu67/hZ3cFTRF9btBhYpgV9dJT/qEzgbDuY19BzvWI+QvSG5XIF1HwIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFHQDVpEQgh7gQRZRRlmvHfMqQTE8MB8GA1UdIwQY
MBaAFFeZsyfdbNoa03vBwiSkVLAt6ir8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84YzJhZTktMGE3Ny00OWViLWFkM2Et
ZWExNTBlNzYzOGNlLzEvZEFOV2tSQ0NIdUJCRmxGR1dhOGQ4eXBCTVR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84YzJhZTktMGE3Ny00OWViLWFkM2EtZWExNTBlNzYzOGNl
LzEvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwXwQCAAEwWQMDAAn2AwQD
V/sYAwQCW2a0AwQGkeBAAwQHluQAAwQCoivAAwQFqZvgAwQBsHR8AwQDvFz4AwQB
vF+QAwQF0caAAwQF1GmAAwQF2IAAAwQD2UGIAwQE2Y4QMA0EAgACMAcDBQMqDTNA
MA0GCSqGSIb3DQEBCwUAA4IBAQA5SY4nZro1Wi6XmxHpCgFsErUX4b4iMyrAZpP4
e6zX+uVSH1LVf1O0FBUKhfCDmuBq1jiVCfbC0Je4Ckr9C81uEOFho46dgct45cG7
mRT4FKVHF4Mpvm6KvkcvqkSWsJV1In8UVvodf6HwsbA5svAWIGn9S2tkBBFfy96y
eYwUqUPm8cWHNPjXROxfJ5YRxRG9kQXTaLe0aweIWA+ymOCZ4tuYbg+pqt4JOzPl
l6BE8BzBiXkBmsSRqOlUIEG94ESMpzoa63GsxDMTyCPKvLBO5ALycYr4lOcbUWWh
oUUor5mCTvRsrt37Aq0XrXSQb3df4EBzHY93kF7sYSCVAYIy
-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:42 2026 by rpki-client