Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/At7sxT6mL4XEiXdrKAbf-oB5YCc.roa
File: At7sxT6mL4XEiXdrKAbf-oB5YCc.roa (raw, json)
Hash identifier: d4FJAcpEe0iO1bxqcw6QAHvtcjgma3GLYgzaB3duGh0=
Subject key identifier: 02:DE:EC:C5:3E:A6:2F:85:C4:89:77:6B:28:06:DF:FA:80:79:60:27
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 01A01EA7B1DBEFBCCD515327F43244425C1F
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/At7sxT6mL4XEiXdrKAbf-oB5YCc.roa
Signing time: Thu 20 Aug 2026 10:11:41 +0000
ROA not before: Thu 20 Aug 2026 10:11:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31027
IP address blocks: 5.56.144.0/20 maxlen: 20
5.83.24.0/21 maxlen: 21
5.179.80.0/20 maxlen: 20
37.49.128.0/20 maxlen: 20
46.32.156.0/22 maxlen: 22
62.12.32.0/20 maxlen: 20
62.12.48.0/21 maxlen: 21
62.116.192.0/19 maxlen: 19
77.233.224.0/19 maxlen: 19
78.111.160.0/20 maxlen: 20
78.153.160.0/19 maxlen: 19
80.88.128.0/20 maxlen: 20
80.243.112.0/20 maxlen: 20
82.192.160.0/19 maxlen: 19
83.136.88.0/21 maxlen: 21
83.151.128.0/18 maxlen: 18
87.104.192.0/19 maxlen: 19
87.104.233.0/24 maxlen: 24
87.104.234.0/23 maxlen: 23
87.104.236.0/22 maxlen: 22
87.116.0.0/18 maxlen: 18
88.212.64.0/18 maxlen: 18
89.221.160.0/20 maxlen: 20
91.143.112.0/20 maxlen: 20
92.62.192.0/20 maxlen: 20
93.176.64.0/18 maxlen: 18
94.18.0.0/16 maxlen: 16
109.202.128.0/19 maxlen: 19
130.185.128.0/20 maxlen: 20
176.222.232.0/21 maxlen: 21
185.20.240.0/22 maxlen: 22
185.67.128.0/22 maxlen: 22
188.120.64.0/19 maxlen: 19
188.120.80.0/21 maxlen: 21
193.105.116.0/24 maxlen: 24
193.105.149.0/24 maxlen: 24
194.182.96.0/21 maxlen: 21
195.93.176.0/23 maxlen: 23
195.93.182.0/23 maxlen: 23
195.140.132.0/22 maxlen: 22
212.60.96.0/19 maxlen: 19
212.60.120.0/21 maxlen: 21
212.98.96.0/24 maxlen: 24
217.74.208.0/20 maxlen: 20
217.116.208.0/20 maxlen: 20
217.195.176.0/20 maxlen: 20
217.195.178.0/24 maxlen: 24
2a01:4f0::/32 maxlen: 32
2a02:188::/29 maxlen: 29
2a02:460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:a7:b1:db:ef:bc:cd:51:53:27:f4:32:44:42:5c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Aug 20 10:11:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02deecc53ea62f85c489776b2806dffa80796027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2b:0c:90:d4:60:19:64:a5:fa:0a:7e:1a:f7:
80:b6:51:98:05:f1:dc:95:3d:1d:e1:6d:7a:f3:12:
ba:fc:3d:6b:4d:a6:f6:c8:cc:f8:49:50:a0:b5:50:
14:20:68:07:4f:f2:85:b8:a2:70:0d:53:4f:23:f3:
30:7b:cd:bb:96:b5:c4:b9:a1:6b:7d:66:86:2e:69:
62:df:b6:56:ae:db:15:08:53:01:0e:1c:05:35:f0:
d7:8a:41:aa:f1:e5:fd:6a:cd:96:9d:89:a1:a4:ec:
fb:5b:f5:26:05:26:1d:1d:95:53:8d:9c:fa:a6:49:
68:62:17:5c:70:d3:29:a6:9b:5f:d2:ca:cb:7f:93:
1c:38:94:28:33:da:f9:38:6c:24:a7:97:5d:6c:90:
f7:d1:44:8f:8b:80:db:9a:bc:bd:7b:65:81:bc:ce:
4d:cf:be:f8:b2:74:fd:1b:ca:bf:54:dc:36:3d:0c:
43:d2:8e:33:2c:a1:c0:16:4d:e4:73:54:3b:f2:9e:
f5:55:8c:4a:19:df:17:cc:23:ed:cb:57:7b:71:0e:
1f:bf:1b:c4:00:58:16:a1:04:ae:72:96:20:f4:e0:
a6:3b:d7:f4:3a:b5:69:48:22:0d:b1:a2:ae:65:f0:
29:91:9c:0b:c9:d9:bb:b2:9e:a6:66:13:45:bc:31:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DE:EC:C5:3E:A6:2F:85:C4:89:77:6B:28:06:DF:FA:80:79:60:27
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/At7sxT6mL4XEiXdrKAbf-oB5YCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.144.0/20
5.83.24.0/21
5.179.80.0/20
37.49.128.0/20
46.32.156.0/22
62.12.32.0-62.12.55.255
62.116.192.0/19
77.233.224.0/19
78.111.160.0/20
78.153.160.0/19
80.88.128.0/20
80.243.112.0/20
82.192.160.0/19
83.136.88.0/21
83.151.128.0/18
87.104.192.0/19
87.104.233.0-87.104.239.255
87.116.0.0/18
88.212.64.0/18
89.221.160.0/20
91.143.112.0/20
92.62.192.0/20
93.176.64.0/18
94.18.0.0/16
109.202.128.0/19
130.185.128.0/20
176.222.232.0/21
185.20.240.0/22
185.67.128.0/22
188.120.64.0/19
193.105.116.0/24
193.105.149.0/24
194.182.96.0/21
195.93.176.0/23
195.93.182.0/23
195.140.132.0/22
212.60.96.0/19
212.98.96.0/24
217.74.208.0/20
217.116.208.0/20
217.195.176.0/20
IPv6:
2a01:4f0::/32
2a02:188::/29
2a02:460::/32
Signature Algorithm: sha256WithRSAEncryption
3d:12:1b:a0:af:e1:65:93:ce:35:81:a1:5b:fc:0d:85:4d:0e:
1a:8c:45:1b:8b:c5:a5:c6:44:96:f0:41:03:56:6d:fc:9c:fb:
73:31:89:2f:ca:6d:cc:5c:85:60:d4:47:20:fd:19:d2:8b:21:
f0:69:92:79:04:64:78:d4:f1:5f:37:b6:fe:f3:89:67:71:1d:
64:f9:87:86:33:c4:e4:97:b1:89:d6:b9:e7:3d:e4:b3:4c:88:
7c:5f:51:00:90:9a:95:48:60:05:69:1b:c2:7a:d4:a7:91:eb:
92:82:2c:c8:03:c6:85:2b:37:94:d3:20:f2:3e:d1:f1:35:da:
1a:01:ff:72:44:a0:4f:f2:9b:12:61:ee:21:6e:70:30:d3:ee:
56:6e:0a:4f:23:67:2e:8c:be:d4:dc:79:da:84:8f:50:52:f8:
ed:e1:89:d7:11:a6:28:42:e2:81:50:a4:52:58:e7:44:17:04:
36:a3:00:89:e4:8f:39:7f:89:20:5e:7e:6a:30:82:95:9c:d6:
c7:9b:89:65:99:df:82:33:ab:c6:31:d1:5a:9f:5a:10:e4:dd:
88:6e:aa:d4:e6:83:d2:b1:4d:96:f9:b6:c7:0d:16:6f:98:aa:
50:12:7a:60:ff:32:50:84:5a:de:59:36:a9:b1:67:e3:4f:3f:
27:88:67:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 02:01:50 2026 by rpki-client