Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/0GU6HRl6uDQzZNkILtqUb2kfu2U.roa
File: 0GU6HRl6uDQzZNkILtqUb2kfu2U.roa (raw, json)
Hash identifier: KLCli2poPJQ3DchFf5DZZV757vL0eXcKSaecpDhu9j8=
Subject key identifier: D0:65:3A:1D:19:7A:B8:34:33:64:D9:08:2E:DA:94:6F:69:1F:BB:65
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A8030F1CC102B407176640B82F0B60E4
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/0GU6HRl6uDQzZNkILtqUb2kfu2U.roa
Signing time: Wed 16 Sep 2026 02:19:27 +0000
ROA not before: Wed 16 Sep 2026 02:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 142.228.20.0/22 maxlen: 22
142.228.67.0/24 maxlen: 24
142.228.72.0/24 maxlen: 24
142.228.84.0/22 maxlen: 22
142.228.112.0/22 maxlen: 22
142.228.116.0/22 maxlen: 22
142.228.132.0/24 maxlen: 24
142.228.168.0/23 maxlen: 23
142.228.196.0/22 maxlen: 22
142.228.235.0/24 maxlen: 24
198.33.48.0/23 maxlen: 23
198.33.54.0/23 maxlen: 23
198.33.56.0/23 maxlen: 23
198.33.60.0/23 maxlen: 23
198.33.70.0/23 maxlen: 23
198.33.80.0/23 maxlen: 23
198.33.82.0/23 maxlen: 23
198.33.86.0/24 maxlen: 24
198.33.87.0/24 maxlen: 24
198.33.219.0/24 maxlen: 24
198.33.222.0/24 maxlen: 24
198.33.227.0/24 maxlen: 24
198.33.228.0/24 maxlen: 24
198.33.231.0/24 maxlen: 24
198.33.237.0/24 maxlen: 24
198.33.239.0/24 maxlen: 24
198.33.240.0/22 maxlen: 22
198.33.249.0/24 maxlen: 24
198.33.250.0/24 maxlen: 24
198.33.254.0/24 maxlen: 24
198.34.67.0/24 maxlen: 24
198.34.73.0/24 maxlen: 24
198.34.80.0/24 maxlen: 24
198.34.82.0/24 maxlen: 24
198.34.94.0/24 maxlen: 24
198.34.113.0/24 maxlen: 24
198.34.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:03:0f:1c:c1:02:b4:07:17:66:40:b8:2f:0b:60:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 16 02:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0653a1d197ab8343364d9082eda946f691fbb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:b4:b7:5a:17:e6:3d:67:14:e3:53:49:4f:
1e:61:7e:4f:71:81:46:d7:66:ff:02:dc:8b:5e:85:
57:9a:21:0e:72:a7:0d:eb:70:72:8d:05:31:85:54:
eb:20:14:d5:ef:23:bd:a1:a2:73:2d:bc:5f:f8:c2:
2a:ec:62:f0:30:ff:74:38:8b:93:f9:0c:8b:b6:40:
de:e5:30:85:0d:6e:12:c3:ec:df:1b:8e:89:87:69:
c5:ac:59:4f:0b:8c:83:a8:d0:ac:fe:0d:f5:3d:61:
26:5c:b4:a1:bc:c1:94:e5:01:2f:bb:0b:41:fa:0c:
4a:94:55:e2:8e:c0:a7:a5:9b:db:7c:eb:ac:c5:4b:
b3:6e:59:93:5d:2d:11:01:8d:4b:88:f8:29:91:c9:
ee:a2:e2:ee:39:a9:32:00:c0:2f:ab:af:15:27:89:
ee:e0:c9:9f:49:7b:06:3a:6b:3e:c4:f8:bd:74:00:
7c:43:a8:71:f5:8a:15:2a:c4:2a:96:2d:94:7f:36:
4c:2f:23:92:54:27:aa:e8:41:9e:61:8d:15:9a:0c:
15:b5:07:33:81:dd:7e:b6:67:29:c2:76:de:a7:22:
25:26:11:08:ca:ff:03:48:d2:c8:e0:98:d7:95:c4:
b9:7a:29:03:d0:07:f2:c8:66:ea:2c:2f:de:73:11:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:3A:1D:19:7A:B8:34:33:64:D9:08:2E:DA:94:6F:69:1F:BB:65
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/0GU6HRl6uDQzZNkILtqUb2kfu2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.20.0/22
142.228.67.0/24
142.228.72.0/24
142.228.84.0/22
142.228.112.0/21
142.228.132.0/24
142.228.168.0/23
142.228.196.0/22
142.228.235.0/24
198.33.48.0/23
198.33.54.0-198.33.57.255
198.33.60.0/23
198.33.70.0/23
198.33.80.0/22
198.33.86.0/23
198.33.219.0/24
198.33.222.0/24
198.33.227.0-198.33.228.255
198.33.231.0/24
198.33.237.0/24
198.33.239.0-198.33.243.255
198.33.249.0-198.33.250.255
198.33.254.0/24
198.34.67.0/24
198.34.73.0/24
198.34.80.0/24
198.34.82.0/24
198.34.94.0/24
198.34.113.0/24
198.34.120.0/22
Signature Algorithm: sha256WithRSAEncryption
84:39:0a:26:70:0b:6b:26:1b:e9:37:08:00:a2:57:11:2c:52:
fe:8a:6c:59:4c:8a:b5:17:a9:d5:ae:ee:61:e6:0a:1a:58:4e:
cd:d7:fa:a5:ea:0b:db:db:54:74:d9:8f:d8:2c:94:17:19:fb:
89:4c:93:0b:9e:e7:fe:bf:bd:a5:9a:cf:af:05:b0:ac:85:bf:
f2:0c:02:67:35:05:95:80:0d:38:20:d4:d5:4b:9a:eb:2f:b5:
ba:21:26:00:5c:d6:1f:00:bf:b4:1f:ed:db:b6:b8:29:86:4e:
46:ea:20:f4:16:a8:54:8d:d5:c1:de:1b:f2:67:9c:a7:ea:f7:
91:c1:de:56:e0:3d:a6:39:18:02:09:d6:a5:5b:f0:5f:dd:0e:
ca:7c:72:99:6d:c1:3a:c0:78:bb:7b:96:46:50:40:5a:e5:f6:
b7:8d:71:3e:67:3c:d7:c2:69:6d:c0:86:95:63:4c:43:50:5d:
75:d6:07:3a:c9:c2:82:0f:35:21:e0:47:fd:fd:bb:f6:ae:ae:
ad:dc:6c:de:1b:32:ff:90:4a:8f:fa:35:4e:f9:54:3f:71:44:
5f:d0:d1:cc:9f:20:72:ac:08:0a:b3:cd:83:7b:6a:b3:c5:8a:
7c:03:2c:ab:30:65:00:36:18:ef:81:89:31:7a:a1:55:be:bf:
31:da:b9:9b
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgISAaCoAw8cwQK0BxdmQLgvC2DkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjM2YjI0MzU2MDM0NjA1M2JjNjBjZWQ0ZTk4YWE0OGVh
MWEwNjMwHhcNMjYwOTE2MDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDY1M2ExZDE5N2FiODM0MzM2NGQ5MDgyZWRhOTQ2ZjY5MWZiYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNu0t1oX5j1nFONTSU8eYX5PcYFG
12b/AtyLXoVXmiEOcqcN63ByjQUxhVTrIBTV7yO9oaJzLbxf+MIq7GLwMP90OIuT
+QyLtkDe5TCFDW4Sw+zfG46Jh2nFrFlPC4yDqNCs/g31PWEmXLShvMGU5QEvuwtB
+gxKlFXijsCnpZvbfOusxUuzblmTXS0RAY1LiPgpkcnuouLuOakyAMAvq68VJ4nu
4MmfSXsGOms+xPi9dAB8Q6hx9YoVKsQqli2UfzZMLyOSVCeq6EGeYY0VmgwVtQcz
gd1+tmcpwnbepyIlJhEIyv8DSNLI4JjXlcS5eikD0AfyyGbqLC/ecxG/4wIDAQAB
o4IC3DCCAtgwHQYDVR0OBBYEFNBlOh0Zerg0M2TZCC7alG9pH7tlMB8GA1UdIwQY
MBaAFO3zayQ1YDRgU7xgztTpiqSOoaBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZOckpEVmdOR0JUdkdETzFPbUtwSTZob0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YzcwNzQtOThjMS00MzM5LWEwNGUt
N2NiMmZkMjMyY2NjLzEvMEdVNkhSbDZ1RFF6Wk5rSUx0cVViMmtmdTJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YzcwNzQtOThjMS00MzM5LWEwNGUtN2NiMmZkMjMyY2Nj
LzEvN2ZOckpEVmdOR0JUdkdETzFPbUtwSTZob0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCB2wQCAAEwgdQDBAKO
5BQDBACO5EMDBACO5EgDBAKO5FQDBAOO5HADBACO5IQDBAGO5KgDBAKO5MQDBACO
5OsDBAHGITAwDAMEAcYhNgMEAcYhOAMEAcYhPAMEAcYhRgMEAsYhUAMEAcYhVgME
AMYh2wMEAMYh3jAMAwQAxiHjAwQAxiHkAwQAxiHnAwQAxiHtMAwDBADGIe8DBALG
IfAwDAMEAMYh+QMEAMYh+gMEAMYh/gMEAMYiQwMEAMYiSQMEAMYiUAMEAMYiUgME
AMYiXgMEAMYicQMEAsYieDANBgkqhkiG9w0BAQsFAAOCAQEAhDkKJnALayYb6TcI
AKJXESxS/opsWUyKtRep1a7uYeYKGlhOzdf6peoL29tUdNmP2CyUFxn7iUyTC57n
/r+9pZrPrwWwrIW/8gwCZzUFlYANOCDU1Uua6y+1uiEmAFzWHwC/tB/t27a4KYZO
Ruog9BaoVI3Vwd4b8mecp+r3kcHeVuA9pjkYAgnWpVvwX90OynxymW3BOsB4u3uW
RlBAWuX2t41xPmc818JpbcCGlWNMQ1BdddYHOsnCgg81IeBH/f279q6urdxs3hsy
/5BKj/o1TvlUP3FEX9DRzJ8gcqwICrPNg3tqs8WKfAMsqzBlADYY74GJMXqhVb6/
Mdq5mw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:44:23 2026 by rpki-client