Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/rcD1dohMBrT0sIUfDYqyK5wqUuA.roa
File: rcD1dohMBrT0sIUfDYqyK5wqUuA.roa (raw, json)
Hash identifier: LHJxJ8uhzAWPnNINZvl3itiKDSVQRmXMQ+MPHPp9DtE=
Subject key identifier: AD:C0:F5:76:88:4C:06:B4:F4:B0:85:1F:0D:8A:B2:2B:9C:2A:52:E0
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01A019A5BE5328F6097DA972C0093B6F9B38
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/rcD1dohMBrT0sIUfDYqyK5wqUuA.roa
Signing time: Wed 19 Aug 2026 10:51:27 +0000
ROA not before: Wed 19 Aug 2026 10:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
31.70.0.0/16 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.165.65.0/24 maxlen: 24
213.165.69.0/24 maxlen: 24
213.165.70.0/23 maxlen: 23
213.165.70.0/24 maxlen: 24
213.165.71.0/24 maxlen: 24
213.165.74.0/24 maxlen: 24
213.165.79.0/24 maxlen: 24
213.165.80.0/23 maxlen: 23
213.165.80.0/24 maxlen: 24
213.165.81.0/24 maxlen: 24
213.165.82.0/23 maxlen: 23
213.165.84.0/24 maxlen: 24
213.165.85.0/24 maxlen: 24
213.165.86.0/23 maxlen: 23
213.165.88.0/22 maxlen: 22
213.165.92.0/24 maxlen: 24
213.165.93.0/24 maxlen: 24
213.165.94.0/23 maxlen: 23
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.24.0/24 maxlen: 24
217.154.26.0/23 maxlen: 23
217.154.32.0/22 maxlen: 22
217.154.36.0/23 maxlen: 23
217.154.38.0/24 maxlen: 24
217.154.40.0/22 maxlen: 22
217.154.44.0/23 maxlen: 23
217.154.47.0/24 maxlen: 24
217.154.48.0/24 maxlen: 24
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.154.92.0/22 maxlen: 24
217.154.97.0/24 maxlen: 24
217.154.98.0/23 maxlen: 23
217.154.100.0/23 maxlen: 23
217.154.102.0/24 maxlen: 24
217.154.105.0/24 maxlen: 24
217.154.106.0/23 maxlen: 23
217.154.108.0/24 maxlen: 24
217.154.112.0/21 maxlen: 21
217.154.120.0/23 maxlen: 23
217.154.124.0/23 maxlen: 23
217.154.126.0/24 maxlen: 24
217.154.130.0/24 maxlen: 24
217.154.142.0/23 maxlen: 24
217.154.144.0/22 maxlen: 24
217.154.148.0/23 maxlen: 24
217.154.150.0/24 maxlen: 24
217.154.152.0/22 maxlen: 24
217.154.156.0/24 maxlen: 24
217.154.159.0/24 maxlen: 24
217.154.160.0/20 maxlen: 20
217.154.177.0/24 maxlen: 24
217.154.178.0/23 maxlen: 24
217.154.180.0/22 maxlen: 24
217.154.184.0/23 maxlen: 24
217.154.186.0/24 maxlen: 24
217.154.188.0/22 maxlen: 24
217.154.192.0/20 maxlen: 20
217.154.208.0/24 maxlen: 24
217.154.210.0/23 maxlen: 23
217.154.212.0/22 maxlen: 22
217.154.216.0/23 maxlen: 23
217.154.218.0/24 maxlen: 24
217.154.220.0/24 maxlen: 24
217.154.222.0/23 maxlen: 23
217.154.224.0/22 maxlen: 22
217.154.228.0/23 maxlen: 23
217.154.231.0/24 maxlen: 24
217.154.232.0/22 maxlen: 22
217.154.237.0/24 maxlen: 24
217.154.238.0/23 maxlen: 23
217.154.240.0/22 maxlen: 24
217.154.244.0/23 maxlen: 24
217.154.247.0/24 maxlen: 24
217.154.248.0/21 maxlen: 24
217.154.248.0/24 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/29 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:a5:be:53:28:f6:09:7d:a9:72:c0:09:3b:6f:9b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Aug 19 10:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adc0f576884c06b4f4b0851f0d8ab22b9c2a52e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:95:35:bb:86:2f:6d:f8:f5:82:8d:a0:a5:
6e:24:eb:08:68:2b:18:97:c6:ad:46:2a:98:78:ca:
b5:4f:8a:38:e9:ad:a0:7d:7c:7a:73:be:cb:15:53:
c8:3d:21:e9:ca:09:e9:3f:d6:66:42:78:b6:57:05:
39:a4:c0:ea:96:e3:4c:8a:dd:c4:39:f7:e8:1b:05:
93:a7:16:95:bd:68:92:b8:27:2e:3a:75:e4:57:02:
23:2a:6f:f5:21:6b:4c:23:d8:bd:28:a6:96:ca:05:
59:89:1e:cb:35:67:c1:ab:b6:d7:9e:de:14:86:35:
d4:00:41:53:28:db:65:ee:a0:93:60:a3:1d:d4:b5:
72:86:9a:76:f7:71:b9:48:a8:4f:3e:d6:97:6e:c2:
39:f1:1b:ab:53:54:80:dc:fc:79:f1:6c:2d:80:5e:
d5:99:5b:33:84:b7:c4:ec:b9:f4:cb:b3:9f:be:33:
c8:c6:bf:a3:3c:7f:c2:b4:9d:64:11:4b:1b:a8:88:
dc:47:a5:8f:e4:e4:fb:97:8b:8a:4a:50:0c:53:89:
ae:50:f6:1d:b1:4e:27:88:36:93:7b:a2:c5:a6:3d:
5f:2a:28:92:39:bf:7e:a4:c2:c2:2c:1f:4f:7b:cd:
05:9f:d5:b7:06:85:b4:85:83:74:a1:42:9d:c9:ea:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:F5:76:88:4C:06:B4:F4:B0:85:1F:0D:8A:B2:2B:9C:2A:52:E0
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/rcD1dohMBrT0sIUfDYqyK5wqUuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
31.70.0.0/16
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.24.255
217.154.26.0/23
217.154.32.0-217.154.38.255
217.154.40.0-217.154.45.255
217.154.47.0-217.154.48.255
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0-217.154.95.255
217.154.97.0-217.154.102.255
217.154.105.0-217.154.108.255
217.154.112.0-217.154.121.255
217.154.124.0-217.154.126.255
217.154.130.0/24
217.154.142.0-217.154.150.255
217.154.152.0-217.154.156.255
217.154.159.0-217.154.175.255
217.154.177.0-217.154.186.255
217.154.188.0-217.154.208.255
217.154.210.0-217.154.218.255
217.154.220.0/24
217.154.222.0-217.154.229.255
217.154.231.0-217.154.235.255
217.154.237.0-217.154.245.255
217.154.247.0-217.154.255.255
217.160.0.0/16
IPv6:
2001:8d8::/29
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
a5:d8:4d:c7:7d:f4:39:3e:2e:ee:f9:1b:60:0c:f2:1a:82:2c:
7f:4b:bc:96:be:18:5d:d9:3d:48:fa:b1:90:de:5c:2c:ac:cb:
1f:4c:ca:af:57:db:86:b8:f6:c6:8b:a5:d0:19:0e:1f:34:90:
24:e6:40:f5:63:63:76:0e:8c:80:63:7b:a0:bc:cf:63:5e:1c:
33:2f:60:04:31:c8:89:ed:f7:f8:a5:12:fe:4f:1d:d8:d2:0e:
f6:a2:de:b5:62:4f:22:72:0b:fc:e9:73:74:31:6e:92:18:ae:
60:af:d0:ee:30:3b:78:71:9c:7f:0e:98:b8:ef:5e:8e:db:5d:
31:ce:fb:a3:9e:88:e3:fa:51:3d:b6:af:ee:ff:49:5f:1c:1b:
6f:00:93:c3:2f:78:d5:16:0c:25:a0:c6:a7:74:2b:e5:e5:7d:
fe:d0:b1:79:03:f4:70:cd:8f:70:77:e5:83:08:48:ce:d4:f3:
06:64:13:ef:d9:e5:5e:a7:e8:be:85:6c:74:cc:75:7d:20:75:
6a:47:8a:1a:a7:23:66:e4:e5:32:ce:e3:2a:02:1c:16:b2:ec:
44:99:30:dc:ee:0e:a0:b4:2e:97:bd:34:c8:04:1b:04:e8:64:
e4:f4:ad:5a:05:bd:9c:21:d6:d2:c2:e8:25:bd:26:71:bc:40:
09:7b:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:25 2026 by rpki-client