Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/epPOuy1pTutJ2UKsGEx6k8t0NsM.roa
File: epPOuy1pTutJ2UKsGEx6k8t0NsM.roa (raw, json)
Hash identifier: LhLHvNhY+o6hK3teST8goEF3vpWXwekcs7mmW+UCQ4Y=
Subject key identifier: 7A:93:CE:BB:2D:69:4E:EB:49:D9:42:AC:18:4C:7A:93:CB:74:36:C3
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019F42ECD097FBE67C69B2AF766D88FFE156
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/epPOuy1pTutJ2UKsGEx6k8t0NsM.roa
Signing time: Wed 08 Jul 2026 18:10:43 +0000
ROA not before: Wed 08 Jul 2026 18:10:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209043
IP address blocks: 5.44.248.0/24 maxlen: 24
36.255.188.0/24 maxlen: 24
36.255.189.0/24 maxlen: 24
36.255.190.0/24 maxlen: 24
36.255.191.0/24 maxlen: 24
45.94.232.0/24 maxlen: 24
45.94.233.0/24 maxlen: 24
45.94.234.0/24 maxlen: 24
45.94.235.0/24 maxlen: 24
45.143.68.0/24 maxlen: 24
45.143.69.0/24 maxlen: 24
45.143.70.0/24 maxlen: 24
45.143.71.0/24 maxlen: 24
83.150.240.0/24 maxlen: 24
83.150.241.0/24 maxlen: 24
83.150.242.0/24 maxlen: 24
83.150.243.0/24 maxlen: 24
87.239.254.0/24 maxlen: 24
103.53.82.0/24 maxlen: 24
103.53.83.0/24 maxlen: 24
103.225.200.0/24 maxlen: 24
103.225.201.0/24 maxlen: 24
103.225.202.0/24 maxlen: 24
103.225.203.0/24 maxlen: 24
167.160.123.0/24 maxlen: 24
167.160.124.0/24 maxlen: 24
167.160.125.0/24 maxlen: 24
167.160.126.0/24 maxlen: 24
167.160.127.0/24 maxlen: 24
171.22.252.0/24 maxlen: 24
185.46.116.0/24 maxlen: 24
185.46.117.0/24 maxlen: 24
185.46.240.0/24 maxlen: 24
185.46.241.0/24 maxlen: 24
185.46.242.0/24 maxlen: 24
185.46.243.0/24 maxlen: 24
185.75.208.0/24 maxlen: 24
185.75.209.0/24 maxlen: 24
185.75.210.0/24 maxlen: 24
185.75.211.0/24 maxlen: 24
185.147.140.0/22 maxlen: 32
185.201.190.0/24 maxlen: 24
185.253.68.0/24 maxlen: 24
185.253.69.0/24 maxlen: 24
185.253.70.0/24 maxlen: 24
185.253.71.0/24 maxlen: 24
193.108.242.0/24 maxlen: 24
193.108.243.0/24 maxlen: 24
193.201.248.0/24 maxlen: 24
193.201.249.0/24 maxlen: 24
193.201.250.0/24 maxlen: 24
193.201.251.0/24 maxlen: 24
194.32.106.0/24 maxlen: 24
194.36.96.0/24 maxlen: 24
194.36.97.0/24 maxlen: 24
194.36.98.0/24 maxlen: 24
194.36.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:ec:d0:97:fb:e6:7c:69:b2:af:76:6d:88:ff:e1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jul 8 18:10:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a93cebb2d694eeb49d942ac184c7a93cb7436c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:be:35:49:d0:02:96:f9:dd:a3:64:ab:b0:
d7:fb:81:f1:37:5f:d6:a4:3d:a6:ad:de:46:95:b8:
6f:b7:75:7c:74:64:92:41:7d:92:3a:65:df:2a:0f:
cf:11:1e:04:fb:b5:b2:72:d6:fc:5d:b3:64:57:41:
22:99:4c:19:fc:e7:d2:3f:87:68:a4:26:21:61:57:
0c:6c:0d:2f:5b:16:15:33:cd:91:53:cd:ea:9c:65:
d3:67:65:20:23:0e:fa:e4:b9:f8:1b:fd:48:4b:f5:
d8:4a:1f:4a:de:53:01:ed:57:8c:75:69:92:ba:9c:
40:27:09:70:c7:22:6e:e6:a4:bb:97:7f:ff:66:94:
b3:71:02:f9:51:4c:5f:08:68:ec:3e:d3:fe:19:79:
1d:2a:e1:fc:54:a0:14:cf:ef:9f:26:f3:5c:44:74:
73:bd:e1:4e:ec:ed:f9:3b:b0:3a:1a:f4:65:5b:e4:
e2:14:cd:19:ca:93:32:68:bc:c0:11:00:d2:4d:2d:
f2:a2:be:36:b0:e9:10:d4:ae:64:89:40:a1:3c:c3:
64:cf:86:d4:19:ac:b7:47:48:86:db:6b:f2:03:0c:
76:8a:8a:6a:04:12:d4:3d:65:2a:88:95:e1:5e:7e:
24:2f:66:60:30:51:fc:ef:05:6c:93:39:84:ef:5b:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:93:CE:BB:2D:69:4E:EB:49:D9:42:AC:18:4C:7A:93:CB:74:36:C3
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/epPOuy1pTutJ2UKsGEx6k8t0NsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.248.0/24
36.255.188.0/22
45.94.232.0/22
45.143.68.0/22
83.150.240.0/22
87.239.254.0/24
103.53.82.0/23
103.225.200.0/22
167.160.123.0-167.160.127.255
171.22.252.0/24
185.46.116.0/23
185.46.240.0/22
185.75.208.0/22
185.147.140.0/22
185.201.190.0/24
185.253.68.0/22
193.108.242.0/23
193.201.248.0/22
194.32.106.0/24
194.36.96.0/22
Signature Algorithm: sha256WithRSAEncryption
82:7d:95:58:53:31:2c:ea:0c:ff:90:86:a6:a6:f1:a5:dd:c1:
59:6a:4e:86:27:38:38:aa:6e:6a:03:f4:14:19:01:df:e4:33:
c4:55:5d:27:88:ee:18:11:18:29:9e:01:be:0c:c6:2f:65:48:
f7:f8:b4:50:7b:dd:18:5d:95:81:80:fa:f7:ec:a0:e8:4f:3c:
89:1c:54:5c:a0:1f:74:fb:5c:52:db:50:29:c8:b0:a8:b7:6d:
cf:7a:0d:cd:62:b0:a1:94:3c:b9:f4:83:d2:14:af:5d:a4:b5:
de:7e:19:43:59:ab:3b:f9:65:c6:be:74:32:28:d6:ea:c9:e0:
37:d1:ed:dc:db:db:9b:86:32:d9:06:c6:aa:a0:0c:5e:be:76:
0b:47:03:d8:39:c0:7b:4f:d0:9c:27:88:b6:99:1a:d9:6c:9c:
3c:c2:1c:da:53:b9:27:6b:1d:a8:59:b0:75:ac:fd:1f:e9:85:
0b:ae:c6:b0:82:08:14:3c:d9:3c:c4:49:08:5e:72:9d:93:20:
d5:52:9f:fe:6c:d7:c6:46:20:2b:c2:07:a3:7a:06:eb:74:52:
4c:2b:2f:cd:ba:f0:d1:c5:7d:6b:91:54:3e:65:0e:b7:f6:ae:
e8:e4:b7:5a:52:71:3d:55:dd:1c:d5:78:5d:27:9a:8d:d9:8b:
27:b8:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 09:13:35 2026 by rpki-client