Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/oGUXrmAThPl2HTLUSfGjsKuzjgc.roa
File: oGUXrmAThPl2HTLUSfGjsKuzjgc.roa (raw, json)
Hash identifier: KlFM7h3lanV33N6xyaAPWBSyT8szyeOdsDntq5dgdHo=
Subject key identifier: A0:65:17:AE:60:13:84:F9:76:1D:32:D4:49:F1:A3:B0:AB:B3:8E:07
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019F272E26E73332749D6D5DA8DAAE0EFB91
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/oGUXrmAThPl2HTLUSfGjsKuzjgc.roa
Signing time: Fri 03 Jul 2026 08:52:43 +0000
ROA not before: Fri 03 Jul 2026 08:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
31.209.96.0/24 maxlen: 24
31.209.97.0/24 maxlen: 32
31.209.100.0/23 maxlen: 32
31.209.102.0/23 maxlen: 32
31.209.104.0/23 maxlen: 32
31.209.106.0/24 maxlen: 32
31.209.107.0/24 maxlen: 32
31.209.108.0/22 maxlen: 32
31.223.187.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.150.252.0/23 maxlen: 23
45.150.254.0/23 maxlen: 23
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
46.16.32.0/24 maxlen: 32
80.73.243.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
81.21.232.0/22 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.21.52.0/24 maxlen: 32
103.24.232.0/22 maxlen: 32
103.71.60.0/24 maxlen: 32
103.76.255.0/24 maxlen: 32
103.81.230.0/23 maxlen: 23
103.113.208.0/22 maxlen: 22
103.145.75.0/24 maxlen: 32
103.198.254.0/23 maxlen: 23
103.204.222.0/23 maxlen: 32
103.221.52.0/22 maxlen: 32
103.228.200.0/22 maxlen: 32
103.251.26.0/23 maxlen: 23
104.36.50.0/24 maxlen: 32
109.104.142.0/23 maxlen: 32
116.206.96.0/22 maxlen: 32
137.59.60.0/22 maxlen: 32
167.160.96.0/24 maxlen: 32
167.160.97.0/24 maxlen: 32
167.160.98.0/24 maxlen: 32
178.251.234.0/23 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
194.126.179.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
195.225.81.0/24 maxlen: 24
199.249.223.0/24 maxlen: 32
2a01:4740::/32 maxlen: 48
2a05:28c0::/29 maxlen: 48
2a05:6700::/29 maxlen: 48
2a05:f4c0::/29 maxlen: 48
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 48
2a06:5000::/29 maxlen: 48
2a06:5700::/29 maxlen: 48
2a06:5740::/29 maxlen: 48
2a06:5800::/29 maxlen: 48
2a06:6580::/29 maxlen: 48
2a06:7340::/29 maxlen: 48
2a06:8100::/29 maxlen: 48
2a06:8140::/29 maxlen: 48
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:2e:26:e7:33:32:74:9d:6d:5d:a8:da:ae:0e:fb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jul 3 08:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a06517ae601384f9761d32d449f1a3b0abb38e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:48:e3:58:5f:0e:38:8b:e3:81:02:86:a8:
90:91:0d:4b:6c:d5:0e:ee:cb:74:f9:a1:6b:1d:4b:
b8:a1:0a:48:87:47:0a:7c:e1:4a:83:b1:54:67:43:
79:82:fe:7b:6d:e9:ad:11:66:0c:02:60:83:9a:a4:
bd:ec:1b:21:fb:7d:a7:5d:a1:cc:f7:e3:7f:d6:80:
01:34:14:0c:fb:a5:8f:98:96:05:80:53:4e:44:93:
b5:61:9a:ca:55:f5:26:c2:f3:ab:24:4d:71:e3:c5:
20:46:ec:8c:d8:69:cd:0e:36:ee:81:ad:ce:aa:38:
9d:e2:50:a7:c1:2c:03:ea:a0:be:64:56:63:e9:87:
28:06:93:e1:dd:8c:9d:68:60:ab:e8:59:e0:96:14:
8f:ce:90:91:4e:49:45:13:b2:b4:31:45:f5:c8:37:
0d:26:af:c4:2b:44:f7:40:b8:3f:b6:09:53:30:d8:
b1:9b:19:be:01:34:05:ee:d8:36:7d:27:af:10:92:
70:74:29:44:41:46:60:76:88:2e:37:7e:09:f7:6a:
d5:a0:25:79:6b:b1:a7:00:5d:d8:88:77:04:1f:e3:
b5:22:40:de:ab:61:14:26:46:a2:83:b4:a4:c7:d2:
7e:d1:3d:95:cb:31:56:fa:a7:0d:2b:1a:b7:ca:31:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:17:AE:60:13:84:F9:76:1D:32:D4:49:F1:A3:B0:AB:B3:8E:07
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/oGUXrmAThPl2HTLUSfGjsKuzjgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
31.209.96.0/23
31.209.100.0-31.209.111.255
31.223.187.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.150.252.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
46.16.32.0/24
80.73.243.0/24
80.246.30.0/24
81.21.232.0/22
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.21.52.0/24
103.24.232.0/22
103.71.60.0/24
103.76.255.0/24
103.81.230.0/23
103.113.208.0/22
103.145.75.0/24
103.198.254.0/23
103.204.222.0/23
103.221.52.0/22
103.228.200.0/22
103.251.26.0/23
104.36.50.0/24
109.104.142.0/23
116.206.96.0/22
137.59.60.0/22
167.160.96.0-167.160.98.255
178.251.234.0/23
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
194.126.179.0/24
195.47.194.0/24
195.225.81.0/24
199.249.223.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:6700::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:5740::/29
2a06:5800::/29
2a06:6580::/29
2a06:7340::/29
2a06:8100::/29
2a06:8140::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
80:0c:78:ad:ac:fa:85:ab:01:be:78:8e:0b:f3:f7:53:9f:11:
ba:9b:aa:31:45:ae:a6:4e:9a:2b:5a:47:33:0d:d9:7f:4d:e7:
8d:95:64:ef:01:ce:04:87:ac:46:dc:6e:51:cf:a1:eb:1b:0a:
9b:c5:da:3b:27:d3:17:64:ae:48:db:94:82:ff:b8:ab:95:b0:
7a:b4:7b:fe:d4:c5:db:fc:00:c8:6e:0c:d4:93:97:94:6b:0c:
5e:8d:ab:5c:09:0b:5c:d8:18:6a:f6:4a:fd:75:df:40:72:d9:
04:f1:b7:66:20:d8:f9:e1:ad:a9:2e:21:aa:6d:ed:2c:02:d4:
cd:b1:30:39:c0:6e:36:d3:d4:6d:14:9a:70:4d:5c:b9:5f:13:
95:40:30:c3:b9:a6:22:99:94:6a:ef:13:c6:b1:ba:27:d4:2a:
4d:9d:8e:3c:15:52:b0:6d:83:59:3b:29:10:0c:71:e3:29:cb:
4b:26:e2:f9:32:f9:a5:86:2d:da:df:0d:78:60:8c:a4:07:5c:
db:8c:ad:fc:d9:24:0f:2b:5d:d7:bd:ac:f3:b5:db:85:46:a9:
7c:d5:c2:bd:66:d1:47:91:b1:3b:88:f9:1a:d5:8c:65:e9:b9:
30:52:3e:4b:b6:61:be:a1:5e:c8:c1:12:13:48:b1:86:db:33:
d9:61:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:26 2026 by rpki-client