Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/ocrWH4LXI5AcanxmF84LShRjSnA.roa
File: ocrWH4LXI5AcanxmF84LShRjSnA.roa (raw, json)
Hash identifier: IvINQVuazfHHpSQNQUlXHe0rPDP3TKBhqPqw+YoqC5E=
Subject key identifier: A1:CA:D6:1F:82:D7:23:90:1C:6A:7C:66:17:CE:0B:4A:14:63:4A:70
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 019FB7036D4845939C156B27732D4EA3C0D4
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/ocrWH4LXI5AcanxmF84LShRjSnA.roa
Signing time: Fri 31 Jul 2026 07:11:22 +0000
ROA not before: Fri 31 Jul 2026 07:11:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203396
IP address blocks: 145.12.0.0/16 maxlen: 16
145.12.0.0/24 maxlen: 24
145.12.1.0/24 maxlen: 24
145.12.10.0/24 maxlen: 24
145.12.20.0/24 maxlen: 24
145.12.26.0/24 maxlen: 24
145.12.27.0/24 maxlen: 24
145.12.31.0/24 maxlen: 24
145.12.34.0/24 maxlen: 24
145.12.36.0/24 maxlen: 24
145.12.37.0/24 maxlen: 24
145.12.40.0/24 maxlen: 24
145.12.46.0/24 maxlen: 24
145.12.47.0/24 maxlen: 24
145.12.68.0/24 maxlen: 24
145.12.69.0/24 maxlen: 24
145.12.100.0/24 maxlen: 24
145.12.101.0/24 maxlen: 24
145.12.102.0/24 maxlen: 24
145.12.103.0/24 maxlen: 24
145.12.104.0/24 maxlen: 24
145.12.105.0/24 maxlen: 24
145.12.137.0/24 maxlen: 24
145.12.210.0/24 maxlen: 24
145.12.216.0/24 maxlen: 24
145.12.218.0/24 maxlen: 24
145.12.219.0/24 maxlen: 24
145.12.220.0/24 maxlen: 24
145.12.221.0/24 maxlen: 24
145.12.227.0/24 maxlen: 24
145.12.242.0/24 maxlen: 24
145.12.243.0/24 maxlen: 24
145.69.0.0/16 maxlen: 16
145.69.0.0/19 maxlen: 19
145.69.0.0/24 maxlen: 24
145.69.1.0/24 maxlen: 24
145.69.25.0/24 maxlen: 24
145.69.40.0/21 maxlen: 21
145.69.42.0/24 maxlen: 24
145.69.47.0/24 maxlen: 24
145.69.56.0/21 maxlen: 21
145.69.96.0/19 maxlen: 19
145.69.100.0/24 maxlen: 24
145.69.101.0/24 maxlen: 24
145.69.102.0/24 maxlen: 24
145.69.103.0/24 maxlen: 24
145.69.104.0/24 maxlen: 24
145.69.105.0/24 maxlen: 24
145.69.106.0/24 maxlen: 24
145.69.107.0/24 maxlen: 24
145.69.108.0/24 maxlen: 24
145.69.109.0/24 maxlen: 24
145.69.110.0/24 maxlen: 24
145.69.128.0/17 maxlen: 17
145.69.210.0/24 maxlen: 24
145.69.216.0/24 maxlen: 24
145.69.218.0/24 maxlen: 24
145.69.219.0/24 maxlen: 24
145.69.220.0/24 maxlen: 24
145.69.221.0/24 maxlen: 24
145.69.227.0/24 maxlen: 24
145.69.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:03:6d:48:45:93:9c:15:6b:27:73:2d:4e:a3:c0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jul 31 07:11:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1cad61f82d723901c6a7c6617ce0b4a14634a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:81:1e:18:35:9e:24:6c:1d:cb:90:d9:fe:
33:a3:53:bc:93:a9:16:08:83:b1:6b:40:be:ac:44:
24:7d:ae:a9:eb:47:19:c5:45:ff:37:72:fd:f5:5d:
93:d0:4c:ee:56:dc:c1:56:0b:76:3f:ac:11:5d:0d:
5a:da:89:4a:69:23:d3:34:70:42:dd:f3:e5:81:da:
35:67:06:8b:fc:2b:67:e2:3b:66:ed:13:78:93:b2:
cd:2f:0f:37:63:9f:e1:f6:cd:31:2e:fc:7a:4d:fd:
6e:a2:e7:30:71:52:fb:5a:17:2e:fd:5e:9b:56:26:
22:55:e5:b2:bb:f0:fb:b9:26:85:e8:2f:43:fd:46:
00:1e:d0:ba:ff:74:9c:86:c2:b5:40:1f:4f:96:02:
11:4d:6f:6d:c1:75:c5:4b:2b:e2:c6:e6:06:de:f3:
4e:c1:3d:f3:ad:1f:0e:03:64:5e:e9:a3:59:4b:64:
4e:c0:f4:cc:f5:69:5d:cd:33:3a:f1:02:9e:16:26:
4b:f9:11:b5:88:3d:71:13:21:38:8e:95:28:93:b6:
6d:48:f8:fd:d0:7d:17:7b:1a:27:a3:0e:47:ee:bd:
04:9d:47:1a:2a:17:75:1d:62:1d:2e:12:bf:9c:a5:
c6:7e:3e:16:a4:5e:70:1b:47:7d:95:56:5a:df:7b:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CA:D6:1F:82:D7:23:90:1C:6A:7C:66:17:CE:0B:4A:14:63:4A:70
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/ocrWH4LXI5AcanxmF84LShRjSnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.12.0.0/16
145.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:2a:6a:03:25:16:db:a4:d6:9c:77:4a:b7:56:6f:f5:96:ca:
b5:87:6b:c1:85:b3:08:87:f0:c9:e9:47:7d:2c:af:39:1b:74:
bd:e8:29:1d:f3:8d:33:57:91:1c:e5:08:99:e7:1a:0e:23:14:
9c:8d:49:51:35:0b:e5:d6:af:a5:f9:d4:db:7b:df:b7:cf:36:
d3:bc:f0:a4:a3:f7:20:29:27:51:73:b6:2b:14:2d:9d:c6:a9:
e0:dc:a8:38:ff:09:08:79:92:2d:cb:25:c4:1b:70:68:cf:cd:
55:31:10:69:d6:3e:3c:09:81:79:2b:68:c7:08:86:3b:14:a3:
33:b6:32:2c:e2:56:1c:74:6c:e2:a1:8d:c3:5e:be:a2:76:63:
b7:3a:29:23:d1:01:af:43:bf:19:00:9a:93:53:96:10:f5:bd:
77:a4:af:2f:67:02:00:66:96:76:b3:58:20:1a:df:76:58:57:
5d:27:33:ab:7c:68:86:93:1b:10:19:76:c7:e4:83:be:18:c0:
44:35:c8:86:e9:77:80:e7:40:c4:cb:49:29:99:a9:d6:fa:3f:
e8:1d:64:d7:9f:83:b4:82:8f:d5:1d:74:55:71:54:e7:22:30:
fe:59:f8:ea:3b:e1:f0:df:d3:73:92:af:02:a4:b0:b7:72:c0:
c9:51:21:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 05:37:21 2026 by rpki-client