Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/aEW9LoFQsMwWUapvQ5DNFWylzeE.roa
File: aEW9LoFQsMwWUapvQ5DNFWylzeE.roa (raw, json)
Hash identifier: RmzCIkYrjmJjknQ/4wX4vnnNCc0hBgiWwOnOs0paacM=
Subject key identifier: 68:45:BD:2E:81:50:B0:CC:16:51:AA:6F:43:90:CD:15:6C:A5:CD:E1
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01A07B320FC91DCE0A7E2F8596B6FA9793A7
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/aEW9LoFQsMwWUapvQ5DNFWylzeE.roa
Signing time: Mon 07 Sep 2026 09:27:53 +0000
ROA not before: Mon 07 Sep 2026 09:27:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6739
IP address blocks: 2.154.0.0/15 maxlen: 16
2.154.0.0/16 maxlen: 16
2.154.192.0/18 maxlen: 18
2.155.0.0/16 maxlen: 16
5.40.0.0/16 maxlen: 16
62.42.0.0/15 maxlen: 16
62.57.0.0/16 maxlen: 16
62.81.0.0/16 maxlen: 24
62.100.96.0/19 maxlen: 19
62.174.0.0/15 maxlen: 19
81.60.0.0/15 maxlen: 18
81.184.0.0/16 maxlen: 16
81.202.0.0/16 maxlen: 16
82.159.0.0/16 maxlen: 16
82.213.128.0/18 maxlen: 18
83.173.128.0/18 maxlen: 18
84.120.0.0/13 maxlen: 19
84.127.229.0/24 maxlen: 24
85.219.0.0/17 maxlen: 17
85.251.0.0/16 maxlen: 17
89.140.0.0/16 maxlen: 17
95.39.0.0/16 maxlen: 19
185.128.128.0/22 maxlen: 24
194.106.0.0/19 maxlen: 19
194.140.128.0/18 maxlen: 18
194.149.192.0/19 maxlen: 19
212.21.224.0/19 maxlen: 19
212.40.224.0/19 maxlen: 19
212.40.224.0/24 maxlen: 24
212.78.128.0/19 maxlen: 19
212.79.128.0/19 maxlen: 19
212.95.192.0/19 maxlen: 19
212.97.160.0/19 maxlen: 19
212.183.192.0/18 maxlen: 18
213.37.0.0/16 maxlen: 16
213.201.0.0/17 maxlen: 17
213.227.0.0/18 maxlen: 18
213.231.64.0/18 maxlen: 18
2a02:a800::/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:32:0f:c9:1d:ce:0a:7e:2f:85:96:b6:fa:97:93:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Sep 7 09:27:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6845bd2e8150b0cc1651aa6f4390cd156ca5cde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fc:dc:d9:06:46:70:1c:1c:9c:99:e7:ce:0b:
a8:7c:da:a9:3a:17:07:34:3a:a9:26:21:b4:c9:e5:
54:5d:44:60:d1:67:0a:7c:dd:b3:6f:2c:c2:d9:65:
0f:ac:5d:e2:40:a9:c1:c4:ce:d6:7c:64:aa:3a:be:
f6:34:dd:73:4c:a7:b1:81:2a:b3:9d:25:df:fc:76:
15:89:a3:ee:32:6e:f0:86:44:cc:e2:48:0f:63:cf:
84:de:f8:9c:e0:a7:9d:aa:f5:5c:26:fe:4c:70:9c:
c9:f7:0c:21:11:24:0d:5b:5b:ee:67:5a:f1:ec:c0:
6d:8a:32:9c:a6:0a:a7:cc:08:bd:ec:fc:09:45:df:
72:d8:78:8f:93:ec:32:ad:b1:e3:85:9e:24:3c:bb:
06:ae:70:1b:1d:9c:e2:51:b9:e1:46:c6:e5:ee:ad:
09:78:55:92:c7:44:f5:0d:55:ff:fa:11:8e:b0:f5:
88:ef:98:02:9b:3e:cc:23:85:e0:5d:50:b8:ed:02:
fb:81:b1:c5:b6:74:36:5d:23:dc:38:0c:42:84:64:
4c:9a:95:7f:3b:11:1e:fc:f7:1d:fc:ed:68:22:43:
4d:c6:8b:ba:d8:b9:3c:8d:5b:f9:80:ca:0a:71:58:
8f:b8:02:b7:32:e9:90:54:22:45:12:83:12:e9:5d:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:BD:2E:81:50:B0:CC:16:51:AA:6F:43:90:CD:15:6C:A5:CD:E1
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/aEW9LoFQsMwWUapvQ5DNFWylzeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.154.0.0/15
5.40.0.0/16
62.42.0.0/15
62.57.0.0/16
62.81.0.0/16
62.100.96.0/19
62.174.0.0/15
81.60.0.0/15
81.184.0.0/16
81.202.0.0/16
82.159.0.0/16
82.213.128.0/18
83.173.128.0/18
84.120.0.0/13
85.219.0.0/17
85.251.0.0/16
89.140.0.0/16
95.39.0.0/16
185.128.128.0/22
194.106.0.0/19
194.140.128.0/18
194.149.192.0/19
212.21.224.0/19
212.40.224.0/19
212.78.128.0/19
212.79.128.0/19
212.95.192.0/19
212.97.160.0/19
212.183.192.0/18
213.37.0.0/16
213.201.0.0/17
213.227.0.0/18
213.231.64.0/18
IPv6:
2a02:a800::/26
Signature Algorithm: sha256WithRSAEncryption
41:25:dd:a9:16:3c:1a:05:52:28:f1:36:31:b6:56:87:6f:1d:
49:29:c4:31:59:96:54:30:26:91:a0:92:9c:32:f3:c4:0b:06:
bc:bc:77:b3:89:1e:9f:39:a6:d8:da:9b:c7:c8:74:1a:77:d5:
a3:ec:0e:d7:75:30:02:c4:f6:02:d5:0f:e6:9d:69:19:6b:c6:
fa:13:6d:c6:fc:6e:8c:a7:70:12:a0:88:58:b6:14:be:3b:f6:
35:99:00:d5:fd:43:59:cb:9e:90:60:a0:e2:62:00:1e:48:19:
77:72:53:a4:84:6f:c5:13:ec:98:74:23:57:58:94:58:31:92:
c1:51:31:b9:59:ba:67:f6:0f:73:bb:d0:fe:3c:b5:a1:2d:b5:
f3:6e:8c:34:cc:84:2c:57:33:62:f9:13:d6:f1:cd:43:04:96:
c5:6a:44:1c:f5:d6:b0:3f:f4:2f:1a:1a:5d:82:34:34:9f:19:
27:df:03:61:ea:6b:02:94:86:7b:81:09:b6:27:10:94:ba:9a:
e0:87:03:ea:84:61:5c:b8:cb:c7:ff:c3:2f:dd:66:f8:d7:58:
44:b9:99:22:fc:f3:2c:93:b5:bf:cd:a5:18:83:54:53:50:ec:
04:c4:66:7a:44:62:2d:2e:b7:d8:c2:19:83:8d:03:94:de:be:
5b:24:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 22:21:21 2026 by rpki-client