Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m79-opHvuKQLvlvBKuR-I2eS_aI.roa
File: m79-opHvuKQLvlvBKuR-I2eS_aI.roa (raw, json)
Hash identifier: CqLSGaNchBh8gTUXX8Fu1qrKwygvZ4wKW8dyOn2Vh4s=
Subject key identifier: 9B:BF:7E:A2:91:EF:B8:A4:0B:BE:5B:C1:2A:E4:7E:23:67:92:FD:A2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0D912AC0B280E20E294A35F47F1ECE3A1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m79-opHvuKQLvlvBKuR-I2eS_aI.roa
Signing time: Fri 25 Sep 2026 14:57:54 +0000
ROA not before: Fri 25 Sep 2026 14:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.230.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.42.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.58.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:12:ac:0b:28:0e:20:e2:94:a3:5f:47:f1:ec:e3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 25 14:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bbf7ea291efb8a40bbe5bc12ae47e236792fda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:34:30:9e:8b:d5:06:8d:62:b5:92:2f:d3:
6e:40:5f:03:82:30:64:0b:ff:bc:b7:00:23:83:be:
85:15:12:ba:56:d8:f5:db:58:37:c1:c6:2a:ab:1e:
53:ff:aa:59:6a:8d:2c:9c:d7:22:c9:d0:c6:2c:8b:
5d:15:fe:87:42:ae:3c:1b:40:06:9b:0d:c7:48:c7:
ef:6a:7b:d7:19:d2:85:5e:3e:bd:32:10:26:32:27:
4d:23:46:9a:1b:5e:75:17:d3:f1:61:15:fa:4f:5a:
1e:52:20:1c:a2:25:2f:2b:ee:54:86:6f:89:08:6f:
b7:bf:69:02:fe:5d:ae:cf:7c:39:a1:03:26:9a:22:
28:72:8e:f0:6e:8d:86:8a:31:38:78:a5:b3:25:e9:
2e:17:28:75:32:26:8a:40:c6:a3:50:56:63:44:b9:
5d:f8:b2:11:e1:14:16:bc:20:d5:33:d9:fb:6b:0a:
1e:bd:0e:f6:a3:bb:9d:d5:0a:39:c4:52:8a:69:51:
e2:4b:16:fc:c6:ff:75:d5:4e:35:48:6d:40:b8:03:
cb:d5:3b:d7:cc:f7:80:e4:43:d4:04:f2:b9:ea:70:
a5:72:83:49:32:c3:92:a2:80:17:56:8e:6c:92:61:
ad:a7:18:ab:2d:a1:8b:07:a2:c5:bf:24:04:79:4d:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BF:7E:A2:91:EF:B8:A4:0B:BE:5B:C1:2A:E4:7E:23:67:92:FD:A2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m79-opHvuKQLvlvBKuR-I2eS_aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
185.72.10.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0/24
193.124.200.0/24
193.124.202.0/24
193.124.206.0/24
194.58.67.0/24
194.58.155.0/24
194.87.3.0/24
194.87.6.0/23
194.87.53.0/24
194.87.59.0/24
194.87.67.0/24
194.87.81.0/24
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.160.0/24
194.87.163.0/24
194.87.172.0/24
194.87.179.0/24
194.87.182.0/23
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.133.24.0/23
195.133.29.0/24
195.133.40.0-195.133.42.255
195.133.50.0/23
195.133.58.0/24
195.133.72.0/24
195.133.92.0/23
212.192.241.0-212.192.242.255
212.192.251.0/24
212.193.0.0/24
212.193.10.0/23
212.193.15.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
74:64:0f:bb:ee:ec:97:e7:12:ee:33:88:0d:d7:d2:60:d5:b8:
6f:eb:fd:fb:ab:2b:1e:ae:17:09:81:bf:cf:02:f1:fd:03:6c:
78:5c:66:0b:fd:04:70:b4:29:0f:34:23:e3:fc:3c:a1:b8:c8:
e2:83:8f:2b:f4:85:51:f8:72:26:ac:4b:af:20:87:fe:3b:af:
96:70:ec:3b:6b:79:08:ed:b9:eb:b6:66:0e:e6:02:d1:b4:33:
4e:f6:4e:9f:7b:44:c3:fa:f7:7a:7a:7e:55:93:80:e0:dd:c4:
ce:8b:88:be:1d:81:04:ca:70:fc:73:c1:ea:85:c7:b6:f1:4d:
d8:e5:6e:12:22:d8:79:78:5a:0a:e8:78:98:2a:e3:7c:65:aa:
4b:a5:d7:ac:5b:60:1c:c7:4a:84:8c:b6:0d:7e:d3:4b:cc:1c:
99:e4:3d:67:59:b1:45:4c:9f:5d:b7:26:ec:b6:a0:87:38:81:
96:da:a7:01:82:0d:11:b0:1d:81:d4:82:a8:9e:7b:1c:c6:50:
6d:37:31:52:5e:91:fe:d0:b3:16:6a:e8:e3:26:78:61:af:e0:
ef:6c:0f:5e:3b:79:b3:bb:8f:c6:de:c3:2c:76:e0:61:de:70:
73:b6:e7:9d:08:e7:52:2f:2c:48:df:53:09:7d:b0:44:2e:08:
99:12:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:50:47 2026 by rpki-client