Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/4AUPiq0Eff8j-x44TKNnB4pOjoQ.roa
File: 4AUPiq0Eff8j-x44TKNnB4pOjoQ.roa (raw, json)
Hash identifier: YcYJy3WZmJQk4yb1HfCHP/tTIv8ErXnt4xMaiJ21rvk=
Subject key identifier: E0:05:0F:8A:AD:04:7D:FF:23:FB:1E:38:4C:A3:67:07:8A:4E:8E:84
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019D06380D12386A1AA795921001760200FA
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/4AUPiq0Eff8j-x44TKNnB4pOjoQ.roa
Signing time: Thu 19 Mar 2026 13:10:29 +0000
ROA not before: Thu 19 Mar 2026 13:10:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31500
IP address blocks: 83.243.69.0/24 maxlen: 24
91.108.40.0/24 maxlen: 24
91.108.50.0/24 maxlen: 24
94.124.180.0/23 maxlen: 23
94.124.182.0/24 maxlen: 24
94.124.183.0/24 maxlen: 24
95.140.80.0/20 maxlen: 20
95.140.80.0/24 maxlen: 32
95.140.81.0/24 maxlen: 24
95.140.82.0/24 maxlen: 24
95.140.83.0/24 maxlen: 24
95.140.88.0/24 maxlen: 24
95.140.89.0/24 maxlen: 24
95.140.90.0/24 maxlen: 24
95.140.91.0/24 maxlen: 24
95.140.93.0/24 maxlen: 24
95.140.95.0/24 maxlen: 24
95.161.128.0/24 maxlen: 24
95.161.240.0/20 maxlen: 24
109.239.128.0/24 maxlen: 24
109.239.129.0/24 maxlen: 24
109.239.130.0/24 maxlen: 24
109.239.130.128/25 maxlen: 25
109.239.131.0/24 maxlen: 24
109.239.132.0/24 maxlen: 24
109.239.133.0/24 maxlen: 24
109.239.134.0/24 maxlen: 24
109.239.135.0/24 maxlen: 24
109.239.136.0/23 maxlen: 23
109.239.138.0/24 maxlen: 24
109.239.139.0/24 maxlen: 24
109.239.140.0/24 maxlen: 24
109.239.141.0/24 maxlen: 24
109.239.142.0/24 maxlen: 24
109.239.143.0/24 maxlen: 24
178.18.228.0/24 maxlen: 24
178.18.229.0/24 maxlen: 24
178.18.231.0/24 maxlen: 24
178.18.232.0/24 maxlen: 24
185.26.75.0/24 maxlen: 24
2001:b28::/32 maxlen: 32
2001:b28:4::/48 maxlen: 48
2001:b28:7b0c::/48 maxlen: 48
2001:b28:9999::/48 maxlen: 48
2001:b28:9a9c::/48 maxlen: 48
2001:b28:a451::/48 maxlen: 48
2001:b28:ffff::/48 maxlen: 48
2a03:5f80::/46 maxlen: 46
2a03:5f80:2:10::/64 maxlen: 64
2a03:5f80:8::/46 maxlen: 46
2a03:5f80:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:38:0d:12:38:6a:1a:a7:95:92:10:01:76:02:00:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Mar 19 13:10:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0050f8aad047dff23fb1e384ca367078a4e8e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:f8:ba:dd:85:8b:72:a3:9f:fd:b0:e6:c3:
4a:08:5f:46:70:cf:e3:3d:c6:d3:55:26:a2:d7:33:
98:54:95:08:03:68:e0:5a:9a:62:7b:05:9c:51:f0:
7c:48:65:58:f4:13:6b:81:c4:81:ae:65:1a:3a:e8:
cf:8a:1e:9b:fc:91:e6:18:1d:5c:86:5b:6e:52:ec:
c4:30:ad:8c:e3:a1:14:72:1c:b0:a5:e2:24:63:2d:
b8:ae:ae:bc:01:c9:7e:cb:7a:b7:ce:de:55:14:b2:
11:7e:b5:18:71:af:d8:b7:fe:ef:51:83:b6:17:4b:
00:6a:e0:57:26:ee:df:c3:65:ab:62:f5:b2:4c:7d:
32:ab:b8:e8:b5:62:6e:34:b2:77:a0:a2:e0:81:e2:
fd:f1:e2:02:94:8c:7d:7e:41:8b:a4:85:51:72:f1:
e5:41:78:e8:a4:cf:6b:c7:83:09:2a:e2:c8:df:38:
ef:e2:8d:0a:fb:1f:f2:6c:ba:20:a7:4f:29:cf:6e:
7e:1c:66:83:aa:0b:23:40:07:87:76:89:b6:f8:55:
a9:0a:7d:14:17:e0:dc:ce:50:d6:40:0a:1b:76:ac:
fb:a7:2c:e5:e0:9d:b1:db:fc:94:28:64:e5:30:7e:
64:6d:d1:6f:17:a4:0a:01:00:7e:38:74:f9:f6:e9:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:05:0F:8A:AD:04:7D:FF:23:FB:1E:38:4C:A3:67:07:8A:4E:8E:84
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/4AUPiq0Eff8j-x44TKNnB4pOjoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.69.0/24
91.108.40.0/24
91.108.50.0/24
94.124.180.0/22
95.140.80.0/20
95.161.128.0/24
95.161.240.0/20
109.239.128.0/20
178.18.228.0/23
178.18.231.0-178.18.232.255
185.26.75.0/24
IPv6:
2001:b28::/32
2a03:5f80::/46
2a03:5f80:8::/46
Signature Algorithm: sha256WithRSAEncryption
7a:d4:b2:05:77:a0:57:be:aa:57:f5:56:23:ab:41:26:d9:f2:
21:e9:ad:b7:42:cf:32:16:21:cf:4a:be:4c:c3:ac:5d:56:0b:
c8:68:82:01:25:f6:98:d0:36:c3:ce:88:67:11:e2:0b:9d:19:
73:85:bb:dc:02:4a:79:8e:49:75:1b:36:89:87:fd:92:19:ce:
a8:40:43:c7:ba:e6:ec:91:a1:c7:20:70:ef:b1:22:d6:ab:67:
45:a7:1e:3f:9a:43:6c:8b:62:70:27:a8:a7:45:a9:8c:3c:ca:
86:c3:2f:df:04:8f:1c:e2:5b:46:3e:f0:66:ce:23:b5:6c:6b:
d6:18:a2:68:46:97:47:ed:7f:6b:b1:73:06:90:16:b6:c2:8e:
6d:6e:ab:5b:ff:e4:6f:6e:de:66:ee:5f:5b:09:42:f6:33:81:
7f:ae:74:68:85:0f:f3:aa:77:7d:37:de:4d:d6:ee:2d:0e:79:
1e:7a:dc:1b:7f:02:d2:ea:59:20:3b:0a:ff:b5:8b:8c:e4:be:
df:1b:70:67:7f:8d:1e:04:6c:92:d0:2c:4d:2b:34:bc:47:b3:
4d:00:ee:64:12:e7:f0:29:b5:c0:bc:4c:b2:09:51:cd:c6:ae:
e7:7a:f6:92:8a:40:73:81:86:2f:51:08:de:18:4e:fe:1c:82:
06:9c:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:49:09 2026 by rpki-client