Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/AToCBzn8VGxTwqEckoCSU09ogQo.roa
File: AToCBzn8VGxTwqEckoCSU09ogQo.roa (raw, json)
Hash identifier: lX5yVD+rW89WvrfEFYljDODyee1ZoZxJjQ20SQ1N+nk=
Subject key identifier: 01:3A:02:07:39:FC:54:6C:53:C2:A1:1C:92:80:92:53:4F:68:81:0A
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019F4214BF2A675484D092E3E771775A122A
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/AToCBzn8VGxTwqEckoCSU09ogQo.roa
Signing time: Wed 08 Jul 2026 14:14:43 +0000
ROA not before: Wed 08 Jul 2026 14:14:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9125
IP address blocks: 5.172.34.0/23 maxlen: 23
5.172.34.0/24 maxlen: 24
5.172.39.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.67.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.71.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.77.0/24 maxlen: 24
89.23.78.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
89.23.83.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.86.0/24 maxlen: 24
89.23.88.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.252.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
93.93.192.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.116.0/22 maxlen: 22
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.227.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.229.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.232.0/22 maxlen: 22
109.111.236.0/22 maxlen: 22
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.245.0/24 maxlen: 24
109.111.246.0/24 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
109.111.249.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 23
109.111.254.0/24 maxlen: 24
178.254.128.0/21 maxlen: 21
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.140.0/22 maxlen: 22
178.254.144.0/24 maxlen: 24
178.254.145.0/24 maxlen: 24
178.254.146.0/24 maxlen: 24
178.254.148.0/24 maxlen: 24
178.254.149.0/24 maxlen: 24
178.254.151.0/24 maxlen: 24
178.254.152.0/24 maxlen: 24
178.254.153.0/24 maxlen: 24
178.254.154.0/24 maxlen: 24
178.254.155.0/24 maxlen: 24
178.254.156.0/24 maxlen: 24
178.254.157.0/24 maxlen: 24
178.254.158.0/24 maxlen: 24
178.254.159.0/24 maxlen: 24
178.254.163.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
178.254.184.0/24 maxlen: 24
178.254.187.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
185.157.44.0/24 maxlen: 24
193.104.68.0/24 maxlen: 24
217.169.208.0/20 maxlen: 20
217.169.208.0/22 maxlen: 22
217.169.212.0/22 maxlen: 22
217.169.216.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.220.0/22 maxlen: 22
2a02:b58::/32 maxlen: 32
2a02:b58:1:13::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:14:bf:2a:67:54:84:d0:92:e3:e7:71:77:5a:12:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jul 8 14:14:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=013a020739fc546c53c2a11c928092534f68810a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:e8:a1:6a:5e:4e:ef:a7:60:6e:11:56:b6:
25:83:7f:71:df:d1:1b:f3:89:d8:45:e5:a6:ad:ed:
a9:74:47:57:09:04:6b:3b:fb:3e:9a:69:f9:0f:3c:
b6:92:dc:96:d2:6c:0f:ce:9c:26:c1:f5:45:8b:2a:
19:a2:f9:a3:56:dd:b2:b2:2a:5a:ac:ae:7b:7b:8c:
f8:94:b7:11:1f:9f:70:61:87:88:c5:b9:df:04:9f:
0c:a2:24:2a:3a:99:eb:27:84:32:31:5a:f1:a0:aa:
03:a4:77:45:ad:3e:83:b0:7b:29:8c:b2:82:a6:9f:
3b:e2:43:c4:7c:b2:c4:42:1a:f8:da:7b:bf:13:24:
11:5f:55:d2:d2:cc:ec:75:0a:b4:e0:5d:73:72:4e:
a2:24:29:71:68:b1:01:30:8c:7e:7e:0a:3d:f4:3e:
59:6a:a7:64:50:8b:a6:f7:c1:d1:b6:dd:8d:69:04:
f7:1d:e4:66:b5:f4:8a:77:1b:d6:56:eb:ac:5a:41:
67:ff:78:80:af:17:dd:2e:ea:8c:53:4a:9e:f3:aa:
d1:2d:3b:eb:bb:71:c4:3b:12:e2:98:c0:65:9d:35:
a6:e9:e1:46:69:a9:76:37:70:cf:86:15:e7:07:89:
a0:23:36:14:4f:46:81:e8:87:f9:7c:b7:b2:1c:55:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3A:02:07:39:FC:54:6C:53:C2:A1:1C:92:80:92:53:4F:68:81:0A
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/AToCBzn8VGxTwqEckoCSU09ogQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.34.0/23
5.172.39.0/24
89.23.65.0/24
89.23.67.0-89.23.71.255
89.23.74.0/23
89.23.77.0-89.23.79.255
89.23.83.0-89.23.84.255
89.23.86.0/24
89.23.88.0/24
89.23.90.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0/20
109.111.243.0-109.111.250.255
109.111.252.0-109.111.254.255
178.254.128.0-178.254.146.255
178.254.148.0/23
178.254.151.0-178.254.159.255
178.254.163.0/24
178.254.165.0/24
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.183.0-178.254.184.255
178.254.187.0-178.254.191.255
185.157.44.0/24
193.104.68.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
77:93:90:5e:80:cc:80:81:3b:12:ca:39:d5:66:99:b9:1c:63:
70:9d:b5:28:e9:d7:d0:4c:a8:da:6a:bd:ec:5c:9c:56:a8:75:
7a:8d:db:76:df:7d:a0:55:29:32:24:00:83:0b:19:53:b7:7f:
91:ad:6c:b2:b7:eb:bf:14:52:28:98:76:ad:61:90:96:9a:19:
5b:72:9e:39:87:82:6e:52:1f:b6:77:1d:dd:04:ac:70:09:21:
35:dd:db:9f:ae:12:8a:48:8c:80:8c:c5:a2:4b:33:d8:f2:76:
14:bf:5e:83:e3:95:36:5e:95:78:3c:d7:a5:33:6f:ed:bb:ec:
f6:e0:fb:27:7d:23:2f:19:51:16:57:a2:cf:98:ef:24:50:10:
40:1e:1d:0d:f6:d0:a8:f3:f3:a5:81:3a:a3:55:05:27:b0:16:
63:e2:19:85:44:57:fb:2c:cb:96:d3:76:c7:b0:fe:1e:2e:34:
c0:e9:35:ed:e7:d4:e9:63:4b:d9:8f:7b:72:24:a0:5d:de:d0:
b7:76:ed:8c:03:28:8a:2b:09:14:58:9c:2e:93:1a:73:06:b0:
58:b3:66:27:4b:50:10:05:33:b0:89:ec:cc:dd:c1:d0:31:75:
d3:6c:8e:28:85:46:ff:99:7c:3a:d0:71:9a:c3:e6:a2:a4:37:
35:df:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:29:55 2026 by rpki-client