Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/D-nOivgDEJq8rd7vPKuj8pDOBgk.roa
File: D-nOivgDEJq8rd7vPKuj8pDOBgk.roa (raw, json)
Hash identifier: LETov+Lua4j/yR4BxAv5AEPXeMZW4Mrk93BjXgjlueY=
Subject key identifier: 0F:E9:CE:8A:F8:03:10:9A:BC:AD:DE:EF:3C:AB:A3:F2:90:CE:06:09
Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial: 019F71D1ACA91607232AE66183E45E46371F
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/D-nOivgDEJq8rd7vPKuj8pDOBgk.roa
Signing time: Fri 17 Jul 2026 20:43:14 +0000
ROA not before: Fri 17 Jul 2026 20:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51320
IP address blocks: 83.97.38.0/23 maxlen: 23
89.30.232.0/21 maxlen: 21
91.195.122.0/23 maxlen: 23
93.91.32.0/20 maxlen: 20
93.93.232.0/21 maxlen: 21
95.129.16.0/24 maxlen: 24
95.129.17.0/24 maxlen: 24
95.129.18.0/24 maxlen: 24
95.129.19.0/24 maxlen: 24
95.129.20.0/22 maxlen: 22
109.70.224.0/21 maxlen: 21
178.211.192.0/20 maxlen: 20
178.211.208.0/21 maxlen: 21
178.211.216.0/22 maxlen: 22
178.211.220.0/24 maxlen: 24
178.211.221.0/24 maxlen: 24
178.237.112.0/20 maxlen: 20
185.101.120.0/22 maxlen: 22
185.170.176.0/22 maxlen: 22
185.207.36.0/24 maxlen: 24
193.192.192.0/19 maxlen: 19
194.0.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:d1:ac:a9:16:07:23:2a:e6:61:83:e4:5e:46:37:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Validity
Not Before: Jul 17 20:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fe9ce8af803109abcaddeef3caba3f290ce0609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:f4:ed:60:1e:1f:e3:ea:08:8d:27:e6:8f:
c5:f0:4e:f4:a1:e4:2a:c8:18:da:c9:09:0c:c3:6b:
75:eb:6c:27:e7:96:05:29:d0:53:61:89:aa:b6:eb:
52:9f:e3:d2:7b:7b:b9:a5:62:33:20:ec:70:53:b2:
13:be:7e:df:e4:3f:3d:d0:d0:ac:91:9a:e0:a2:d2:
e0:30:2c:a4:05:2c:78:93:96:0a:c2:8b:c0:70:d9:
aa:68:cc:8f:f9:d7:2e:2d:93:03:10:8a:e2:df:d7:
6b:cb:6a:40:9e:60:1a:2b:2e:90:41:24:86:9c:48:
ef:3a:81:c5:01:5b:9f:48:c8:fe:9d:3d:dc:bc:22:
53:47:33:ce:b9:5b:0d:22:9b:fe:d7:7d:37:d3:f7:
75:78:44:35:fa:58:b9:02:d5:b4:78:92:4e:57:4c:
2f:47:38:12:ed:57:39:93:3f:a9:90:42:3d:65:f2:
fa:f5:4a:5f:7a:0b:60:b0:48:fa:c9:ed:15:25:89:
39:99:4b:68:66:9d:ab:64:43:87:90:8d:e5:5e:e8:
bf:99:b0:fd:6a:de:5c:06:21:80:8d:78:51:f4:e7:
a9:e0:60:42:c1:a5:e8:ef:d2:7d:14:28:eb:70:67:
fa:d9:3f:77:19:c9:72:09:ef:2e:6c:bb:65:80:f6:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E9:CE:8A:F8:03:10:9A:BC:AD:DE:EF:3C:AB:A3:F2:90:CE:06:09
X509v3 Authority Key Identifier:
keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/D-nOivgDEJq8rd7vPKuj8pDOBgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.38.0/23
89.30.232.0/21
91.195.122.0/23
93.91.32.0/20
93.93.232.0/21
95.129.16.0/21
109.70.224.0/21
178.211.192.0-178.211.221.255
178.237.112.0/20
185.101.120.0/22
185.170.176.0/22
185.207.36.0/24
193.192.192.0/19
194.0.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:90:25:c3:5d:d1:37:fb:81:1d:0f:ba:88:d5:20:f2:e8:ad:
e0:d6:64:f9:fe:c3:33:88:49:af:13:b2:9c:05:81:78:3f:82:
ff:fc:cb:52:91:fd:e4:b5:b0:93:0f:bc:bb:d0:c4:24:45:85:
6d:8b:93:1c:1c:58:aa:6a:ab:36:1d:bf:1c:ec:59:c3:78:cd:
fe:27:4f:41:63:2b:01:94:17:7f:3c:8f:8b:a7:ab:31:ad:12:
41:0f:0b:10:25:2a:e2:05:3e:45:5f:e5:9b:69:ef:55:3b:70:
7c:37:76:1a:f6:2a:10:d5:4b:e3:fb:35:c4:56:4d:2f:cc:74:
4f:fa:32:00:81:07:50:d9:fb:70:a1:cd:34:6b:03:cd:84:eb:
6b:39:34:c0:cb:e5:d5:5f:2d:54:67:44:ac:52:f5:eb:9d:db:
f0:1d:c9:90:52:1f:1b:f1:c8:87:d0:78:55:95:c7:25:36:ff:
80:d6:c6:d3:e2:82:98:b6:5e:f0:85:e1:5f:b0:5b:3c:9d:ce:
cc:01:8a:c8:48:b3:b3:3d:0a:a2:84:8e:87:88:8b:b4:17:af:
40:42:17:79:3a:0e:be:53:a1:6a:59:33:b7:6c:5b:70:81:b7:
b9:90:93:90:87:82:05:b3:35:18:30:2c:22:87:48:8b:79:55:
94:cd:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:01:57 2026 by rpki-client