Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/exbOLR3rVB0m0wrrFACxlNLVGb4.roa
File: exbOLR3rVB0m0wrrFACxlNLVGb4.roa (raw, json)
Hash identifier: DUDTfoVlGWA+lGtesyvwvR7xj+ryZ5p127nsAoJ3cLA=
Subject key identifier: 7B:16:CE:2D:1D:EB:54:1D:26:D3:0A:EB:14:00:B1:94:D2:D5:19:BE
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0CC8CAFB7A9CAB3B4E9052ABE413888A4
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/exbOLR3rVB0m0wrrFACxlNLVGb4.roa
Signing time: Wed 23 Sep 2026 04:36:07 +0000
ROA not before: Wed 23 Sep 2026 04:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 61.14.224.0/23 maxlen: 24
61.14.227.0/24 maxlen: 24
62.106.64.0/24 maxlen: 24
79.110.176.0/21 maxlen: 24
85.202.172.0/22 maxlen: 24
91.132.84.0/24 maxlen: 32
91.132.87.0/24 maxlen: 32
103.203.40.0/23 maxlen: 24
103.203.43.0/24 maxlen: 24
103.205.84.0/23 maxlen: 24
103.205.86.0/24 maxlen: 24
103.207.161.0/24 maxlen: 24
103.207.162.0/23 maxlen: 24
121.46.124.0/22 maxlen: 24
146.19.82.0/24 maxlen: 24
160.238.96.0/24 maxlen: 24
160.238.99.0/24 maxlen: 24
185.93.4.0/24 maxlen: 24
185.105.10.0/24 maxlen: 24
185.118.132.0/24 maxlen: 24
185.118.135.0/24 maxlen: 24
185.145.44.0/24 maxlen: 24
185.145.46.0/24 maxlen: 24
185.157.232.0/22 maxlen: 24
185.176.89.0/24 maxlen: 24
185.176.90.0/24 maxlen: 24
185.176.91.0/24 maxlen: 24
185.190.59.0/24 maxlen: 24
185.196.24.0/24 maxlen: 24
185.202.44.0/23 maxlen: 24
185.202.47.0/24 maxlen: 24
185.206.20.0/23 maxlen: 24
185.209.128.0/23 maxlen: 24
185.209.130.0/24 maxlen: 24
185.214.140.0/23 maxlen: 24
185.214.142.0/24 maxlen: 24
185.218.185.0/24 maxlen: 24
185.219.21.0/24 maxlen: 32
185.219.22.0/24 maxlen: 32
185.225.12.0/22 maxlen: 24
185.227.254.0/24 maxlen: 24
185.228.44.0/22 maxlen: 24
185.232.42.0/24 maxlen: 24
185.235.120.0/24 maxlen: 24
185.235.122.0/24 maxlen: 24
193.3.16.0/24 maxlen: 24
193.31.115.0/24 maxlen: 24
193.163.35.0/24 maxlen: 24
193.176.116.0/24 maxlen: 24
193.176.118.0/23 maxlen: 24
193.187.180.0/22 maxlen: 24
194.8.134.0/24 maxlen: 24
194.50.192.0/23 maxlen: 24
194.50.195.0/24 maxlen: 24
194.69.161.0/24 maxlen: 24
195.216.150.0/24 maxlen: 32
195.245.74.0/23 maxlen: 24
213.109.157.0/24 maxlen: 24
217.18.56.0/22 maxlen: 24
2a07:4580::/29 maxlen: 29
2a07:4580::/32 maxlen: 48
2a07:4580:b0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:8c:af:b7:a9:ca:b3:b4:e9:05:2a:be:41:38:88:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 23 04:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b16ce2d1deb541d26d30aeb1400b194d2d519be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:4f:11:c5:38:2a:7f:a1:e8:8a:e4:00:89:
e7:d0:7e:f8:f8:48:5a:31:01:7f:7a:a5:29:bb:b5:
31:12:89:6d:be:49:dc:28:bc:78:a9:6c:20:3e:9b:
01:f9:1b:74:09:73:24:e8:33:9b:58:d7:5d:92:33:
91:c7:cb:8d:73:21:7e:37:0e:bb:d1:ff:bd:61:70:
63:aa:ee:16:e7:8b:0f:34:2d:f6:7b:df:72:18:d8:
61:d1:f7:34:81:f9:e1:2e:38:88:45:80:e6:93:26:
87:ac:41:af:f5:cb:7d:0e:7f:b8:3f:59:62:51:e5:
3c:ee:f1:69:8c:c6:6c:33:74:81:b4:5d:28:80:4b:
83:b7:3c:fa:84:70:ce:2b:78:d8:48:ac:bb:ab:d7:
5b:fa:cf:67:b8:ed:d6:64:1f:4c:63:cf:c0:f3:31:
37:2a:06:62:81:cc:34:ac:6c:3d:e3:b4:ae:e5:05:
3e:1e:a8:90:c3:14:bf:66:b0:c0:45:ef:52:4c:69:
cf:26:7c:5b:50:5c:50:4d:50:f1:87:f9:7f:70:ba:
0d:e8:e8:b5:8d:3b:10:2f:3c:9e:83:8a:10:24:ce:
4a:1e:1f:26:8e:6d:16:84:1f:53:e8:f7:c3:d4:41:
55:bd:20:53:05:a5:b1:db:08:9a:91:76:73:0b:24:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:16:CE:2D:1D:EB:54:1D:26:D3:0A:EB:14:00:B1:94:D2:D5:19:BE
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/exbOLR3rVB0m0wrrFACxlNLVGb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.224.0/23
61.14.227.0/24
62.106.64.0/24
79.110.176.0/21
85.202.172.0/22
91.132.84.0/24
91.132.87.0/24
103.203.40.0/23
103.203.43.0/24
103.205.84.0-103.205.86.255
103.207.161.0-103.207.163.255
121.46.124.0/22
146.19.82.0/24
160.238.96.0/24
160.238.99.0/24
185.93.4.0/24
185.105.10.0/24
185.118.132.0/24
185.118.135.0/24
185.145.44.0/24
185.145.46.0/24
185.157.232.0/22
185.176.89.0-185.176.91.255
185.190.59.0/24
185.196.24.0/24
185.202.44.0/23
185.202.47.0/24
185.206.20.0/23
185.209.128.0-185.209.130.255
185.214.140.0-185.214.142.255
185.218.185.0/24
185.219.21.0-185.219.22.255
185.225.12.0/22
185.227.254.0/24
185.228.44.0/22
185.232.42.0/24
185.235.120.0/24
185.235.122.0/24
193.3.16.0/24
193.31.115.0/24
193.163.35.0/24
193.176.116.0/24
193.176.118.0/23
193.187.180.0/22
194.8.134.0/24
194.50.192.0/23
194.50.195.0/24
194.69.161.0/24
195.216.150.0/24
195.245.74.0/23
213.109.157.0/24
217.18.56.0/22
IPv6:
2a07:4580::/29
Signature Algorithm: sha256WithRSAEncryption
3c:6b:9f:89:73:4b:a1:87:b1:90:e7:f7:2b:22:d2:82:a5:ec:
38:08:d3:ff:2f:ea:f0:79:30:3b:80:12:07:16:ff:e8:61:b3:
22:34:02:80:98:2d:3c:1b:e7:23:52:78:8b:bf:47:db:58:33:
8c:c7:f6:f3:60:7f:80:30:0b:a0:74:32:d8:48:9d:24:82:26:
68:1a:a4:7f:ec:e5:a9:2a:11:ca:5b:a1:3a:4f:c3:ce:22:78:
11:94:41:9e:e4:fb:98:37:33:9f:f6:e8:51:54:f8:9d:21:89:
5a:2b:64:8e:0a:c7:33:2c:dd:c3:d9:e2:9c:78:0a:a9:f7:b3:
92:99:d5:9b:0e:74:12:c3:f6:de:b5:5e:55:17:2c:3f:f5:bf:
b7:f1:39:18:36:23:68:4a:3f:fc:13:a6:28:54:31:d8:dc:1d:
cf:67:ba:3f:52:92:4b:4a:a4:6d:f8:9f:4b:22:c8:8f:b0:3f:
7f:0a:13:df:04:f9:7f:8d:28:b8:73:d4:4e:fe:23:bb:d7:c2:
b6:8d:86:51:9c:f5:22:7a:26:a3:d7:a1:90:bd:72:cd:ff:54:
9a:21:7d:db:d0:11:99:c3:1c:53:79:5f:6e:f5:9a:43:cb:40:
ec:3f:74:fc:67:df:c7:73:e1:55:60:f7:99:e5:e6:f6:8b:fe:
0d:bd:8c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:13:33 2026 by rpki-client