Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1WzEILxW3RnB7Pca4AUFGX5uQT4.roa
File: 1WzEILxW3RnB7Pca4AUFGX5uQT4.roa (raw, json)
Hash identifier: jhUp9SHkt1RQfw+NWLtzi9Ye9n+SkjyzZmVA6ihEMcs=
Subject key identifier: D5:6C:C4:20:BC:56:DD:19:C1:EC:F7:1A:E0:05:05:19:7E:6E:41:3E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1D545A5A29AC5CC2DF860DEBCC9AE3F2A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1WzEILxW3RnB7Pca4AUFGX5uQT4.roa
Signing time: Fri 13 Nov 2026 14:17:53 +0000
ROA not before: Fri 13 Nov 2026 14:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 9.247.49.0/24 maxlen: 24
9.247.55.0/24 maxlen: 24
9.247.57.0/24 maxlen: 24
9.247.59.0/24 maxlen: 24
9.247.61.0/24 maxlen: 24
9.247.68.0/24 maxlen: 24
9.247.69.0/24 maxlen: 24
9.247.73.0/24 maxlen: 24
9.247.75.0/24 maxlen: 24
9.247.76.0/24 maxlen: 24
9.247.85.0/24 maxlen: 24
9.247.87.0/24 maxlen: 24
9.247.93.0/24 maxlen: 24
9.247.94.0/24 maxlen: 24
9.247.95.0/24 maxlen: 24
9.247.97.0/24 maxlen: 24
9.247.99.0/24 maxlen: 24
9.247.101.0/24 maxlen: 24
9.247.105.0/24 maxlen: 24
9.247.106.0/24 maxlen: 24
9.247.108.0/24 maxlen: 24
9.247.114.0/24 maxlen: 24
9.247.116.0/24 maxlen: 24
9.247.117.0/24 maxlen: 24
9.247.120.0/24 maxlen: 24
9.247.123.0/24 maxlen: 24
9.247.125.0/24 maxlen: 24
9.247.129.0/24 maxlen: 24
9.247.130.0/24 maxlen: 24
9.247.137.0/24 maxlen: 24
9.247.152.0/24 maxlen: 24
9.247.153.0/24 maxlen: 24
9.247.154.0/24 maxlen: 24
9.247.156.0/24 maxlen: 24
9.247.161.0/24 maxlen: 24
9.247.162.0/24 maxlen: 24
9.247.163.0/24 maxlen: 24
9.247.170.0/24 maxlen: 24
9.247.176.0/24 maxlen: 24
9.247.182.0/24 maxlen: 24
9.247.198.0/24 maxlen: 24
9.247.203.0/24 maxlen: 24
9.247.205.0/24 maxlen: 24
9.247.207.0/24 maxlen: 24
9.247.208.0/24 maxlen: 24
9.247.211.0/24 maxlen: 24
9.247.214.0/24 maxlen: 24
9.247.216.0/24 maxlen: 24
9.247.219.0/24 maxlen: 24
9.247.220.0/24 maxlen: 24
9.247.232.0/24 maxlen: 24
9.247.242.0/24 maxlen: 24
9.247.254.0/24 maxlen: 24
78.17.254.0/24 maxlen: 24
206.245.147.0/24 maxlen: 24
206.245.150.0/24 maxlen: 24
206.245.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:45:a5:a2:9a:c5:cc:2d:f8:60:de:bc:c9:ae:3f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 13 14:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d56cc420bc56dd19c1ecf71ae00505197e6e413e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:a0:f2:db:7c:a5:d3:a2:b0:54:80:03:b3:
3b:db:6a:5a:fb:a1:ca:a2:3a:1b:9c:e2:be:71:03:
31:3f:7d:27:7c:e6:2b:c4:b7:8a:c1:31:9f:83:f5:
38:e5:b3:8a:d9:04:ce:97:76:54:07:ba:bf:16:9f:
81:6a:16:82:3e:3e:21:a8:de:9d:66:f7:40:9e:8b:
23:47:01:cd:0b:d5:72:b0:b0:2a:c6:57:92:6a:fa:
26:27:59:38:28:6a:ef:5a:cc:39:28:0b:25:3f:67:
f1:a7:ed:fb:f0:36:25:57:3c:1d:a9:10:d6:fc:0e:
ef:f1:ad:df:6e:00:d8:fe:1b:ae:22:88:ff:a3:57:
33:60:c3:a7:90:7e:e0:45:c5:a0:6f:f9:ed:10:cd:
6c:5d:59:7a:f5:78:58:ac:94:6e:20:24:c3:46:36:
78:45:1e:61:ba:04:ed:2b:e6:35:89:95:7f:4f:2f:
5e:63:d5:13:c9:c1:9e:6d:ac:05:39:fd:0d:8d:4c:
bc:2c:ba:4c:25:af:da:f4:bc:c9:84:ce:ca:a4:52:
2f:ef:9b:6c:ec:3e:62:34:ab:70:94:d7:e2:8f:1f:
1b:e9:b6:78:90:c4:94:c8:29:39:c8:b8:3d:76:93:
90:d3:5b:cd:61:9b:08:c3:cb:d8:5d:89:41:8b:74:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:C4:20:BC:56:DD:19:C1:EC:F7:1A:E0:05:05:19:7E:6E:41:3E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1WzEILxW3RnB7Pca4AUFGX5uQT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.49.0/24
9.247.55.0/24
9.247.57.0/24
9.247.59.0/24
9.247.61.0/24
9.247.68.0/23
9.247.73.0/24
9.247.75.0-9.247.76.255
9.247.85.0/24
9.247.87.0/24
9.247.93.0-9.247.95.255
9.247.97.0/24
9.247.99.0/24
9.247.101.0/24
9.247.105.0-9.247.106.255
9.247.108.0/24
9.247.114.0/24
9.247.116.0/23
9.247.120.0/24
9.247.123.0/24
9.247.125.0/24
9.247.129.0-9.247.130.255
9.247.137.0/24
9.247.152.0-9.247.154.255
9.247.156.0/24
9.247.161.0-9.247.163.255
9.247.170.0/24
9.247.176.0/24
9.247.182.0/24
9.247.198.0/24
9.247.203.0/24
9.247.205.0/24
9.247.207.0-9.247.208.255
9.247.211.0/24
9.247.214.0/24
9.247.216.0/24
9.247.219.0-9.247.220.255
9.247.232.0/24
9.247.242.0/24
9.247.254.0/24
78.17.254.0/24
206.245.147.0/24
206.245.150.0/24
206.245.155.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3a:65:cc:4e:35:4e:bb:86:86:5b:7d:b6:da:1b:7c:5e:54:
6f:ef:d9:48:a1:48:a3:9b:8d:3c:5c:29:cf:21:5e:fd:90:36:
77:92:e9:bf:0d:e8:2d:32:8a:dc:9e:60:70:6c:b3:ed:a5:52:
14:45:9e:be:24:3c:cd:47:78:b0:07:ae:cd:00:67:26:60:9b:
47:7d:1b:73:e2:a3:43:8c:54:88:b7:d4:8b:65:94:98:68:aa:
0a:e5:c1:1b:75:2f:f1:bd:44:55:15:04:3e:e1:e8:7a:00:73:
cd:5d:aa:6b:c5:1e:72:a7:ce:7a:6f:45:34:e1:d3:eb:e8:4e:
5c:de:3c:76:af:13:e1:6c:5c:71:27:55:53:8a:e5:46:79:e0:
e7:85:5c:77:95:e9:53:cf:b1:3e:b0:7f:51:96:21:f8:63:a2:
03:d4:e7:74:5d:02:18:13:81:94:a8:da:ad:77:ac:d1:91:60:
be:1a:33:f0:7c:3e:3a:a8:c7:a2:e3:58:4d:52:0a:50:06:22:
05:db:78:3a:a3:fd:af:4c:d5:cd:71:b1:45:91:5f:c8:90:2e:
33:37:9a:21:f5:bb:b1:80:44:96:27:ce:57:65:84:8a:28:c4:
d2:d4:f0:a7:0e:50:6d:d7:b7:c9:ad:b2:60:2f:2b:2f:d0:f9:
51:8c:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:54:09 2026 by rpki-client