Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/exeWXqFDyWpNtfMIHjOHZkzrTh0.roa
File: exeWXqFDyWpNtfMIHjOHZkzrTh0.roa (raw, json)
Hash identifier: QbzSXcZgwn7l0rOV+Hpn4RJSMV2pDRbrJXD9A+LTEsk=
Subject key identifier: 7B:17:96:5E:A1:43:C9:6A:4D:B5:F3:08:1E:33:87:66:4C:EB:4E:1D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1CF19A0D1C222DEF2E701061CB9784EE0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/exeWXqFDyWpNtfMIHjOHZkzrTh0.roa
Signing time: Thu 12 Nov 2026 09:32:05 +0000
ROA not before: Thu 12 Nov 2026 09:32:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 9.247.22.0/24 maxlen: 24
9.247.51.0/24 maxlen: 24
9.247.63.0/24 maxlen: 24
9.247.65.0/24 maxlen: 24
9.247.67.0/24 maxlen: 24
9.247.79.0/24 maxlen: 24
9.247.82.0/24 maxlen: 24
9.247.83.0/24 maxlen: 24
9.247.84.0/24 maxlen: 24
9.247.89.0/24 maxlen: 24
9.247.91.0/24 maxlen: 24
9.247.96.0/24 maxlen: 24
9.247.102.0/24 maxlen: 24
9.247.103.0/24 maxlen: 24
9.247.104.0/24 maxlen: 24
9.247.110.0/24 maxlen: 24
9.247.111.0/24 maxlen: 24
9.247.118.0/24 maxlen: 24
9.247.119.0/24 maxlen: 24
9.247.121.0/24 maxlen: 24
9.247.122.0/24 maxlen: 24
9.247.124.0/24 maxlen: 24
9.247.126.0/24 maxlen: 24
9.247.132.0/24 maxlen: 24
9.247.133.0/24 maxlen: 24
9.247.134.0/24 maxlen: 24
9.247.138.0/24 maxlen: 24
9.247.141.0/24 maxlen: 24
9.247.145.0/24 maxlen: 24
9.247.148.0/24 maxlen: 24
9.247.149.0/24 maxlen: 24
9.247.150.0/24 maxlen: 24
9.247.168.0/24 maxlen: 24
9.247.171.0/24 maxlen: 24
9.247.172.0/24 maxlen: 24
9.247.175.0/24 maxlen: 24
9.247.177.0/24 maxlen: 24
9.247.180.0/24 maxlen: 24
9.247.181.0/24 maxlen: 24
9.247.183.0/24 maxlen: 24
9.247.184.0/24 maxlen: 24
9.247.185.0/24 maxlen: 24
9.247.187.0/24 maxlen: 24
9.247.188.0/24 maxlen: 24
9.247.191.0/24 maxlen: 24
9.247.193.0/24 maxlen: 24
9.247.196.0/24 maxlen: 24
9.247.202.0/24 maxlen: 24
9.247.206.0/24 maxlen: 24
9.247.212.0/24 maxlen: 24
9.247.218.0/24 maxlen: 24
9.247.222.0/24 maxlen: 24
9.247.223.0/24 maxlen: 24
9.247.224.0/24 maxlen: 24
9.247.227.0/24 maxlen: 24
9.247.230.0/24 maxlen: 24
9.247.231.0/24 maxlen: 24
9.247.233.0/24 maxlen: 24
9.247.234.0/24 maxlen: 24
9.247.235.0/24 maxlen: 24
9.247.237.0/24 maxlen: 24
9.247.238.0/24 maxlen: 24
9.247.240.0/24 maxlen: 24
9.247.243.0/24 maxlen: 24
9.247.244.0/24 maxlen: 24
9.247.246.0/24 maxlen: 24
9.247.249.0/24 maxlen: 24
9.247.250.0/24 maxlen: 24
9.247.251.0/24 maxlen: 24
9.247.252.0/24 maxlen: 24
206.245.144.0/24 maxlen: 24
206.245.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:19:a0:d1:c2:22:de:f2:e7:01:06:1c:b9:78:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 12 09:32:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b17965ea143c96a4db5f3081e3387664ceb4e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:97:47:3b:ed:eb:ab:18:20:8a:40:67:09:
30:c7:60:53:5d:1c:6b:31:f7:d4:31:3c:b1:b8:73:
58:7d:92:85:92:58:ed:05:a3:56:3e:5a:40:ba:87:
db:11:4f:c1:83:fc:a4:80:ea:10:6a:cc:c8:2e:06:
0c:6a:c4:00:86:e9:09:24:b9:76:a7:6d:8a:16:68:
3c:18:e6:22:cc:08:2d:8c:e8:2e:21:6e:4f:b4:d1:
d6:07:08:99:9d:75:c9:7d:94:36:0d:de:06:35:df:
03:df:76:1b:4c:f2:d0:f2:86:0c:cf:56:24:8f:d2:
38:72:6f:d0:a3:e2:06:4d:8b:6e:57:b4:3a:b2:db:
9e:43:bc:4f:18:af:8e:3e:22:99:98:1b:81:ce:32:
ed:ff:1c:77:7d:1f:ce:93:20:3f:39:e3:ad:c9:d5:
09:16:f0:bc:f7:5f:f9:b0:cc:44:b1:b2:7d:8e:90:
38:84:81:21:d8:92:77:b2:54:bf:cd:9f:c0:e2:5e:
2a:6b:c7:00:14:42:27:0a:1d:61:bf:93:ec:94:5f:
d8:6e:87:d8:ec:a0:ad:cc:47:e7:4e:1b:1c:be:30:
18:54:cd:b2:98:dc:0f:f5:45:ba:00:d8:c9:6b:bd:
bf:92:f4:7c:7e:ef:7d:f2:29:da:14:59:49:64:ed:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:17:96:5E:A1:43:C9:6A:4D:B5:F3:08:1E:33:87:66:4C:EB:4E:1D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/exeWXqFDyWpNtfMIHjOHZkzrTh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.22.0/24
9.247.51.0/24
9.247.63.0/24
9.247.65.0/24
9.247.67.0/24
9.247.79.0/24
9.247.82.0-9.247.84.255
9.247.89.0/24
9.247.91.0/24
9.247.96.0/24
9.247.102.0-9.247.104.255
9.247.110.0/23
9.247.118.0/23
9.247.121.0-9.247.122.255
9.247.124.0/24
9.247.126.0/24
9.247.132.0-9.247.134.255
9.247.138.0/24
9.247.141.0/24
9.247.145.0/24
9.247.148.0-9.247.150.255
9.247.168.0/24
9.247.171.0-9.247.172.255
9.247.175.0/24
9.247.177.0/24
9.247.180.0/23
9.247.183.0-9.247.185.255
9.247.187.0-9.247.188.255
9.247.191.0/24
9.247.193.0/24
9.247.196.0/24
9.247.202.0/24
9.247.206.0/24
9.247.212.0/24
9.247.218.0/24
9.247.222.0-9.247.224.255
9.247.227.0/24
9.247.230.0/23
9.247.233.0-9.247.235.255
9.247.237.0-9.247.238.255
9.247.240.0/24
9.247.243.0-9.247.244.255
9.247.246.0/24
9.247.249.0-9.247.252.255
206.245.144.0/24
206.245.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:20:4c:59:e0:dc:8e:05:94:73:45:98:99:ca:8b:61:a1:da:
03:2d:4a:a1:34:83:99:69:5d:18:f6:55:af:75:a9:4c:d9:11:
32:e2:16:d9:d8:20:78:eb:a7:76:84:d3:29:d4:9c:cd:ae:0c:
aa:2c:1e:fe:ac:41:b2:b5:33:dd:aa:98:57:99:b4:9c:d1:b5:
63:2d:f3:3f:bb:f0:ec:97:c7:41:5d:06:0b:ba:80:f4:e6:10:
74:a7:7d:e8:51:b5:0f:ff:98:c3:02:86:82:4c:06:ce:75:e7:
50:98:49:75:df:f4:06:34:e9:88:c6:2c:31:58:21:df:63:52:
5e:fb:d1:31:6e:71:72:89:a5:dc:f1:ed:21:2c:26:ed:49:f1:
9d:13:0a:a8:5a:30:d8:6b:7c:65:b1:06:b7:e3:36:6d:4f:b9:
3c:cb:a7:29:28:53:41:35:f3:a3:04:f4:96:5a:2f:eb:b1:7a:
0d:2a:f4:ed:b6:0a:66:09:f1:8e:fd:5c:38:40:ff:26:ce:6d:
01:82:fc:6b:ee:cd:0e:bd:53:6d:bf:93:95:f6:1a:58:a4:8c:
53:5d:9d:a5:7b:c5:cb:f0:19:1c:6d:76:2e:ff:b1:13:9c:83:
c5:89:64:8f:06:9c:97:be:f1:77:1c:53:87:2e:78:be:ab:74:
f2:8a:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:44 2026 by rpki-client