Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/qEEOxwTAmF9qKeTUtlXmnvOhJ-M.roa
File: qEEOxwTAmF9qKeTUtlXmnvOhJ-M.roa (raw, json)
Hash identifier: 6CjL1ebv0jplJ192ZJ/4E2ORBgjF6vYbg/+unm9kJhY=
Subject key identifier: A8:41:0E:C7:04:C0:98:5F:6A:29:E4:D4:B6:55:E6:9E:F3:A1:27:E3
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A077C874AC0AEF331B51D599562326BD26
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/qEEOxwTAmF9qKeTUtlXmnvOhJ-M.roa
Signing time: Sun 06 Sep 2026 17:33:40 +0000
ROA not before: Sun 06 Sep 2026 17:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 151.145.128.0/21 maxlen: 21
151.145.136.0/21 maxlen: 21
151.145.144.0/21 maxlen: 21
151.145.152.0/21 maxlen: 21
158.120.48.0/24 maxlen: 24
158.120.50.0/24 maxlen: 24
158.120.52.0/24 maxlen: 24
158.120.54.0/24 maxlen: 24
158.120.56.0/24 maxlen: 24
158.120.58.0/24 maxlen: 24
158.120.60.0/24 maxlen: 24
158.120.62.0/24 maxlen: 24
170.100.148.0/23 maxlen: 23
170.100.150.0/23 maxlen: 23
192.6.66.0/23 maxlen: 23
192.6.172.0/23 maxlen: 23
192.6.174.0/23 maxlen: 23
192.25.180.0/23 maxlen: 23
192.25.182.0/23 maxlen: 23
192.25.200.0/23 maxlen: 23
192.25.208.0/23 maxlen: 23
192.25.210.0/23 maxlen: 23
192.25.232.0/23 maxlen: 23
192.25.244.0/23 maxlen: 23
192.25.246.0/23 maxlen: 23
192.137.24.0/23 maxlen: 23
192.137.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:c8:74:ac:0a:ef:33:1b:51:d5:99:56:23:26:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 6 17:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8410ec704c0985f6a29e4d4b655e69ef3a127e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:ad:44:4d:69:96:22:f2:d4:a1:4c:f5:2f:
79:9f:a0:53:22:0b:b5:d8:9b:86:9e:62:0d:ab:be:
19:09:8b:53:f7:05:a8:f1:06:4e:7b:31:b4:ed:ba:
03:e2:6f:a4:95:8c:53:3b:8d:90:7f:42:73:51:e8:
21:3e:2b:92:78:6a:74:fd:d7:da:df:c7:60:00:35:
14:21:c2:1c:43:0a:bd:1a:25:8e:87:80:15:6b:24:
7f:73:92:17:d7:18:7c:ba:81:4e:c7:62:fa:78:c2:
aa:6e:64:c7:f3:0a:44:01:ea:36:48:01:ec:72:d7:
21:9a:c1:f6:e8:28:d2:e6:6c:c0:ae:07:b0:a9:5e:
83:95:40:37:20:7e:04:c3:c8:14:56:9a:80:47:01:
2e:53:02:47:37:0e:ec:10:ca:51:6d:e7:0b:49:29:
24:85:a5:30:5a:c2:b0:e7:c9:45:4b:4d:3f:ee:7b:
bb:c4:c8:41:15:42:73:ff:92:10:63:0e:09:2c:a2:
12:2d:a7:ff:e5:56:3b:34:c2:b1:1a:28:1b:87:fd:
f8:c9:27:3b:bf:ae:6e:f4:61:ca:f1:68:65:0e:80:
d4:fb:79:6d:17:05:1d:b9:0d:91:42:ce:07:e4:3f:
de:6c:1d:e4:bc:29:45:32:6c:e5:fd:6b:02:97:97:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:0E:C7:04:C0:98:5F:6A:29:E4:D4:B6:55:E6:9E:F3:A1:27:E3
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/qEEOxwTAmF9qKeTUtlXmnvOhJ-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.145.128.0/19
158.120.48.0/24
158.120.50.0/24
158.120.52.0/24
158.120.54.0/24
158.120.56.0/24
158.120.58.0/24
158.120.60.0/24
158.120.62.0/24
170.100.148.0/22
192.6.66.0/23
192.6.172.0/22
192.25.180.0/22
192.25.200.0/23
192.25.208.0/22
192.25.232.0/23
192.25.244.0/22
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
96:64:ca:f9:26:61:89:04:91:0c:72:1e:b7:de:6a:6c:9d:5d:
14:10:ab:5e:42:67:be:ca:54:34:9c:a6:0d:26:f1:d6:a0:b6:
a8:76:c8:f4:ca:fe:b8:d3:81:09:65:38:b6:cc:42:a6:08:a7:
dc:19:21:94:8c:d8:56:12:93:bd:1e:d5:0f:57:cc:12:71:26:
8a:04:34:4e:c4:e3:31:0d:18:45:14:f2:bc:6d:9d:91:2f:a0:
d4:de:43:ae:09:36:89:e3:de:4a:16:26:0f:72:ec:04:94:86:
6e:db:31:c8:54:06:bc:fb:f2:e3:3d:f8:8d:d2:41:7e:6c:59:
86:ff:38:0e:76:db:76:3e:4f:40:7b:36:a1:ea:68:a1:3b:c1:
89:54:0b:6a:72:20:6d:e4:0e:f7:20:89:85:f6:90:3a:eb:d9:
9e:a8:ae:6a:90:44:27:f4:c9:b1:4a:16:7c:b8:0a:29:0c:8c:
c8:10:a2:f1:aa:a0:3f:93:ef:76:eb:9e:61:fc:16:12:c5:18:
d4:4a:41:43:80:82:62:d9:2e:9c:4f:94:12:55:bf:17:f0:cd:
5e:cf:f5:ff:be:47:55:e2:1b:b2:41:67:2d:5b:96:43:ca:f8:
8b:04:d8:8a:a9:c3:6c:7f:37:b4:dd:cd:2d:cb:5b:ba:cd:69:
f9:ef:d5:78
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAaB3yHSsCu8zG1HVmVYjJr0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjYwOTA2MTczMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODQxMGVjNzA0YzA5ODVmNmEyOWU0ZDRiNjU1ZTY5ZWYzYTEyN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7+tRE1pliLy1KFM9S95n6BTIgu1
2JuGnmINq74ZCYtT9wWo8QZOezG07boD4m+klYxTO42Qf0JzUeghPiuSeGp0/dfa
38dgADUUIcIcQwq9GiWOh4AVayR/c5IX1xh8uoFOx2L6eMKqbmTH8wpEAeo2SAHs
ctchmsH26CjS5mzArgewqV6DlUA3IH4Ew8gUVpqARwEuUwJHNw7sEMpRbecLSSkk
haUwWsKw58lFS00/7nu7xMhBFUJz/5IQYw4JLKISLaf/5VY7NMKxGigbh/34ySc7
v65u9GHK8WhlDoDU+3ltFwUduQ2RQs4H5D/ebB3kvClFMmzl/WsCl5f4SwIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFKhBDscEwJhfaink1LZV5p7zoSfjMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvcUVFT3h3VEFtRjlxS2VUVXRsWG1udk9oSi1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBZeRgAME
AJ54MAMEAJ54MgMEAJ54NAMEAJ54NgMEAJ54OAMEAJ54OgMEAJ54PAMEAJ54PgME
AqpklAMEAcAGQgMEAsAGrAMEAsAZtAMEAcAZyAMEAsAZ0AMEAcAZ6AMEAsAZ9AME
AsCJGDANBgkqhkiG9w0BAQsFAAOCAQEAlmTK+SZhiQSRDHIet95qbJ1dFBCrXkJn
vspUNJymDSbx1qC2qHbI9Mr+uNOBCWU4tsxCpgin3BkhlIzYVhKTvR7VD1fMEnEm
igQ0TsTjMQ0YRRTyvG2dkS+g1N5Drgk2iePeShYmD3LsBJSGbtsxyFQGvPvy4z34
jdJBfmxZhv84Dnbbdj5PQHs2oepooTvBiVQLanIgbeQO9yCJhfaQOuvZnqiuapBE
J/TJsUoWfLgKKQyMyBCi8aqgP5PvduueYfwWEsUY1EpBQ4CCYtkunE+UElW/F/DN
Xs/1/75HVeIbskFnLVuWQ8r4iwTYiqnDbH83tN3NLctbus1p+e/VeA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:03:31 2026 by rpki-client