Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/oAz_qgmPXpUJC0wE-EYlqsgjjl4.roa
File: oAz_qgmPXpUJC0wE-EYlqsgjjl4.roa (raw, json)
Hash identifier: 9KMcOlsyfa2MCnYgQs/FkLkRtLKRRYxNA+OnAr4JZMc=
Subject key identifier: A0:0C:FF:AA:09:8F:5E:95:09:0B:4C:04:F8:46:25:AA:C8:23:8E:5E
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 019F8974649823C1D6C422EA1A0445D61437
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/oAz_qgmPXpUJC0wE-EYlqsgjjl4.roa
Signing time: Wed 22 Jul 2026 10:52:14 +0000
ROA not before: Wed 22 Jul 2026 10:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44056
IP address blocks: 31.135.224.0/20 maxlen: 24
31.135.226.0/23 maxlen: 23
31.135.227.0/24 maxlen: 24
31.135.228.0/22 maxlen: 22
31.135.232.0/22 maxlen: 22
31.135.236.0/23 maxlen: 23
31.135.236.0/24 maxlen: 24
46.148.128.0/20 maxlen: 20
46.148.128.0/22 maxlen: 22
46.148.128.0/24 maxlen: 24
46.148.129.0/24 maxlen: 24
46.148.130.0/24 maxlen: 24
46.148.132.0/22 maxlen: 22
46.148.134.0/23 maxlen: 23
46.148.143.0/24 maxlen: 24
83.97.104.0/21 maxlen: 21
91.195.130.0/23 maxlen: 23
91.230.146.0/24 maxlen: 24
91.237.186.0/23 maxlen: 23
91.237.186.0/24 maxlen: 24
91.237.187.0/24 maxlen: 24
109.196.64.0/20 maxlen: 24
109.196.64.0/22 maxlen: 22
109.196.64.0/24 maxlen: 24
109.196.65.0/24 maxlen: 24
109.196.67.0/24 maxlen: 24
109.196.68.0/22 maxlen: 22
109.196.68.0/24 maxlen: 24
109.196.69.0/24 maxlen: 24
109.196.72.0/22 maxlen: 22
109.196.72.0/24 maxlen: 24
109.196.73.0/24 maxlen: 24
109.196.74.0/24 maxlen: 24
109.196.75.0/24 maxlen: 24
109.196.76.0/22 maxlen: 22
109.196.76.0/24 maxlen: 24
109.196.77.0/24 maxlen: 24
109.196.78.0/24 maxlen: 24
109.196.79.0/24 maxlen: 24
176.125.192.0/19 maxlen: 19
176.125.192.0/24 maxlen: 24
176.125.194.0/24 maxlen: 24
176.125.195.0/24 maxlen: 24
176.125.196.0/24 maxlen: 24
195.2.238.0/23 maxlen: 23
195.244.24.0/23 maxlen: 23
195.244.25.0/24 maxlen: 24
2a13:2940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:74:64:98:23:c1:d6:c4:22:ea:1a:04:45:d6:14:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Jul 22 10:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a00cffaa098f5e95090b4c04f84625aac8238e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:d6:52:1f:c9:6f:5a:f8:69:93:24:9e:50:
59:3d:e0:a2:31:1e:28:66:0d:58:e0:66:0b:e0:96:
79:35:33:04:26:a5:4b:3e:82:94:e7:6e:1e:31:2a:
0f:f0:a6:b8:8c:5e:0a:12:e9:7b:99:5b:52:2f:3d:
4a:57:87:f2:b6:46:85:fb:58:e0:9b:84:2c:97:56:
c0:66:3d:60:ec:ce:ae:a9:1f:af:2a:4b:8d:9f:33:
a5:b3:31:d3:a4:4f:29:db:4d:fa:fd:0f:b2:a6:f0:
0a:01:d2:93:30:6b:1f:32:19:ed:db:91:24:62:36:
e5:dd:b7:92:6a:f9:64:35:e8:ef:0e:f6:b6:ec:16:
0f:64:34:6b:88:4c:43:5b:3d:8a:a3:46:fa:a3:4b:
34:c0:67:99:5d:84:3c:6f:08:52:a9:74:aa:08:66:
07:88:6e:3a:61:cb:8c:58:ea:89:7b:af:0d:98:08:
7c:d9:65:9a:d3:14:8f:bd:50:ee:94:1e:40:12:de:
c5:60:2d:e3:10:e1:a8:32:b4:ac:3f:43:83:16:45:
5f:f9:8e:01:7d:22:34:76:b2:83:b6:fc:fd:e3:db:
0f:d5:13:4e:1d:36:51:1d:3e:7d:9b:79:47:1f:b5:
ed:14:46:9c:e2:df:3a:db:03:23:2c:cc:fb:0b:21:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0C:FF:AA:09:8F:5E:95:09:0B:4C:04:F8:46:25:AA:C8:23:8E:5E
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/oAz_qgmPXpUJC0wE-EYlqsgjjl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
91.230.146.0/24
91.237.186.0/23
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
195.244.24.0/23
IPv6:
2a13:2940::/32
Signature Algorithm: sha256WithRSAEncryption
37:f4:73:e1:4b:fa:b8:37:ce:9a:f5:ee:1a:ba:a1:85:5a:cb:
b7:0f:19:74:40:a4:de:97:43:99:19:90:f6:67:15:80:d7:ce:
04:24:e9:de:a6:9c:69:4f:32:20:89:53:a8:7b:c7:12:fa:e1:
36:f6:92:b8:4d:b2:2f:93:37:4e:a6:30:c9:22:2f:bc:d4:27:
c4:de:87:cb:8a:4e:1f:5d:21:cb:e3:67:4e:22:53:aa:4b:0a:
3d:9c:b7:50:65:a5:db:02:a3:e7:d4:b9:3a:b4:91:48:14:6c:
97:3b:e3:cc:83:83:eb:34:ff:60:28:ab:40:d0:f9:19:94:5a:
ce:04:9c:fe:20:2b:4e:ab:b7:63:00:9c:a1:ba:bd:d8:5a:6d:
d0:81:0d:84:65:5f:63:8b:85:e6:be:7e:34:64:ab:ad:d7:af:
ff:54:aa:72:68:ea:f3:8f:cb:59:af:a5:05:33:20:ef:28:f7:
7a:b9:25:b7:4f:30:6e:78:53:f5:a6:e7:68:97:6e:43:87:5c:
b4:9f:6a:f0:c9:aa:75:a4:7f:51:69:f8:d7:d6:3c:25:e3:25:
47:c0:a1:b4:2b:cf:5d:3b:de:9f:d4:ee:34:79:58:34:49:73:
a6:3b:e7:c4:4e:fa:19:41:93:b5:35:57:48:45:e1:df:7b:cf:
a1:91:22:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:44 2026 by rpki-client