Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/V60xm55bKqFPcu-h_0JHA7Asb0A.roa
File: V60xm55bKqFPcu-h_0JHA7Asb0A.roa (raw, json)
Hash identifier: g8xN/mh3cPyF9CJAnnrgib5hIee5F/omtjDIk+vR+8Q=
Subject key identifier: 57:AD:31:9B:9E:5B:2A:A1:4F:72:EF:A1:FF:42:47:03:B0:2C:6F:40
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A1B278E16189E06D209FBF19EA8808E8C2
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/V60xm55bKqFPcu-h_0JHA7Asb0A.roa
Signing time: Fri 06 Nov 2026 20:07:08 +0000
ROA not before: Fri 06 Nov 2026 20:07:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 5.183.253.0/24 maxlen: 24
45.10.164.0/24 maxlen: 24
45.10.165.0/24 maxlen: 24
45.10.166.0/24 maxlen: 24
45.132.185.0/24 maxlen: 24
45.138.100.0/24 maxlen: 24
45.138.101.0/24 maxlen: 24
45.138.102.0/24 maxlen: 24
45.138.103.0/24 maxlen: 24
45.148.125.0/24 maxlen: 24
45.148.127.0/24 maxlen: 24
45.151.233.0/24 maxlen: 24
46.21.80.0/24 maxlen: 24
46.21.81.0/24 maxlen: 24
46.21.82.0/24 maxlen: 24
46.21.83.0/24 maxlen: 24
83.171.224.0/24 maxlen: 24
83.171.225.0/24 maxlen: 24
83.171.226.0/24 maxlen: 24
83.171.227.0/24 maxlen: 24
92.118.168.0/24 maxlen: 24
92.118.169.0/24 maxlen: 24
92.118.170.0/24 maxlen: 24
93.177.116.0/24 maxlen: 24
93.177.117.0/24 maxlen: 24
95.81.73.0/24 maxlen: 24
109.122.194.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
141.98.84.0/24 maxlen: 24
141.98.85.0/24 maxlen: 24
141.98.86.0/24 maxlen: 24
141.98.87.0/24 maxlen: 24
147.78.181.0/24 maxlen: 24
185.58.115.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
185.68.185.0/24 maxlen: 24
185.68.246.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
185.77.221.0/24 maxlen: 24
185.79.138.0/24 maxlen: 24
185.79.139.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
185.88.37.0/24 maxlen: 24
185.88.101.0/24 maxlen: 24
185.95.231.0/24 maxlen: 24
185.112.56.0/24 maxlen: 24
185.112.57.0/24 maxlen: 24
185.113.138.0/24 maxlen: 24
185.113.139.0/24 maxlen: 24
185.175.225.0/24 maxlen: 24
193.221.203.0/24 maxlen: 24
194.104.9.0/24 maxlen: 24
194.104.10.0/24 maxlen: 24
213.108.1.0/24 maxlen: 24
213.108.2.0/24 maxlen: 24
213.108.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b2:78:e1:61:89:e0:6d:20:9f:bf:19:ea:88:08:e8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Nov 6 20:07:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57ad319b9e5b2aa14f72efa1ff424703b02c6f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:0c:1d:b7:a4:89:dd:e1:f9:2c:7c:13:bc:
7d:42:51:2b:c5:58:12:d6:5a:03:cc:c7:59:15:06:
9a:52:c3:50:6f:81:39:fe:98:d7:f5:d0:d0:58:ab:
b8:67:53:13:5d:86:14:69:e8:ba:db:37:69:c0:e1:
d4:e1:62:c8:74:c0:38:d1:72:53:3b:43:12:ec:4b:
fb:d4:54:97:16:10:b7:52:5c:aa:8a:fd:70:4f:46:
f5:6b:dc:dd:0b:f0:0d:b5:50:b6:3d:ca:db:75:88:
fd:5e:78:16:18:cb:0e:ba:b7:a8:2e:84:d7:9b:9e:
87:34:96:4e:d0:36:e4:4d:01:77:f7:70:82:9d:1a:
93:3a:84:04:29:a4:61:ed:10:b2:25:08:b8:01:12:
5f:a6:57:5c:a0:46:f3:be:2e:6e:59:16:33:f2:14:
ee:19:28:82:a4:08:bb:ed:b6:1c:40:d5:2e:84:86:
18:3f:9f:25:34:39:09:f9:02:61:51:a8:ba:75:e3:
3b:bc:f4:09:22:22:1a:59:dc:ef:0d:d5:88:7b:95:
d5:34:ee:78:f9:27:a4:4d:f1:11:0b:c9:fb:da:60:
08:86:88:56:b7:0a:bb:a0:89:8e:07:2d:4a:36:ad:
d7:bc:00:52:7f:f6:97:a4:a3:64:1a:28:f7:4f:a2:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AD:31:9B:9E:5B:2A:A1:4F:72:EF:A1:FF:42:47:03:B0:2C:6F:40
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/V60xm55bKqFPcu-h_0JHA7Asb0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.253.0/24
45.10.164.0-45.10.166.255
45.132.185.0/24
45.138.100.0/22
45.148.125.0/24
45.148.127.0/24
45.151.233.0/24
46.21.80.0/22
83.171.224.0/22
92.118.168.0-92.118.170.255
93.177.116.0/23
95.81.73.0/24
109.122.194.0/23
141.98.84.0/22
147.78.181.0/24
185.58.115.0/24
185.68.184.0/23
185.68.246.0/23
185.77.221.0/24
185.79.138.0/23
185.88.36.0/23
185.88.101.0/24
185.95.231.0/24
185.112.56.0/23
185.113.138.0/23
185.175.225.0/24
193.221.203.0/24
194.104.9.0-194.104.10.255
213.108.1.0-213.108.3.255
Signature Algorithm: sha256WithRSAEncryption
82:01:d8:10:a4:ac:1b:99:cd:c9:1f:ee:0f:95:3e:d3:86:77:
f6:aa:3a:3e:fa:70:52:8f:cc:3d:49:f0:bf:e5:e6:81:cf:4b:
bc:81:35:bc:d6:ea:74:f2:d5:62:04:cf:a2:38:0f:16:f9:aa:
08:14:a0:ac:da:23:45:20:8b:60:7d:ef:9f:24:86:d8:0c:75:
4f:70:b3:ea:a0:6f:b2:d3:3f:f1:59:1e:15:fd:c4:37:15:f2:
ea:17:e2:83:db:ce:0f:d6:6e:99:cb:a5:46:6a:54:2e:e2:e9:
84:01:df:4a:c4:7d:9e:7f:74:ba:ed:68:8e:c8:6e:f4:8e:8e:
64:19:08:e5:1f:4d:5e:9d:62:a8:b4:ac:83:9f:07:ef:9a:fa:
2d:8e:7d:eb:7a:85:9a:d7:06:a4:36:41:c0:ed:43:72:f6:a1:
14:a6:de:62:5a:1e:12:71:58:56:66:28:8e:12:79:f8:12:ca:
02:cb:8b:2b:a1:d4:07:89:89:f4:82:5e:26:7e:1c:bd:f4:54:
76:24:a4:0d:a8:1e:33:26:62:73:8e:2a:8d:64:20:aa:10:5f:
e9:3e:4e:4f:69:c1:0f:c0:68:96:7e:3b:86:9c:ac:19:40:bf:
5d:5c:b3:3e:02:e5:fb:3c:ff:8b:ef:9c:7d:ac:26:4f:cd:a5:
46:ea:86:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:16 2026 by rpki-client