Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/DrIlC2gAjiHMS5PxVbexip4Yu4Y.roa
File: DrIlC2gAjiHMS5PxVbexip4Yu4Y.roa (raw, json)
Hash identifier: SgZUep6gaG10ZpC2hI1Q2bopt3f37k+OuHhh+4P/NqE=
Subject key identifier: 0E:B2:25:0B:68:00:8E:21:CC:4B:93:F1:55:B7:B1:8A:9E:18:BB:86
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 019D063378AC1E576454EF831DFB063CC3FB
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/DrIlC2gAjiHMS5PxVbexip4Yu4Y.roa
Signing time: Thu 19 Mar 2026 13:05:29 +0000
ROA not before: Thu 19 Mar 2026 13:05:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59588
IP address blocks: 5.252.132.0/22 maxlen: 24
5.252.135.0/24 maxlen: 24
45.153.116.0/23 maxlen: 23
45.153.116.0/24 maxlen: 24
45.153.117.0/24 maxlen: 24
45.153.118.0/23 maxlen: 23
45.153.118.0/24 maxlen: 24
45.153.119.0/24 maxlen: 24
151.236.160.0/23 maxlen: 23
151.236.160.0/24 maxlen: 24
151.236.161.0/24 maxlen: 24
151.236.162.0/23 maxlen: 23
151.236.162.0/24 maxlen: 24
151.236.163.0/24 maxlen: 24
151.236.164.0/23 maxlen: 23
151.236.164.0/24 maxlen: 24
151.236.165.0/24 maxlen: 24
151.236.166.0/23 maxlen: 23
151.236.166.0/24 maxlen: 24
151.236.167.0/24 maxlen: 24
151.236.168.0/23 maxlen: 23
151.236.168.0/24 maxlen: 24
151.236.169.0/24 maxlen: 24
151.236.170.0/23 maxlen: 23
151.236.170.0/24 maxlen: 24
151.236.171.0/24 maxlen: 24
151.236.172.0/23 maxlen: 23
151.236.172.0/24 maxlen: 24
151.236.173.0/24 maxlen: 24
151.236.174.0/23 maxlen: 23
151.236.174.0/24 maxlen: 24
151.236.175.0/24 maxlen: 24
151.236.176.0/23 maxlen: 23
151.236.176.0/24 maxlen: 24
151.236.177.0/24 maxlen: 24
151.236.178.0/23 maxlen: 23
151.236.178.0/24 maxlen: 24
151.236.179.0/24 maxlen: 24
151.236.180.0/23 maxlen: 23
151.236.180.0/24 maxlen: 24
151.236.181.0/24 maxlen: 24
151.236.182.0/23 maxlen: 24
151.236.182.0/24 maxlen: 24
151.236.183.0/24 maxlen: 24
151.236.186.0/24 maxlen: 24
151.236.188.0/23 maxlen: 23
151.236.188.0/24 maxlen: 24
151.236.189.0/24 maxlen: 24
151.236.190.0/23 maxlen: 23
151.236.190.0/24 maxlen: 24
151.236.191.0/24 maxlen: 24
194.59.28.0/23 maxlen: 24
194.59.28.0/24 maxlen: 24
194.59.29.0/24 maxlen: 24
198.160.164.0/24 maxlen: 24
198.160.165.0/24 maxlen: 24
198.160.166.0/24 maxlen: 24
198.160.167.0/24 maxlen: 24
198.160.168.0/23 maxlen: 23
198.160.168.0/24 maxlen: 24
198.160.169.0/24 maxlen: 24
198.176.116.0/23 maxlen: 23
198.176.116.0/24 maxlen: 24
198.176.117.0/24 maxlen: 24
2a10:2200:1::/48 maxlen: 48
2a10:2200:2::/48 maxlen: 48
2a10:2200:3::/48 maxlen: 48
2a10:2200:4::/48 maxlen: 48
2a10:2200:5::/48 maxlen: 48
2a10:2200:6::/48 maxlen: 48
2a10:2200:7::/48 maxlen: 48
2a10:2200:8::/48 maxlen: 48
2a10:2200:b::/48 maxlen: 48
2a10:2200:c::/48 maxlen: 48
2a10:2200:d::/48 maxlen: 48
2a10:2200:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:33:78:ac:1e:57:64:54:ef:83:1d:fb:06:3c:c3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Mar 19 13:05:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eb2250b68008e21cc4b93f155b7b18a9e18bb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:40:1c:8c:f8:2d:f5:84:ed:51:62:a5:5c:
c1:af:de:e2:3f:d2:ad:91:77:80:fc:1e:26:cc:05:
87:86:0e:bb:1a:d4:17:69:1e:02:81:0e:c4:1a:bc:
49:af:74:3a:2e:d5:5b:1c:c9:64:4e:c9:f3:24:1a:
93:c5:5d:64:e6:79:cd:e5:bb:a2:9e:ef:b1:90:bf:
98:b0:12:d7:1b:f5:31:3d:eb:84:c2:60:36:95:11:
93:3d:45:a8:02:06:fb:51:e0:9a:86:b0:7d:e4:0d:
8b:d9:36:77:28:30:77:90:26:71:2e:3f:85:07:ca:
c2:41:78:68:db:8a:2a:73:78:4a:30:55:86:7b:88:
6b:5a:77:88:4e:e4:97:f2:c6:e9:94:46:ed:4a:d6:
c3:4a:d9:af:02:90:5e:f4:25:7b:2f:61:15:b0:2f:
53:f2:30:6e:98:e5:8a:fa:59:51:4e:da:86:4d:ba:
5f:3e:ba:ce:3b:8f:ad:cc:28:be:84:8f:a1:fa:01:
10:dc:a1:19:47:60:a6:60:ea:bd:d9:9d:3c:5b:18:
ac:5b:c7:cf:4e:c0:78:9e:16:b1:a0:02:f6:1f:54:
74:1d:f5:1e:ac:51:43:cd:dc:71:cd:4e:50:b4:7d:
7d:2f:52:5f:59:7d:19:4f:c8:cf:4c:51:06:bc:2f:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B2:25:0B:68:00:8E:21:CC:4B:93:F1:55:B7:B1:8A:9E:18:BB:86
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/DrIlC2gAjiHMS5PxVbexip4Yu4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.153.116.0/22
151.236.160.0-151.236.183.255
151.236.186.0/24
151.236.188.0/22
194.59.28.0/23
198.160.164.0-198.160.169.255
198.176.116.0/23
IPv6:
2a10:2200:1::-2a10:2200:8:ffff:ffff:ffff:ffff:ffff
2a10:2200:b::-2a10:2200:d:ffff:ffff:ffff:ffff:ffff
2a10:2200:f::/48
Signature Algorithm: sha256WithRSAEncryption
11:a3:40:db:35:17:9e:39:bd:2e:1e:b9:ba:d9:c2:bb:78:63:
8f:1a:9e:77:db:d5:e3:6f:05:2f:4e:76:ad:20:8c:ed:c2:37:
00:92:d9:79:1a:3f:90:8c:d3:32:02:08:05:c6:ee:b2:26:d2:
ea:66:e3:9f:d0:f3:e5:11:ac:03:c1:20:02:d3:a1:b1:ca:b4:
94:fa:50:cb:22:51:a5:91:8f:1e:9c:c0:99:78:f8:7a:f2:26:
d1:c3:b2:4b:62:f9:15:f6:61:8a:99:8b:d2:9c:ca:13:6b:8f:
96:53:60:18:c4:20:ab:f3:08:38:f7:36:47:40:4f:c4:b9:35:
6b:43:d3:93:ac:f9:f6:9f:a8:8c:4b:de:fb:36:d5:b3:f4:44:
df:2e:2b:c2:74:38:04:83:23:fe:b6:32:08:13:10:f9:5c:64:
0e:f1:43:f2:9a:13:b2:1d:41:15:b4:da:c1:b8:eb:7c:3b:25:
e6:dd:69:5d:da:1a:f9:47:61:93:d0:4b:77:dc:4d:d1:9e:db:
c5:32:3f:9e:de:39:38:01:20:a4:cc:6f:cb:cd:c3:45:02:50:
69:25:37:50:60:67:30:c3:66:34:3f:8f:f7:25:0f:1d:c0:3c:
08:8d:01:3f:18:39:f8:1e:d2:dc:06:ce:1f:47:20:46:59:74:
2a:c7:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:19:07 2026 by rpki-client