Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/97KVldYgGhap-PIhxg4UP_8vQl4.roa
File: 97KVldYgGhap-PIhxg4UP_8vQl4.roa (raw, json)
Hash identifier: MPC6osU/B0Fn0OYT9dmGK1jI/9UDaNR5q8EKjxqQPPU=
Subject key identifier: F7:B2:95:95:D6:20:1A:16:A9:F8:F2:21:C6:0E:14:3F:FF:2F:42:5E
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 01A0E8F1C6E3E9FB346B1E72799E58175E78
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/97KVldYgGhap-PIhxg4UP_8vQl4.roa
Signing time: Mon 28 Sep 2026 16:55:54 +0000
ROA not before: Mon 28 Sep 2026 16:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21215
IP address blocks: 5.22.160.0/19 maxlen: 24
5.22.166.0/24 maxlen: 24
89.207.192.0/21 maxlen: 21
176.109.136.0/21 maxlen: 21
185.13.8.0/22 maxlen: 22
185.18.12.0/22 maxlen: 22
185.20.36.0/22 maxlen: 22
185.81.60.0/22 maxlen: 22
213.244.208.0/20 maxlen: 20
2a03:dd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f1:c6:e3:e9:fb:34:6b:1e:72:79:9e:58:17:5e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Sep 28 16:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7b29595d6201a16a9f8f221c60e143fff2f425e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:4a:f2:e7:8f:7a:89:62:44:6e:ce:d7:e8:
0e:0a:4d:d7:2a:42:89:de:17:f0:29:69:3a:c3:70:
f1:e9:7f:5e:77:f0:c5:96:3a:75:b8:30:ef:7a:49:
b2:ae:fd:32:c4:35:7f:6f:d2:0f:cf:9e:85:c6:14:
b3:47:76:17:b5:35:03:e0:b1:63:a7:1e:85:fd:3d:
e9:df:19:7d:ed:97:1b:7e:ea:59:d4:9c:d9:05:88:
69:42:e0:20:3c:5c:ea:7b:fe:32:b1:38:f9:64:f8:
55:58:f9:e8:b9:79:b3:51:e5:20:5f:21:19:f1:28:
d2:f4:01:8a:7d:92:4e:60:b8:08:b1:8c:0c:6d:9e:
87:e0:76:31:63:39:cc:c4:3a:35:3f:f9:7b:28:ec:
0f:c2:27:13:ac:32:95:38:e8:41:2d:9f:9c:c2:ba:
96:79:79:43:3f:53:eb:34:b6:ca:40:ae:7e:18:7b:
e6:3b:2b:38:92:70:3c:99:55:74:65:35:97:66:6c:
d7:42:d1:6b:c8:b0:49:81:df:72:ca:0c:81:4c:70:
d0:cf:cf:07:21:69:7c:1d:48:f1:27:fc:e9:9a:e0:
7f:21:2f:b3:ee:56:b4:e1:26:c2:38:ea:4e:45:c3:
bf:f7:92:69:45:56:81:40:c2:0b:95:46:96:ee:97:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B2:95:95:D6:20:1A:16:A9:F8:F2:21:C6:0E:14:3F:FF:2F:42:5E
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/97KVldYgGhap-PIhxg4UP_8vQl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.160.0/19
89.207.192.0/21
176.109.136.0/21
185.13.8.0/22
185.18.12.0/22
185.20.36.0/22
185.81.60.0/22
213.244.208.0/20
IPv6:
2a03:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
03:38:e9:df:82:25:c7:f0:31:9a:b3:92:79:ab:ba:11:86:39:
a3:3a:94:a4:36:31:0b:d7:cb:15:9e:5a:cf:b3:5f:34:ff:b8:
91:8c:1f:84:b6:03:4a:a5:52:a2:b8:74:1f:d0:e7:f2:06:af:
a9:22:88:4d:64:2f:be:3d:22:d4:e2:ba:4c:41:e2:af:cc:d4:
05:bb:dc:57:76:7b:9c:b2:73:76:09:2d:8b:c1:09:e9:4f:f7:
1e:55:39:b3:fe:eb:a7:da:82:1b:ca:ca:8c:f3:20:2b:d7:8a:
f7:db:fd:99:aa:b0:56:48:72:48:aa:eb:71:d0:68:45:7d:e3:
2b:cb:d0:b3:98:9f:06:da:2a:70:71:2f:17:db:40:ec:81:cf:
88:ed:e1:b3:fc:de:05:f2:20:7d:86:36:08:b4:59:2d:0a:eb:
0c:6e:63:61:41:7f:4a:f2:85:c5:fb:ba:64:0a:6a:69:81:32:
dd:b2:bd:de:ca:15:b8:3c:a7:73:99:32:d6:9c:82:bd:92:5c:
ff:58:09:e1:49:aa:93:00:b7:7d:e0:4b:92:5c:04:bc:40:1d:
96:03:40:f4:1b:f3:ac:9d:70:8f:92:98:91:f6:67:b4:cd:ec:
9b:95:c9:04:08:cd:63:fb:d7:71:99:24:0a:fe:85:56:36:66:
87:8f:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:25:21 2026 by rpki-client