Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/4aqts161m7bjC7JqkpsgEBrvncM.roa
File: 4aqts161m7bjC7JqkpsgEBrvncM.roa (raw, json)
Hash identifier: 3ec5bPETyQQklPcIMQ7AnZ08cLAbEY6yJy+Xvbf6zVs=
Subject key identifier: E1:AA:AD:B3:5E:B5:9B:B6:E3:0B:B2:6A:92:9B:20:10:1A:EF:9D:C3
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 019EEF079E10E4947337481025DAB0B6FD00
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/4aqts161m7bjC7JqkpsgEBrvncM.roa
Signing time: Mon 22 Jun 2026 11:11:54 +0000
ROA not before: Mon 22 Jun 2026 11:11:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203
IP address blocks: 5.134.208.0/21 maxlen: 21
5.134.208.0/24 maxlen: 24
5.134.209.0/24 maxlen: 24
5.134.210.0/24 maxlen: 24
5.134.211.0/24 maxlen: 24
5.134.212.0/24 maxlen: 24
5.134.213.0/24 maxlen: 24
5.134.214.0/24 maxlen: 24
5.134.215.0/24 maxlen: 24
91.194.188.0/23 maxlen: 23
91.194.188.0/24 maxlen: 24
91.194.189.0/24 maxlen: 24
91.207.14.0/23 maxlen: 23
91.207.14.0/24 maxlen: 24
91.207.15.0/24 maxlen: 24
178.21.152.0/21 maxlen: 21
178.21.152.0/24 maxlen: 24
178.21.153.0/24 maxlen: 24
178.21.154.0/24 maxlen: 24
178.21.155.0/24 maxlen: 24
178.21.156.0/24 maxlen: 24
178.21.157.0/24 maxlen: 24
185.31.24.0/22 maxlen: 22
185.31.24.0/24 maxlen: 24
185.31.25.0/24 maxlen: 24
185.31.26.0/24 maxlen: 24
185.31.27.0/24 maxlen: 24
193.23.48.0/24 maxlen: 24
193.203.222.0/23 maxlen: 23
193.203.222.0/24 maxlen: 24
193.203.223.0/24 maxlen: 24
194.0.251.0/24 maxlen: 24
2a02:dc8::/30 maxlen: 30
2a02:dc8::/32 maxlen: 32
2a02:dc8:20::/48 maxlen: 48
2a02:dc8:22::/48 maxlen: 48
2a02:dc8:30::/48 maxlen: 48
2a02:dc8:31::/48 maxlen: 48
2a02:dc8:32::/48 maxlen: 48
2a02:dc8:33::/48 maxlen: 48
2a02:dcc::/32 maxlen: 32
2a02:dcc:20::/48 maxlen: 48
2a02:dcc:22::/48 maxlen: 48
2a02:dcc:30::/48 maxlen: 48
2a02:dcc:31::/48 maxlen: 48
2a02:dcc:32::/48 maxlen: 48
2a02:dcc:33::/48 maxlen: 48
2a02:dcd::/32 maxlen: 32
2a02:dce::/32 maxlen: 32
2a02:dcf::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:07:9e:10:e4:94:73:37:48:10:25:da:b0:b6:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Jun 22 11:11:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1aaadb35eb59bb6e30bb26a929b20101aef9dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:a6:24:cc:18:fc:9f:ea:92:0d:08:0d:39:
fa:6d:0f:bd:93:e8:b8:10:79:ba:87:60:3b:51:10:
53:55:b7:93:a1:f8:cc:c9:a3:d9:65:ed:ea:c0:47:
7e:aa:d1:41:a2:01:d9:98:97:c8:4b:d5:5d:2f:02:
33:96:72:61:51:0e:c8:84:62:ed:1f:80:6c:44:c1:
cf:27:82:64:61:21:6d:2e:4a:f1:1d:9d:db:5c:d8:
47:cf:59:04:ad:82:2c:2a:aa:44:98:79:7c:5e:6a:
a6:d6:8f:fe:f7:ef:38:50:b8:8c:dd:af:f0:d4:ec:
ba:04:c4:0a:c2:f4:10:8a:b9:a6:24:57:1d:be:f7:
bf:0b:7f:60:82:ea:cc:92:da:1b:f5:02:89:06:2d:
76:14:c0:99:95:eb:a9:0d:9e:87:89:03:1c:bb:36:
3b:ab:c1:60:15:1d:e6:40:30:bb:31:6d:2e:f4:70:
18:9c:95:f7:65:b8:f8:ca:26:54:d7:8b:e8:07:0e:
44:ef:16:68:02:5f:c1:f6:63:74:db:e4:5e:5b:bb:
d2:43:a6:8d:de:92:48:3f:79:01:79:44:67:ef:6e:
e1:e0:e4:3d:63:0c:ee:c5:a9:ab:c4:66:32:7c:81:
ab:8e:bd:ec:3c:78:89:68:29:a2:99:99:68:a9:cb:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:AD:B3:5E:B5:9B:B6:E3:0B:B2:6A:92:9B:20:10:1A:EF:9D:C3
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/4aqts161m7bjC7JqkpsgEBrvncM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.208.0/21
91.194.188.0/23
91.207.14.0/23
178.21.152.0/21
185.31.24.0/22
193.23.48.0/24
193.203.222.0/23
194.0.251.0/24
IPv6:
2a02:dc8::/29
Signature Algorithm: sha256WithRSAEncryption
15:7d:3e:13:9b:70:b8:dc:52:01:54:a2:76:9b:90:95:4a:77:
1b:8f:76:c3:a9:fc:1c:f1:74:b1:83:74:f1:ad:7f:8d:5c:1d:
a8:03:f2:82:43:f5:cd:03:7c:29:21:a3:74:13:be:0b:fc:11:
1d:48:85:17:d0:d5:85:8c:fe:21:bf:54:a6:9b:8f:cc:b5:df:
50:09:7f:d3:c1:cf:66:a3:24:c5:e9:51:7b:c5:05:8a:a6:ea:
1a:0d:74:d8:dc:ba:30:58:cf:c3:b0:0a:58:e3:e0:54:8f:b4:
b0:63:cf:c6:c1:5c:77:64:34:eb:3e:f7:12:96:4d:9f:b3:c6:
d9:b9:34:0f:29:49:fc:1e:29:ff:62:92:d0:f8:34:8c:f3:b8:
7c:f0:e5:1b:a4:41:a3:9a:ac:32:56:89:e4:fa:42:09:e7:0e:
21:46:22:70:6a:47:bb:3d:98:10:f0:6e:59:52:a0:ee:53:44:
7a:36:7b:12:eb:ad:6e:38:fe:ff:bf:b1:2b:15:7f:e8:54:d1:
b8:01:23:1c:9e:79:89:9c:05:d1:bc:6c:14:5b:7b:01:94:83:
b0:81:f0:02:39:c4:62:83:0d:92:66:a6:be:c3:75:62:37:8e:
e8:61:61:22:d9:18:ad:68:a2:cb:b8:2d:43:d6:a5:79:dc:3e:
ed:ce:89:9c
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZ7vB54Q5JRzN0gQJdqwtv0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOWIwOTMxMTE4ZjA4YmY0YTM0YjNlMDUyZmQ4ZjhhNWMx
ZWNhYjAwHhcNMjYwNjIyMTExMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWFhYWRiMzVlYjU5YmI2ZTMwYmIyNmE5MjliMjAxMDFhZWY5ZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBmmJMwY/J/qkg0IDTn6bQ+9k+i4
EHm6h2A7URBTVbeTofjMyaPZZe3qwEd+qtFBogHZmJfIS9VdLwIzlnJhUQ7IhGLt
H4BsRMHPJ4JkYSFtLkrxHZ3bXNhHz1kErYIsKqpEmHl8Xmqm1o/+9+84ULiM3a/w
1Oy6BMQKwvQQirmmJFcdvve/C39ggurMktob9QKJBi12FMCZleupDZ6HiQMcuzY7
q8FgFR3mQDC7MW0u9HAYnJX3Zbj4yiZU14voBw5E7xZoAl/B9mN02+ReW7vSQ6aN
3pJIP3kBeURn727h4OQ9YwzuxamrxGYyfIGrjr3sPHiJaCmimZloqcvNYQIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFOGqrbNetZu24wuyapKbIBAa753DMB8GA1UdIwQY
MBaAFOybCTERjwi/SjSz4FL9j4pcHsqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pzSk1SR1BDTDlLTkxQZ1V2MlBpbHdleXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNzc2YTItNWU4OS00ZTJjLTkzNzAt
NWIzMDRlZWMwMDI1LzEvNGFxdHMxNjFtN2JqQzdKcWtwc2dFQnJ2bmNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNzc2YTItNWU4OS00ZTJjLTkzNzAtNWIzMDRlZWMwMDI1
LzEvN0pzSk1SR1BDTDlLTkxQZ1V2MlBpbHdleXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDBYbQAwQB
W8K8AwQBW88OAwQDshWYAwQCuR8YAwQAwRcwAwQBwcveAwQAwgD7MA0EAgACMAcD
BQMqAg3IMA0GCSqGSIb3DQEBCwUAA4IBAQAVfT4Tm3C43FIBVKJ2m5CVSncbj3bD
qfwc8XSxg3TxrX+NXB2oA/KCQ/XNA3wpIaN0E74L/BEdSIUX0NWFjP4hv1Smm4/M
td9QCX/Twc9moyTF6VF7xQWKpuoaDXTY3LowWM/DsApY4+BUj7SwY8/GwVx3ZDTr
PvcSlk2fs8bZuTQPKUn8Hin/YpLQ+DSM87h88OUbpEGjmqwyVonk+kIJ5w4hRiJw
ake7PZgQ8G5ZUqDuU0R6NnsS661uOP7/v7ErFX/oVNG4ASMcnnmJnAXRvGwUW3sB
lIOwgfACOcRigw2SZqa+w3ViN47oYWEi2RitaKLLuC1D1qV53D7tzomc
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:19 2026 by rpki-client