Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/1GCrqpDvgJMXy052qbu_oSLPnFU.roa
File: 1GCrqpDvgJMXy052qbu_oSLPnFU.roa (raw, json)
Hash identifier: 1pHDFgiia3UUtdVh9h/Je9C2yB4ej7ArK739R/zzwOg=
Subject key identifier: D4:60:AB:AA:90:EF:80:93:17:CB:4E:76:A9:BB:BF:A1:22:CF:9C:55
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01A0430E0D493B249E464E0B071C08B36EB7
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/1GCrqpDvgJMXy052qbu_oSLPnFU.roa
Signing time: Thu 27 Aug 2026 11:49:49 +0000
ROA not before: Thu 27 Aug 2026 11:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208172
IP address blocks: 72.251.208.0/24 maxlen: 24
72.251.209.0/24 maxlen: 24
72.251.210.0/24 maxlen: 24
72.251.211.0/24 maxlen: 24
72.251.212.0/24 maxlen: 24
72.251.213.0/24 maxlen: 24
72.251.214.0/24 maxlen: 24
72.251.215.0/24 maxlen: 24
72.251.216.0/24 maxlen: 24
72.251.217.0/24 maxlen: 24
72.251.218.0/24 maxlen: 24
72.251.219.0/24 maxlen: 24
72.251.220.0/24 maxlen: 24
72.251.221.0/24 maxlen: 24
72.251.222.0/24 maxlen: 24
81.27.86.0/24 maxlen: 24
134.82.68.0/24 maxlen: 24
134.82.69.0/24 maxlen: 24
134.82.70.0/24 maxlen: 24
134.82.71.0/24 maxlen: 24
134.82.73.0/24 maxlen: 24
134.82.74.0/24 maxlen: 24
134.82.75.0/24 maxlen: 24
134.82.77.0/24 maxlen: 24
134.82.78.0/24 maxlen: 24
134.82.79.0/24 maxlen: 24
153.75.48.0/24 maxlen: 24
153.75.49.0/24 maxlen: 24
153.75.50.0/24 maxlen: 24
153.75.51.0/24 maxlen: 24
153.75.52.0/24 maxlen: 24
153.75.53.0/24 maxlen: 24
159.26.96.0/24 maxlen: 24
159.26.97.0/24 maxlen: 24
159.26.98.0/24 maxlen: 24
159.26.99.0/24 maxlen: 24
159.26.100.0/24 maxlen: 24
159.26.101.0/24 maxlen: 24
159.26.102.0/24 maxlen: 24
159.26.103.0/24 maxlen: 24
159.26.104.0/24 maxlen: 24
159.26.105.0/24 maxlen: 24
159.26.106.0/24 maxlen: 24
159.26.107.0/24 maxlen: 24
159.26.108.0/24 maxlen: 24
159.26.109.0/24 maxlen: 24
159.26.110.0/24 maxlen: 24
159.26.111.0/24 maxlen: 24
159.26.112.0/24 maxlen: 24
159.26.113.0/24 maxlen: 24
159.26.114.0/24 maxlen: 24
159.26.115.0/24 maxlen: 24
159.26.116.0/24 maxlen: 24
159.26.117.0/24 maxlen: 24
159.26.118.0/24 maxlen: 24
159.26.119.0/24 maxlen: 24
159.26.120.0/24 maxlen: 24
159.26.121.0/24 maxlen: 24
159.26.122.0/24 maxlen: 24
159.26.123.0/24 maxlen: 24
159.26.124.0/24 maxlen: 24
159.26.125.0/24 maxlen: 24
159.26.126.0/24 maxlen: 24
159.26.127.0/24 maxlen: 24
205.147.16.0/24 maxlen: 24
205.147.17.0/24 maxlen: 24
205.147.18.0/24 maxlen: 24
205.147.19.0/24 maxlen: 24
205.147.20.0/24 maxlen: 24
205.147.21.0/24 maxlen: 24
205.147.22.0/24 maxlen: 24
205.147.23.0/24 maxlen: 24
205.147.27.0/24 maxlen: 24
205.147.28.0/24 maxlen: 24
205.147.29.0/24 maxlen: 24
205.147.30.0/24 maxlen: 24
205.147.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:0e:0d:49:3b:24:9e:46:4e:0b:07:1c:08:b3:6e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Aug 27 11:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d460abaa90ef809317cb4e76a9bbbfa122cf9c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:b4:0b:2a:f6:32:ff:20:8b:e1:0b:8d:9e:
96:ac:2b:6a:59:39:ff:cd:10:de:41:d6:25:3d:53:
e0:cf:24:03:f1:4d:b4:ed:c1:1c:b3:69:f4:01:b2:
d9:c3:42:9a:28:c9:c1:6f:34:40:3f:e3:b0:68:5a:
7d:a0:97:21:24:13:46:5b:b9:83:c1:0e:eb:b4:84:
59:6d:1e:a5:86:7a:e6:b1:d2:d0:d6:11:ac:4b:79:
97:f6:9c:da:84:c0:cc:fe:c7:b8:fb:a5:92:a3:e4:
17:f7:da:bc:b1:2a:cc:cd:87:73:bc:c9:69:f0:c2:
06:35:91:cc:60:70:d9:01:e1:c6:37:e4:19:83:fd:
74:99:0f:95:50:e6:62:f9:7f:f3:41:e2:c0:2f:13:
1d:10:7a:42:6b:4b:48:be:c7:72:8e:14:87:71:41:
4b:20:4a:7b:57:f2:c5:74:92:e5:6f:8c:65:f6:dc:
7f:1b:fb:3a:36:67:ed:f0:29:cb:60:1b:64:a0:a3:
e8:0a:16:77:c6:72:3a:85:bc:9b:e2:7a:45:cc:65:
fd:59:3f:2a:53:7c:21:b6:27:4d:8b:09:43:9c:f6:
ea:9f:53:14:85:31:74:d0:46:34:96:4f:6e:31:dd:
0b:72:2c:37:8e:84:33:bf:05:d1:c3:b6:e5:a7:92:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:AB:AA:90:EF:80:93:17:CB:4E:76:A9:BB:BF:A1:22:CF:9C:55
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/1GCrqpDvgJMXy052qbu_oSLPnFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.251.208.0-72.251.222.255
81.27.86.0/24
134.82.68.0/22
134.82.73.0-134.82.75.255
134.82.77.0-134.82.79.255
153.75.48.0-153.75.53.255
159.26.96.0/19
205.147.16.0/21
205.147.27.0-205.147.31.255
Signature Algorithm: sha256WithRSAEncryption
72:f4:7d:15:79:9d:6b:6f:d9:13:68:05:ed:66:8e:42:87:3c:
c2:85:4a:62:b3:ae:c7:f8:92:8c:af:c9:69:df:6c:28:2b:e8:
34:50:51:92:46:73:0c:af:17:72:07:d4:f1:2a:77:e6:ef:61:
6f:b2:d2:68:d5:d9:e8:de:61:fa:55:cf:2b:34:7d:f4:7b:9c:
4f:74:55:de:c3:ae:3c:88:0a:4e:5b:b1:ec:df:45:6d:1d:a7:
15:3e:1a:fa:06:a8:9e:6f:6b:22:04:9e:60:0f:7b:88:44:da:
92:08:71:05:99:e6:1b:3b:d3:ca:10:b0:24:09:5a:66:8d:e4:
08:1f:ae:16:38:03:4d:3b:6c:b5:3a:a3:97:0c:1c:0f:62:f4:
ef:ed:2d:a3:bd:62:ed:af:5e:30:f1:3c:4c:d7:3c:cb:be:07:
1b:b6:f2:d7:4d:e7:32:6b:9c:ad:c0:2f:2d:40:07:2d:7f:79:
b6:af:22:9f:16:0b:0a:14:25:d7:68:c2:d5:86:0a:9b:af:f3:
31:72:39:fc:93:bb:17:93:7c:be:29:d9:19:7e:6c:31:f5:29:
19:4c:39:5e:ac:39:f8:0d:17:63:9f:a5:4e:22:55:a3:4b:4d:
8d:a2:a9:8b:71:c5:cf:a9:74:22:32:1e:3b:2e:ef:36:ae:0e:
39:80:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:44:42 2026 by rpki-client