Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/oyIqohxC2y3rvRg6QPCsx91o03U.roa
File: oyIqohxC2y3rvRg6QPCsx91o03U.roa (raw, json)
Hash identifier: ZmO9aPa5rKIwE8XElV0NF7ALbzeZA2ZqKUS5cy7JHt8=
Subject key identifier: A3:22:2A:A2:1C:42:DB:2D:EB:BD:18:3A:40:F0:AC:C7:DD:68:D3:75
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019CF072523FD10B41A68A260FCB24B802FC
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/oyIqohxC2y3rvRg6QPCsx91o03U.roa
Signing time: Sun 15 Mar 2026 07:42:29 +0000
ROA not before: Sun 15 Mar 2026 07:42:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.110.0/23 maxlen: 23
185.42.26.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
193.150.70.0/24 maxlen: 24
194.26.210.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:72:52:3f:d1:0b:41:a6:8a:26:0f:cb:24:b8:02:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Mar 15 07:42:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3222aa21c42db2debbd183a40f0acc7dd68d375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:e7:4b:61:7b:a8:2b:4a:31:e2:87:05:33:
98:0e:60:ca:07:50:80:97:0f:c2:85:f1:45:a0:37:
32:04:37:92:d4:5f:f9:44:60:f5:5b:20:9f:f5:9e:
ac:e4:c9:54:3c:36:e4:ea:40:d1:dc:66:e2:ba:d5:
cb:90:f2:b2:7c:df:a3:92:79:be:93:07:c0:32:b5:
0f:a2:29:1e:e4:9c:b0:41:96:d2:e2:e0:86:b5:4b:
d9:38:82:4a:c5:33:32:29:aa:e9:54:9f:7e:af:ab:
2b:6c:36:d7:a3:27:ac:dc:d8:34:e4:bf:f6:34:57:
9f:fb:d2:32:9c:9e:f8:49:c9:66:47:49:74:0f:c9:
90:a0:ee:95:1d:c4:79:23:c0:71:2c:e3:37:ad:21:
d5:d2:f0:10:d0:51:99:94:40:b4:0e:93:8c:e4:62:
b0:a9:b3:3f:5e:7d:96:c1:e9:d1:40:59:84:d6:b5:
bb:81:60:02:2d:9a:fb:55:4d:5c:c0:1e:75:72:52:
57:8f:3a:ad:73:20:ad:43:50:c3:2b:07:1d:12:bd:
4c:31:49:2b:6a:28:68:7d:16:94:81:37:f3:1a:fa:
d5:fc:02:52:62:01:84:73:c6:b4:95:f0:7d:45:b8:
bc:bf:0a:36:32:6c:90:6b:8f:16:7c:49:68:b3:e3:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:22:2A:A2:1C:42:DB:2D:EB:BD:18:3A:40:F0:AC:C7:DD:68:D3:75
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/oyIqohxC2y3rvRg6QPCsx91o03U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
81.22.193.0/24
83.171.240.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.42.26.0/24
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
193.150.70.0/24
194.26.210.0/24
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
9f:61:e5:8e:67:36:54:d4:b5:07:0b:ff:a7:82:4b:34:9a:8b:
94:49:2a:9b:d5:23:f6:e2:0e:27:c9:4e:34:5a:30:e9:e2:37:
a8:3d:67:bc:72:d1:03:8d:ce:ce:f0:ac:dc:94:eb:61:0d:92:
69:07:63:f2:74:16:7c:a9:d3:9a:70:81:2a:9d:2c:2e:61:fa:
5c:c1:ea:45:86:83:c9:13:1f:1a:68:34:10:56:cb:77:54:c6:
16:ad:44:78:e5:a3:6d:f9:71:dc:95:e3:23:5f:8c:c3:45:56:
9e:b0:3c:d6:4a:20:ee:17:f9:14:35:df:d8:14:cd:fe:fd:ea:
be:e6:e3:3d:a5:65:1d:3d:8f:1e:9b:90:42:88:a6:28:7d:f5:
85:76:7b:00:bc:a1:c1:49:39:aa:84:36:9b:c7:0b:db:fa:b1:
12:ec:a1:27:b4:61:4f:3d:7e:3c:7c:90:e2:22:f6:d6:41:36:
d7:e8:b1:e2:23:04:c4:e3:a3:2a:3a:b2:38:6f:a8:4f:33:05:
b9:ef:18:06:51:40:2b:0a:2a:1f:8f:95:52:2a:9b:0b:48:f1:
cb:55:87:e0:92:e5:af:f8:67:11:4f:03:0e:e5:c2:4c:d2:da:
35:07:9e:0b:c6:da:5b:f3:a5:45:a0:3e:5d:96:20:e9:07:fe:
82:6b:0d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:04 2026 by rpki-client