Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/0V4GxVTZ_UZJbCFGcoowx72gsSk.roa
File: 0V4GxVTZ_UZJbCFGcoowx72gsSk.roa (raw, json)
Hash identifier: +f1GKTlxKx4eoIWLLgCpiywfnoF5oARWdeAHQrGsvWo=
Subject key identifier: D1:5E:06:C5:54:D9:FD:46:49:6C:21:46:72:8A:30:C7:BD:A0:B1:29
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 019F8DE2BB38E5DDF0AD489882043CB5BCE7
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/0V4GxVTZ_UZJbCFGcoowx72gsSk.roa
Signing time: Thu 23 Jul 2026 07:31:14 +0000
ROA not before: Thu 23 Jul 2026 07:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6718
IP address blocks: 5.154.224.0/24 maxlen: 24
37.156.37.0/24 maxlen: 24
89.35.4.0/24 maxlen: 24
89.35.5.0/24 maxlen: 24
89.37.186.0/24 maxlen: 24
89.37.187.0/24 maxlen: 24
89.40.133.0/24 maxlen: 24
89.43.240.0/24 maxlen: 24
89.43.241.0/24 maxlen: 24
89.43.242.0/24 maxlen: 24
89.43.243.0/24 maxlen: 24
89.43.244.0/24 maxlen: 24
89.43.245.0/24 maxlen: 24
89.43.246.0/24 maxlen: 24
89.43.247.0/24 maxlen: 24
89.46.24.0/24 maxlen: 24
89.46.25.0/24 maxlen: 24
89.46.26.0/24 maxlen: 24
89.46.27.0/24 maxlen: 24
89.46.28.0/24 maxlen: 24
89.46.29.0/24 maxlen: 24
89.46.30.0/24 maxlen: 24
89.46.31.0/24 maxlen: 24
91.208.75.0/24 maxlen: 24
91.239.230.0/24 maxlen: 24
92.114.88.0/24 maxlen: 24
92.114.89.0/24 maxlen: 24
92.114.90.0/24 maxlen: 24
92.114.91.0/24 maxlen: 24
94.176.186.0/24 maxlen: 24
94.176.187.0/24 maxlen: 24
128.0.34.0/24 maxlen: 24
128.0.36.0/24 maxlen: 24
185.36.252.0/24 maxlen: 24
193.93.142.0/23 maxlen: 23
193.162.136.0/24 maxlen: 24
195.206.164.0/24 maxlen: 24
2a00:ece0::/32 maxlen: 32
2a04:6c80::/32 maxlen: 32
2a04:6c81::/32 maxlen: 32
2a04:6c82::/32 maxlen: 32
2a04:6c83::/32 maxlen: 32
2a04:6c84::/32 maxlen: 32
2a04:6c85::/32 maxlen: 32
2a04:6c86::/32 maxlen: 32
2a04:6c87::/32 maxlen: 32
2a05:1c00::/32 maxlen: 32
2a05:1c01::/32 maxlen: 32
2a05:1c02::/32 maxlen: 32
2a05:1c03::/32 maxlen: 32
2a05:1c04::/32 maxlen: 32
2a05:1c05::/32 maxlen: 32
2a05:1c06::/32 maxlen: 32
2a05:1c07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:e2:bb:38:e5:dd:f0:ad:48:98:82:04:3c:b5:bc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jul 23 07:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d15e06c554d9fd46496c2146728a30c7bda0b129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:bf:57:81:c4:50:72:b5:ab:6d:d3:25:6e:
36:36:5c:5f:72:cb:fd:fe:65:a9:d8:c0:3d:f7:6c:
22:ed:69:db:fb:da:a7:39:56:ef:6d:ac:8e:23:cd:
28:6d:b5:91:75:51:c8:d0:40:90:3a:85:c1:91:3d:
c0:d6:5e:6f:92:04:d7:86:07:89:4a:15:a6:fd:44:
36:b7:4b:20:6c:f5:e6:10:e0:1b:c0:ae:ea:60:9e:
55:15:8b:9c:87:3f:07:db:b7:8a:a5:df:44:d3:61:
c5:31:92:79:37:12:86:7d:9f:81:6a:96:0b:4b:c1:
61:b1:50:85:43:91:b1:7b:f1:04:a7:c8:99:4e:43:
bd:b9:33:f0:99:d5:88:21:fb:7a:8a:38:cc:1e:cf:
9d:27:8f:c6:94:29:44:be:7e:f7:39:cd:e3:d4:59:
af:4f:b5:5e:5a:ff:9c:c5:1a:b0:89:c5:15:64:cd:
29:dd:4e:dd:e3:e4:b8:b6:67:a7:82:e8:02:71:d9:
2f:f8:98:60:18:67:2b:ff:f5:5b:4a:84:aa:c5:dd:
06:2d:1a:dd:58:fa:eb:b1:a4:b2:67:e8:ba:f4:6e:
94:72:0e:f9:d7:13:27:4e:55:1d:b4:77:f1:9e:5d:
3f:97:4e:a2:d6:b6:a2:7a:ac:f4:88:45:c8:8e:43:
2a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:06:C5:54:D9:FD:46:49:6C:21:46:72:8A:30:C7:BD:A0:B1:29
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/0V4GxVTZ_UZJbCFGcoowx72gsSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.224.0/24
37.156.37.0/24
89.35.4.0/23
89.37.186.0/23
89.40.133.0/24
89.43.240.0/21
89.46.24.0/21
91.208.75.0/24
91.239.230.0/24
92.114.88.0/22
94.176.186.0/23
128.0.34.0/24
128.0.36.0/24
185.36.252.0/24
193.93.142.0/23
193.162.136.0/24
195.206.164.0/24
IPv6:
2a00:ece0::/32
2a04:6c80::/29
2a05:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
38:10:79:64:df:a4:43:ec:cb:cb:d0:9d:89:ae:1f:48:7d:3b:
c0:00:6d:23:09:a6:27:71:12:16:29:50:c0:ea:19:78:0d:62:
5a:7a:9e:5f:b6:76:13:25:f6:fb:86:f3:f1:79:dc:86:6d:47:
4f:30:92:46:e2:8c:b0:45:34:cf:b1:dc:48:6c:d8:d1:48:03:
26:f5:4f:46:67:b2:d8:7a:56:4f:e6:db:a7:54:ac:28:cb:19:
da:16:eb:07:98:2d:1d:61:ba:15:88:88:9b:51:5f:21:e3:3c:
c4:85:93:fc:2a:a4:f9:62:71:5e:94:5e:69:3c:ee:c5:70:70:
da:c5:15:23:6c:78:43:a6:d9:c5:3f:c0:20:c4:69:9f:d8:ca:
fc:91:8e:ec:ff:cd:7f:8c:50:3f:bc:5d:80:8e:40:8d:c9:31:
d6:3d:e2:36:83:e7:e9:12:45:b1:24:b0:06:59:d2:a5:a7:47:
5d:83:c6:91:c6:7b:40:e1:9c:5f:e7:7a:bc:70:18:67:80:b1:
4a:70:d5:c9:b7:52:f4:79:8f:fa:ed:ee:dc:bf:ee:84:bd:27:
bc:13:76:c7:93:79:ca:18:32:e9:b6:e0:e5:a7:7f:f9:db:4e:
f0:4c:7e:ae:41:c0:56:56:4b:ba:21:8e:71:18:72:33:58:e9:
d5:47:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:39 2026 by rpki-client