Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/zO8B6pGMJX9XU98xnLdwntnL3vI.roa
File: zO8B6pGMJX9XU98xnLdwntnL3vI.roa (raw, json)
Hash identifier: 3CDxux5G2RSqAQp+WPxKqKOTx95LFqdOHC+tvDKHc4g=
Subject key identifier: CC:EF:01:EA:91:8C:25:7F:57:53:DF:31:9C:B7:70:9E:D9:CB:DE:F2
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01A0AAE238926CF682018200F31F34B336E0
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/zO8B6pGMJX9XU98xnLdwntnL3vI.roa
Signing time: Wed 16 Sep 2026 15:42:27 +0000
ROA not before: Wed 16 Sep 2026 15:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6718
IP address blocks: 5.154.224.0/24 maxlen: 24
37.156.37.0/24 maxlen: 24
89.35.4.0/24 maxlen: 24
89.35.5.0/24 maxlen: 24
89.37.187.0/24 maxlen: 24
89.40.133.0/24 maxlen: 24
89.43.240.0/24 maxlen: 24
89.43.241.0/24 maxlen: 24
89.43.242.0/24 maxlen: 24
89.43.243.0/24 maxlen: 24
89.43.244.0/24 maxlen: 24
89.43.245.0/24 maxlen: 24
89.43.246.0/24 maxlen: 24
89.43.247.0/24 maxlen: 24
89.46.24.0/24 maxlen: 24
89.46.25.0/24 maxlen: 24
89.46.27.0/24 maxlen: 24
89.46.28.0/24 maxlen: 24
89.46.29.0/24 maxlen: 24
89.46.30.0/24 maxlen: 24
89.46.31.0/24 maxlen: 24
91.208.75.0/24 maxlen: 24
91.239.230.0/24 maxlen: 24
92.114.88.0/24 maxlen: 24
92.114.89.0/24 maxlen: 24
92.114.90.0/24 maxlen: 24
92.114.91.0/24 maxlen: 24
94.176.187.0/24 maxlen: 24
128.0.34.0/24 maxlen: 24
128.0.36.0/24 maxlen: 24
185.36.252.0/24 maxlen: 24
193.93.142.0/23 maxlen: 23
193.162.136.0/24 maxlen: 24
195.206.164.0/24 maxlen: 24
2a00:ece0::/32 maxlen: 32
2a04:6c80::/32 maxlen: 32
2a04:6c81::/32 maxlen: 32
2a04:6c82::/32 maxlen: 32
2a04:6c83::/32 maxlen: 32
2a04:6c84::/32 maxlen: 32
2a04:6c85::/32 maxlen: 32
2a04:6c86::/32 maxlen: 32
2a04:6c87::/32 maxlen: 32
2a05:1c00::/32 maxlen: 32
2a05:1c01::/32 maxlen: 32
2a05:1c02::/32 maxlen: 32
2a05:1c03::/32 maxlen: 32
2a05:1c04::/32 maxlen: 32
2a05:1c05::/32 maxlen: 32
2a05:1c06::/32 maxlen: 32
2a05:1c07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:e2:38:92:6c:f6:82:01:82:00:f3:1f:34:b3:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Sep 16 15:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccef01ea918c257f5753df319cb7709ed9cbdef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:87:01:3f:bb:33:95:dc:4c:b9:11:be:87:
bf:34:92:ff:f2:7d:30:32:af:0e:cc:ac:b7:d2:15:
e4:26:15:bc:40:3c:1c:5c:81:88:91:83:01:b2:5e:
14:71:1b:ce:cb:28:c3:84:a6:71:6a:5e:cb:8a:ed:
9a:13:3d:c4:8e:de:77:a7:82:c5:78:fd:76:70:ab:
a5:c5:0e:64:a8:84:c4:e0:75:4b:cf:a1:57:5b:f6:
b0:1b:81:9f:14:c5:8b:e4:e3:fa:23:f5:f7:f6:b3:
72:00:0b:c7:87:9a:92:24:86:1c:c1:6b:9c:06:ac:
dd:95:9b:10:08:51:5c:65:03:15:62:ae:d8:da:50:
9d:88:f0:c1:9c:d9:5f:cb:26:2b:8a:50:95:be:09:
ed:01:37:f8:95:32:b4:46:34:07:0a:33:0a:a4:c0:
ec:ea:68:4e:4a:13:66:71:29:35:71:c0:4e:8f:ad:
f0:ac:35:ab:64:14:0b:e4:2f:a5:cd:b1:f1:b8:e2:
56:f9:e2:08:bd:de:5a:95:fb:76:44:32:cb:ba:99:
f9:2a:5b:3b:ad:b1:5d:41:cd:03:3c:c9:86:f8:28:
7c:aa:72:d4:f8:bf:dc:a0:c0:6d:34:54:e5:d9:9c:
82:ee:9e:47:82:b4:24:56:25:1e:5d:8b:19:43:44:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:01:EA:91:8C:25:7F:57:53:DF:31:9C:B7:70:9E:D9:CB:DE:F2
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/zO8B6pGMJX9XU98xnLdwntnL3vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.224.0/24
37.156.37.0/24
89.35.4.0/23
89.37.187.0/24
89.40.133.0/24
89.43.240.0/21
89.46.24.0/23
89.46.27.0-89.46.31.255
91.208.75.0/24
91.239.230.0/24
92.114.88.0/22
94.176.187.0/24
128.0.34.0/24
128.0.36.0/24
185.36.252.0/24
193.93.142.0/23
193.162.136.0/24
195.206.164.0/24
IPv6:
2a00:ece0::/32
2a04:6c80::/29
2a05:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
1b:41:10:e5:24:9c:dd:83:a5:07:53:80:50:d0:4f:4d:68:8e:
20:57:ef:98:85:76:c6:89:8f:91:f9:6e:17:67:60:58:ce:b4:
1d:02:f5:bd:44:cd:b7:12:2e:19:f9:d9:0e:84:39:fe:20:e1:
c6:87:84:86:46:5e:32:eb:3a:d4:58:94:ec:16:0f:b3:86:05:
f6:c7:b3:b3:31:ef:32:e5:1d:35:dc:e8:82:fa:ed:00:92:b3:
3e:88:f7:43:d5:1e:bf:b6:50:3c:b9:b6:fa:50:b3:35:06:6b:
ea:c0:ef:d4:4a:7e:34:98:9a:85:18:0d:51:64:7c:f9:01:46:
5c:41:5b:56:94:0c:4d:ba:43:6c:34:8a:17:f5:c5:a2:54:39:
81:00:11:a2:ee:cd:81:0a:3b:9a:2a:28:a6:94:9a:12:a1:f8:
bc:cc:29:41:77:66:de:8c:67:2d:22:a2:1c:69:f2:8a:45:74:
f4:fa:7a:64:cb:ef:12:5b:81:ec:f9:1e:b6:70:28:37:96:1d:
56:9b:7b:0a:c8:4c:59:c2:eb:87:10:ff:72:57:a2:42:70:b6:
77:db:12:aa:3e:55:68:d1:83:a7:e0:cb:4c:56:3a:26:77:7b:
c1:d4:52:e7:ca:f8:38:01:5f:a8:b4:93:99:39:ff:77:ef:69:
69:01:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:12:27 2026 by rpki-client