Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/I3Qz77k2oYxzlmKadcI15VK2Xho.roa
File: I3Qz77k2oYxzlmKadcI15VK2Xho.roa (raw, json)
Hash identifier: rl1+7VSSJCLWAX7YF+ZUOE9VZc/4GpcEkb9o7QBoLJw=
Subject key identifier: 23:74:33:EF:B9:36:A1:8C:73:96:62:9A:75:C2:35:E5:52:B6:5E:1A
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 01A09084F3B7C55757948ED1FFA5E425F660
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/I3Qz77k2oYxzlmKadcI15VK2Xho.roa
Signing time: Fri 11 Sep 2026 12:50:27 +0000
ROA not before: Fri 11 Sep 2026 12:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16347
IP address blocks: 5.44.160.0/21 maxlen: 24
5.182.252.0/22 maxlen: 24
37.18.160.0/20 maxlen: 24
37.58.128.0/17 maxlen: 24
37.157.8.0/23 maxlen: 24
37.157.10.0/24 maxlen: 24
37.157.12.0/22 maxlen: 24
37.157.60.0/22 maxlen: 24
45.142.172.0/22 maxlen: 24
45.145.124.0/22 maxlen: 24
46.20.160.0/20 maxlen: 24
62.102.224.0/19 maxlen: 24
62.244.70.0/23 maxlen: 24
62.244.72.0/22 maxlen: 24
62.244.80.0/23 maxlen: 24
62.244.90.0/23 maxlen: 24
62.244.92.0/23 maxlen: 24
79.98.96.0/21 maxlen: 24
80.173.48.0/20 maxlen: 24
81.22.216.0/21 maxlen: 24
89.38.200.0/21 maxlen: 24
91.103.232.0/21 maxlen: 24
91.205.156.0/24 maxlen: 24
91.206.156.0/23 maxlen: 24
91.217.94.0/23 maxlen: 24
91.229.230.0/23 maxlen: 24
92.61.72.0/21 maxlen: 24
93.113.136.0/21 maxlen: 24
94.127.8.0/21 maxlen: 24
103.73.172.0/22 maxlen: 24
103.77.32.0/22 maxlen: 24
103.229.36.0/23 maxlen: 24
103.232.172.0/22 maxlen: 24
109.69.192.0/21 maxlen: 24
109.237.240.0/20 maxlen: 24
128.127.128.0/20 maxlen: 24
146.247.88.0/21 maxlen: 24
149.255.136.0/21 maxlen: 24
178.249.160.0/21 maxlen: 24
185.15.128.0/22 maxlen: 24
185.42.132.0/22 maxlen: 24
185.49.120.0/23 maxlen: 24
185.49.122.0/24 maxlen: 24
185.65.224.0/22 maxlen: 24
185.67.88.0/22 maxlen: 24
185.79.148.0/22 maxlen: 24
185.90.96.0/22 maxlen: 24
185.95.120.0/22 maxlen: 24
185.105.68.0/22 maxlen: 24
185.138.104.0/22 maxlen: 24
185.149.8.0/22 maxlen: 24
185.172.16.0/22 maxlen: 24
185.196.248.0/22 maxlen: 24
185.204.140.0/22 maxlen: 24
185.208.248.0/22 maxlen: 24
185.247.248.0/22 maxlen: 24
188.66.56.0/22 maxlen: 24
193.3.24.0/24 maxlen: 24
193.27.194.0/23 maxlen: 24
193.41.95.0/24 maxlen: 24
193.47.139.0/24 maxlen: 24
193.84.100.0/24 maxlen: 24
193.108.197.0/24 maxlen: 24
193.169.64.0/23 maxlen: 24
193.222.142.0/23 maxlen: 24
193.222.188.0/23 maxlen: 24
194.177.32.0/19 maxlen: 24
195.114.114.0/23 maxlen: 24
195.214.240.0/21 maxlen: 24
212.51.160.0/19 maxlen: 24
213.108.64.0/21 maxlen: 24
213.151.166.0/24 maxlen: 24
213.151.168.0/23 maxlen: 24
213.151.171.0/24 maxlen: 24
213.151.172.0/23 maxlen: 24
213.151.174.0/24 maxlen: 24
213.151.175.0/24 maxlen: 24
2a00:bc80::/32 maxlen: 32
2a01:6d8::/32 maxlen: 32
2a01:728::/29 maxlen: 48
2a03:4c00::/29 maxlen: 48
2a03:bf40::/32 maxlen: 32
2a05:df00::/29 maxlen: 29
2a0d:4240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:84:f3:b7:c5:57:57:94:8e:d1:ff:a5:e4:25:f6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Sep 11 12:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=237433efb936a18c7396629a75c235e552b65e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:e7:1c:e5:a9:54:ae:3d:15:49:55:fe:74:
1c:e4:69:01:14:ad:c9:6a:51:d6:03:5f:fc:35:f4:
dd:69:14:ba:6a:2a:f6:03:fc:0f:58:36:7b:83:b9:
aa:94:a9:41:90:28:78:e8:b0:7a:54:28:2f:c7:5e:
63:24:b5:4e:59:48:cc:3c:b1:d8:16:97:50:8e:3b:
12:d1:10:34:11:c8:f8:47:d2:69:84:f5:71:b2:2f:
8e:cc:f3:5c:a2:b8:ee:c5:86:07:13:f2:91:b9:f1:
5b:08:45:da:1c:58:5d:30:a1:2f:a5:c2:f5:9a:1d:
ea:09:74:64:73:3a:5a:c4:6c:db:66:f4:6f:65:50:
8d:f0:96:97:da:33:eb:bc:17:5b:2f:81:cb:55:dc:
47:63:38:78:f0:8f:eb:6c:c1:02:6d:6a:7d:36:9c:
2d:0d:c1:f1:68:00:3f:b1:6e:80:f6:23:06:30:c6:
23:df:80:eb:6b:06:4a:fb:ce:6f:bf:33:4e:ea:c3:
fb:8d:d9:90:89:20:b4:db:63:26:34:56:ff:4c:8b:
af:6e:c8:95:c0:f2:81:07:15:3d:e9:a5:8a:32:e7:
9d:5d:1b:95:30:d0:1e:5b:8b:bf:a2:da:10:52:06:
66:db:04:fc:50:86:36:6d:82:36:47:57:64:b0:a3:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:74:33:EF:B9:36:A1:8C:73:96:62:9A:75:C2:35:E5:52:B6:5E:1A
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/I3Qz77k2oYxzlmKadcI15VK2Xho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.160.0/21
5.182.252.0/22
37.18.160.0/20
37.58.128.0/17
37.157.8.0-37.157.10.255
37.157.12.0/22
37.157.60.0/22
45.142.172.0/22
45.145.124.0/22
46.20.160.0/20
62.102.224.0/19
62.244.70.0-62.244.75.255
62.244.80.0/23
62.244.90.0-62.244.93.255
79.98.96.0/21
80.173.48.0/20
81.22.216.0/21
89.38.200.0/21
91.103.232.0/21
91.205.156.0/24
91.206.156.0/23
91.217.94.0/23
91.229.230.0/23
92.61.72.0/21
93.113.136.0/21
94.127.8.0/21
103.73.172.0/22
103.77.32.0/22
103.229.36.0/23
103.232.172.0/22
109.69.192.0/21
109.237.240.0/20
128.127.128.0/20
146.247.88.0/21
149.255.136.0/21
178.249.160.0/21
185.15.128.0/22
185.42.132.0/22
185.49.120.0-185.49.122.255
185.65.224.0/22
185.67.88.0/22
185.79.148.0/22
185.90.96.0/22
185.95.120.0/22
185.105.68.0/22
185.138.104.0/22
185.149.8.0/22
185.172.16.0/22
185.196.248.0/22
185.204.140.0/22
185.208.248.0/22
185.247.248.0/22
188.66.56.0/22
193.3.24.0/24
193.27.194.0/23
193.41.95.0/24
193.47.139.0/24
193.84.100.0/24
193.108.197.0/24
193.169.64.0/23
193.222.142.0/23
193.222.188.0/23
194.177.32.0/19
195.114.114.0/23
195.214.240.0/21
212.51.160.0/19
213.108.64.0/21
213.151.166.0/24
213.151.168.0/23
213.151.171.0-213.151.175.255
IPv6:
2a00:bc80::/32
2a01:6d8::/32
2a01:728::/29
2a03:4c00::/29
2a03:bf40::/32
2a05:df00::/29
2a0d:4240::/29
Signature Algorithm: sha256WithRSAEncryption
06:e2:64:29:ba:51:6d:e9:a9:75:76:8a:74:2d:d3:ad:20:37:
26:90:9f:90:27:27:0e:00:f5:a8:d3:42:85:0e:4a:4c:e6:41:
7d:69:19:7f:e5:39:f3:be:28:28:fc:d3:4a:0b:00:9f:e4:40:
16:75:e3:c5:7c:0d:2f:c3:ab:24:8c:35:30:1d:90:0e:6b:8d:
93:59:68:1a:15:52:40:81:30:65:28:e0:b4:f3:63:b4:06:c8:
3d:8b:46:bb:72:06:6a:ee:db:b9:6a:f2:af:32:13:9b:c1:89:
f4:97:40:b2:b0:86:03:96:78:e5:2d:d7:04:1e:2a:4c:32:db:
a7:17:95:78:e6:12:99:cd:02:97:80:fa:2f:05:94:83:6e:a9:
dc:af:40:74:ba:24:4e:95:6d:d7:e1:c6:c5:31:15:eb:d2:20:
45:8b:6a:32:02:88:e5:0a:90:0a:97:38:89:54:3a:1a:9e:7c:
64:bb:e1:f0:63:31:83:75:23:66:83:db:7c:6e:e7:cc:73:1b:
77:bc:6e:70:64:25:2e:44:b1:a5:72:dc:43:75:76:f6:85:9a:
11:9a:f3:50:d7:85:78:6f:eb:fd:d7:82:7e:21:2e:10:cd:75:
5a:5b:6b:65:10:6d:e0:15:49:7d:3b:54:9f:d2:f6:80:3f:41:
1a:e2:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:51:49 2026 by rpki-client