Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/C6PWZ8_5DZEQJ-WdAPLUUo8r5zk.roa
File: C6PWZ8_5DZEQJ-WdAPLUUo8r5zk.roa (raw, json)
Hash identifier: 2616q49H8Nc+KWVaYeBfxtlq1SYHaISQ/1DfyDg7sPY=
Subject key identifier: 0B:A3:D6:67:CF:F9:0D:91:10:27:E5:9D:00:F2:D4:52:8F:2B:E7:39
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 019F93455E754F8A44FF542474A426C5A20C
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/C6PWZ8_5DZEQJ-WdAPLUUo8r5zk.roa
Signing time: Fri 24 Jul 2026 08:37:04 +0000
ROA not before: Fri 24 Jul 2026 08:37:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48854
IP address blocks: 46.36.204.0/22 maxlen: 22
46.36.208.0/21 maxlen: 21
77.243.128.0/20 maxlen: 20
80.70.0.0/23 maxlen: 23
80.70.6.0/23 maxlen: 23
80.70.6.0/24 maxlen: 24
80.70.7.0/24 maxlen: 24
81.95.240.0/20 maxlen: 20
81.95.249.0/24 maxlen: 24
89.188.72.0/21 maxlen: 21
89.188.79.0/24 maxlen: 24
91.197.248.0/22 maxlen: 22
91.217.201.0/24 maxlen: 24
93.191.152.0/21 maxlen: 21
93.191.152.0/22 maxlen: 22
93.191.156.0/24 maxlen: 24
93.191.157.0/24 maxlen: 24
93.191.158.0/24 maxlen: 24
94.137.128.0/20 maxlen: 20
94.143.8.0/21 maxlen: 21
94.231.96.0/20 maxlen: 20
94.231.103.0/24 maxlen: 24
109.71.56.0/21 maxlen: 21
178.251.0.0/21 maxlen: 21
178.251.1.0/24 maxlen: 24
185.20.204.0/22 maxlen: 22
185.20.205.0/24 maxlen: 24
185.20.206.0/23 maxlen: 23
185.21.40.0/22 maxlen: 22
185.21.40.0/24 maxlen: 24
185.25.140.0/24 maxlen: 24
185.25.141.0/24 maxlen: 24
185.25.142.0/24 maxlen: 24
185.25.143.0/24 maxlen: 24
185.134.28.0/22 maxlen: 22
185.154.240.0/22 maxlen: 22
185.204.248.0/22 maxlen: 22
185.221.36.0/22 maxlen: 22
185.223.24.0/22 maxlen: 22
185.235.52.0/22 maxlen: 22
185.235.52.0/24 maxlen: 24
193.223.248.0/22 maxlen: 22
193.239.96.0/22 maxlen: 22
194.150.112.0/22 maxlen: 22
195.69.128.0/22 maxlen: 22
195.178.14.0/23 maxlen: 23
212.97.132.0/22 maxlen: 22
212.97.140.0/22 maxlen: 22
212.97.140.0/24 maxlen: 24
212.97.141.0/24 maxlen: 24
212.97.142.0/24 maxlen: 24
212.97.143.0/24 maxlen: 24
212.237.248.0/23 maxlen: 23
217.61.237.0/24 maxlen: 24
217.61.238.0/24 maxlen: 24
2a02:2338::/32 maxlen: 48
2a02:2339::/36 maxlen: 36
2a02:2339:4000::/34 maxlen: 48
2a03:2740::/48 maxlen: 48
2a06:eac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:45:5e:75:4f:8a:44:ff:54:24:74:a4:26:c5:a2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Jul 24 08:37:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ba3d667cff90d911027e59d00f2d4528f2be739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:08:a8:a9:b1:16:28:8b:43:f1:a6:76:86:
ab:e1:e2:54:96:ba:e3:f4:53:f3:0c:1d:8c:af:09:
99:07:30:27:82:22:01:6f:60:c1:fb:6f:4e:8b:7e:
6c:e3:0e:33:98:19:4c:5f:55:2a:c9:86:bc:10:d6:
84:65:6c:bb:38:9d:b7:c3:75:bd:8b:5e:a7:ab:98:
b1:67:01:d6:6f:ed:62:89:62:ec:26:f7:4d:42:a5:
a1:fe:7d:58:30:02:f7:c3:84:1e:00:65:af:b2:26:
11:cb:8e:ad:2e:b0:b5:27:95:f7:72:1e:23:ea:ea:
d3:9f:41:e1:be:4c:a4:ac:f0:87:f7:98:06:db:d4:
a1:7a:9c:76:16:9f:55:21:79:a4:dc:a8:32:59:56:
69:8b:04:7b:dc:5e:09:85:a4:a9:74:9b:e1:a0:7b:
60:bb:13:23:8f:85:df:01:b9:e5:b4:1d:4f:b5:72:
86:78:48:e6:ca:61:09:a9:2a:ad:f4:e1:f6:5d:6c:
93:6b:be:42:47:96:bc:5d:da:55:d4:0a:d4:a1:b8:
56:6d:5f:78:c7:4b:de:9f:45:ee:e6:9e:33:32:1c:
0b:4a:21:7a:3c:d1:d5:73:74:06:88:39:5e:b3:da:
f9:7a:a8:26:15:81:f0:78:6c:2b:75:ce:59:89:16:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:D6:67:CF:F9:0D:91:10:27:E5:9D:00:F2:D4:52:8F:2B:E7:39
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/C6PWZ8_5DZEQJ-WdAPLUUo8r5zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.204.0-46.36.215.255
77.243.128.0/20
80.70.0.0/23
80.70.6.0/23
81.95.240.0/20
89.188.72.0/21
91.197.248.0/22
91.217.201.0/24
93.191.152.0/21
94.137.128.0/20
94.143.8.0/21
94.231.96.0/20
109.71.56.0/21
178.251.0.0/21
185.20.204.0/22
185.21.40.0/22
185.25.140.0/22
185.134.28.0/22
185.154.240.0/22
185.204.248.0/22
185.221.36.0/22
185.223.24.0/22
185.235.52.0/22
193.223.248.0/22
193.239.96.0/22
194.150.112.0/22
195.69.128.0/22
195.178.14.0/23
212.97.132.0/22
212.97.140.0/22
212.237.248.0/23
217.61.237.0-217.61.238.255
IPv6:
2a02:2338::-2a02:2339:fff:ffff:ffff:ffff:ffff:ffff
2a02:2339:4000::/34
2a03:2740::/48
2a06:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
67:16:05:fc:17:84:25:ce:6c:2d:1e:85:ed:03:2d:ba:ae:6c:
c4:2e:ae:3d:65:70:8a:7a:da:c9:dc:1e:17:53:e0:49:40:d3:
42:05:78:9f:8d:da:62:0e:d9:45:1a:0f:c4:05:d3:54:da:f3:
28:08:94:e3:2d:fe:1b:9a:2c:e5:89:be:3f:4a:c5:09:43:68:
e7:76:9a:01:90:60:2f:ce:bb:63:e0:02:44:c1:a1:d2:1b:53:
b6:8a:56:96:2a:0e:26:42:7e:63:72:49:d4:5e:b2:44:45:35:
0a:48:9d:b2:27:7a:fe:43:e9:b0:69:6c:75:a6:7c:3e:d9:61:
1f:6c:9e:c5:83:75:42:41:68:91:1b:9d:51:8b:0e:69:07:25:
f3:ee:c2:be:15:36:97:c9:bf:8d:0e:49:a1:1f:9f:d1:36:c2:
92:c1:7b:b5:80:0f:3c:9e:08:51:8e:e4:f2:83:ce:ef:2d:1c:
2f:0d:b1:b9:b2:e0:d8:bc:9d:e4:b2:21:f6:49:6e:98:bc:53:
69:dd:9f:bc:6e:cd:9f:34:48:c3:90:40:db:54:2d:4f:9f:a5:
ba:f9:42:a5:cc:73:a7:c7:1f:2f:e6:6b:f5:1b:f3:40:7f:1a:
2d:ae:90:33:f4:99:e3:0d:29:25:7d:9c:d6:4d:56:f6:94:94:
48:aa:5b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:19 2026 by rpki-client