Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-p6L-7qJU2ku_9VBNoVZguN8tJ4.roa
File: 1-p6L-7qJU2ku_9VBNoVZguN8tJ4.roa (raw, json)
Hash identifier: ZUbeF7b+rOkR43MMCdm/LVogv18EYaheT3PjiUGBxXw=
Subject key identifier: FA:9E:8B:FB:BA:89:53:69:2E:FF:D5:41:36:85:59:82:E3:7C:B4:9E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019D016501383CCEBC4650E9323497FE3167
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-p6L-7qJU2ku_9VBNoVZguN8tJ4.roa
Signing time: Wed 18 Mar 2026 14:41:29 +0000
ROA not before: Wed 18 Mar 2026 14:41:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:65:01:38:3c:ce:bc:46:50:e9:32:34:97:fe:31:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 18 14:41:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa9e8bfbba8953692effd54136855982e37cb49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:87:13:2a:6c:98:eb:db:2a:b2:3d:bd:9b:
aa:bd:9b:44:03:fb:42:d1:7c:d4:58:7e:6d:d6:16:
7e:29:f0:70:2e:d5:49:ef:76:4c:18:3f:a1:d6:43:
99:f0:63:0d:27:d4:ec:49:97:52:8a:3e:4d:56:1f:
d4:1f:1a:66:90:a2:f2:fd:23:88:ec:af:42:28:de:
29:4c:c7:21:85:e4:2e:21:31:eb:b5:71:6a:bc:d1:
f1:0f:c3:59:06:88:b0:1a:3f:5d:f1:d1:e5:ec:e4:
9f:c3:c0:de:cd:7f:26:a9:72:0b:9e:c6:21:be:64:
f4:75:19:69:59:40:98:ba:93:3e:21:cc:d6:d0:04:
b6:7c:ab:9e:f9:ce:2d:22:b5:02:b0:c9:be:db:d1:
6d:8b:cc:e5:e7:ca:29:ad:fd:d0:f8:81:d8:be:70:
d4:a6:3a:1a:fd:23:9d:68:8c:fd:3c:e4:e9:6e:22:
39:62:ed:f1:68:64:e1:c0:ce:5f:16:ca:d0:cf:29:
6c:c9:8e:6f:e7:df:91:d9:17:77:2a:00:53:26:bb:
d9:78:5a:58:53:3e:12:1c:91:c3:a0:b0:6d:c6:b3:
37:fa:9a:ae:4a:90:16:99:34:4e:bc:cb:df:2a:ff:
8f:f5:e6:17:c1:64:eb:ab:30:7c:ed:96:51:8d:47:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:8B:FB:BA:89:53:69:2E:FF:D5:41:36:85:59:82:E3:7C:B4:9E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-p6L-7qJU2ku_9VBNoVZguN8tJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
77.242.154.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.219.0/24
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:0a:7c:76:63:f7:48:38:a5:cc:2d:c9:f0:38:68:a3:99:3f:
7a:8c:d4:e8:b8:cd:5c:60:42:1d:e6:4e:15:d4:f6:e9:31:6e:
1e:37:c8:01:ac:fc:79:b4:ca:f4:cf:1a:f1:3d:dd:91:92:bd:
11:07:8b:2a:82:ce:55:47:dd:20:9b:9f:77:ee:c1:b5:6e:c1:
f8:05:9b:d7:e0:5e:e1:17:de:cf:b4:df:a7:32:49:5e:52:f0:
64:26:37:70:ca:c2:ff:e6:d8:a4:4b:6c:c7:5a:c8:54:e5:20:
91:33:5a:14:b0:b1:df:6d:63:e2:71:43:1f:a1:49:a1:15:85:
c1:30:d1:09:34:b6:83:79:8e:15:a9:a0:53:45:2f:aa:62:27:
fd:0b:d5:f3:f3:9c:9e:66:68:19:59:0f:8e:90:92:b8:03:35:
d1:53:ec:9b:5f:d4:c3:e2:cb:25:22:5a:3d:83:1f:66:79:ab:
6f:5c:cb:11:d0:a9:30:05:9d:8f:59:e7:50:79:c7:fd:5a:61:
e8:8e:86:f8:7d:cc:0f:63:e2:46:33:83:d8:56:7e:62:3e:41:
57:8b:4d:d1:3e:72:9a:26:61:d5:c0:53:b3:2c:aa:91:df:62:
1e:7c:10:21:38:4b:a6:43:25:94:39:6c:58:d6:99:55:b1:23:
68:e9:2e:e8
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgISAZ0BZQE4PM68RlDpMjSX/jFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjYwMzE4MTQ0MTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTllOGJmYmJhODk1MzY5MmVmZmQ1NDEzNjg1NTk4MmUzN2NiNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwCHEypsmOvbKrI9vZuqvZtEA/tC
0XzUWH5t1hZ+KfBwLtVJ73ZMGD+h1kOZ8GMNJ9TsSZdSij5NVh/UHxpmkKLy/SOI
7K9CKN4pTMchheQuITHrtXFqvNHxD8NZBoiwGj9d8dHl7OSfw8DezX8mqXILnsYh
vmT0dRlpWUCYupM+IczW0AS2fKue+c4tIrUCsMm+29Fti8zl58oprf3Q+IHYvnDU
pjoa/SOdaIz9POTpbiI5Yu3xaGThwM5fFsrQzylsyY5v59+R2Rd3KgBTJrvZeFpY
Uz4SHJHDoLBtxrM3+pquSpAWmTROvMvfKv+P9eYXwWTrqzB87ZZRjUdDWQIDAQAB
o4IChjCCAoIwHQYDVR0OBBYEFPqei/u6iVNpLv/VQTaFWYLjfLSeMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvMS1wNkwtN3FKVTJrdV85VkJOb1ZaZ3VOOHRKNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZGQvNTg5MTI3LTEwOTYtNGM5MS05NmNjLTdlNGQ2ZjZmNmU2
Ni8xL3phcWc0SUkyQTJDczJqUjJaT3VERk9zUjJoQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBmgYIKwYBBQUHAQcBAf8EgYowgYcwaAQCAAEwYjAMAwQA
LQmpAwQCLQmoAwQBLQ4KAwQALVhdAwQATfKQAwQATfKUAwQATfKXAwQATfKaAwQA
WNHEAwQAWNHQAwQAWNHSAwQCWNHUAwQAWNHbAwQDXDTQAwQDsvjIAwQAwYp9MBsE
AgACMBUDBQMqAB9AAwUDKgX1wAMFAyoM8cAwDQYJKoZIhvcNAQELBQADggEBABsK
fHZj90g4pcwtyfA4aKOZP3qM1Oi4zVxgQh3mThXU9ukxbh43yAGs/Hm0yvTPGvE9
3ZGSvREHiyqCzlVH3SCbn3fuwbVuwfgFm9fgXuEX3s+036cySV5S8GQmN3DKwv/m
2KRLbMdayFTlIJEzWhSwsd9tY+JxQx+hSaEVhcEw0Qk0toN5jhWpoFNFL6piJ/0L
1fPznJ5maBlZD46QkrgDNdFT7Jtf1MPiyyUiWj2DH2Z5q29cyxHQqTAFnY9Z51B5
x/1aYeiOhvh9zA9j4kYzg9hWfmI+QVeLTdE+cpomYdXAU7MsqpHfYh58ECE4S6ZD
JZQ5bFjWmVWxI2jpLug=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:22 2026 by rpki-client