Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/9oxDkWaa5sd9iAaz0WBp0gnuTC0.roa
File: 9oxDkWaa5sd9iAaz0WBp0gnuTC0.roa (raw, json)
Hash identifier: rpYh/dQFEe2pkMtp7oDMBL7MOw9jhToAYfZxRi3wQ+I=
Subject key identifier: F6:8C:43:91:66:9A:E6:C7:7D:88:06:B3:D1:60:69:D2:09:EE:4C:2D
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019DD2F8B137125173BF7D3682FAE7A8564C
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/9oxDkWaa5sd9iAaz0WBp0gnuTC0.roa
Signing time: Tue 28 Apr 2026 07:23:26 +0000
ROA not before: Tue 28 Apr 2026 07:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.254.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:f8:b1:37:12:51:73:bf:7d:36:82:fa:e7:a8:56:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Apr 28 07:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f68c4391669ae6c77d8806b3d16069d209ee4c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:3b:93:28:5d:64:91:a9:ac:86:69:f1:4f:
60:e7:0b:68:19:ea:b3:b5:bc:4f:19:69:45:92:53:
9d:8f:89:64:2e:55:7e:b0:a6:7a:df:39:f1:06:7b:
08:19:22:bc:67:12:df:c2:c0:c0:40:7f:09:4e:92:
a2:e4:89:48:20:40:f0:f2:7f:e3:91:da:90:b5:79:
cd:9b:92:b9:8a:4a:21:0b:81:86:08:15:65:79:8a:
0e:97:7c:73:9e:de:77:da:e7:12:fa:ba:0a:1e:73:
aa:a3:4d:c5:d1:e6:cf:04:cf:b7:ab:e2:3b:f3:b0:
02:4d:9f:45:11:87:9a:a4:43:f3:f9:67:94:93:97:
f5:ae:14:bd:25:d3:d7:ee:20:df:5a:b3:22:3e:de:
59:57:45:aa:60:4e:06:b5:80:58:b7:4b:5f:28:c5:
9a:a0:83:24:dc:a5:57:2e:aa:12:0b:bd:c4:ef:3b:
23:29:7a:c4:e4:d8:84:ba:2b:7f:df:6c:48:87:65:
71:53:61:c1:b1:ad:cd:4e:f1:e2:3f:1d:de:fd:3f:
29:12:bf:cd:8b:f3:2f:42:75:1a:f8:c6:1a:83:1c:
d9:f4:17:31:eb:60:3f:e5:bd:da:64:60:f8:22:bf:
65:7e:9e:f1:8b:0b:5d:63:d0:a2:b9:c6:b1:4e:f9:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8C:43:91:66:9A:E6:C7:7D:88:06:B3:D1:60:69:D2:09:EE:4C:2D
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/9oxDkWaa5sd9iAaz0WBp0gnuTC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.233.0-45.141.234.255
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/22
78.159.157.0-78.159.159.255
91.92.34.0/24
91.92.40.0/24
91.92.42.0/24
91.92.44.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.207.0/24
93.152.210.0/23
93.152.214.0-93.152.218.255
93.152.221.0-93.152.223.255
93.152.226.0/23
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/22
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
01:fc:c1:12:05:6d:87:1b:55:27:a4:2a:39:6e:f4:4a:c0:48:
fe:97:bc:2c:7d:86:e8:38:35:fe:31:bf:96:be:83:b8:6a:be:
be:40:dd:0f:fd:64:44:90:58:5e:f5:15:eb:5f:6b:5d:36:c7:
9f:ef:8c:1b:c5:43:09:11:5c:9e:fc:fa:f4:a0:1d:53:1a:ff:
78:9c:bc:b1:93:9e:c7:01:6e:a1:bd:7c:7e:70:c9:44:67:f6:
b9:a5:3f:7f:ed:3b:85:25:9e:6b:c9:3c:8e:ab:31:fa:ed:a9:
96:05:7d:87:9b:ef:d1:e9:89:17:88:96:59:db:29:1e:90:d4:
60:a4:e6:0c:d6:75:a9:a9:ae:4c:3a:6b:14:77:3a:fa:2d:a3:
75:9a:1a:11:64:4a:8d:c2:fd:37:2a:94:c6:b2:8b:36:df:ba:
72:55:44:25:f3:27:5a:38:e5:f2:7a:f5:10:77:bb:93:77:47:
c5:ed:e2:7f:b0:03:64:78:64:70:4f:d6:85:ae:11:c3:94:bc:
a9:5f:06:50:5a:3b:aa:33:d0:fa:e4:4a:88:fb:3d:34:a3:97:
8c:27:2f:66:f7:81:73:a6:ce:9f:fc:79:0d:7a:c7:d0:5e:94:
02:92:fc:0c:a7:17:2b:59:6a:a2:80:0b:55:e0:2b:5e:af:16:
0a:0a:b9:4d
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgISAZ3S+LE3ElFzv302gvrnqFZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjYwNDI4MDcyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjhjNDM5MTY2OWFlNmM3N2Q4ODA2YjNkMTYwNjlkMjA5ZWU0YzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4k7kyhdZJGprIZp8U9g5wtoGeqz
tbxPGWlFklOdj4lkLlV+sKZ63znxBnsIGSK8ZxLfwsDAQH8JTpKi5IlIIEDw8n/j
kdqQtXnNm5K5ikohC4GGCBVleYoOl3xznt532ucS+roKHnOqo03F0ebPBM+3q+I7
87ACTZ9FEYeapEPz+WeUk5f1rhS9JdPX7iDfWrMiPt5ZV0WqYE4GtYBYt0tfKMWa
oIMk3KVXLqoSC73E7zsjKXrE5NiEuit/32xIh2VxU2HBsa3NTvHiPx3e/T8pEr/N
i/MvQnUa+MYagxzZ9Bcx62A/5b3aZGD4Ir9lfp7xiwtdY9CiucaxTvkHkwIDAQAB
o4IC2DCCAtQwHQYDVR0OBBYEFPaMQ5FmmubHfYgGs9FgadIJ7kwtMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvOW94RGtXYWE1c2Q5aUFhejBXQnAwZ251VEMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jCB1wQCAAEwgdAwDAME
AC2N6QMEAC2N6gMEAU6fgAMEAE6fgwMEAk6fiDAMAwQATp+VAwQATp+WAwQCTp+Y
MAwDBABOn50DBAVOn4ADBABbXCIDBABbXCgDBABbXCowDAMEAltcLAMEAFtcLjAM
AwQAW1wxAwQBW1w0AwQAXZjPAwQBXZjSMAwDBAFdmNYDBABdmNowDAMEAF2Y3QME
BV2YwAMEAV2Y4gMEAV4aHAMEAl4aTDAMAwQAXhpZAwQAXhpaAwQAXr7DAwQCuWD8
AwQA1GZpAwQA1GZrMA0GCSqGSIb3DQEBCwUAA4IBAQAB/MESBW2HG1UnpCo5bvRK
wEj+l7wsfYboODX+Mb+WvoO4ar6+QN0P/WREkFhe9RXrX2tdNsef74wbxUMJEVye
/Pr0oB1TGv94nLyxk57HAW6hvXx+cMlEZ/a5pT9/7TuFJZ5ryTyOqzH67amWBX2H
m+/R6YkXiJZZ2ykekNRgpOYM1nWpqa5MOmsUdzr6LaN1mhoRZEqNwv03KpTGsos2
37pyVUQl8ydaOOXyevUQd7uTd0fF7eJ/sANkeGRwT9aFrhHDlLypXwZQWjuqM9D6
5EqI+z00o5eMJy9m94Fzps6f/HkNesfQXpQCkvwMpxcrWWqigAtV4CterxYKCrlN
-----END CERTIFICATE-----
Generated at Wed May 13 00:21:19 2026 by rpki-client