Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/LFUzd1MNgzFM0rTHQaW3jj6t04A.roa
File: LFUzd1MNgzFM0rTHQaW3jj6t04A.roa (raw, json)
Hash identifier: 9etRAJZvcq7gG7YvLNlBeV+epjf10PNNdX9cfmdp1Ts=
Subject key identifier: 2C:55:33:77:53:0D:83:31:4C:D2:B4:C7:41:A5:B7:8E:3E:AD:D3:80
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019F5FA8285379B5525E78901E76A9067055
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/LFUzd1MNgzFM0rTHQaW3jj6t04A.roa
Signing time: Tue 14 Jul 2026 08:04:43 +0000
ROA not before: Tue 14 Jul 2026 08:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8193
IP address blocks: 5.133.120.0/22 maxlen: 22
45.150.24.0/22 maxlen: 22
83.222.6.0/23 maxlen: 23
84.54.64.0/19 maxlen: 19
84.54.66.0/23 maxlen: 23
84.54.70.0/23 maxlen: 23
84.54.70.0/24 maxlen: 24
84.54.71.0/24 maxlen: 24
84.54.72.0/23 maxlen: 23
84.54.72.0/24 maxlen: 24
84.54.73.0/24 maxlen: 24
84.54.76.0/23 maxlen: 23
84.54.78.0/23 maxlen: 23
84.54.80.0/23 maxlen: 23
84.54.84.0/23 maxlen: 23
84.54.86.0/23 maxlen: 23
84.54.90.0/23 maxlen: 23
84.54.92.0/23 maxlen: 23
84.54.94.0/23 maxlen: 23
84.54.96.0/20 maxlen: 20
84.54.103.0/24 maxlen: 24
84.54.104.0/24 maxlen: 24
84.54.112.0/24 maxlen: 24
84.54.115.0/24 maxlen: 24
84.54.116.0/23 maxlen: 23
84.54.118.0/23 maxlen: 23
84.54.118.0/24 maxlen: 24
84.54.120.0/23 maxlen: 23
84.54.122.0/23 maxlen: 23
86.62.0.0/22 maxlen: 22
86.62.1.0/24 maxlen: 24
87.192.224.0/22 maxlen: 22
87.192.228.0/22 maxlen: 22
87.192.232.0/22 maxlen: 22
87.192.236.0/22 maxlen: 22
87.192.240.0/22 maxlen: 22
87.192.244.0/22 maxlen: 22
87.192.248.0/22 maxlen: 22
89.104.102.0/24 maxlen: 24
89.223.3.0/24 maxlen: 24
89.249.60.0/22 maxlen: 22
89.249.62.0/24 maxlen: 24
89.249.63.0/24 maxlen: 24
90.156.160.0/22 maxlen: 22
90.156.160.0/24 maxlen: 24
90.156.161.0/24 maxlen: 24
90.156.162.0/24 maxlen: 24
90.156.163.0/24 maxlen: 24
90.156.164.0/24 maxlen: 24
90.156.165.0/24 maxlen: 24
90.156.166.0/24 maxlen: 24
90.156.167.0/24 maxlen: 24
90.156.192.0/21 maxlen: 21
93.188.80.0/21 maxlen: 21
93.188.84.0/22 maxlen: 22
94.230.232.0/24 maxlen: 24
109.94.174.0/24 maxlen: 24
109.94.175.0/24 maxlen: 24
144.124.192.0/20 maxlen: 24
144.124.192.0/22 maxlen: 22
144.124.192.0/24 maxlen: 24
144.124.193.0/24 maxlen: 24
144.124.194.0/24 maxlen: 24
144.124.196.0/22 maxlen: 22
144.124.196.0/24 maxlen: 24
144.124.199.0/24 maxlen: 24
144.124.200.0/23 maxlen: 23
144.124.202.0/23 maxlen: 23
185.4.160.0/22 maxlen: 22
185.203.236.0/22 maxlen: 22
185.203.236.0/24 maxlen: 24
185.203.237.0/24 maxlen: 24
194.93.24.0/22 maxlen: 22
198.163.192.0/20 maxlen: 24
198.163.192.0/23 maxlen: 23
198.163.192.0/24 maxlen: 24
198.163.193.0/24 maxlen: 24
198.163.194.0/23 maxlen: 23
198.163.194.0/24 maxlen: 24
198.163.195.0/24 maxlen: 24
198.163.196.0/24 maxlen: 24
198.163.197.0/24 maxlen: 24
198.163.198.0/24 maxlen: 24
198.163.199.0/24 maxlen: 24
198.163.200.0/24 maxlen: 24
198.163.201.0/24 maxlen: 24
198.163.202.0/24 maxlen: 24
198.163.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:a8:28:53:79:b5:52:5e:78:90:1e:76:a9:06:70:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Jul 14 08:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c553377530d83314cd2b4c741a5b78e3eadd380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:43:a0:0f:72:2c:ba:88:b9:84:21:16:9a:ae:
b4:6d:d3:7e:a8:c0:0a:6f:cb:78:16:63:17:d1:aa:
bf:89:57:44:0a:d1:fa:3e:c9:05:8b:4d:05:84:ed:
7c:75:03:de:8e:74:5e:c9:a8:21:a1:05:43:ac:dd:
ef:19:f6:d2:8f:14:69:40:ae:ca:80:fc:fe:28:ce:
ca:b3:a8:cc:cc:38:28:37:92:ab:3c:e0:09:73:a5:
57:ed:28:3a:bf:8b:5f:95:c6:21:19:b9:d9:fd:ac:
ac:30:a3:32:f6:6d:8e:f4:07:33:1b:c7:1d:82:b1:
45:d5:69:56:bd:0e:67:08:8c:b7:8e:f8:ab:c3:b7:
8e:94:17:2b:4f:26:e1:bc:8c:c0:b5:05:d0:86:c9:
59:68:13:2c:33:5a:f9:24:bc:ca:e4:08:3a:70:b9:
49:36:7b:5f:78:4e:65:83:a1:44:79:06:17:0b:4b:
50:e7:2c:f0:82:1a:cd:f8:9c:1a:14:af:10:82:34:
6d:7d:84:ff:37:8a:1c:84:06:a6:b3:74:2d:79:2e:
d4:56:8e:23:51:0c:14:e1:32:cf:5b:17:3a:93:6d:
ff:38:f8:58:70:0d:01:ea:ed:65:1d:5d:a3:6f:b5:
8d:01:62:2f:9e:a4:2b:66:8e:aa:32:b1:22:d7:3a:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:55:33:77:53:0D:83:31:4C:D2:B4:C7:41:A5:B7:8E:3E:AD:D3:80
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/LFUzd1MNgzFM0rTHQaW3jj6t04A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.120.0/22
45.150.24.0/22
83.222.6.0/23
84.54.64.0-84.54.112.255
84.54.115.0-84.54.123.255
86.62.0.0/22
87.192.224.0-87.192.251.255
89.104.102.0/24
89.223.3.0/24
89.249.60.0/22
90.156.160.0/21
90.156.192.0/21
93.188.80.0/21
94.230.232.0/24
109.94.174.0/23
144.124.192.0/20
185.4.160.0/22
185.203.236.0/22
194.93.24.0/22
198.163.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:ef:c6:01:f1:59:28:56:93:d6:24:76:4c:01:aa:63:6a:54:
14:00:fe:76:24:39:c1:d1:79:86:94:06:45:67:40:18:f5:84:
cb:99:97:7a:8c:c5:3b:a9:0b:6a:8c:6d:b6:5e:11:d8:4d:28:
1b:e4:45:f0:7b:fc:6c:fc:5e:a2:fd:04:2e:bb:83:48:45:60:
e9:56:8b:17:56:84:31:fa:6b:42:c5:db:11:08:f0:44:a4:52:
34:bf:79:8a:c9:60:fe:af:95:3b:57:13:b7:90:7d:9c:b3:26:
51:98:bf:1a:bc:3f:b4:8e:b7:07:1a:86:3c:c0:38:45:9c:ec:
5e:ff:b5:9b:9f:fd:2f:84:ba:e2:51:93:7a:51:85:7e:b0:ab:
47:f0:89:09:82:c0:77:66:e5:cd:32:21:01:66:32:3a:d6:af:
0d:60:7a:4c:d6:66:2d:1c:c2:6f:d7:99:f3:0f:2f:f8:c3:99:
78:86:32:73:c7:ec:d7:1e:0f:d9:09:71:0b:83:f7:de:b3:3a:
5b:ba:1a:11:e2:e7:98:bd:0e:d9:e8:91:cf:3b:f7:e5:6c:b2:
55:c0:e8:56:63:88:38:e5:ca:7b:15:58:71:17:be:8c:cf:47:
56:ef:f6:73:61:66:b3:0c:8c:7b:9f:7f:c6:d9:26:cc:ca:8c:
4d:bd:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:53 2026 by rpki-client