Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/a9gOs16S7E8yMt4OCaHGofZ5_Nk.roa
File: a9gOs16S7E8yMt4OCaHGofZ5_Nk.roa (raw, json)
Hash identifier: STlb4G4+2zO56FQhlRnjRCZNYNouodVHaskNufokcfk=
Subject key identifier: 6B:D8:0E:B3:5E:92:EC:4F:32:32:DE:0E:09:A1:C6:A1:F6:79:FC:D9
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 019EAB62DBB12374C3D111820DD7F9A7DDD8
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/a9gOs16S7E8yMt4OCaHGofZ5_Nk.roa
Signing time: Tue 09 Jun 2026 07:57:23 +0000
ROA not before: Tue 09 Jun 2026 07:57:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215597
IP address blocks: 5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.222.0/24 maxlen: 24
82.199.223.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.206.0/24 maxlen: 24
185.95.207.0/24 maxlen: 24
212.95.142.0/24 maxlen: 24
212.95.148.0/24 maxlen: 24
212.95.156.0/24 maxlen: 24
212.95.158.0/24 maxlen: 24
223.25.127.0/24 maxlen: 24
2a12:f680:200::/48 maxlen: 48
2a12:f680:201::/48 maxlen: 48
2a12:f680:204::/48 maxlen: 48
2a12:f680:205::/48 maxlen: 48
2a12:f680:206::/48 maxlen: 48
2a12:f680:207::/48 maxlen: 48
2a12:f680:208::/48 maxlen: 48
2a12:f680:214::/48 maxlen: 48
2a12:f680:220::/43 maxlen: 43
2a12:f680:220::/45 maxlen: 45
2a12:f680:228::/45 maxlen: 45
2a12:f680:230::/45 maxlen: 45
2a12:f680:238::/45 maxlen: 45
2a12:f680:240::/43 maxlen: 43
2a12:f680:240::/45 maxlen: 45
2a12:f680:248::/45 maxlen: 45
2a12:f680:250::/45 maxlen: 45
2a12:f680:258::/45 maxlen: 45
2a12:f680:260::/43 maxlen: 43
2a12:f680:260::/45 maxlen: 45
2a12:f680:268::/45 maxlen: 45
2a12:f680:270::/45 maxlen: 45
2a12:f680:278::/45 maxlen: 45
2a12:f680:600::/48 maxlen: 48
2a12:f680:601::/48 maxlen: 48
2a12:f680:602::/48 maxlen: 48
2a12:f680:604::/48 maxlen: 48
2a12:f680:606::/48 maxlen: 48
2a12:f680:620::/43 maxlen: 43
2a12:f680:620::/45 maxlen: 45
2a12:f680:628::/45 maxlen: 45
2a12:f680:630::/45 maxlen: 45
2a12:f680:638::/45 maxlen: 45
2a12:f680:640::/43 maxlen: 43
2a12:f680:640::/45 maxlen: 45
2a12:f680:648::/45 maxlen: 45
2a12:f680:650::/45 maxlen: 45
2a12:f680:658::/45 maxlen: 45
2a12:f680:660::/43 maxlen: 43
2a12:f680:660::/45 maxlen: 45
2a12:f680:668::/45 maxlen: 45
2a12:f680:670::/45 maxlen: 45
2a12:f680:678::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:62:db:b1:23:74:c3:d1:11:82:0d:d7:f9:a7:dd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jun 9 07:57:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bd80eb35e92ec4f3232de0e09a1c6a1f679fcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:8f:a6:4e:18:e7:09:df:d4:47:dc:22:68:
18:35:81:10:03:31:eb:e0:df:19:7a:61:84:38:0f:
3a:bc:f4:12:2c:2e:35:64:97:d0:ce:b0:91:0e:33:
ed:4f:c9:37:61:a8:39:05:d3:43:57:52:5e:50:b7:
6c:51:75:e3:56:a7:b2:15:6c:46:66:52:4f:40:5a:
a3:f2:e1:99:24:11:56:74:80:9a:d1:f5:c8:90:ae:
49:a7:ed:de:ca:d7:9a:35:53:6b:51:db:f4:47:aa:
6f:c7:04:56:57:64:80:a6:0e:6a:8c:4d:f2:78:f3:
af:6c:ea:11:af:79:f3:7d:e9:a8:03:5c:cf:f5:a1:
4e:68:30:b6:02:3c:02:0e:2e:25:8d:15:9e:29:00:
df:95:58:6d:dd:4c:96:28:b5:03:7c:3a:6d:bc:a6:
9d:37:ad:9f:89:b5:3c:bb:ef:a9:4d:a0:6d:97:0f:
4a:aa:90:4a:bb:c3:2d:82:11:3b:b8:e3:1d:6e:9a:
ae:31:61:c0:4c:25:a1:37:7f:a0:f6:ca:72:f1:d7:
ed:d1:a6:e5:65:6c:25:eb:c4:11:63:78:58:28:f0:
fc:9c:a0:dc:93:b3:dc:c6:d1:14:a5:4d:af:ba:81:
ba:42:20:59:69:77:0c:e4:34:9a:79:9e:0d:b3:38:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:0E:B3:5E:92:EC:4F:32:32:DE:0E:09:A1:C6:A1:F6:79:FC:D9
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/a9gOs16S7E8yMt4OCaHGofZ5_Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0/23
82.199.222.0/23
91.213.191.0/24
91.217.185.0/24
185.95.206.0/23
212.95.142.0/24
212.95.148.0/24
212.95.156.0/24
212.95.158.0/24
223.25.127.0/24
IPv6:
2a12:f680:200::/47
2a12:f680:204::-2a12:f680:208:ffff:ffff:ffff:ffff:ffff
2a12:f680:214::/48
2a12:f680:220::-2a12:f680:27f:ffff:ffff:ffff:ffff:ffff
2a12:f680:600::-2a12:f680:602:ffff:ffff:ffff:ffff:ffff
2a12:f680:604::/48
2a12:f680:606::/48
2a12:f680:620::-2a12:f680:67f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
68:6c:6f:b3:6f:cf:0f:a1:96:4b:2e:87:a7:71:c5:5e:5f:5b:
a0:28:e0:a0:e1:bb:62:77:5b:62:71:b0:0a:0d:42:bc:43:24:
d1:d9:b4:e4:9c:b2:97:9e:c2:02:19:04:70:5f:30:fc:fb:8e:
a1:59:9c:68:25:00:46:ed:cd:93:8e:92:f6:ce:a6:ea:4a:13:
38:dd:7d:ba:1e:b2:cd:7b:b0:dc:4f:55:67:bc:07:f7:31:39:
56:df:88:b7:ed:ce:11:1c:fa:cb:b5:1e:88:3f:b3:14:dc:31:
9e:c2:aa:65:99:18:b7:29:fd:63:e0:bf:8b:41:84:15:97:e7:
50:e0:2d:81:8b:a7:52:f6:79:87:0c:c1:21:de:33:a4:a5:7d:
f2:54:1b:79:25:05:85:ce:9a:40:db:84:12:3e:98:19:b5:6f:
e6:ca:c5:64:ea:ec:85:94:19:82:49:92:15:9d:68:ea:4e:c0:
fb:87:95:cb:b1:24:2b:94:dd:e5:48:91:79:d5:98:e2:03:32:
51:b7:1b:1d:ab:9f:fc:fb:92:f6:0b:2a:f5:d8:7a:fd:b8:a9:
04:7e:0c:55:61:96:04:f0:13:99:66:d0:5e:fd:e7:8f:13:0f:
2d:3b:1f:46:d9:4c:47:f1:32:55:8b:15:ea:6d:1a:7b:ed:63:
2a:62:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:58:39 2026 by rpki-client