Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C7D7XPheIDuTZhG15tno_erwJRw.roa
File: C7D7XPheIDuTZhG15tno_erwJRw.roa (raw, json)
Hash identifier: /Vd8YiTmLQeVyw0ycYgYRVXkTdPrdSfEhnN/hwVEE48=
Subject key identifier: 0B:B0:FB:5C:F8:5E:20:3B:93:66:11:B5:E6:D9:E8:FD:EA:F0:25:1C
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019D8616420CE6EAD3954022256F87A7B582
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C7D7XPheIDuTZhG15tno_erwJRw.roa
Signing time: Mon 13 Apr 2026 09:04:58 +0000
ROA not before: Mon 13 Apr 2026 09:04:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199527
IP address blocks: 83.223.134.0/24 maxlen: 24
83.223.135.0/24 maxlen: 24
83.223.157.0/24 maxlen: 24
85.254.12.0/24 maxlen: 24
85.254.13.0/24 maxlen: 24
85.254.15.0/24 maxlen: 24
85.254.63.0/24 maxlen: 24
91.190.61.0/24 maxlen: 24
159.148.149.0/24 maxlen: 24
159.148.181.0/24 maxlen: 24
188.64.176.0/24 maxlen: 24
188.64.177.0/24 maxlen: 24
188.64.178.0/24 maxlen: 24
188.64.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:16:42:0c:e6:ea:d3:95:40:22:25:6f:87:a7:b5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Apr 13 09:04:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bb0fb5cf85e203b936611b5e6d9e8fdeaf0251c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:39:90:f5:22:74:d0:7f:6e:8d:6b:ba:dc:
b4:fc:52:a8:6b:17:61:66:ad:75:4b:da:26:19:b9:
9f:22:83:14:3b:a7:8c:1e:76:87:20:ef:bd:b3:f0:
f3:62:73:b2:f0:bb:b4:72:96:2c:9f:b2:2f:7b:6b:
f5:95:88:a0:bb:b3:42:0d:cc:b7:e5:75:e0:d9:1e:
7d:6c:d0:54:3d:07:e4:f6:d8:c0:5e:72:4f:41:4b:
04:d7:a9:28:2c:b5:be:72:08:6f:02:b5:fd:26:9b:
cc:56:74:e2:41:37:c0:6c:7e:ab:71:2d:16:cb:d3:
0b:e5:70:4b:a2:0a:0b:fc:27:47:da:72:25:fa:0f:
df:08:2a:16:01:44:9b:2f:76:9c:21:80:75:9d:c3:
ba:c5:c2:36:36:f0:29:e7:5f:64:af:2e:78:88:da:
66:f1:2b:cf:ad:d0:b1:cc:d6:71:18:4a:5e:57:d2:
fe:71:8b:70:f7:86:a3:c3:9a:8e:35:7a:27:84:df:
df:64:d5:9c:ce:d1:17:5d:50:e2:b5:56:12:38:b5:
ba:df:26:c4:bf:c8:98:64:76:f3:a5:0e:9d:37:ce:
8e:0b:0e:9d:17:f8:c1:cc:01:38:c7:ed:a8:6b:ee:
c9:96:37:30:6f:7a:92:c2:5d:0e:4b:d0:4e:ef:aa:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:FB:5C:F8:5E:20:3B:93:66:11:B5:E6:D9:E8:FD:EA:F0:25:1C
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C7D7XPheIDuTZhG15tno_erwJRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.134.0/23
83.223.157.0/24
85.254.12.0/23
85.254.15.0/24
85.254.63.0/24
91.190.61.0/24
159.148.149.0/24
159.148.181.0/24
188.64.176.0/22
Signature Algorithm: sha256WithRSAEncryption
87:83:95:06:b8:5a:e8:df:1f:4a:6d:16:f4:c5:3b:2b:48:e0:
7d:e5:bb:7f:f2:0b:7b:46:7c:c5:86:3d:2c:1e:54:09:a3:78:
1d:af:d6:cf:b3:bc:8e:25:6f:e3:e4:7e:90:4c:83:89:14:54:
c1:5a:64:06:6c:87:97:c5:10:0f:4a:51:4f:51:e0:da:23:28:
e8:1e:54:d3:3d:ed:03:88:0a:0e:8f:9e:2d:45:3c:af:ba:ca:
7d:2b:52:ca:e6:79:be:aa:66:8b:68:47:92:9e:26:b6:a9:99:
4d:03:17:65:93:5a:39:70:e5:3b:5a:93:6e:fd:0d:d0:3f:cf:
c3:54:49:3c:b9:f6:9f:1d:71:6a:0f:6c:e3:0c:ce:e1:8f:93:
fe:fd:80:d8:a6:52:74:dd:40:60:85:36:bf:fa:ca:99:d3:af:
78:8b:08:65:67:44:9f:b3:d7:d3:25:01:98:23:5c:3f:0d:4a:
92:95:3f:4c:0e:20:4c:c7:d9:67:f8:07:a5:ed:c2:d1:23:d3:
c5:37:61:e6:64:be:29:e1:88:c8:b5:b5:e0:f9:27:31:10:7b:
e0:1d:7e:40:e5:df:da:6f:88:d2:5d:0c:af:e1:c7:60:3a:90:
3a:ec:55:72:a5:ef:d1:33:93:3c:c3:26:44:14:e2:f6:d6:07:
cd:bb:30:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:25 2026 by rpki-client