Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/FYqRCrDSz--YKTByq599Te7werQ.roa
File: FYqRCrDSz--YKTByq599Te7werQ.roa (raw, json)
Hash identifier: MDSMaflp92C6mCIxeSpzdTLiGnu3wRhs+JaAesx4ieI=
Subject key identifier: 15:8A:91:0A:B0:D2:CF:EF:98:29:30:72:AB:9F:7D:4D:EE:F0:7A:B4
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019EA73D90FC0B707259A83A093319466BCB
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/FYqRCrDSz--YKTByq599Te7werQ.roa
Signing time: Mon 08 Jun 2026 12:38:10 +0000
ROA not before: Mon 08 Jun 2026 12:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 5.180.136.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
45.9.74.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
45.133.245.0/24 maxlen: 24
45.133.246.0/24 maxlen: 24
46.17.106.0/24 maxlen: 24
85.209.0.0/24 maxlen: 24
95.214.8.0/24 maxlen: 24
139.28.220.0/24 maxlen: 24
139.28.221.0/24 maxlen: 24
185.17.2.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.94.167.0/24 maxlen: 24
185.104.250.0/24 maxlen: 24
185.105.118.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.188.181.0/24 maxlen: 24
185.229.65.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
193.109.84.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
194.53.54.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.67.200.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
2a0a:9300:1::/48 maxlen: 48
2a0a:9300:aaaa::/48 maxlen: 48
2a0b:da00::/32 maxlen: 32
2a0b:da01::/32 maxlen: 32
2a0b:da02::/32 maxlen: 32
2a0b:da03::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:3d:90:fc:0b:70:72:59:a8:3a:09:33:19:46:6b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jun 8 12:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=158a910ab0d2cfef98293072ab9f7d4deef07ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:1d:f1:a1:96:ac:44:00:53:98:c0:52:69:
3d:7f:ba:19:00:dd:b3:8e:d2:fb:3d:c0:e8:16:0a:
db:17:df:73:f6:1f:73:dd:fd:49:ab:17:9b:ee:1b:
f3:97:b6:59:af:3f:78:44:de:ba:02:94:58:2e:d7:
29:1c:a5:55:7e:36:55:ce:fe:d6:83:5a:0e:a5:e2:
76:6a:ee:3e:c9:68:da:a4:b0:00:93:7f:d3:30:ae:
97:50:44:22:e1:3e:80:94:74:53:a6:e0:ad:de:d8:
19:48:ea:48:44:d0:6e:c7:50:75:1f:52:01:5c:8b:
b2:b5:7e:02:5f:47:11:b7:a9:69:b6:cf:83:0d:b0:
61:1c:d2:0d:6d:b4:3e:32:21:5d:34:24:8c:56:a1:
1c:97:b6:26:cc:6f:18:b5:e7:09:07:62:4f:f4:0c:
03:19:b6:9f:4c:f7:e3:73:c3:c9:d6:5a:70:2d:4f:
e3:e3:27:c5:4e:ee:42:c7:d5:75:8e:0e:f0:03:0a:
9a:41:d6:78:47:5f:97:a6:66:3e:13:ee:4b:02:21:
4d:17:cb:fc:da:af:b7:bf:cb:08:24:b1:66:c0:2d:
a2:e3:49:30:f8:22:d8:de:bc:c7:94:6d:24:9d:7e:
05:24:d5:6e:b6:39:17:c0:3f:46:c7:2a:5e:e1:27:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8A:91:0A:B0:D2:CF:EF:98:29:30:72:AB:9F:7D:4D:EE:F0:7A:B4
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/FYqRCrDSz--YKTByq599Te7werQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.9.74.0/24
45.89.64.0/24
45.133.245.0-45.133.246.255
46.17.106.0/24
85.209.0.0/24
95.214.8.0/24
139.28.220.0/23
185.17.2.0/24
185.58.207.0/24
185.94.167.0/24
185.104.250.0/24
185.105.118.0/24
185.112.83.0/24
185.125.228.0/24
185.125.230.0/23
185.188.181.0/24
185.229.65.0-185.229.66.255
192.162.100.0/24
192.162.102.0/23
193.0.200.0/24
193.0.202.0/23
193.109.84.0/24
193.124.180.0/23
194.36.177.0/24
194.53.54.0/24
194.63.140.0/22
194.67.200.0/24
195.66.87.0/24
IPv6:
2a0a:9300:1::/48
2a0a:9300:aaaa::/48
2a0b:da00::/30
Signature Algorithm: sha256WithRSAEncryption
04:b6:89:a4:9b:81:f7:26:10:03:8b:d8:e3:fc:ce:93:92:61:
a8:ae:47:a6:d3:f3:f2:5c:bd:51:0a:b7:4a:c4:8e:95:88:a0:
4d:ae:d8:2a:e2:52:2b:ef:87:d6:79:93:22:81:e9:91:cf:aa:
c1:ec:a2:df:28:f7:6b:e7:66:50:a9:94:2a:12:c3:68:76:6d:
58:07:26:e3:8b:ce:eb:97:d5:e0:bc:de:8a:42:c7:eb:31:76:
38:f3:1b:46:00:53:b5:4a:7b:f4:e0:84:b1:5a:bd:24:16:ec:
5e:cd:9d:1a:ba:6a:33:4a:33:be:a4:31:f5:5c:10:a9:e6:ae:
34:70:1f:d5:bf:56:91:b0:35:b3:b8:20:7e:1a:18:43:5c:9b:
43:be:ab:83:90:0f:73:90:6e:8d:cb:7c:b6:81:a4:ac:22:0f:
13:44:25:1a:a0:94:4e:6f:d1:ce:1b:e0:05:cd:af:07:6a:c6:
57:53:1e:d8:4b:ab:fd:14:b6:0d:5c:70:28:5c:9a:63:1b:73:
1a:aa:6f:ea:e7:db:f2:b9:fb:ee:e3:61:5a:50:fe:e2:a7:17:
cf:8a:27:ab:2f:82:d1:e8:12:af:fd:b8:03:93:32:45:65:38:
02:8f:8c:99:70:b7:a8:91:3b:7a:63:4e:d1:2b:c7:bd:e3:13:
58:0c:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:21 2026 by rpki-client