Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/7BHrkta5DcfmRJ9QGXt7SrTu2Xs.roa
File: 7BHrkta5DcfmRJ9QGXt7SrTu2Xs.roa (raw, json)
Hash identifier: WflkvzVUJUW28OrasYS+BvErnK7oO9Zw/lOlmQjDvko=
Subject key identifier: EC:11:EB:92:D6:B9:0D:C7:E6:44:9F:50:19:7B:7B:4A:B4:EE:D9:7B
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019C952887722CA8FEBE64DF95F6C9A64C00
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/7BHrkta5DcfmRJ9QGXt7SrTu2Xs.roa
Signing time: Wed 25 Feb 2026 14:16:27 +0000
ROA not before: Wed 25 Feb 2026 14:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.117.52.0/24 maxlen: 24
45.117.54.0/24 maxlen: 24
45.123.144.0/24 maxlen: 24
103.4.248.0/24 maxlen: 24
103.4.249.0/24 maxlen: 24
103.4.250.0/24 maxlen: 24
103.4.251.0/24 maxlen: 24
103.49.152.0/24 maxlen: 24
103.49.153.0/24 maxlen: 24
103.49.154.0/24 maxlen: 24
103.49.155.0/24 maxlen: 24
103.196.8.0/24 maxlen: 24
103.196.9.0/24 maxlen: 24
103.216.0.0/24 maxlen: 24
103.216.1.0/24 maxlen: 24
103.216.2.0/24 maxlen: 24
103.216.3.0/24 maxlen: 24
139.5.22.0/24 maxlen: 24
139.5.23.0/24 maxlen: 24
205.188.16.0/22 maxlen: 22
205.188.44.0/22 maxlen: 22
205.188.110.0/24 maxlen: 24
205.188.160.0/23 maxlen: 23
205.188.168.0/24 maxlen: 24
205.188.176.0/23 maxlen: 23
205.188.196.0/22 maxlen: 22
205.188.232.0/22 maxlen: 22
205.188.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:28:87:72:2c:a8:fe:be:64:df:95:f6:c9:a6:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Feb 25 14:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec11eb92d6b90dc7e6449f50197b7b4ab4eed97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:39:f5:c9:40:0c:31:e4:40:94:4e:04:ee:
c5:75:bd:be:ac:17:b1:b8:8c:2b:15:0c:fe:82:d5:
be:a3:c2:cd:3b:bf:1b:92:b4:84:63:84:00:bf:a2:
32:4a:27:65:82:1f:86:e3:1f:d9:14:b6:70:ee:56:
53:8f:73:79:e3:cb:eb:bf:8e:20:74:4c:6f:7b:12:
91:b1:ee:6a:dc:85:f5:f2:89:65:17:17:31:07:ea:
e5:d4:d6:05:4d:51:2d:80:b5:6f:b6:3b:06:1d:ce:
f4:27:b9:35:6a:ad:cf:32:33:0d:78:95:fe:4c:92:
23:52:69:50:1a:de:be:02:22:48:27:da:94:3e:5f:
40:ae:76:44:01:85:c0:73:df:ea:45:15:77:4a:76:
88:5a:85:bb:be:4f:3d:a6:08:79:63:40:ce:6e:67:
e7:bf:fa:78:63:50:21:aa:6a:ad:84:d1:06:ee:0a:
17:64:79:a7:95:63:a9:0f:95:25:75:03:72:45:ab:
1c:98:4b:2b:f0:06:e0:98:52:d7:41:3b:b2:ee:c4:
fb:86:7b:1f:27:44:fa:7b:98:2a:8c:53:30:5a:2a:
93:ed:77:f1:e9:6c:7d:3b:c0:68:18:25:5d:62:89:
e2:c7:b3:43:e8:c4:eb:2f:96:20:18:fa:a2:e3:6b:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:EB:92:D6:B9:0D:C7:E6:44:9F:50:19:7B:7B:4A:B4:EE:D9:7B
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/7BHrkta5DcfmRJ9QGXt7SrTu2Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.52.0/24
45.117.54.0/24
45.123.144.0/24
103.4.248.0/22
103.49.152.0/22
103.196.8.0/23
103.216.0.0/22
139.5.22.0/23
205.188.16.0/22
205.188.44.0/22
205.188.110.0/24
205.188.160.0/23
205.188.168.0/24
205.188.176.0/23
205.188.196.0/22
205.188.232.0/22
205.188.244.0/23
Signature Algorithm: sha256WithRSAEncryption
23:99:ec:cb:92:be:d2:aa:45:6a:c9:0d:1b:27:2c:bb:f9:59:
01:9d:50:c1:cd:16:e5:b8:14:b5:cc:fb:9f:2d:e8:6e:68:d2:
80:5c:1b:5d:3d:70:cd:50:c1:82:b8:9b:e5:3a:22:43:c9:1a:
9e:49:09:04:b7:47:15:61:c7:c2:41:46:0a:67:c4:43:a3:07:
ae:5c:43:69:f0:9c:cf:c3:14:75:d8:19:4a:54:52:a4:a3:1e:
39:fa:c6:6c:b9:da:62:f2:db:c1:64:da:63:ec:e8:20:1b:0e:
42:2f:e5:b4:eb:98:f1:89:32:40:66:b4:94:95:a0:e4:4d:a9:
af:7c:2e:45:59:19:13:3e:a0:da:9c:86:ea:94:93:a9:7e:71:
40:22:e9:2e:86:93:ef:81:4c:b5:80:93:24:31:78:d2:29:10:
80:2c:f8:e7:85:c8:52:76:f9:70:eb:15:22:f9:5b:ca:97:71:
ae:a2:10:d3:15:4e:19:63:ce:11:b9:66:57:2d:6c:9a:9f:41:
75:a6:6f:ed:43:25:5e:26:99:f4:f6:e3:3a:60:ab:87:79:35:
e9:e3:96:56:b7:0d:a7:b2:c9:00:ec:7e:1b:93:fc:7d:3b:2d:
83:33:f8:88:54:c9:45:57:78:89:c8:bf:34:44:62:d3:c2:af:
d4:13:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:54 2026 by rpki-client