Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mi0J7mv-SkKQsQAzEBAwrx2gH_8.roa
File: mi0J7mv-SkKQsQAzEBAwrx2gH_8.roa (raw, json)
Hash identifier: go4ms6mmEWeJMfmQ0fnJ0PFx7AbSfmEgaAcAsslS+wg=
Subject key identifier: 9A:2D:09:EE:6B:FE:4A:42:90:B1:00:33:10:10:30:AF:1D:A0:1F:FF
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0A48F933747E427843FBC268072C0CB30
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mi0J7mv-SkKQsQAzEBAwrx2gH_8.roa
Signing time: Tue 15 Sep 2026 10:14:27 +0000
ROA not before: Tue 15 Sep 2026 10:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 134.49.67.0/24 maxlen: 24
134.49.69.0/24 maxlen: 24
134.49.72.0/24 maxlen: 24
134.49.76.0/24 maxlen: 24
134.49.80.0/24 maxlen: 24
134.49.83.0/24 maxlen: 24
134.49.85.0/24 maxlen: 24
134.49.88.0/24 maxlen: 24
136.176.168.0/24 maxlen: 24
136.176.177.0/24 maxlen: 24
136.176.185.0/24 maxlen: 24
145.63.161.0/24 maxlen: 24
145.63.163.0/24 maxlen: 24
145.63.165.0/24 maxlen: 24
145.63.168.0/24 maxlen: 24
145.63.172.0/24 maxlen: 24
145.63.181.0/24 maxlen: 24
145.63.184.0/24 maxlen: 24
145.63.186.0/24 maxlen: 24
145.63.187.0/24 maxlen: 24
145.63.189.0/24 maxlen: 24
147.90.22.0/24 maxlen: 24
147.90.34.0/24 maxlen: 24
147.90.52.0/24 maxlen: 24
147.90.77.0/24 maxlen: 24
147.90.194.0/24 maxlen: 24
147.90.203.0/24 maxlen: 24
147.90.204.0/24 maxlen: 24
147.90.215.0/24 maxlen: 24
147.90.228.0/24 maxlen: 24
147.90.233.0/24 maxlen: 24
158.173.185.0/24 maxlen: 24
158.173.200.0/24 maxlen: 24
158.173.202.0/24 maxlen: 24
158.173.207.0/24 maxlen: 24
158.173.213.0/24 maxlen: 24
158.173.226.0/24 maxlen: 24
173.209.1.0/24 maxlen: 24
173.209.3.0/24 maxlen: 24
173.209.9.0/24 maxlen: 24
173.209.14.0/24 maxlen: 24
173.209.15.0/24 maxlen: 24
173.209.17.0/24 maxlen: 24
173.209.20.0/24 maxlen: 24
173.209.23.0/24 maxlen: 24
173.209.26.0/24 maxlen: 24
173.209.27.0/24 maxlen: 24
173.209.29.0/24 maxlen: 24
185.161.110.0/24 maxlen: 24
203.188.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:8f:93:37:47:e4:27:84:3f:bc:26:80:72:c0:cb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 15 10:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a2d09ee6bfe4a4290b10033101030af1da01fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:2a:23:06:4d:4a:24:ab:d0:99:93:d0:7f:
fe:e1:52:70:b1:1f:f5:8c:a6:3a:5a:96:5b:ec:5e:
da:d5:1b:2c:95:d0:4c:33:e4:49:0a:6d:ad:c4:15:
30:48:7b:58:e4:6d:f2:b5:fa:ce:ba:59:ba:44:0b:
4e:33:30:37:78:a0:93:79:b7:92:86:a8:30:1c:1a:
c3:46:53:fb:f7:e9:03:52:c4:ae:27:45:80:d1:f9:
9e:f9:62:8b:6f:b6:86:4f:c7:a4:1b:fb:23:32:03:
2b:f7:1a:86:48:6b:87:91:9b:cf:9d:fa:6d:6b:8c:
d7:31:b3:83:45:45:8d:b3:07:b9:c9:27:0f:19:fe:
44:3d:3a:ca:b6:2f:11:04:0d:49:85:24:3e:75:86:
78:c5:06:7e:6b:42:22:39:ec:fc:38:15:7e:61:ce:
56:9c:ba:f6:65:de:9f:30:c1:bc:b9:13:83:c4:10:
61:22:aa:78:ab:5d:4c:9c:39:4f:75:40:eb:5b:79:
a2:b9:c5:2f:78:5e:51:cd:f2:d3:95:7e:83:41:e1:
cc:a9:a2:95:a6:56:19:3c:13:84:77:1b:06:7b:c8:
9e:2b:d6:0e:0a:e5:a7:d0:6f:e6:50:77:24:e0:f0:
32:01:73:a1:10:5f:7b:09:58:55:cc:7f:b7:53:22:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2D:09:EE:6B:FE:4A:42:90:B1:00:33:10:10:30:AF:1D:A0:1F:FF
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mi0J7mv-SkKQsQAzEBAwrx2gH_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.49.67.0/24
134.49.69.0/24
134.49.72.0/24
134.49.76.0/24
134.49.80.0/24
134.49.83.0/24
134.49.85.0/24
134.49.88.0/24
136.176.168.0/24
136.176.177.0/24
136.176.185.0/24
145.63.161.0/24
145.63.163.0/24
145.63.165.0/24
145.63.168.0/24
145.63.172.0/24
145.63.181.0/24
145.63.184.0/24
145.63.186.0/23
145.63.189.0/24
147.90.22.0/24
147.90.34.0/24
147.90.52.0/24
147.90.77.0/24
147.90.194.0/24
147.90.203.0-147.90.204.255
147.90.215.0/24
147.90.228.0/24
147.90.233.0/24
158.173.185.0/24
158.173.200.0/24
158.173.202.0/24
158.173.207.0/24
158.173.213.0/24
158.173.226.0/24
173.209.1.0/24
173.209.3.0/24
173.209.9.0/24
173.209.14.0/23
173.209.17.0/24
173.209.20.0/24
173.209.23.0/24
173.209.26.0/23
173.209.29.0/24
185.161.110.0/24
203.188.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:52:d9:2c:f2:47:e9:44:e8:56:80:08:df:89:c1:12:cf:c9:
b0:44:29:ff:e8:12:1e:ef:57:a6:21:1b:8e:1f:53:97:fb:b2:
4d:46:cb:c6:7a:00:10:2c:1f:79:96:8f:a0:75:74:3f:be:31:
fc:ef:d3:b5:9a:ec:77:52:7a:f5:65:84:2a:62:84:aa:ec:ac:
83:df:b5:ca:44:0c:a7:1d:86:27:85:13:fb:4e:bf:64:eb:91:
54:98:e9:68:32:76:cc:39:e6:14:18:2c:f1:f4:c6:bd:bd:21:
1f:c7:a0:bd:cd:bf:48:9e:8f:60:aa:91:dd:71:ff:d4:89:7c:
6f:41:8a:93:4d:fd:f2:90:48:53:d9:67:20:68:30:d9:f8:98:
ae:05:4e:8d:e9:58:91:c5:5b:9b:42:62:81:7e:2d:f2:22:61:
ed:19:39:3a:42:c3:5e:8e:e4:d2:dc:2b:5e:e5:96:1d:b1:2c:
ee:3e:6e:84:45:39:99:28:06:0f:3b:bb:ed:92:6f:46:a6:37:
65:e1:9c:46:6a:a1:2c:4e:47:cf:47:de:a2:e4:50:0a:c0:0f:
54:a4:5c:f6:78:3e:dc:57:16:f9:5a:8c:2f:38:96:e2:e5:15:
7d:70:e5:cb:a8:d9:f5:40:2a:78:86:ed:58:89:d0:8f:60:58:
92:1f:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:32 2026 by rpki-client