Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Me3NvWRl3icSqtdPDyeQhxJ3jC4.roa
File: Me3NvWRl3icSqtdPDyeQhxJ3jC4.roa (raw, json)
Hash identifier: d4F0sUND1NxJQIjPp+xXALKUMuYI1dSpMY2fd03gpPc=
Subject key identifier: 31:ED:CD:BD:64:65:DE:27:12:AA:D7:4F:0F:27:90:87:12:77:8C:2E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0AEC47DC529E6E5E393D0F98D0947C849
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Me3NvWRl3icSqtdPDyeQhxJ3jC4.roa
Signing time: Thu 17 Sep 2026 09:48:27 +0000
ROA not before: Thu 17 Sep 2026 09:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 9.247.5.0/24 maxlen: 24
9.247.8.0/24 maxlen: 24
9.247.9.0/24 maxlen: 24
9.247.11.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
72.35.240.0/24 maxlen: 24
72.35.241.0/24 maxlen: 24
72.35.243.0/24 maxlen: 24
72.35.244.0/24 maxlen: 24
78.17.20.0/24 maxlen: 24
78.17.21.0/24 maxlen: 24
78.17.23.0/24 maxlen: 24
78.17.30.0/24 maxlen: 24
78.17.31.0/24 maxlen: 24
78.17.58.0/24 maxlen: 24
78.17.61.0/24 maxlen: 24
78.17.81.0/24 maxlen: 24
78.17.168.0/24 maxlen: 24
78.17.229.0/24 maxlen: 24
89.125.223.0/24 maxlen: 24
89.125.242.0/24 maxlen: 24
89.125.245.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
104.143.194.0/24 maxlen: 24
104.143.195.0/24 maxlen: 24
104.143.200.0/24 maxlen: 24
140.225.196.0/24 maxlen: 24
140.225.205.0/24 maxlen: 24
153.76.192.0/24 maxlen: 24
153.76.197.0/24 maxlen: 24
153.76.201.0/24 maxlen: 24
153.76.206.0/24 maxlen: 24
153.76.207.0/24 maxlen: 24
153.76.209.0/24 maxlen: 24
153.76.210.0/24 maxlen: 24
153.76.219.0/24 maxlen: 24
153.76.220.0/24 maxlen: 24
153.76.222.0/24 maxlen: 24
153.76.223.0/24 maxlen: 24
162.35.227.0/24 maxlen: 24
206.245.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:c4:7d:c5:29:e6:e5:e3:93:d0:f9:8d:09:47:c8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 17 09:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31edcdbd6465de2712aad74f0f27908712778c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:ae:13:2d:a4:f1:3a:fa:b2:56:b7:02:fc:
f2:b7:3e:d4:c5:a1:f8:9f:8e:be:f9:20:f5:ba:27:
75:45:50:ac:42:e4:bd:ac:d7:48:20:b3:fe:38:17:
8a:68:85:27:41:21:45:bc:33:f3:33:d2:81:40:62:
59:8c:2a:bc:da:a4:0c:0f:01:46:a0:19:e8:b5:e3:
b0:86:30:b4:17:6a:6d:48:54:a8:db:5f:df:68:a2:
e2:bc:f6:ed:4b:da:2b:a2:90:b0:c6:a4:c4:e2:84:
f6:6f:c7:ef:4c:c3:bb:58:92:8b:d0:d6:68:51:48:
96:9b:76:1f:76:4e:1e:ec:0a:8d:7b:fc:b1:99:90:
11:0d:e0:65:a5:f3:8d:99:68:b8:85:70:d2:ca:52:
83:11:ef:51:96:7a:a6:f6:37:d2:ae:3b:a5:39:40:
87:f8:cf:85:c6:93:8c:1a:bd:0e:bd:01:a7:9e:70:
e5:f0:d9:64:a4:40:b8:2b:34:b9:94:cd:ae:8d:ce:
63:fe:fb:73:be:18:b5:d6:ce:9f:ec:2e:7b:21:87:
93:db:aa:1b:bf:c0:44:2f:34:c2:44:92:31:20:8c:
1a:96:34:10:22:4c:ad:18:2d:4a:bd:f5:74:d5:ca:
ae:15:19:12:b6:d5:a5:84:a9:63:55:52:e1:fc:b4:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:ED:CD:BD:64:65:DE:27:12:AA:D7:4F:0F:27:90:87:12:77:8C:2E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Me3NvWRl3icSqtdPDyeQhxJ3jC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.5.0/24
9.247.8.0/23
9.247.11.0/24
46.102.237.0/24
72.35.240.0/23
72.35.243.0-72.35.244.255
78.17.20.0/23
78.17.23.0/24
78.17.30.0/23
78.17.58.0/24
78.17.61.0/24
78.17.81.0/24
78.17.168.0/24
78.17.229.0/24
89.125.223.0/24
89.125.242.0/24
89.125.245.0/24
103.245.228.0/24
104.143.194.0/23
104.143.200.0/24
140.225.196.0/24
140.225.205.0/24
153.76.192.0/24
153.76.197.0/24
153.76.201.0/24
153.76.206.0/23
153.76.209.0-153.76.210.255
153.76.219.0-153.76.220.255
153.76.222.0/23
162.35.227.0/24
206.245.145.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5a:a0:76:38:e8:07:e4:f4:87:b0:96:a3:ad:61:cb:74:19:
34:be:65:bf:82:1e:16:71:c4:5c:40:31:92:55:15:18:69:e4:
19:64:9f:4d:43:38:02:a0:01:19:db:fd:96:55:62:c1:86:7b:
80:3a:58:d2:ba:18:b9:9f:94:83:63:1e:c7:d7:6e:d4:b3:0b:
40:61:ae:88:d5:fe:fd:77:4f:23:36:3e:0e:9f:a1:d3:c3:9f:
91:7d:ba:70:cf:7d:e3:74:ee:a5:51:b5:ae:41:fd:ce:be:69:
85:11:0e:6c:1d:51:a2:18:5f:a3:5c:23:5e:b1:4b:a4:ba:20:
fe:41:3a:5c:e9:1c:e5:a0:e7:1c:88:3d:2f:69:66:dd:da:a2:
98:c0:6a:56:32:ae:79:d3:3e:b2:ec:4e:ac:6a:f2:6a:6e:ed:
e9:33:78:3a:31:b1:c3:68:b2:cd:97:d3:b8:44:da:a4:19:aa:
c8:8f:50:bc:72:04:16:7b:b2:11:c7:dd:a4:38:60:e0:37:dc:
53:1e:dd:d0:89:ef:6b:66:1f:45:4d:fa:76:9d:be:4d:a3:70:
0d:a2:cf:9a:fc:7e:d7:95:02:ef:84:08:e7:66:37:ab:88:ed:
92:3c:7b:4d:72:aa:fa:35:af:46:96:96:42:69:93:55:fc:5c:
ba:b8:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:36 2026 by rpki-client