Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cEQmwtEU4sp5yOzlTGC1PUSB-rU.roa
File: cEQmwtEU4sp5yOzlTGC1PUSB-rU.roa (raw, json)
Hash identifier: kd4So8Cu7NcmTbzISgPFex+iq4YSwdicaoJofVHdDi0=
Subject key identifier: 70:44:26:C2:D1:14:E2:CA:79:C8:EC:E5:4C:60:B5:3D:44:81:FA:B5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A181D0B0E65B7274AFC20CEAD6655DCB03
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cEQmwtEU4sp5yOzlTGC1PUSB-rU.roa
Signing time: Wed 28 Oct 2026 09:21:39 +0000
ROA not before: Wed 28 Oct 2026 09:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 9.247.5.0/24 maxlen: 24
9.247.8.0/24 maxlen: 24
9.247.9.0/24 maxlen: 24
9.247.11.0/24 maxlen: 24
9.247.16.0/24 maxlen: 24
9.247.24.0/24 maxlen: 24
9.247.28.0/24 maxlen: 24
9.247.31.0/24 maxlen: 24
9.247.34.0/24 maxlen: 24
9.247.35.0/24 maxlen: 24
9.247.37.0/24 maxlen: 24
9.247.42.0/24 maxlen: 24
9.247.58.0/24 maxlen: 24
9.247.66.0/24 maxlen: 24
9.247.72.0/24 maxlen: 24
9.247.77.0/24 maxlen: 24
9.247.80.0/24 maxlen: 24
9.247.88.0/24 maxlen: 24
9.247.107.0/24 maxlen: 24
9.247.143.0/24 maxlen: 24
9.247.160.0/24 maxlen: 24
9.247.195.0/24 maxlen: 24
9.247.201.0/24 maxlen: 24
9.247.209.0/24 maxlen: 24
9.247.241.0/24 maxlen: 24
9.247.247.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
72.35.240.0/24 maxlen: 24
72.35.241.0/24 maxlen: 24
72.35.243.0/24 maxlen: 24
72.35.244.0/24 maxlen: 24
78.17.20.0/24 maxlen: 24
78.17.21.0/24 maxlen: 24
78.17.23.0/24 maxlen: 24
78.17.30.0/24 maxlen: 24
78.17.31.0/24 maxlen: 24
78.17.58.0/24 maxlen: 24
78.17.61.0/24 maxlen: 24
78.17.81.0/24 maxlen: 24
78.17.168.0/24 maxlen: 24
78.17.229.0/24 maxlen: 24
89.125.223.0/24 maxlen: 24
89.125.242.0/24 maxlen: 24
89.125.245.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
104.143.194.0/24 maxlen: 24
104.143.195.0/24 maxlen: 24
104.143.200.0/24 maxlen: 24
140.225.196.0/24 maxlen: 24
140.225.205.0/24 maxlen: 24
153.76.192.0/24 maxlen: 24
153.76.197.0/24 maxlen: 24
153.76.201.0/24 maxlen: 24
153.76.206.0/24 maxlen: 24
153.76.207.0/24 maxlen: 24
153.76.209.0/24 maxlen: 24
153.76.210.0/24 maxlen: 24
153.76.219.0/24 maxlen: 24
153.76.220.0/24 maxlen: 24
153.76.222.0/24 maxlen: 24
153.76.223.0/24 maxlen: 24
162.35.227.0/24 maxlen: 24
206.245.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:d0:b0:e6:5b:72:74:af:c2:0c:ea:d6:65:5d:cb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 28 09:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=704426c2d114e2ca79c8ece54c60b53d4481fab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:30:bc:e7:9e:d6:a4:29:cd:77:47:38:a8:
a9:29:9f:38:09:bb:49:14:38:11:b6:6a:db:57:1f:
4e:28:72:35:1a:be:2d:c4:93:0e:01:65:7f:79:9d:
db:e8:45:b7:ab:c9:5c:18:1c:7d:e7:77:94:97:45:
19:65:0e:f1:da:d6:55:6e:8c:dd:f4:61:cd:70:4d:
29:52:4b:f4:21:da:9c:a9:6a:85:e5:c9:16:6b:da:
cd:b4:84:6f:bb:53:28:d1:d4:0b:d3:5b:64:df:9d:
f5:9c:52:4c:f8:45:4c:d1:8d:ba:57:c4:a8:cd:da:
f8:74:a8:9a:64:87:17:bc:6b:b1:97:55:cd:bd:32:
75:a6:e9:e3:c8:ec:9d:95:12:3e:a4:bd:ce:12:25:
a5:3f:2e:cf:cd:a9:28:50:b4:0a:b0:85:93:a0:55:
8f:a3:1a:69:5e:17:96:15:94:45:cc:e9:28:fa:3d:
e4:c2:50:03:41:e7:7e:a1:e1:ce:8a:5b:99:2d:1a:
59:c6:d2:22:3e:69:b6:6a:d6:56:e4:46:26:91:8a:
d7:4e:32:84:bb:1a:86:e3:97:9a:07:fa:cf:37:45:
ad:59:3a:bc:d7:ac:50:05:91:cb:12:73:d7:66:03:
37:08:cb:b0:1a:c8:0c:8e:38:6c:10:a0:e3:df:17:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:26:C2:D1:14:E2:CA:79:C8:EC:E5:4C:60:B5:3D:44:81:FA:B5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cEQmwtEU4sp5yOzlTGC1PUSB-rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.5.0/24
9.247.8.0/23
9.247.11.0/24
9.247.16.0/24
9.247.24.0/24
9.247.28.0/24
9.247.31.0/24
9.247.34.0/23
9.247.37.0/24
9.247.42.0/24
9.247.58.0/24
9.247.66.0/24
9.247.72.0/24
9.247.77.0/24
9.247.80.0/24
9.247.88.0/24
9.247.107.0/24
9.247.143.0/24
9.247.160.0/24
9.247.195.0/24
9.247.201.0/24
9.247.209.0/24
9.247.241.0/24
9.247.247.0/24
46.102.237.0/24
72.35.240.0/23
72.35.243.0-72.35.244.255
78.17.20.0/23
78.17.23.0/24
78.17.30.0/23
78.17.58.0/24
78.17.61.0/24
78.17.81.0/24
78.17.168.0/24
78.17.229.0/24
89.125.223.0/24
89.125.242.0/24
89.125.245.0/24
103.245.228.0/24
104.143.194.0/23
104.143.200.0/24
140.225.196.0/24
140.225.205.0/24
153.76.192.0/24
153.76.197.0/24
153.76.201.0/24
153.76.206.0/23
153.76.209.0-153.76.210.255
153.76.219.0-153.76.220.255
153.76.222.0/23
162.35.227.0/24
206.245.145.0/24
Signature Algorithm: sha256WithRSAEncryption
22:26:b7:67:90:58:8e:cb:dc:58:df:b6:df:d1:54:93:50:09:
9f:99:c5:77:94:90:ec:32:e1:5a:78:fe:09:0d:ce:87:40:a2:
27:09:6d:a1:da:7f:e3:fc:37:84:d6:0e:67:10:e2:1f:70:13:
da:3c:fb:62:75:b4:54:07:1d:2d:1a:8a:31:35:d3:2a:9c:f0:
7f:0a:dc:bc:bf:00:55:7a:2a:7e:4e:f5:40:45:73:f9:cf:b1:
0b:23:c1:39:fb:b0:eb:f7:6a:4d:27:cc:ea:4a:03:a5:d1:ad:
5e:93:75:89:3c:9a:93:1e:ab:2b:d1:5f:6f:37:b2:67:b2:87:
28:f2:0d:ac:07:6f:60:37:ac:7a:8c:66:37:ad:98:f5:cf:9f:
da:71:f3:b5:3d:ea:61:41:e7:b8:e0:7e:29:d8:2b:05:d2:46:
48:b3:22:d0:6d:bc:f9:6f:12:21:4e:78:05:76:81:29:07:c0:
45:78:21:36:25:2a:11:b1:ab:45:e2:35:e2:81:32:6f:8a:10:
e4:ec:58:c9:dc:df:52:17:71:d6:2f:02:f8:6c:a4:d0:13:1e:
d5:06:9e:2e:8e:0a:70:94:ff:22:7e:58:d1:28:20:80:f7:8e:
71:35:38:a3:80:53:fe:67:27:cc:a6:5d:2f:e9:14:9b:d1:0c:
c8:1f:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:36:32 2026 by rpki-client