Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/4gs500MERtvMt5OZu7lrMcyz10o.roa
File: 4gs500MERtvMt5OZu7lrMcyz10o.roa (raw, json)
Hash identifier: uFqZbLbzINHGvPXidAk2EgxJWagDxB6yUeuUg/XDj4c=
Subject key identifier: E2:0B:39:D3:43:04:46:DB:CC:B7:93:99:BB:B9:6B:31:CC:B3:D7:4A
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 019FA9D3BF63C92C8891DE97A605B9EFF862
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/4gs500MERtvMt5OZu7lrMcyz10o.roa
Signing time: Tue 28 Jul 2026 17:44:14 +0000
ROA not before: Tue 28 Jul 2026 17:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 65.38.102.0/23 maxlen: 32
65.38.104.0/23 maxlen: 32
66.45.17.0/24 maxlen: 32
66.45.18.0/23 maxlen: 32
66.45.38.0/23 maxlen: 32
66.45.61.0/24 maxlen: 32
66.45.63.0/24 maxlen: 32
66.45.114.0/23 maxlen: 32
66.179.36.0/23 maxlen: 32
66.179.88.0/23 maxlen: 32
66.179.99.0/24 maxlen: 32
66.179.106.0/23 maxlen: 32
66.179.161.0/24 maxlen: 32
66.179.204.0/23 maxlen: 32
66.179.207.0/24 maxlen: 32
66.179.213.0/24 maxlen: 32
66.179.247.0/24 maxlen: 32
67.202.232.0/24 maxlen: 32
69.48.213.0/24 maxlen: 32
69.71.220.0/24 maxlen: 32
69.161.128.0/20 maxlen: 32
69.161.144.0/20 maxlen: 32
69.161.144.0/24 maxlen: 24
69.161.145.0/24 maxlen: 24
69.161.146.0/23 maxlen: 32
69.161.146.0/24 maxlen: 32
69.161.147.0/24 maxlen: 32
69.161.148.0/23 maxlen: 23
69.161.150.0/24 maxlen: 24
69.161.151.0/24 maxlen: 24
69.161.152.0/24 maxlen: 24
69.161.153.0/24 maxlen: 24
69.161.154.0/23 maxlen: 23
69.161.156.0/24 maxlen: 24
69.161.157.0/24 maxlen: 24
69.161.158.0/24 maxlen: 32
69.161.159.0/24 maxlen: 24
69.164.84.0/23 maxlen: 32
69.164.87.0/24 maxlen: 32
69.164.88.0/23 maxlen: 32
69.164.96.0/24 maxlen: 32
74.205.245.0/24 maxlen: 32
108.60.0.0/20 maxlen: 32
153.52.192.0/19 maxlen: 32
153.79.112.0/20 maxlen: 32
161.104.68.0/22 maxlen: 32
161.104.72.0/22 maxlen: 22
173.209.230.0/23 maxlen: 32
209.46.56.0/23 maxlen: 32
216.177.153.0/24 maxlen: 32
216.177.154.0/24 maxlen: 32
216.183.118.0/23 maxlen: 32
216.183.126.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:d3:bf:63:c9:2c:88:91:de:97:a6:05:b9:ef:f8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jul 28 17:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e20b39d3430446dbccb79399bbb96b31ccb3d74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:5b:81:74:b4:b6:6a:57:96:00:b2:f3:f8:
ea:68:cb:5d:3c:f2:fd:48:9d:87:5f:a1:e0:50:f7:
d1:1f:e6:d2:3f:c5:8b:41:78:26:0b:42:b6:b4:f6:
b8:10:de:70:f8:6f:f2:98:f5:a2:f6:2c:fd:13:40:
7e:a0:a5:eb:11:9e:d5:f0:ef:01:58:27:63:31:24:
38:d4:36:d5:f8:25:23:24:6b:20:8c:8c:31:f4:cb:
4e:51:55:9f:36:5c:c0:a9:bb:93:66:02:41:1c:ec:
74:61:72:f5:7a:af:65:43:a9:2d:3c:fc:08:6b:52:
8b:32:95:18:01:a2:97:79:0c:84:da:ce:0f:fc:10:
ac:8b:b2:fe:67:2c:51:23:f2:91:58:dc:89:c7:82:
c1:0a:f6:27:4f:bd:ab:b6:4a:8b:77:f2:41:2e:32:
0e:ce:09:13:82:26:f6:b8:a6:07:b3:36:52:9a:23:
04:51:8a:64:20:75:03:3e:6c:56:2d:13:91:75:86:
74:a0:4d:5a:fc:41:ed:54:7c:54:cd:2d:3b:62:de:
db:ea:95:77:de:50:85:7a:23:46:08:b9:4c:b6:66:
bb:51:55:cf:58:6a:86:9d:ca:90:4f:c7:48:43:a7:
64:c2:4a:ac:87:20:eb:51:c9:1c:1a:7b:1d:da:ff:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0B:39:D3:43:04:46:DB:CC:B7:93:99:BB:B9:6B:31:CC:B3:D7:4A
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/4gs500MERtvMt5OZu7lrMcyz10o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.38.102.0-65.38.105.255
66.45.17.0-66.45.19.255
66.45.38.0/23
66.45.61.0/24
66.45.63.0/24
66.45.114.0/23
66.179.36.0/23
66.179.88.0/23
66.179.99.0/24
66.179.106.0/23
66.179.161.0/24
66.179.204.0/23
66.179.207.0/24
66.179.213.0/24
66.179.247.0/24
67.202.232.0/24
69.48.213.0/24
69.71.220.0/24
69.161.128.0/19
69.164.84.0/23
69.164.87.0-69.164.89.255
69.164.96.0/24
74.205.245.0/24
108.60.0.0/20
153.52.192.0/19
153.79.112.0/20
161.104.68.0-161.104.75.255
173.209.230.0/23
209.46.56.0/23
216.177.153.0-216.177.154.255
216.183.118.0/23
216.183.126.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:8b:95:9c:11:7d:2d:6d:f2:e9:73:83:12:63:aa:67:dc:3e:
25:df:f4:42:37:67:c4:89:98:d8:9d:a6:ad:90:77:01:68:7a:
dc:a7:5b:ef:40:f9:5f:95:e2:81:f6:3d:18:3a:08:7f:5f:5b:
45:ff:d5:03:9f:59:fa:20:79:ab:d7:be:80:78:22:d1:f6:b8:
6b:5b:84:a3:86:a0:a8:7a:5f:5f:7a:9e:c9:80:84:e5:22:39:
00:87:2b:d6:d6:27:f5:f4:3d:5a:6e:a2:c2:a8:74:ca:a9:35:
8d:ec:a5:c4:75:1b:c0:26:cb:23:c0:28:68:09:48:83:05:2b:
5b:c5:a9:e1:43:6a:99:11:2b:5b:19:29:aa:ae:79:48:9a:31:
92:e4:77:0e:d9:49:08:95:45:22:3a:4e:e3:94:05:e6:6c:dd:
94:8d:52:c3:20:b4:75:40:fe:a7:64:62:6e:ef:58:09:3c:85:
3b:20:42:3c:95:d6:1f:c1:c4:a8:8f:d5:65:8b:54:a1:3c:fe:
67:17:6d:a9:e1:61:fc:f5:63:06:bf:36:d7:82:a1:ed:8e:be:
78:45:3c:04:0f:b0:7f:14:04:a2:b2:4f:27:5e:9b:54:8b:ca:
95:1c:cc:21:37:45:2a:4e:8a:1b:d4:a4:12:c1:fd:47:6e:87:
1e:0c:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:51:14 2026 by rpki-client