Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/aOh7SyjCOcaf4Y5Vz363mRSH7VU.roa
File: aOh7SyjCOcaf4Y5Vz363mRSH7VU.roa (raw, json)
Hash identifier: vK+wqxYHosFXMs2+WXdpRJwXTZ6jDNBSZhzLhhy/tx0=
Subject key identifier: 68:E8:7B:4B:28:C2:39:C6:9F:E1:8E:55:CF:7E:B7:99:14:87:ED:55
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A077C789BEA4A152A6058258EC0CBDB5FB
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/aOh7SyjCOcaf4Y5Vz363mRSH7VU.roa
Signing time: Sun 06 Sep 2026 17:32:40 +0000
ROA not before: Sun 06 Sep 2026 17:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7843
IP address blocks: 9.233.0.0/19 maxlen: 24
9.233.64.0/19 maxlen: 24
9.233.192.0/18 maxlen: 24
9.237.48.0/20 maxlen: 24
9.237.64.0/20 maxlen: 24
135.132.104.0/24 maxlen: 24
135.132.105.0/24 maxlen: 24
135.132.108.0/24 maxlen: 24
135.132.109.0/24 maxlen: 24
135.132.114.0/24 maxlen: 24
135.132.115.0/24 maxlen: 24
135.132.120.0/24 maxlen: 24
135.132.121.0/24 maxlen: 24
151.145.128.0/21 maxlen: 21
151.145.136.0/21 maxlen: 21
151.145.144.0/21 maxlen: 21
151.145.152.0/21 maxlen: 21
151.145.160.0/20 maxlen: 20
151.145.176.0/20 maxlen: 20
158.120.48.0/24 maxlen: 24
158.120.50.0/24 maxlen: 24
158.120.52.0/24 maxlen: 24
158.120.54.0/24 maxlen: 24
158.120.56.0/24 maxlen: 24
158.120.58.0/24 maxlen: 24
158.120.60.0/24 maxlen: 24
158.120.62.0/24 maxlen: 24
170.100.148.0/23 maxlen: 23
170.100.150.0/23 maxlen: 23
170.100.152.0/22 maxlen: 22
170.100.156.0/22 maxlen: 22
170.100.204.0/24 maxlen: 24
170.100.206.0/24 maxlen: 24
170.100.207.0/24 maxlen: 24
192.6.64.0/23 maxlen: 23
192.6.66.0/23 maxlen: 23
192.6.172.0/23 maxlen: 23
192.6.174.0/23 maxlen: 23
192.6.252.0/23 maxlen: 23
192.6.254.0/23 maxlen: 23
192.25.180.0/23 maxlen: 23
192.25.182.0/23 maxlen: 23
192.25.200.0/23 maxlen: 23
192.25.202.0/23 maxlen: 23
192.25.208.0/23 maxlen: 23
192.25.210.0/23 maxlen: 23
192.25.232.0/23 maxlen: 23
192.25.234.0/23 maxlen: 23
192.25.244.0/23 maxlen: 23
192.25.246.0/23 maxlen: 23
192.137.24.0/23 maxlen: 23
192.137.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:c7:89:be:a4:a1:52:a6:05:82:58:ec:0c:bd:b5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 6 17:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68e87b4b28c239c69fe18e55cf7eb7991487ed55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:b7:a2:45:42:e6:20:00:b7:19:5e:29:bb:
19:3c:25:64:1b:9c:85:75:51:e7:f5:c0:7e:02:c6:
19:49:d7:2c:43:0b:7f:aa:8c:31:f4:e9:bc:1a:b1:
cf:14:c1:61:b2:49:47:7e:03:21:0b:17:eb:da:da:
32:e3:52:ce:cc:f5:ee:ef:40:be:2f:1f:d4:db:4d:
32:1b:f8:09:00:a9:8f:ec:a3:2f:30:61:d3:c6:61:
d7:51:a1:b7:85:a3:a6:ad:e3:8e:a5:24:ad:92:0f:
fc:35:78:22:bf:02:9a:a5:fc:3c:b0:4b:c3:bd:0f:
07:88:c8:09:b9:65:4a:4c:17:92:56:dc:05:7e:f9:
89:df:b4:75:08:f3:99:13:6e:b1:a5:f7:26:47:c0:
ba:d4:45:51:4f:81:26:d5:4c:0f:ab:4b:de:95:7e:
05:14:25:2d:f0:f9:b6:34:95:f5:02:b5:a1:b9:b2:
e5:7c:7b:94:c5:04:b3:07:fb:7d:74:06:66:7e:2e:
62:ae:3b:4f:46:9e:ba:d5:47:a8:2e:cb:27:2a:58:
aa:54:b8:4c:54:ba:24:23:78:7e:01:97:d9:2a:5a:
7f:cc:d6:9d:c1:a5:d2:b5:37:b8:50:95:82:d2:63:
f2:99:51:9c:13:7c:f7:26:31:e9:6a:4e:30:da:a4:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E8:7B:4B:28:C2:39:C6:9F:E1:8E:55:CF:7E:B7:99:14:87:ED:55
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/aOh7SyjCOcaf4Y5Vz363mRSH7VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.233.0.0/19
9.233.64.0/19
9.233.192.0/18
9.237.48.0-9.237.79.255
135.132.104.0/23
135.132.108.0/23
135.132.114.0/23
135.132.120.0/23
151.145.128.0/18
158.120.48.0/24
158.120.50.0/24
158.120.52.0/24
158.120.54.0/24
158.120.56.0/24
158.120.58.0/24
158.120.60.0/24
158.120.62.0/24
170.100.148.0-170.100.159.255
170.100.204.0/24
170.100.206.0/23
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:a9:96:f2:9b:f0:b0:c4:74:1c:8f:c7:11:72:7f:4e:12:f5:
2a:0d:85:bf:b4:1c:a0:fc:d6:bc:83:7e:34:71:33:87:0e:d6:
fd:15:fe:03:f4:51:9f:ad:89:a3:29:d7:69:97:b5:16:f3:59:
48:9a:8c:ad:4c:2c:37:2a:b7:13:d7:dc:a0:aa:16:49:e1:01:
a3:b5:b7:d7:4a:83:94:3e:12:74:e8:e8:d7:df:a4:b5:bb:fa:
3a:56:b7:eb:1e:c5:20:94:5f:f0:14:d5:2e:84:16:3e:f7:7b:
58:4d:ba:cc:6e:12:61:d2:40:59:14:b5:df:39:02:83:52:7c:
c6:b8:6f:68:3a:85:05:c2:d2:22:5b:02:b0:f3:8f:06:03:28:
2b:2e:d6:25:33:75:eb:f7:cc:71:76:30:ce:de:16:53:d9:fc:
44:44:89:7e:b7:9b:cf:65:71:5e:6e:c6:50:26:68:b0:3e:2e:
16:44:52:35:78:ea:80:2f:23:d4:99:43:8e:9a:ed:d9:5f:58:
23:f1:92:dd:02:c2:1d:61:f4:bc:5a:16:43:db:42:0b:c8:86:
fa:dc:5e:2c:16:3a:a7:99:52:c6:46:32:07:26:b3:32:e9:d9:
c9:ef:67:b5:35:01:a0:bd:3c:17:a3:d1:02:ab:61:03:39:b6:
8f:ea:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:35 2026 by rpki-client