Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/8RIumqkeV3tlefbMbbhwKUXmPoE.roa
File: 8RIumqkeV3tlefbMbbhwKUXmPoE.roa (raw, json)
Hash identifier: Hcw16et0hw/lbpdl7sOTOgYfd3jsskMwBHynxWpg+2M=
Subject key identifier: F1:12:2E:9A:A9:1E:57:7B:65:79:F6:CC:6D:B8:70:29:45:E6:3E:81
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 019FA2637412C6F03E9A47985D6A66754503
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/8RIumqkeV3tlefbMbbhwKUXmPoE.roa
Signing time: Mon 27 Jul 2026 07:04:14 +0000
ROA not before: Mon 27 Jul 2026 07:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59588
IP address blocks: 5.252.132.0/22 maxlen: 24
5.252.135.0/24 maxlen: 24
45.153.116.0/23 maxlen: 23
45.153.116.0/24 maxlen: 24
45.153.117.0/24 maxlen: 24
45.153.118.0/23 maxlen: 23
45.153.118.0/24 maxlen: 24
45.153.119.0/24 maxlen: 24
151.236.160.0/23 maxlen: 23
151.236.160.0/24 maxlen: 24
151.236.161.0/24 maxlen: 24
151.236.162.0/23 maxlen: 23
151.236.162.0/24 maxlen: 24
151.236.163.0/24 maxlen: 24
151.236.164.0/23 maxlen: 23
151.236.164.0/24 maxlen: 24
151.236.165.0/24 maxlen: 24
151.236.166.0/23 maxlen: 23
151.236.166.0/24 maxlen: 24
151.236.167.0/24 maxlen: 24
151.236.168.0/23 maxlen: 23
151.236.168.0/24 maxlen: 24
151.236.169.0/24 maxlen: 24
151.236.170.0/23 maxlen: 23
151.236.170.0/24 maxlen: 24
151.236.171.0/24 maxlen: 24
151.236.172.0/23 maxlen: 23
151.236.172.0/24 maxlen: 24
151.236.173.0/24 maxlen: 24
151.236.174.0/23 maxlen: 23
151.236.174.0/24 maxlen: 24
151.236.175.0/24 maxlen: 24
151.236.176.0/23 maxlen: 23
151.236.176.0/24 maxlen: 24
151.236.177.0/24 maxlen: 24
151.236.178.0/23 maxlen: 23
151.236.178.0/24 maxlen: 24
151.236.179.0/24 maxlen: 24
151.236.180.0/23 maxlen: 23
151.236.180.0/24 maxlen: 24
151.236.181.0/24 maxlen: 24
151.236.182.0/23 maxlen: 24
151.236.182.0/24 maxlen: 24
151.236.183.0/24 maxlen: 24
151.236.186.0/24 maxlen: 24
151.236.188.0/23 maxlen: 23
151.236.188.0/24 maxlen: 24
151.236.189.0/24 maxlen: 24
151.236.190.0/23 maxlen: 23
151.236.190.0/24 maxlen: 24
151.236.191.0/24 maxlen: 24
194.59.28.0/23 maxlen: 24
194.59.28.0/24 maxlen: 24
194.59.29.0/24 maxlen: 24
198.160.164.0/23 maxlen: 23
198.160.164.0/24 maxlen: 24
198.160.165.0/24 maxlen: 24
198.160.166.0/23 maxlen: 23
198.160.166.0/24 maxlen: 24
198.160.167.0/24 maxlen: 24
198.160.168.0/23 maxlen: 23
198.160.168.0/24 maxlen: 24
198.160.169.0/24 maxlen: 24
198.176.116.0/23 maxlen: 23
198.176.116.0/24 maxlen: 24
198.176.117.0/24 maxlen: 24
2a10:2200::/29 maxlen: 64
2a10:2200:1::/48 maxlen: 48
2a10:2200:2::/48 maxlen: 48
2a10:2200:3::/48 maxlen: 48
2a10:2200:4::/48 maxlen: 48
2a10:2200:5::/48 maxlen: 48
2a10:2200:6::/48 maxlen: 48
2a10:2200:7::/48 maxlen: 48
2a10:2200:8::/48 maxlen: 48
2a10:2200:b::/48 maxlen: 48
2a10:2200:c::/48 maxlen: 48
2a10:2200:d::/48 maxlen: 48
2a10:2200:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:63:74:12:c6:f0:3e:9a:47:98:5d:6a:66:75:45:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Jul 27 07:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1122e9aa91e577b6579f6cc6db8702945e63e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:21:40:a4:91:17:e4:37:db:c5:5b:c1:62:
65:63:6c:84:da:84:cf:bc:9e:35:03:53:54:e7:01:
3c:98:c1:8e:47:9c:9d:5c:80:38:9b:ba:e6:c0:b3:
f5:35:45:96:aa:4a:62:ed:ea:90:47:57:1e:2e:5d:
25:dd:2b:b5:20:30:4f:65:3b:99:a3:de:74:e3:03:
31:cf:59:91:3a:59:6f:c2:d3:dc:1b:79:4f:34:fb:
eb:4c:7a:91:74:33:b9:78:97:1e:45:ad:18:1f:07:
fc:5e:6e:1e:4d:11:38:8b:e5:a1:1f:5f:6e:48:5e:
ca:d4:e6:80:0b:73:5b:51:30:33:28:71:93:34:62:
cd:72:04:b7:6a:3e:34:2d:ac:25:d4:e6:f4:82:e7:
72:7d:4d:25:a4:30:61:a7:82:e3:26:4b:de:0e:ec:
68:b4:96:41:d1:48:35:f0:86:72:9d:68:ed:bd:70:
c8:05:d0:01:45:90:68:48:b4:fc:71:32:43:c2:71:
2e:2b:7f:3e:e6:5d:2d:16:7f:26:0b:9e:1d:6e:86:
8b:99:4b:ca:d6:99:b9:4a:cb:c9:d6:1d:cb:76:f2:
00:38:95:a8:b5:e0:62:bd:90:7a:a0:bd:08:1e:1c:
fb:3a:bf:34:b0:e1:a5:4d:54:77:e7:2d:45:d3:f6:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:12:2E:9A:A9:1E:57:7B:65:79:F6:CC:6D:B8:70:29:45:E6:3E:81
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/8RIumqkeV3tlefbMbbhwKUXmPoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.153.116.0/22
151.236.160.0-151.236.183.255
151.236.186.0/24
151.236.188.0/22
194.59.28.0/23
198.160.164.0-198.160.169.255
198.176.116.0/23
IPv6:
2a10:2200::/29
Signature Algorithm: sha256WithRSAEncryption
46:c9:3c:2f:de:31:68:25:c8:a1:7a:12:b0:c7:3e:50:ea:d1:
78:7a:2f:50:2b:3e:bd:52:b5:8b:45:c5:1c:bf:8d:e8:a2:43:
2c:bc:3d:b0:3e:e3:df:cf:04:09:b0:2b:55:7b:ce:d8:ae:e7:
25:f8:5b:60:c6:69:6b:a0:7c:0e:bb:2d:ea:f1:2d:4c:91:6f:
70:4b:8e:61:f6:e6:4c:00:ad:39:a0:ce:7b:2e:44:f4:02:50:
b2:56:dc:f8:a8:58:91:a1:aa:0a:8b:ee:a9:6b:97:28:b4:fa:
7d:81:cf:97:dd:af:9c:7a:f9:06:99:4f:3d:99:77:b6:5b:fa:
ef:47:0a:ed:a6:c1:bf:cd:1c:81:93:ec:5a:1d:47:31:ce:a2:
11:7d:53:f3:f8:7d:d9:ea:9b:22:7c:0c:35:b0:d7:26:25:45:
15:66:14:5b:71:b8:03:3f:66:de:c2:dc:7e:67:df:f4:97:05:
cc:37:78:d8:42:90:6d:9b:7c:ba:19:02:ba:96:02:8a:1f:be:
ca:93:c5:ad:92:c3:d4:69:91:7a:0a:e7:74:94:f9:9b:43:c2:
c9:91:e1:7e:e7:b1:91:17:e4:31:47:04:7c:97:5c:00:82:2a:
2f:38:41:e5:51:5b:2f:77:91:56:f6:d3:1f:bc:32:3f:04:15:
bf:e2:ad:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:36:13 2026 by rpki-client