Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/734KdyFLQmtOjygZ2v1Xj8Ds900.roa
File: 734KdyFLQmtOjygZ2v1Xj8Ds900.roa (raw, json)
Hash identifier: 8domU21rb/aTzdCRM7nKzOSfKgE0Y8RBcHzmO0+BwA4=
Subject key identifier: EF:7E:0A:77:21:4B:42:6B:4E:8F:28:19:DA:FD:57:8F:C0:EC:F7:4D
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 01A09F1FF7FD4D8DE3517F95686B299F8E98
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/734KdyFLQmtOjygZ2v1Xj8Ds900.roa
Signing time: Mon 14 Sep 2026 08:54:27 +0000
ROA not before: Mon 14 Sep 2026 08:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42656
IP address blocks: 5.134.208.0/21 maxlen: 24
5.134.208.0/24 maxlen: 24
5.134.209.0/24 maxlen: 24
5.134.210.0/24 maxlen: 24
5.134.211.0/24 maxlen: 24
5.134.212.0/24 maxlen: 24
5.134.213.0/24 maxlen: 24
5.134.214.0/24 maxlen: 24
5.134.215.0/24 maxlen: 24
91.194.188.0/23 maxlen: 24
91.194.188.0/24 maxlen: 24
91.194.189.0/24 maxlen: 24
91.207.14.0/23 maxlen: 24
91.207.14.0/24 maxlen: 24
91.207.15.0/24 maxlen: 24
178.21.152.0/22 maxlen: 22
178.21.152.0/24 maxlen: 24
178.21.153.0/24 maxlen: 24
178.21.154.0/24 maxlen: 24
178.21.155.0/24 maxlen: 24
178.21.156.0/23 maxlen: 23
178.21.156.0/24 maxlen: 24
178.21.157.0/24 maxlen: 24
178.21.158.0/24 maxlen: 24
178.21.159.0/24 maxlen: 24
185.31.24.0/22 maxlen: 22
185.31.24.0/24 maxlen: 24
185.31.25.0/24 maxlen: 24
185.31.26.0/24 maxlen: 24
185.31.27.0/24 maxlen: 24
193.23.48.0/24 maxlen: 24
193.203.222.0/23 maxlen: 24
193.203.222.0/24 maxlen: 24
193.203.223.0/24 maxlen: 24
194.0.251.0/24 maxlen: 24
2a02:dc8::/29 maxlen: 29
2a02:dc8::/30 maxlen: 48
2a02:dc8::/32 maxlen: 32
2a02:dc8:20::/48 maxlen: 48
2a02:dc8:22::/48 maxlen: 48
2a02:dc8:30::/48 maxlen: 48
2a02:dc8:31::/48 maxlen: 48
2a02:dc8:32::/48 maxlen: 48
2a02:dc8:33::/48 maxlen: 48
2a02:dcc::/32 maxlen: 32
2a02:dcc:20::/48 maxlen: 48
2a02:dcc:22::/48 maxlen: 48
2a02:dcc:30::/48 maxlen: 48
2a02:dcc:31::/48 maxlen: 48
2a02:dcc:32::/48 maxlen: 48
2a02:dcc:33::/48 maxlen: 48
2a02:dcd::/32 maxlen: 32
2a02:dce::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:1f:f7:fd:4d:8d:e3:51:7f:95:68:6b:29:9f:8e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Sep 14 08:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef7e0a77214b426b4e8f2819dafd578fc0ecf74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:95:9b:14:a4:bd:2a:e1:1a:b4:37:b1:37:
9d:ce:0e:49:dd:35:3e:b5:a0:d3:69:ee:20:f5:07:
14:ab:cd:69:c0:1a:09:d1:1b:a7:fb:10:bf:15:35:
2c:8c:d3:db:2d:71:3a:44:50:fa:00:25:40:76:31:
94:97:d5:cf:62:d6:09:cd:1e:da:96:37:68:94:e8:
67:b9:66:11:1d:74:e6:dd:19:03:9f:cf:95:63:10:
1a:8b:ae:d7:b3:a1:44:b2:dc:dc:b3:4c:9b:1a:92:
18:4a:c4:4c:08:04:3f:09:04:4b:e1:4c:16:36:ce:
a5:5c:2d:4b:7b:f7:e7:d0:97:dc:30:e0:23:36:c6:
71:ac:d9:77:c5:2b:8d:39:80:48:16:2a:c3:6a:d5:
05:19:74:ac:9d:95:e2:29:c3:f2:6c:94:e5:53:3a:
74:c0:0b:7f:5b:a2:0c:a0:59:be:b2:a6:85:ec:a3:
a7:0b:6c:c9:cd:db:79:b7:59:1b:c9:0e:fb:21:8b:
ee:36:a9:6e:50:d2:bf:c6:2e:9d:4d:6b:32:14:43:
9e:a4:4e:a0:d9:20:31:37:89:f4:69:dd:04:8d:c4:
3a:ab:58:0a:cc:eb:76:42:d4:1f:93:d8:4a:2e:bf:
09:c2:a9:95:14:f3:14:cc:36:ba:2b:c9:f6:0d:12:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7E:0A:77:21:4B:42:6B:4E:8F:28:19:DA:FD:57:8F:C0:EC:F7:4D
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/734KdyFLQmtOjygZ2v1Xj8Ds900.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.208.0/21
91.194.188.0/23
91.207.14.0/23
178.21.152.0/21
185.31.24.0/22
193.23.48.0/24
193.203.222.0/23
194.0.251.0/24
IPv6:
2a02:dc8::/29
Signature Algorithm: sha256WithRSAEncryption
9d:f9:fa:42:c4:62:b4:93:6a:6f:82:6d:26:19:47:6c:7b:3b:
ea:bc:c9:a0:77:f3:18:e7:f2:43:2c:f2:61:eb:d2:c0:2f:3c:
99:ec:b4:bd:6a:17:fa:d8:1b:4f:4f:d2:0d:0c:e9:ba:23:e4:
e1:48:b4:6c:50:6d:0e:5d:e1:e1:20:7c:75:4e:92:0f:69:9e:
ce:77:1b:21:52:bc:8d:dc:d2:4e:96:9a:94:43:8b:31:20:dd:
68:94:49:69:4c:22:65:8f:04:02:df:02:87:a5:ec:9d:71:d4:
18:31:7a:8f:d1:fb:e4:1e:f3:2c:cf:95:6c:c1:5d:2d:07:51:
b5:16:39:4a:aa:2e:f7:a0:54:ed:c8:37:2c:48:f0:fb:35:82:
fa:5d:5a:43:57:80:7d:e7:b1:bc:b6:9d:e8:69:e1:44:4f:49:
10:09:35:f4:9a:d7:05:41:d5:e1:0b:6b:89:35:b3:ff:c7:38:
ae:37:e8:85:4c:25:76:e8:60:a4:3f:44:4c:72:0d:58:05:89:
f4:e3:6d:28:4c:d0:fd:9b:b5:7c:e8:0f:c2:b7:c0:7e:50:2b:
bb:db:47:23:54:63:90:37:63:cf:a2:10:0a:a6:42:b3:93:eb:
50:4b:02:f2:5e:e6:60:85:3e:3e:5d:67:d5:99:1b:36:79:1c:
2c:60:f7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:30 2026 by rpki-client