Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/akO8JmwWxuTer2l42am_n-fQJlg.roa
File: akO8JmwWxuTer2l42am_n-fQJlg.roa (raw, json)
Hash identifier: eSyNn/IZZ0ccY9oh5aaOroJXRYN7yy6H0+T/xO1d5yI=
Subject key identifier: 6A:43:BC:26:6C:16:C6:E4:DE:AF:69:78:D9:A9:BF:9F:E7:D0:26:58
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 01A09F1F0D1ABA8AC47AA6D87E12B70CB99F
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/akO8JmwWxuTer2l42am_n-fQJlg.roa
Signing time: Mon 14 Sep 2026 08:53:27 +0000
ROA not before: Mon 14 Sep 2026 08:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203
IP address blocks: 5.134.208.0/21 maxlen: 21
5.134.208.0/24 maxlen: 24
5.134.209.0/24 maxlen: 24
5.134.210.0/24 maxlen: 24
5.134.211.0/24 maxlen: 24
5.134.212.0/24 maxlen: 24
5.134.213.0/24 maxlen: 24
5.134.214.0/24 maxlen: 24
5.134.215.0/24 maxlen: 24
91.194.188.0/23 maxlen: 23
91.194.188.0/24 maxlen: 24
91.194.189.0/24 maxlen: 24
91.207.14.0/23 maxlen: 23
91.207.14.0/24 maxlen: 24
91.207.15.0/24 maxlen: 24
178.21.152.0/21 maxlen: 21
178.21.152.0/24 maxlen: 24
178.21.153.0/24 maxlen: 24
178.21.154.0/24 maxlen: 24
178.21.155.0/24 maxlen: 24
178.21.156.0/24 maxlen: 24
178.21.157.0/24 maxlen: 24
185.31.24.0/22 maxlen: 22
185.31.24.0/24 maxlen: 24
185.31.25.0/24 maxlen: 24
185.31.26.0/24 maxlen: 24
185.31.27.0/24 maxlen: 24
193.23.48.0/24 maxlen: 24
193.203.222.0/23 maxlen: 23
193.203.222.0/24 maxlen: 24
193.203.223.0/24 maxlen: 24
194.0.251.0/24 maxlen: 24
2a02:dc8::/29 maxlen: 29
2a02:dc8::/30 maxlen: 30
2a02:dc8::/32 maxlen: 32
2a02:dc8:20::/48 maxlen: 48
2a02:dc8:22::/48 maxlen: 48
2a02:dc8:30::/48 maxlen: 48
2a02:dc8:31::/48 maxlen: 48
2a02:dc8:32::/48 maxlen: 48
2a02:dc8:33::/48 maxlen: 48
2a02:dcc::/32 maxlen: 32
2a02:dcc:20::/48 maxlen: 48
2a02:dcc:22::/48 maxlen: 48
2a02:dcc:30::/48 maxlen: 48
2a02:dcc:31::/48 maxlen: 48
2a02:dcc:32::/48 maxlen: 48
2a02:dcc:33::/48 maxlen: 48
2a02:dcd::/32 maxlen: 32
2a02:dce::/32 maxlen: 32
2a02:dcf::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:1f:0d:1a:ba:8a:c4:7a:a6:d8:7e:12:b7:0c:b9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Sep 14 08:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a43bc266c16c6e4deaf6978d9a9bf9fe7d02658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6c:67:14:99:36:dc:bb:1d:c2:64:07:0a:5c:
1c:cb:c9:cc:ad:67:25:de:37:00:42:c2:99:16:f7:
ba:45:2f:06:5d:ea:a3:2d:fb:ce:23:f3:9e:a3:9b:
fa:51:09:0b:2c:b1:4f:a6:53:ef:57:c4:af:02:66:
a3:94:ce:a7:3d:eb:8c:0f:d3:50:d0:c1:2d:a8:1c:
f4:b1:58:81:89:18:29:63:75:57:ad:74:08:aa:15:
75:59:b9:d7:77:c0:06:db:fe:9c:cf:c9:2f:47:17:
42:cd:04:8e:7d:c7:fa:f9:98:33:38:81:ae:15:59:
5c:16:ce:71:7e:b0:73:bf:4e:8a:18:10:67:da:7d:
82:9c:31:91:89:02:95:c6:78:d5:62:a7:76:5c:ec:
3f:07:b9:87:f5:f4:11:31:ee:58:c5:cd:21:6a:ee:
0b:f6:4b:02:a2:13:a9:4c:01:6b:a3:a5:eb:f4:ea:
aa:e0:15:40:19:9b:ee:a5:e7:78:30:a0:0c:4d:86:
d9:cd:fe:09:6c:26:84:b8:e4:02:23:51:6c:6d:59:
d6:b6:6c:fa:41:b2:2e:8b:cf:86:cb:5f:8e:b8:14:
64:d8:d0:c0:79:e6:ae:ee:e4:b4:bf:ba:3d:00:23:
b5:7c:d5:b2:c9:59:c6:78:a2:b0:bf:c4:45:d8:2f:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:BC:26:6C:16:C6:E4:DE:AF:69:78:D9:A9:BF:9F:E7:D0:26:58
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/akO8JmwWxuTer2l42am_n-fQJlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.208.0/21
91.194.188.0/23
91.207.14.0/23
178.21.152.0/21
185.31.24.0/22
193.23.48.0/24
193.203.222.0/23
194.0.251.0/24
IPv6:
2a02:dc8::/29
Signature Algorithm: sha256WithRSAEncryption
47:2f:2c:ff:ab:4a:c9:d3:27:1e:3e:7f:5b:d5:55:4e:0c:2e:
02:7c:d9:84:d3:7a:fe:e1:ce:0d:94:9d:94:b1:f5:d8:ea:56:
79:5b:68:63:fe:ca:62:ee:c9:ba:88:8d:b7:e7:f3:10:3c:9a:
1e:9b:6c:c0:de:59:d2:b5:d7:69:59:6d:ce:a5:14:64:8b:af:
21:f1:0e:e5:b4:44:bc:3f:77:ed:aa:97:c2:fd:4e:6a:31:25:
25:ba:0c:4d:53:64:a0:52:f4:d0:4f:8f:09:bd:fb:1b:39:f0:
5f:7c:40:71:7b:18:63:f4:fd:db:81:18:0a:fb:d3:ad:b4:55:
a4:cd:dc:22:e1:b8:b7:38:4f:7e:97:65:76:93:5b:be:f7:70:
ad:06:91:2f:42:4c:29:9d:2d:70:97:a0:09:65:ef:33:7f:e4:
ed:7d:aa:32:3b:e6:bf:c9:cf:39:d7:ec:88:3d:75:18:2b:31:
0a:13:e5:ef:06:50:7d:4f:da:5a:73:88:c1:3a:2b:bc:da:41:
d0:81:0e:d7:02:37:62:fa:41:8a:29:0f:71:c0:2c:b3:30:99:
8b:87:14:8c:ad:74:d6:0f:68:b1:87:db:ae:76:49:e1:6c:ec:
5b:6e:80:fc:8b:fd:34:fd:57:92:1d:eb:04:e8:4f:cc:8e:65:
2e:b5:20:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:53:08 2026 by rpki-client