Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/1-bw5tXPdOZDDXdxJ1PqARp2P8LU.roa
File: 1-bw5tXPdOZDDXdxJ1PqARp2P8LU.roa (raw, json)
Hash identifier: FpgLpZJYBSVSZFlpIQh3Qgjz5p/hTc6FQeHMMeCNwMo=
Subject key identifier: F9:BC:39:B5:73:DD:39:90:C3:5D:DC:49:D4:FA:80:46:9D:8F:F0:B5
Certificate issuer: /CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Certificate serial: 01A0C2C94BA5B1A0C6F4FD3FBBF6A61C54B6
Authority key identifier: EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/1-bw5tXPdOZDDXdxJ1PqARp2P8LU.roa
Signing time: Mon 21 Sep 2026 07:06:07 +0000
ROA not before: Mon 21 Sep 2026 07:06:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54994
IP address blocks: 134.49.232.0/24 maxlen: 24
134.49.233.0/24 maxlen: 24
134.49.234.0/24 maxlen: 24
134.49.235.0/24 maxlen: 24
134.49.236.0/24 maxlen: 24
134.49.237.0/24 maxlen: 24
134.49.238.0/24 maxlen: 24
134.49.239.0/24 maxlen: 24
140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.8.0/24 maxlen: 24
140.150.9.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.11.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.13.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.15.0/24 maxlen: 24
140.150.16.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.20.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.26.0/24 maxlen: 24
140.150.27.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
140.150.40.0/24 maxlen: 24
140.150.41.0/24 maxlen: 24
140.150.42.0/24 maxlen: 24
140.150.43.0/24 maxlen: 24
140.150.44.0/24 maxlen: 24
140.150.46.0/24 maxlen: 24
140.150.47.0/24 maxlen: 24
142.99.24.0/24 maxlen: 24
142.99.25.0/24 maxlen: 24
142.99.26.0/24 maxlen: 24
142.99.27.0/24 maxlen: 24
142.99.28.0/24 maxlen: 24
142.99.29.0/24 maxlen: 24
142.99.30.0/24 maxlen: 24
142.99.31.0/24 maxlen: 24
146.103.64.0/24 maxlen: 24
146.103.65.0/24 maxlen: 24
146.103.66.0/24 maxlen: 24
146.103.67.0/24 maxlen: 24
146.103.68.0/24 maxlen: 24
146.103.69.0/24 maxlen: 24
146.103.70.0/24 maxlen: 24
146.103.71.0/24 maxlen: 24
146.103.72.0/24 maxlen: 24
146.103.73.0/24 maxlen: 24
146.103.74.0/24 maxlen: 24
146.103.75.0/24 maxlen: 24
146.103.76.0/24 maxlen: 24
146.103.77.0/24 maxlen: 24
146.103.78.0/24 maxlen: 24
146.103.79.0/24 maxlen: 24
146.103.80.0/24 maxlen: 24
146.103.81.0/24 maxlen: 24
146.103.82.0/24 maxlen: 24
146.103.83.0/24 maxlen: 24
146.103.84.0/24 maxlen: 24
146.103.85.0/24 maxlen: 24
146.103.86.0/24 maxlen: 24
146.103.87.0/24 maxlen: 24
146.103.88.0/24 maxlen: 24
146.103.89.0/24 maxlen: 24
146.103.90.0/24 maxlen: 24
146.103.91.0/24 maxlen: 24
146.103.92.0/24 maxlen: 24
146.103.93.0/24 maxlen: 24
146.103.94.0/24 maxlen: 24
146.103.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c9:4b:a5:b1:a0:c6:f4:fd:3f:bb:f6:a6:1c:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Validity
Not Before: Sep 21 07:06:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9bc39b573dd3990c35ddc49d4fa80469d8ff0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:bf:4d:9e:f9:55:9e:6f:83:a1:ac:11:29:
64:4c:e5:03:4c:89:68:cf:8e:6c:92:76:80:70:c4:
5b:61:12:62:ea:88:28:39:78:cd:43:f4:43:9a:ab:
d5:ba:62:f9:9f:3a:01:1a:13:45:93:97:e7:44:cc:
d3:66:e4:81:eb:fd:df:ea:b0:06:01:df:db:32:58:
b9:e6:18:24:0d:3c:1e:a7:a8:42:13:1c:b0:d4:ef:
cf:a8:0c:37:f6:1c:4c:cc:36:c3:52:ac:fe:ad:c0:
6e:5b:c8:21:41:86:f1:9b:3b:cd:fe:9f:9b:e2:65:
99:52:73:ed:88:7f:20:40:eb:3a:06:43:49:b9:b7:
5c:cf:5a:9e:79:41:26:a3:14:e5:e3:6e:31:25:be:
de:36:f4:ed:89:ae:7b:f4:39:fe:07:4c:eb:bf:b2:
7c:b5:4a:e0:62:d1:99:5a:5f:10:87:27:a2:91:5a:
7c:ce:d5:60:28:48:a5:a7:2d:5e:36:55:f7:cf:3e:
3a:ce:bf:e1:90:05:68:e7:f6:6b:e7:58:c0:53:06:
04:16:cc:79:25:1f:11:7c:ee:24:86:e2:5d:64:09:
83:41:5f:f3:e5:67:71:ed:92:4e:cb:c4:e3:5d:bc:
c6:7b:6c:64:08:15:1f:ff:ab:08:2d:ab:ab:f8:5d:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:39:B5:73:DD:39:90:C3:5D:DC:49:D4:FA:80:46:9D:8F:F0:B5
X509v3 Authority Key Identifier:
keyid:EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/1-bw5tXPdOZDDXdxJ1PqARp2P8LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.49.232.0/21
140.150.0.0-140.150.16.255
140.150.18.0-140.150.38.255
140.150.40.0-140.150.44.255
140.150.46.0/23
142.99.24.0/21
146.103.64.0/19
Signature Algorithm: sha256WithRSAEncryption
16:16:26:7a:9b:3d:19:0e:ae:2e:db:0a:d8:7f:d8:b9:1c:9f:
6d:6f:bf:5b:33:59:b3:7f:16:1c:9f:19:a2:13:2e:56:20:21:
08:f6:6d:7b:aa:62:ad:e9:86:70:87:4f:b8:16:65:f6:a4:aa:
e3:d0:03:d8:32:e0:d4:cd:ba:4e:23:43:36:ff:9d:41:f1:c7:
59:0a:34:52:99:ef:b5:7e:66:ba:1a:b7:91:ae:cd:9c:a3:94:
e1:8e:58:e7:3e:42:c6:4e:d1:1a:28:51:54:32:23:a6:b7:52:
ce:2a:c0:81:51:e2:d3:77:11:5e:43:48:7c:29:fd:c0:9c:15:
38:88:ef:81:5b:24:66:36:4f:72:62:b8:6f:78:30:c7:fc:ad:
1b:b9:b8:eb:fb:26:dd:1d:9b:79:e4:b7:ca:8e:da:61:6c:37:
e3:88:9c:fa:e8:88:32:b3:0d:31:90:25:76:74:b7:87:09:50:
d9:1f:fc:68:1f:0f:2c:98:8f:65:ec:46:53:94:fd:7c:e8:b8:
df:06:01:64:b3:ec:2b:9b:77:d0:ed:8d:11:ad:76:66:4a:32:
19:0a:08:ba:47:bf:a4:33:13:ee:a8:b7:48:18:20:bf:ea:d5:
bd:e1:33:cf:56:1b:df:6b:ae:33:39:84:28:37:72:72:4f:3c:
1b:5e:d2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:41 2026 by rpki-client