Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/uA5pBmF9i3B5egq9SggHw8hu1Xo.roa
File: uA5pBmF9i3B5egq9SggHw8hu1Xo.roa (raw, json)
Hash identifier: 3xtdT7SkfU5QrPHLfn5mzVajGwy6H6RM2dYTq68klSo=
Subject key identifier: B8:0E:69:06:61:7D:8B:70:79:7A:0A:BD:4A:08:07:C3:C8:6E:D5:7A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 01A06239A6981FBEED371A4870CBC44B7432
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/uA5pBmF9i3B5egq9SggHw8hu1Xo.roa
Signing time: Wed 02 Sep 2026 13:05:40 +0000
ROA not before: Wed 02 Sep 2026 13:05:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.0.0/16 maxlen: 16
79.106.0.0/17 maxlen: 17
79.106.0.0/19 maxlen: 19
79.106.0.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.40.0/24 maxlen: 24
79.106.42.0/24 maxlen: 24
79.106.48.0/24 maxlen: 24
79.106.50.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.75.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.94.0/23 maxlen: 23
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.96.0/23 maxlen: 23
79.106.98.0/23 maxlen: 23
79.106.101.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.104.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.117.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.120.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.126.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/17 maxlen: 17
79.106.128.0/19 maxlen: 19
79.106.160.0/19 maxlen: 19
79.106.162.0/24 maxlen: 24
79.106.173.0/24 maxlen: 24
79.106.176.0/21 maxlen: 21
79.106.192.0/19 maxlen: 19
79.106.194.0/23 maxlen: 23
79.106.195.0/24 maxlen: 24
79.106.196.0/24 maxlen: 24
79.106.203.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.212.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.216.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.225.0/24 maxlen: 24
79.106.226.0/24 maxlen: 24
79.106.228.0/24 maxlen: 24
79.106.229.0/24 maxlen: 24
79.106.230.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.240.0/21 maxlen: 21
79.106.240.0/23 maxlen: 23
79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.246.0/23 maxlen: 23
79.106.254.0/24 maxlen: 24
79.106.255.0/24 maxlen: 24
185.171.144.0/22 maxlen: 22
185.171.144.0/23 maxlen: 23
185.171.146.0/23 maxlen: 23
185.171.146.0/24 maxlen: 24
185.171.147.0/24 maxlen: 24
217.24.240.0/20 maxlen: 20
217.24.240.0/21 maxlen: 21
217.24.248.0/21 maxlen: 21
217.24.248.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0::/29 maxlen: 29
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc1::/32 maxlen: 32
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc2:5000::/36 maxlen: 36
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:39:a6:98:1f:be:ed:37:1a:48:70:cb:c4:4b:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Sep 2 13:05:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b80e6906617d8b70797a0abd4a0807c3c86ed57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:7f:3d:17:51:af:2c:ba:b9:47:73:aa:7a:
2b:17:82:c6:b5:e1:0d:64:62:fc:db:e7:4a:d3:85:
6e:ba:c5:6c:c8:6f:32:2c:1f:33:a3:3b:b6:ab:fa:
08:ef:9b:4f:36:d7:11:0d:01:d6:48:49:12:3d:85:
3d:55:6e:ba:77:77:84:fc:db:b6:cc:03:8a:48:22:
8e:a8:33:c5:48:76:a0:4c:25:45:7c:84:bc:36:dd:
07:f8:e2:a7:b7:68:ff:74:02:bf:10:59:cf:31:07:
d5:b4:28:ff:05:93:d8:28:8b:36:34:7e:ad:e3:d2:
d2:bc:f3:ae:db:8d:e6:fc:98:d9:33:0d:a4:10:43:
ec:0b:14:26:b0:39:b3:9d:b2:01:ed:dd:f3:16:9e:
1c:28:fd:2f:e2:e2:f8:73:28:7c:a0:f9:16:cd:3f:
f3:f7:07:4f:f9:5b:ba:3a:b9:25:87:95:1b:15:f4:
83:23:e5:89:d2:a2:54:6f:1d:65:85:10:b9:10:18:
1a:40:d7:bc:b8:22:1a:16:d6:5b:76:54:52:0d:0f:
31:4d:15:7b:28:f1:c3:7e:1a:2e:1d:94:60:ec:70:
b5:5f:1f:bf:8b:e0:f6:0a:c0:f7:4e:c2:ef:2c:49:
4b:1c:fd:a6:26:a7:4f:4a:96:ce:24:e6:ef:b4:9b:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:69:06:61:7D:8B:70:79:7A:0A:BD:4A:08:07:C3:C8:6E:D5:7A
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/uA5pBmF9i3B5egq9SggHw8hu1Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0/22
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
22:52:02:77:d0:f6:78:3c:b0:ac:6a:89:9c:3d:aa:94:95:86:
13:04:f1:bf:c0:26:15:a4:c7:d2:48:72:7d:5b:4d:89:05:7c:
16:1c:27:3c:80:f7:6d:c5:61:b4:f0:01:80:5c:6b:db:74:a4:
b3:e3:79:03:be:63:22:0a:c0:86:d9:9d:57:ed:70:a7:c7:2c:
4f:0a:6a:e4:cf:27:94:79:4b:ed:7f:5f:ab:c9:be:58:bb:e0:
0e:ee:c0:f6:c5:17:26:67:d9:14:e1:9d:c4:b4:cc:76:67:da:
ec:d0:ee:e6:50:1f:31:b5:74:1e:ef:c1:a1:8b:c3:41:ad:b8:
c2:2f:61:24:55:cf:a8:e5:68:af:9a:97:40:0a:47:db:0c:8c:
7a:83:a1:84:5c:5a:8a:2b:61:48:73:ea:c6:32:d9:66:bb:1b:
b7:47:ee:9f:87:09:8d:57:22:d1:05:9c:08:8d:8e:28:2e:a1:
3a:9d:be:12:cc:b0:5a:46:ff:63:20:61:54:83:f5:ab:7f:9b:
72:ed:59:02:42:18:65:97:83:5d:c9:51:a0:35:2c:88:4d:fb:
f6:fe:fe:ef:f9:a9:50:99:7d:84:04:c3:f9:24:62:75:bf:c8:
2d:00:e5:de:e1:0c:97:69:cc:03:3d:68:30:fd:10:0e:27:4f:
a4:ae:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:33:41 2026 by rpki-client