Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/cheapbhbEvJyfL9aW4rpl5LAqak.roa
File: cheapbhbEvJyfL9aW4rpl5LAqak.roa (raw, json)
Hash identifier: 39j2YXy+W+1nUzeEwMY61viBbg7QJ1sVC9nWVV5KICA=
Subject key identifier: 72:17:9A:A5:B8:5B:12:F2:72:7C:BF:5A:5B:8A:E9:97:92:C0:A9:A9
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 019D2C0D3AFFD5CF60EE760F5666C321E0F3
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/cheapbhbEvJyfL9aW4rpl5LAqak.roa
Signing time: Thu 26 Mar 2026 21:29:17 +0000
ROA not before: Thu 26 Mar 2026 21:29:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 931
IP address blocks: 5.252.164.0/24 maxlen: 24
5.252.165.0/24 maxlen: 24
5.252.166.0/24 maxlen: 24
5.252.167.0/24 maxlen: 24
31.216.59.0/24 maxlen: 24
45.87.60.0/24 maxlen: 24
45.87.61.0/24 maxlen: 24
45.87.62.0/24 maxlen: 24
45.87.63.0/24 maxlen: 24
45.130.152.0/24 maxlen: 24
45.130.153.0/24 maxlen: 24
45.130.154.0/24 maxlen: 24
45.130.155.0/24 maxlen: 24
45.143.144.0/24 maxlen: 24
45.143.145.0/24 maxlen: 24
45.143.146.0/24 maxlen: 24
45.143.147.0/24 maxlen: 24
89.36.230.0/24 maxlen: 24
89.37.100.0/24 maxlen: 24
89.46.43.0/24 maxlen: 24
94.154.8.0/24 maxlen: 24
103.104.248.0/24 maxlen: 24
103.104.249.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
103.104.251.0/24 maxlen: 24
103.202.52.0/24 maxlen: 24
103.202.53.0/24 maxlen: 24
103.202.54.0/24 maxlen: 24
103.202.55.0/24 maxlen: 24
135.84.209.0/24 maxlen: 24
135.84.210.0/24 maxlen: 24
135.84.211.0/24 maxlen: 24
135.84.212.0/24 maxlen: 24
135.84.213.0/24 maxlen: 24
135.136.128.0/19 maxlen: 32
135.136.128.0/24 maxlen: 24
135.136.129.0/24 maxlen: 24
135.136.130.0/24 maxlen: 24
135.136.131.0/24 maxlen: 24
135.136.132.0/24 maxlen: 24
135.136.134.0/24 maxlen: 24
135.136.135.0/24 maxlen: 24
135.136.136.0/24 maxlen: 24
135.136.137.0/24 maxlen: 24
135.136.138.0/24 maxlen: 24
135.136.139.0/24 maxlen: 24
135.136.142.0/24 maxlen: 24
135.136.143.0/24 maxlen: 32
135.136.144.0/24 maxlen: 32
178.211.157.0/24 maxlen: 24
185.162.74.0/24 maxlen: 24
185.162.75.0/24 maxlen: 24
185.234.115.0/24 maxlen: 24
188.210.236.0/24 maxlen: 24
194.49.68.0/24 maxlen: 24
194.49.69.0/24 maxlen: 24
194.49.78.0/24 maxlen: 24
194.49.79.0/24 maxlen: 24
207.189.0.0/19 maxlen: 32
207.189.0.0/24 maxlen: 24
207.189.1.0/24 maxlen: 24
207.189.2.0/24 maxlen: 24
207.189.3.0/24 maxlen: 24
207.189.4.0/24 maxlen: 24
207.189.5.0/24 maxlen: 24
207.189.6.0/24 maxlen: 24
207.189.7.0/24 maxlen: 24
207.189.8.0/24 maxlen: 24
207.189.9.0/24 maxlen: 24
207.189.10.0/24 maxlen: 24
207.189.11.0/24 maxlen: 24
207.189.12.0/24 maxlen: 24
207.189.13.0/24 maxlen: 24
207.189.14.0/24 maxlen: 24
207.189.15.0/24 maxlen: 24
207.189.26.0/24 maxlen: 24
207.189.27.0/24 maxlen: 24
207.189.30.0/24 maxlen: 24
207.189.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:0d:3a:ff:d5:cf:60:ee:76:0f:56:66:c3:21:e0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Mar 26 21:29:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72179aa5b85b12f2727cbf5a5b8ae99792c0a9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:92:c8:7a:36:09:8b:69:46:73:71:f0:d1:31:
cb:42:72:bf:ee:8b:ae:2d:8e:4a:96:48:82:23:47:
d6:41:9f:c6:50:b7:88:c3:be:62:82:08:4b:74:6e:
29:ce:07:ff:2e:18:8f:e7:f6:6f:c5:b7:ce:0d:fd:
6d:f9:0f:3f:ca:32:8c:33:2d:c6:93:53:7f:fb:de:
83:2b:f2:a4:4b:2d:3a:07:de:7c:0c:51:6f:71:47:
90:30:dc:b9:77:48:52:c1:98:ac:be:2b:1c:11:6c:
50:b3:83:dc:8c:f7:a7:a9:a2:8b:26:71:ee:21:0c:
0a:88:8a:2d:80:43:90:fc:8c:f3:03:ee:13:d4:ea:
82:14:ac:1d:e2:1f:07:15:e4:05:b9:d3:62:b5:2c:
07:5d:2c:78:fc:89:08:e5:81:b8:ed:c5:d3:fa:6a:
d0:b2:c8:0f:0c:36:a7:52:47:32:aa:57:f2:b0:f4:
d2:91:0f:34:e8:8d:63:dc:c9:dc:8d:8d:a8:f8:6b:
9e:68:14:79:e5:be:b6:a8:23:fb:90:cc:d5:09:a4:
ac:ed:88:eb:64:5a:9e:9c:db:5a:1e:f3:72:d2:47:
4c:29:e5:23:2a:9b:82:9f:38:4b:a6:62:07:c7:f5:
90:53:f5:c7:59:c9:ad:34:88:29:b3:93:de:c2:bd:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:17:9A:A5:B8:5B:12:F2:72:7C:BF:5A:5B:8A:E9:97:92:C0:A9:A9
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/cheapbhbEvJyfL9aW4rpl5LAqak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.164.0/22
31.216.59.0/24
45.87.60.0/22
45.130.152.0/22
45.143.144.0/22
89.36.230.0/24
89.37.100.0/24
89.46.43.0/24
94.154.8.0/24
103.104.248.0/22
103.202.52.0/22
135.84.209.0-135.84.213.255
135.136.128.0/19
178.211.157.0/24
185.162.74.0/23
185.234.115.0/24
188.210.236.0/24
194.49.68.0/23
194.49.78.0/23
207.189.0.0/19
Signature Algorithm: sha256WithRSAEncryption
81:b0:5d:0f:6d:09:04:12:74:1c:08:d8:9b:3b:0e:d6:ee:31:
73:9d:c0:6e:2a:07:14:33:5b:83:cb:ec:ae:b9:77:dd:b5:67:
fd:06:63:05:c4:ae:76:c7:e4:b3:1c:58:87:40:40:0b:26:a5:
22:80:ad:c8:05:5d:d7:5c:23:70:50:80:0d:02:64:01:dd:c0:
ff:e7:65:5c:9f:cb:e4:2a:18:d4:8b:ec:d7:10:d3:5a:d5:1f:
30:2d:2c:54:fb:c4:ef:c3:15:bd:ad:84:a5:d3:b5:e6:cd:4a:
41:13:95:2a:75:76:27:14:0d:5b:e4:36:48:47:c6:ba:ef:75:
48:fb:f2:e7:83:2c:ad:2a:ea:24:4b:80:fe:f0:1f:f2:5e:c6:
02:b5:dd:52:86:e3:67:2b:0b:8a:ab:9a:bd:6e:2a:13:00:48:
d7:5d:4f:24:14:02:f1:b4:50:50:36:50:37:ab:ca:58:bb:49:
ea:ed:f8:15:98:db:e6:0c:01:aa:ba:fc:fb:78:97:d3:cd:0e:
c5:40:d3:38:9f:31:d8:f8:e1:74:5e:4c:06:a0:d3:50:cb:47:
72:aa:59:1a:a3:53:f5:95:d6:54:f8:d8:2b:53:75:20:e4:7f:
3a:4e:3f:6e:50:ec:cf:0a:d9:b4:32:11:b8:45:29:e4:29:a6:
7f:5f:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:17 2026 by rpki-client