Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/9zE0ccdB1nEJPm6ds43vYaXbU8A.roa
File: 9zE0ccdB1nEJPm6ds43vYaXbU8A.roa (raw, json)
Hash identifier: KLdF/9GXTDXvmP2vKrsOb2S2ppNR+C722vvMttsp8m0=
Subject key identifier: F7:31:34:71:C7:41:D6:71:09:3E:6E:9D:B3:8D:EF:61:A5:DB:53:C0
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01A0C456A2BCBA27949C03B9E1D76573A199
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/9zE0ccdB1nEJPm6ds43vYaXbU8A.roa
Signing time: Mon 21 Sep 2026 14:20:07 +0000
ROA not before: Mon 21 Sep 2026 14:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2.56.149.0/24 maxlen: 24
45.66.135.0/24 maxlen: 24
45.67.55.0/24 maxlen: 24
45.82.165.0/24 maxlen: 24
45.85.2.0/24 maxlen: 24
45.90.140.0/24 maxlen: 24
45.128.152.0/24 maxlen: 24
45.134.18.0/24 maxlen: 24
89.31.124.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
147.78.14.0/24 maxlen: 24
152.89.210.0/24 maxlen: 24
185.105.191.0/24 maxlen: 24
185.120.17.0/24 maxlen: 24
185.126.68.0/24 maxlen: 24
185.126.136.0/24 maxlen: 24
185.126.137.0/24 maxlen: 24
185.126.224.0/24 maxlen: 24
185.126.227.0/24 maxlen: 24
185.167.117.0/24 maxlen: 24
185.167.118.0/24 maxlen: 24
185.167.119.0/24 maxlen: 24
185.171.122.0/24 maxlen: 24
185.171.123.0/24 maxlen: 24
185.172.114.0/24 maxlen: 24
185.175.142.0/24 maxlen: 24
185.175.143.0/24 maxlen: 24
185.187.236.0/24 maxlen: 24
188.119.102.0/24 maxlen: 24
192.54.56.0/24 maxlen: 24
192.54.58.0/24 maxlen: 24
192.54.59.0/24 maxlen: 24
193.37.56.0/24 maxlen: 24
193.37.57.0/24 maxlen: 24
193.38.136.0/24 maxlen: 24
194.124.32.0/24 maxlen: 24
194.156.229.0/24 maxlen: 24
2a0c:8a40:2::/48 maxlen: 48
2a0c:8a41:a300::/64 maxlen: 64
2a0c:8a47::/32 maxlen: 32
2a0c:8a47::/36 maxlen: 36
2a0c:8a47:1000::/36 maxlen: 36
2a0c:8a47:2000::/36 maxlen: 36
2a0c:8a47:3000::/36 maxlen: 36
2a0c:8a47:4000::/36 maxlen: 36
2a0c:8a47:5000::/36 maxlen: 36
2a0c:8a47:6000::/36 maxlen: 36
2a0c:8a47:7000::/36 maxlen: 36
2a0c:8a47:8000::/36 maxlen: 36
2a0c:8a47:9000::/36 maxlen: 36
2a0c:8a47:a000::/36 maxlen: 36
2a0c:8a47:b000::/36 maxlen: 36
2a0c:8a47:c000::/36 maxlen: 36
2a0c:8a47:d000::/36 maxlen: 36
2a0c:8a47:e000::/36 maxlen: 36
2a0c:8a47:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:56:a2:bc:ba:27:94:9c:03:b9:e1:d7:65:73:a1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Sep 21 14:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7313471c741d671093e6e9db38def61a5db53c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:1b:34:45:2d:96:c9:29:9c:38:35:c5:22:
98:f8:b5:60:e2:70:78:c8:10:46:8d:3a:48:35:0e:
73:a9:fc:60:50:89:70:1b:dc:16:ca:80:5d:91:86:
56:f2:c3:8d:a9:e6:19:18:09:94:72:ef:43:a6:32:
64:e5:b7:44:6a:b3:11:aa:b2:ad:27:ea:7b:34:5c:
ad:24:eb:59:1c:1c:2d:19:b5:0b:db:d8:23:54:dc:
17:74:42:5c:5d:d9:af:3f:7c:9a:89:fc:98:3b:5b:
e6:87:6e:7b:64:b9:ec:59:2b:36:1d:14:62:80:bb:
e2:4d:97:82:a3:ad:5c:e3:e2:58:f8:a1:e1:81:2e:
38:b8:1c:8c:c8:bf:06:80:e3:66:31:18:8d:44:6f:
5e:8f:01:a3:f7:ee:77:26:8a:69:ed:8e:cc:45:6b:
6f:fe:71:83:98:ef:c1:b6:94:fd:43:09:75:ca:54:
27:f0:a5:fb:a9:9d:cb:3b:4c:e8:da:e6:88:cc:1e:
e3:95:d1:95:54:ba:5c:30:34:9f:3b:64:d4:0d:a5:
ee:8e:2b:37:4c:e1:70:62:d4:0a:83:1f:88:f9:75:
a4:ba:0d:9b:d9:e6:f5:e3:74:6a:59:98:cf:39:3e:
a4:87:32:b9:9b:40:a4:2f:16:91:07:44:64:54:c1:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:31:34:71:C7:41:D6:71:09:3E:6E:9D:B3:8D:EF:61:A5:DB:53:C0
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/9zE0ccdB1nEJPm6ds43vYaXbU8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.149.0/24
45.66.135.0/24
45.67.55.0/24
45.82.165.0/24
45.85.2.0/24
45.90.140.0/24
45.128.152.0/24
45.134.18.0/24
89.31.124.0/24
91.220.202.0/23
147.78.14.0/24
152.89.210.0/24
185.105.191.0/24
185.120.17.0/24
185.126.68.0/24
185.126.136.0/23
185.126.224.0/24
185.126.227.0/24
185.167.117.0-185.167.119.255
185.171.122.0/23
185.172.114.0/24
185.175.142.0/23
185.187.236.0/24
188.119.102.0/24
192.54.56.0/24
192.54.58.0/23
193.37.56.0/23
193.38.136.0/24
194.124.32.0/24
194.156.229.0/24
IPv6:
2a0c:8a40:2::/48
2a0c:8a41:a300::/64
2a0c:8a47::/32
Signature Algorithm: sha256WithRSAEncryption
28:86:0a:fc:86:73:f9:1a:c1:4d:5a:b9:d9:9c:f0:58:ad:e1:
73:67:44:0f:d4:00:b8:42:4d:8c:a0:ff:0b:80:96:47:65:9c:
64:8f:a5:40:db:b1:a0:59:68:e0:23:30:5e:bd:57:01:0b:fb:
b9:3e:9d:5a:70:1b:c9:bd:60:03:ea:60:c2:65:1f:dd:d8:58:
cd:bb:fb:04:a2:f2:7d:88:0f:40:06:e1:b5:66:11:d4:ef:1f:
c5:34:11:16:eb:15:a3:97:de:db:86:4c:4f:e2:5a:2e:0a:13:
cb:5a:76:32:23:f7:6b:cb:4c:27:04:6b:5b:73:ab:98:55:e9:
cc:6d:40:3d:ce:0c:e5:fc:6b:3c:d0:d2:d1:e0:f8:29:90:9a:
a5:46:c3:ad:62:19:e2:a4:a3:fa:1e:11:80:4d:c3:23:0f:93:
0f:e4:88:2f:08:57:13:91:76:b1:26:bc:e2:43:f4:ca:06:d3:
be:a0:9d:69:25:de:ca:21:95:3c:0e:0f:de:0f:b3:38:2e:07:
ab:5d:e5:12:96:f4:dd:4c:75:a4:3c:d7:79:9a:11:a9:14:80:
0a:7b:7c:90:38:28:f6:60:45:52:a0:d5:9c:ae:98:16:2c:4a:
d7:af:50:29:5a:fc:0a:89:c7:fd:c2:db:f7:40:9d:6b:88:c0:
19:35:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:00:45 2026 by rpki-client