Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/7VIKCa61Z75pFNublu7wlAtvkh8.roa
File: 7VIKCa61Z75pFNublu7wlAtvkh8.roa (raw, json)
Hash identifier: d/0djTjrhOewyBKD6bQpZD7nKtygIdgcjwVz9/qNO9g=
Subject key identifier: ED:52:0A:09:AE:B5:67:BE:69:14:DB:9B:96:EE:F0:94:0B:6F:92:1F
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 019C6748D8B00DEDA28C031DB69BA5D1EA5C
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/7VIKCa61Z75pFNublu7wlAtvkh8.roa
Signing time: Mon 16 Feb 2026 16:29:12 +0000
ROA not before: Mon 16 Feb 2026 16:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 5.101.136.0/21 maxlen: 21
5.101.144.0/21 maxlen: 21
5.101.168.0/21 maxlen: 21
31.132.0.0/21 maxlen: 21
37.9.56.0/21 maxlen: 21
77.74.192.0/21 maxlen: 21
77.75.120.0/21 maxlen: 21
78.110.160.0/21 maxlen: 21
78.110.168.0/23 maxlen: 23
78.110.170.0/24 maxlen: 24
78.110.172.0/22 maxlen: 22
78.157.192.0/21 maxlen: 21
78.157.200.0/22 maxlen: 22
78.157.204.0/24 maxlen: 24
78.157.206.0/23 maxlen: 23
78.157.208.0/20 maxlen: 20
81.92.192.0/22 maxlen: 22
81.92.217.0/24 maxlen: 24
81.92.218.0/24 maxlen: 24
91.109.112.0/21 maxlen: 21
94.46.184.0/22 maxlen: 22
94.46.192.0/22 maxlen: 22
94.46.207.0/24 maxlen: 24
94.46.220.0/22 maxlen: 22
94.46.244.0/22 maxlen: 22
94.229.64.0/20 maxlen: 20
178.159.0.0/20 maxlen: 20
185.17.24.0/24 maxlen: 24
185.17.26.0/24 maxlen: 24
185.17.27.0/24 maxlen: 24
185.99.252.0/24 maxlen: 24
185.99.253.0/24 maxlen: 24
185.99.254.0/24 maxlen: 24
185.103.96.0/22 maxlen: 22
185.109.168.0/22 maxlen: 22
2a01:a500::/32 maxlen: 32
2a01:a500:1::/48 maxlen: 48
2a01:a500:1228::/48 maxlen: 48
2a01:a500:251a::/48 maxlen: 48
2a01:a500:251b::/48 maxlen: 48
2a01:a500:251c::/48 maxlen: 48
2a01:a500:2566::/48 maxlen: 48
2a01:a500:a517::/48 maxlen: 48
2a01:a500:b517::/48 maxlen: 48
2a01:a500:c517::/48 maxlen: 48
2a01:a500:d517::/48 maxlen: 48
2a01:a500:e517::/48 maxlen: 48
2a01:a500:f517::/48 maxlen: 48
2a01:a502::/32 maxlen: 32
2a01:a507::/32 maxlen: 32
2a01:a507:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:67:48:d8:b0:0d:ed:a2:8c:03:1d:b6:9b:a5:d1:ea:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Feb 16 16:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed520a09aeb567be6914db9b96eef0940b6f921f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0a:c4:76:5f:ac:83:44:6d:4b:ee:29:96:bf:
73:55:9f:79:c4:f9:66:63:f1:0a:a2:85:35:17:8c:
8e:8c:7b:98:7b:16:75:3e:59:82:47:c7:44:5b:6b:
79:ae:c0:00:f3:0a:79:31:e2:63:17:5c:79:bf:3b:
06:01:ad:9e:aa:aa:27:fa:6a:96:38:e1:92:48:be:
fb:56:0e:ef:b4:48:6e:be:39:bf:0d:1c:9b:01:95:
57:cb:61:3a:0b:4e:6c:8e:cc:a7:b3:9d:39:a8:fa:
35:cf:44:99:83:85:e8:e5:65:6f:b4:6d:9f:e7:97:
65:29:7c:dd:b5:cb:63:0f:03:7b:68:44:fc:b2:43:
52:50:ba:2a:1b:7e:cb:d3:9b:38:04:fa:6f:5c:28:
83:dd:e9:78:92:33:68:85:47:a2:c6:d0:7f:4e:54:
d9:9f:a8:9a:59:a3:c1:b6:b5:d8:7e:69:b3:07:d2:
92:dd:05:64:76:b6:8c:ec:4a:d8:8e:71:0b:5f:d0:
86:1b:37:fc:3c:a5:25:35:11:bc:aa:d1:8e:1c:11:
d8:4f:0e:eb:f9:59:f7:a0:2d:a8:e7:66:d9:cc:01:
ff:cb:0f:74:80:ba:7b:23:27:08:80:96:72:52:4d:
f2:72:a1:ef:9e:be:f7:fb:5a:30:4a:4f:e3:9e:12:
4e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:0A:09:AE:B5:67:BE:69:14:DB:9B:96:EE:F0:94:0B:6F:92:1F
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/7VIKCa61Z75pFNublu7wlAtvkh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.136.0-5.101.151.255
5.101.168.0/21
31.132.0.0/21
37.9.56.0/21
77.74.192.0/21
77.75.120.0/21
78.110.160.0-78.110.170.255
78.110.172.0/22
78.157.192.0-78.157.204.255
78.157.206.0-78.157.223.255
81.92.192.0/22
81.92.217.0-81.92.218.255
91.109.112.0/21
94.46.184.0/22
94.46.192.0/22
94.46.207.0/24
94.46.220.0/22
94.46.244.0/22
94.229.64.0/20
178.159.0.0/20
185.17.24.0/24
185.17.26.0/23
185.99.252.0-185.99.254.255
185.103.96.0/22
185.109.168.0/22
IPv6:
2a01:a500::/32
2a01:a502::/32
2a01:a507::/32
Signature Algorithm: sha256WithRSAEncryption
7c:05:11:b8:0c:eb:5b:61:37:bf:70:8a:50:51:ee:c1:65:8f:
76:40:28:94:c2:88:76:16:a9:87:71:17:09:b6:46:c7:fa:fe:
ce:a2:ed:bf:4e:bc:14:5c:9e:13:91:f7:ab:5f:2c:c2:f7:da:
bd:18:e6:8b:0d:c0:bb:13:64:e7:d5:9b:8c:cb:e2:8c:64:c6:
69:06:4e:22:6f:58:61:c9:5a:47:09:fd:4c:47:ce:23:bd:6e:
38:21:04:e7:59:c0:0e:fc:13:ad:5e:12:1c:24:d4:90:5e:ec:
73:03:07:7e:88:a0:f6:a8:03:ad:33:2e:62:24:7d:67:d4:0b:
e5:69:7d:f9:a3:ef:4a:18:83:83:ec:a7:a9:92:bc:58:c8:bd:
62:88:29:b8:79:0c:06:19:ef:fb:ca:19:8b:8b:1d:30:33:2d:
c0:3d:42:1c:da:3d:e1:a0:4b:12:e3:5c:61:6e:6a:40:62:f1:
72:64:a3:61:c5:ee:44:00:ea:50:ec:c5:eb:00:e1:94:ad:54:
58:c9:33:7f:27:ac:fc:d5:fc:85:b9:62:c3:fe:f2:b3:56:0e:
8f:0e:f4:61:73:b5:6b:5d:ee:11:6f:15:f5:49:f3:dd:1c:02:
9b:34:65:4f:ec:b1:d6:62:2f:52:ad:26:09:62:2a:50:b0:54:
e7:82:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:48 2026 by rpki-client