Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/dldtGf8iAqMIc0ytnDvP-eC4mMM.roa
File: dldtGf8iAqMIc0ytnDvP-eC4mMM.roa (raw, json)
Hash identifier: YSxthPkt2JpRD0R9sk5QHtBzuSlu83HWt9XvpioLJ/M=
Subject key identifier: 76:57:6D:19:FF:22:02:A3:08:73:4C:AD:9C:3B:CF:F9:E0:B8:98:C3
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 01A0ABBD08E873538B1E4D8308DC5AA6D603
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/dldtGf8iAqMIc0ytnDvP-eC4mMM.roa
Signing time: Wed 16 Sep 2026 19:41:27 +0000
ROA not before: Wed 16 Sep 2026 19:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216129
IP address blocks: 81.30.105.0/24 maxlen: 24
95.215.56.0/24 maxlen: 24
107.161.154.0/24 maxlen: 24
121.127.37.0/24 maxlen: 24
148.253.208.0/24 maxlen: 24
148.253.209.0/24 maxlen: 24
148.253.210.0/24 maxlen: 24
148.253.211.0/24 maxlen: 24
148.253.212.0/24 maxlen: 24
148.253.213.0/24 maxlen: 24
148.253.214.0/24 maxlen: 24
148.253.215.0/24 maxlen: 24
185.28.84.0/24 maxlen: 24
185.28.85.0/24 maxlen: 24
185.56.162.0/24 maxlen: 24
194.164.245.0/24 maxlen: 24
199.83.103.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
203.31.40.0/24 maxlen: 24
2a13:d200::/29 maxlen: 48
2a13:d200::/32 maxlen: 32
2a13:d200:1::/48 maxlen: 48
2a13:d200:5::/48 maxlen: 48
2a13:d200:6::/48 maxlen: 48
2a13:d200:7::/48 maxlen: 48
2a13:d200:8::/48 maxlen: 48
2a13:d200:9::/48 maxlen: 48
2a13:d200:10::/48 maxlen: 48
2a13:d200:11::/48 maxlen: 48
2a13:d200:12::/48 maxlen: 48
2a13:d200:13::/48 maxlen: 48
2a13:d200:14::/48 maxlen: 48
2a13:d200:15::/48 maxlen: 48
2a13:d201::/48 maxlen: 48
2a13:d201:1::/48 maxlen: 48
2a13:d201:2::/48 maxlen: 48
2a13:d201:3::/48 maxlen: 48
2a13:d201:6::/48 maxlen: 48
2a13:d201:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:bd:08:e8:73:53:8b:1e:4d:83:08:dc:5a:a6:d6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Sep 16 19:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76576d19ff2202a308734cad9c3bcff9e0b898c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:e7:cf:d3:8f:7d:b0:92:39:25:b3:43:84:
eb:d5:e6:ac:40:41:48:94:3f:42:43:96:5c:ad:b0:
72:ab:48:2b:5d:70:78:c2:57:6b:48:5e:df:0f:b0:
f9:93:16:39:9d:ea:0d:1f:da:9a:fa:c3:99:cd:32:
17:5b:8b:50:15:fd:8c:50:ea:58:c5:22:d6:a4:b4:
7a:ce:fe:dc:f6:4d:dd:1c:17:29:9e:ae:0a:22:ee:
72:87:9e:0f:c4:a7:2e:44:72:9b:36:ae:07:17:12:
3f:55:83:f9:ce:35:e1:01:aa:36:08:ff:77:14:18:
69:e8:c5:60:34:11:35:29:f9:c7:de:29:70:d6:3d:
aa:15:f1:02:41:40:a1:f5:80:0b:ce:af:69:d7:40:
1e:de:a9:ec:74:8a:bb:93:ac:e9:67:d4:20:94:67:
86:01:84:91:4c:12:c9:49:4b:41:9f:c1:92:c8:d4:
25:b9:4f:8f:9a:7a:80:c0:41:38:5d:9b:5b:f9:00:
85:7d:96:74:40:38:95:7e:02:19:d6:20:11:3e:f4:
0c:5f:12:c2:92:97:0d:d9:af:71:79:89:e8:00:33:
1a:2f:50:18:97:3c:7e:b7:50:3f:c5:05:0f:0f:aa:
bc:e0:12:32:93:dc:cd:19:1a:ef:12:79:ca:c4:0a:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:57:6D:19:FF:22:02:A3:08:73:4C:AD:9C:3B:CF:F9:E0:B8:98:C3
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/dldtGf8iAqMIc0ytnDvP-eC4mMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.105.0/24
95.215.56.0/24
107.161.154.0/24
121.127.37.0/24
148.253.208.0/21
185.28.84.0/23
185.56.162.0/24
194.164.245.0/24
199.83.103.0/24
202.181.148.0/24
202.181.188.0/24
203.31.40.0/24
IPv6:
2a13:d200::/29
Signature Algorithm: sha256WithRSAEncryption
23:b0:00:3a:61:09:4e:c0:25:8f:f0:c3:b2:89:c1:59:c3:f9:
11:6c:1d:33:fa:da:e8:52:c1:08:a6:cc:70:43:bd:70:d6:1f:
63:ff:9b:55:39:04:65:5f:d9:09:f1:be:83:b6:69:52:e3:b0:
ee:52:cf:01:fc:88:dc:c7:50:59:3a:e7:45:1d:fb:fe:e6:6a:
e2:7b:af:99:0c:e4:fa:46:1f:dd:6f:3e:4b:1e:9c:85:b8:24:
eb:85:1a:23:b1:c7:9e:7d:7a:1b:ad:6f:83:c9:e0:86:19:9f:
51:0b:51:29:0e:62:12:9e:1f:ba:e1:5a:e6:60:bb:88:f8:3c:
d5:cc:c4:4f:55:be:4d:ad:52:19:78:e1:b9:ab:ab:43:bd:3e:
7e:4f:8a:b6:1d:68:98:3c:3f:00:f3:ee:89:12:29:02:08:ab:
27:c2:42:d4:fd:54:9e:06:df:ac:f7:97:c6:69:22:65:cb:eb:
b1:bb:2f:db:8d:82:dd:2f:12:db:05:59:f5:cc:de:2b:38:29:
fb:b3:f3:84:cf:51:d9:7a:ef:19:bb:fa:f8:a2:4d:28:4f:ca:
41:4e:dd:05:c3:25:8d:62:f1:9d:e7:bf:c1:7e:be:cc:c2:79:
0a:5e:25:78:88:9e:a5:29:ab:9d:2e:ef:b2:cc:5a:9d:95:90:
15:fe:05:2f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAaCrvQjoc1OLHk2DCNxaptYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MTZkYzlkYjRlNDlkZTcxYjJmZDA4MTlkYWU4NTNhZWIw
NTNiMDYwHhcNMjYwOTE2MTk0MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjU3NmQxOWZmMjIwMmEzMDg3MzRjYWQ5YzNiY2ZmOWUwYjg5OGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYrnz9OPfbCSOSWzQ4Tr1easQEFI
lD9CQ5ZcrbByq0grXXB4wldrSF7fD7D5kxY5neoNH9qa+sOZzTIXW4tQFf2MUOpY
xSLWpLR6zv7c9k3dHBcpnq4KIu5yh54PxKcuRHKbNq4HFxI/VYP5zjXhAao2CP93
FBhp6MVgNBE1KfnH3ilw1j2qFfECQUCh9YALzq9p10Ae3qnsdIq7k6zpZ9QglGeG
AYSRTBLJSUtBn8GSyNQluU+PmnqAwEE4XZtb+QCFfZZ0QDiVfgIZ1iARPvQMXxLC
kpcN2a9xeYnoADMaL1AYlzx+t1A/xQUPD6q84BIyk9zNGRrvEnnKxAq8kQIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFHZXbRn/IgKjCHNMrZw7z/nguJjDMB8GA1UdIwQY
MBaAFOkW3J205J3nGy/QgZ2uhTrrBTsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlJiY25iVGtuZWNiTDlDQm5hNkZPdXNGT3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xYWY0YTUtMGQ2Yy00Nzc2LWJlNWMt
YmU4NTJmNjQ0MjAxLzEvZGxkdEdmOGlBcU1JYzB5dG5EdlAtZUM0bU1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xYWY0YTUtMGQ2Yy00Nzc2LWJlNWMtYmU4NTJmNjQ0MjAx
LzEvNlJiY25iVGtuZWNiTDlDQm5hNkZPdXNGT3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQAUR5pAwQA
X9c4AwQAa6GaAwQAeX8lAwQDlP3QAwQBuRxUAwQAuTiiAwQAwqT1AwQAx1NnAwQA
yrWUAwQAyrW8AwQAyx8oMA0EAgACMAcDBQMqE9IAMA0GCSqGSIb3DQEBCwUAA4IB
AQAjsAA6YQlOwCWP8MOyicFZw/kRbB0z+troUsEIpsxwQ71w1h9j/5tVOQRlX9kJ
8b6DtmlS47DuUs8B/Ijcx1BZOudFHfv+5mrie6+ZDOT6Rh/dbz5LHpyFuCTrhRoj
sceefXobrW+DyeCGGZ9RC1EpDmISnh+64VrmYLuI+DzVzMRPVb5NrVIZeOG5q6tD
vT5+T4q2HWiYPD8A8+6JEikCCKsnwkLU/VSeBt+s95fGaSJly+uxuy/bjYLdLxLb
BVn1zN4rOCn7s/OEz1HZeu8Zu/r4ok0oT8pBTt0FwyWNYvGd57/Bfr7MwnkKXiV4
iJ6lKaudLu+yzFqdlZAV/gUv
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:22 2026 by rpki-client