Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/AUg0z5yXbzh2DRCyGjN0QT6euNA.roa
File: AUg0z5yXbzh2DRCyGjN0QT6euNA.roa (raw, json)
Hash identifier: RSYJ1asjZqxOdOG/NJBg7u2rmfVrBP+knp47N/2/EDM=
Subject key identifier: 01:48:34:CF:9C:97:6F:38:76:0D:10:B2:1A:33:74:41:3E:9E:B8:D0
Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial: 019C420A8BAC8CFDAEE412599F70F33BCC19
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/AUg0z5yXbzh2DRCyGjN0QT6euNA.roa
Signing time: Mon 09 Feb 2026 10:55:12 +0000
ROA not before: Mon 09 Feb 2026 10:55:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 151.88.22.0/24 maxlen: 24
151.88.40.0/24 maxlen: 24
151.88.41.0/24 maxlen: 24
151.88.109.0/24 maxlen: 24
151.88.176.0/24 maxlen: 24
151.91.35.0/24 maxlen: 24
151.91.38.0/24 maxlen: 24
151.92.2.0/24 maxlen: 24
151.92.4.0/24 maxlen: 24
151.92.12.0/24 maxlen: 24
151.92.83.0/24 maxlen: 24
151.92.154.0/24 maxlen: 24
151.92.155.0/24 maxlen: 24
151.92.158.0/24 maxlen: 24
151.92.166.0/24 maxlen: 24
151.92.198.0/24 maxlen: 24
194.104.188.0/24 maxlen: 24
194.104.189.0/24 maxlen: 24
194.104.190.0/24 maxlen: 24
194.104.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0a:8b:ac:8c:fd:ae:e4:12:59:9f:70:f3:3b:cc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Validity
Not Before: Feb 9 10:55:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=014834cf9c976f38760d10b21a3374413e9eb8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:c8:57:d6:21:04:a2:6c:e6:49:9b:3f:61:
66:33:47:6d:d3:0f:5c:e3:71:5c:4f:25:d3:93:78:
3b:2d:b7:60:10:99:c7:25:67:a4:61:ce:6e:66:88:
69:05:28:20:57:ad:28:ff:2b:90:40:f7:7e:e3:22:
61:02:ae:28:6f:d8:80:e6:f6:42:dd:93:95:a6:7b:
6e:ef:31:74:b0:6d:6b:82:a5:99:a5:9a:78:46:ea:
cc:a5:7d:ba:7e:2b:24:86:3c:9d:70:41:c4:26:2e:
f9:ea:08:d8:4a:fd:47:76:86:3c:cc:c2:ab:62:f5:
15:8e:5d:76:fa:ce:0a:e8:16:89:04:33:9f:9d:f8:
26:df:ac:08:7d:75:81:71:57:c4:c0:90:1b:73:90:
f9:42:6f:05:a7:89:37:05:16:9c:d4:a4:2d:80:a4:
06:84:4b:8d:0c:8b:ab:8a:0c:7a:ca:66:54:4f:e3:
55:1d:02:d2:d7:85:2b:b4:c8:79:33:50:9e:d3:92:
23:e3:09:12:3f:2b:1f:ef:fb:95:53:a2:60:89:59:
9b:a9:21:7c:fb:cf:58:a2:fd:5f:3c:b7:58:1d:4c:
db:09:a6:c0:2e:f0:04:8c:f3:52:5f:de:a6:41:1f:
67:8e:f3:cc:0d:8d:bc:5d:a2:c1:a7:5d:7b:33:aa:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:34:CF:9C:97:6F:38:76:0D:10:B2:1A:33:74:41:3E:9E:B8:D0
X509v3 Authority Key Identifier:
keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/AUg0z5yXbzh2DRCyGjN0QT6euNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.88.22.0/24
151.88.40.0/23
151.88.109.0/24
151.88.176.0/24
151.91.35.0/24
151.91.38.0/24
151.92.2.0/24
151.92.4.0/24
151.92.12.0/24
151.92.83.0/24
151.92.154.0/23
151.92.158.0/24
151.92.166.0/24
151.92.198.0/24
194.104.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:8e:d9:24:4b:ce:58:32:59:a7:5a:a0:f3:5f:05:9a:a7:bd:
82:df:c2:e7:fa:fb:e0:66:0a:c6:db:ad:b0:b8:0d:80:aa:25:
db:5f:2a:54:43:f3:97:70:44:ca:bd:66:39:55:68:98:93:4c:
3c:22:ae:ab:48:99:af:06:8c:07:30:4c:c3:f8:cf:a2:8f:b4:
88:37:ce:23:48:7a:7d:93:0a:12:76:ed:68:e7:04:dd:8a:dc:
60:30:b5:a0:3e:5b:3f:ed:72:e1:62:b9:28:60:d3:79:06:dd:
b8:13:bf:05:8f:99:c9:35:cb:f5:ff:6d:b4:8e:cf:d2:b9:c8:
03:3f:b7:9e:62:d8:0e:d2:3a:ea:a6:cb:5b:ed:d6:91:3f:1a:
46:ad:a8:d0:0d:84:4d:76:29:91:da:f0:88:4a:49:8a:74:45:
03:62:cb:b0:81:76:a6:e4:04:59:35:00:5c:de:77:b0:70:42:
cb:a2:a6:ef:09:85:cb:cf:31:1b:fa:dd:c4:a9:f7:7d:50:0f:
bc:e2:c7:64:b3:f5:33:5a:ce:f4:f4:e3:06:7d:4a:f6:82:96:
ea:ac:c8:92:f5:6f:91:52:a4:2b:6d:93:33:1a:ae:05:d6:ae:
e9:f3:86:00:cf:d6:81:a2:2a:16:c8:27:99:2d:e1:85:d1:5a:
1b:81:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:13:50 2026 by rpki-client