Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/oq5d9HTZ2FvH6UpKIxcYrRSa8sk.roa
File: oq5d9HTZ2FvH6UpKIxcYrRSa8sk.roa (raw, json)
Hash identifier: mACKVbi6TlnubAvt/B9gWwTNVFEYK1/MvPkL1z25u4U=
Subject key identifier: A2:AE:5D:F4:74:D9:D8:5B:C7:E9:4A:4A:23:17:18:AD:14:9A:F2:C9
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019EBAB961321B7985DCB0FB9F9A74514A16
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/oq5d9HTZ2FvH6UpKIxcYrRSa8sk.roa
Signing time: Fri 12 Jun 2026 07:26:11 +0000
ROA not before: Fri 12 Jun 2026 07:26:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.203.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.201.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.13.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
213.220.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:b9:61:32:1b:79:85:dc:b0:fb:9f:9a:74:51:4a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 12 07:26:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2ae5df474d9d85bc7e94a4a231718ad149af2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:9b:5f:87:26:49:c1:a3:28:24:e5:bf:e9:
47:23:bc:76:fe:04:b5:e9:1d:a1:ea:28:63:02:cf:
97:3e:2c:42:87:02:a7:0c:12:8c:aa:91:c9:32:06:
d4:b4:e0:da:b3:22:10:96:56:8d:2d:f3:83:c7:84:
21:2e:15:34:fd:c5:83:7e:63:77:3c:0a:f9:0a:46:
61:30:d9:7e:7c:4a:81:4e:d3:39:05:40:ca:9f:8a:
cf:d0:12:e8:ef:b9:e1:f4:18:1b:cf:c7:cc:bd:26:
48:26:ac:d1:df:66:90:2a:ed:75:f5:27:33:0b:03:
90:15:a8:b3:ed:b8:0f:65:d2:5e:7c:38:13:ca:4b:
b1:04:b2:e9:6a:ba:93:ff:a7:01:dc:c8:b1:6e:0a:
bf:29:00:95:6d:b9:91:75:84:1c:d6:01:13:f3:94:
7c:a7:dc:d7:d5:d7:02:54:c0:ed:10:29:1e:69:88:
3a:73:3e:43:49:40:72:9b:4a:bf:ef:b6:ab:0e:0a:
d1:50:da:7f:12:63:00:fe:4d:42:e0:e1:78:fb:54:
1b:ab:b5:2a:6b:75:c8:e8:85:d8:69:01:ca:2c:fc:
a3:c0:b4:26:9c:33:79:03:8e:57:93:61:7f:70:db:
6f:3f:45:eb:61:97:49:83:84:cb:06:c6:d1:fe:7c:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:5D:F4:74:D9:D8:5B:C7:E9:4A:4A:23:17:18:AD:14:9A:F2:C9
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/oq5d9HTZ2FvH6UpKIxcYrRSa8sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.203.0/24
194.143.205.0/24
194.143.209.0/24
194.143.217.0-194.143.218.255
194.143.221.0-194.143.223.255
195.114.192.0/24
195.114.196.0-195.114.198.255
195.114.200.0/22
195.114.205.0/24
213.220.0.0/24
213.220.2.0/24
213.220.6.0/24
213.220.11.0/24
213.220.13.0-213.220.14.255
213.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b2:6c:29:10:43:48:bf:04:99:22:94:2d:62:ad:7d:45:90:
c6:a6:2a:c2:d2:d0:32:5b:f9:ac:e8:41:ae:ce:26:be:71:a1:
9c:b8:24:81:f4:11:d5:b9:f2:f6:e6:9e:91:a4:4c:81:87:9e:
17:f6:92:7c:d1:7b:76:ae:a0:85:5e:6b:5c:8c:d9:21:25:99:
2f:19:62:fc:f3:fd:47:da:25:d9:f8:84:53:4c:c1:8a:0b:5b:
d3:14:3b:2c:33:60:40:6f:7a:a7:29:d7:25:76:18:f2:69:0f:
4f:10:b6:e8:82:44:37:35:8c:aa:ec:1d:14:d8:d8:f3:51:36:
4d:12:36:07:f6:7f:7d:99:c3:03:12:fe:fb:d9:34:2a:6f:a6:
fa:21:34:e2:a7:1a:73:dd:13:37:ec:8f:71:4d:cf:9a:07:0b:
83:0c:9e:d2:d5:07:dd:96:50:25:19:34:ea:1e:b2:06:fb:a0:
2c:10:6a:df:70:72:85:0a:0d:2f:d5:de:99:55:a7:9e:df:b0:
21:fa:67:49:80:a4:9c:c8:60:35:69:0d:d8:bf:e8:0e:41:87:
88:f2:ed:83:02:ba:80:e7:19:73:68:63:4d:46:24:b8:25:65:
57:6e:93:cc:42:18:44:01:9c:4b:37:df:e7:b2:aa:9c:8f:5a:
94:31:77:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAZ66uWEyG3mF3LD7n5p0UUoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjYwNjEyMDcyNjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmFlNWRmNDc0ZDlkODViYzdlOTRhNGEyMzE3MThhZDE0OWFmMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7KbX4cmScGjKCTlv+lHI7x2/gS1
6R2h6ihjAs+XPixChwKnDBKMqpHJMgbUtODasyIQllaNLfODx4QhLhU0/cWDfmN3
PAr5CkZhMNl+fEqBTtM5BUDKn4rP0BLo77nh9Bgbz8fMvSZIJqzR32aQKu119Scz
CwOQFaiz7bgPZdJefDgTykuxBLLparqT/6cB3Mixbgq/KQCVbbmRdYQc1gET85R8
p9zX1dcCVMDtECkeaYg6cz5DSUBym0q/77arDgrRUNp/EmMA/k1C4OF4+1Qbq7Uq
a3XI6IXYaQHKLPyjwLQmnDN5A45Xk2F/cNtvP0XrYZdJg4TLBsbR/nxWTQIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFKKuXfR02dhbx+lKSiMXGK0UmvLJMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvb3E1ZDlIVFoyRnZINlVwS0l4Y1lyUlNhOHNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgwDAME
BC2b8AMEAC2b8gMEAMKPywMEAMKPzQMEAMKP0TAMAwQAwo/ZAwQAwo/aMAwDBADC
j90DBAXCj8ADBADDcsAwDAMEAsNyxAMEAMNyxgMEAsNyyAMEAMNyzQMEANXcAAME
ANXcAgMEANXcBgMEANXcCzAMAwQA1dwNAwQA1dwOAwQA1dwyMA0GCSqGSIb3DQEB
CwUAA4IBAQBcsmwpEENIvwSZIpQtYq19RZDGpirC0tAyW/ms6EGuzia+caGcuCSB
9BHVufL25p6RpEyBh54X9pJ80Xt2rqCFXmtcjNkhJZkvGWL88/1H2iXZ+IRTTMGK
C1vTFDssM2BAb3qnKdcldhjyaQ9PELbogkQ3NYyq7B0U2NjzUTZNEjYH9n99mcMD
Ev772TQqb6b6ITTipxpz3RM37I9xTc+aBwuDDJ7S1QfdllAlGTTqHrIG+6AsEGrf
cHKFCg0v1d6ZVaee37Ah+mdJgKScyGA1aQ3Yv+gOQYeI8u2DArqA5xlzaGNNRiS4
JWVXbpPMQhhEAZxLN9/nsqqcj1qUMXe2
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:30 2026 by rpki-client