Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/6NnumjbLaK5uH21Kvrb7OjjLMWI.roa
File: 6NnumjbLaK5uH21Kvrb7OjjLMWI.roa (raw, json)
Hash identifier: 7pnfS7LcH0iQhlqpTMUeGOkYaMziCcKZ9vKU4S2fblw=
Subject key identifier: E8:D9:EE:9A:36:CB:68:AE:6E:1F:6D:4A:BE:B6:FB:3A:38:CB:31:62
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019D62A30C94BE1B8FB083E983DFA80E8A93
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/6NnumjbLaK5uH21Kvrb7OjjLMWI.roa
Signing time: Mon 06 Apr 2026 11:52:25 +0000
ROA not before: Mon 06 Apr 2026 11:52:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
31.209.96.0/24 maxlen: 24
31.209.97.0/24 maxlen: 32
31.209.100.0/23 maxlen: 32
31.209.102.0/23 maxlen: 32
31.209.104.0/23 maxlen: 32
31.209.106.0/24 maxlen: 32
31.209.107.0/24 maxlen: 32
31.209.108.0/22 maxlen: 32
31.223.187.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.150.252.0/23 maxlen: 23
45.150.254.0/23 maxlen: 23
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
46.16.32.0/24 maxlen: 32
80.73.243.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
81.21.232.0/22 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.21.52.0/24 maxlen: 32
103.24.232.0/22 maxlen: 32
103.71.60.0/24 maxlen: 32
103.76.255.0/24 maxlen: 32
103.81.230.0/23 maxlen: 23
103.113.208.0/22 maxlen: 22
103.145.75.0/24 maxlen: 32
103.198.254.0/23 maxlen: 23
103.204.222.0/23 maxlen: 32
103.221.52.0/22 maxlen: 32
103.228.200.0/22 maxlen: 32
103.251.26.0/23 maxlen: 23
104.36.50.0/24 maxlen: 32
109.104.142.0/23 maxlen: 32
116.206.96.0/22 maxlen: 32
137.59.60.0/22 maxlen: 32
167.160.96.0/24 maxlen: 32
167.160.97.0/24 maxlen: 32
167.160.98.0/24 maxlen: 32
178.251.234.0/23 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
194.126.179.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
195.225.81.0/24 maxlen: 24
199.249.223.0/24 maxlen: 32
2a01:4740::/32 maxlen: 48
2a05:28c0::/29 maxlen: 48
2a05:6700::/29 maxlen: 48
2a05:f4c0::/29 maxlen: 48
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 48
2a06:5000::/29 maxlen: 48
2a06:5700::/29 maxlen: 48
2a06:5740::/29 maxlen: 48
2a06:5800::/29 maxlen: 48
2a06:6580::/29 maxlen: 48
2a06:7340::/29 maxlen: 48
2a06:8100::/29 maxlen: 48
2a06:8140::/29 maxlen: 48
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:a3:0c:94:be:1b:8f:b0:83:e9:83:df:a8:0e:8a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Apr 6 11:52:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8d9ee9a36cb68ae6e1f6d4abeb6fb3a38cb3162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:73:67:82:97:29:5f:a3:1f:a9:2d:46:e3:51:
b4:5f:36:bb:a0:55:c7:36:d8:e1:f3:6d:d4:dc:4a:
61:7a:6e:6a:3b:36:fb:69:40:be:bc:ac:45:75:1d:
1b:26:20:2d:33:57:99:7d:9f:30:fe:27:09:2d:5f:
a0:cc:ba:f0:b0:a6:54:e3:68:85:c3:33:be:d9:b8:
f6:49:84:6d:50:d8:1e:2a:ce:c2:d7:cc:f0:91:ff:
37:ff:ce:df:04:61:52:6a:72:e6:6e:59:59:82:66:
4e:f3:02:f3:1e:b9:8a:a5:66:62:65:0e:f5:42:d0:
e7:c3:c0:bb:5d:66:3e:b0:f4:10:8c:99:dc:56:4c:
7b:32:9e:47:ec:e3:c8:e5:53:fc:35:fb:ca:2c:c9:
a5:6c:e5:b4:a2:5a:8d:c8:c4:d3:b0:e5:8f:43:c8:
3e:8b:3f:c6:f1:77:7d:e1:e9:12:79:b0:c4:07:f7:
ca:66:19:41:9e:45:13:05:27:14:77:83:2b:e7:7f:
c9:b6:45:5e:fd:f8:0b:99:be:0d:f4:c4:a2:fb:58:
e0:db:d2:03:9a:49:2a:97:fb:25:cf:ee:42:79:b7:
72:d3:b2:55:26:0d:67:d9:cf:a2:88:b7:24:4a:20:
0a:6d:8e:7c:9c:ef:5b:4d:59:7c:77:1f:7f:32:a7:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D9:EE:9A:36:CB:68:AE:6E:1F:6D:4A:BE:B6:FB:3A:38:CB:31:62
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/6NnumjbLaK5uH21Kvrb7OjjLMWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
31.209.96.0/23
31.209.100.0-31.209.111.255
31.223.187.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.150.252.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
46.16.32.0/24
80.73.243.0/24
80.246.30.0/24
81.21.232.0/22
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.21.52.0/24
103.24.232.0/22
103.71.60.0/24
103.76.255.0/24
103.81.230.0/23
103.113.208.0/22
103.145.75.0/24
103.198.254.0/23
103.204.222.0/23
103.221.52.0/22
103.228.200.0/22
103.251.26.0/23
104.36.50.0/24
109.104.142.0/23
116.206.96.0/22
137.59.60.0/22
167.160.96.0-167.160.98.255
178.251.234.0/23
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
194.126.179.0/24
195.47.194.0/24
195.225.81.0/24
199.249.223.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:6700::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:5740::/29
2a06:5800::/29
2a06:6580::/29
2a06:7340::/29
2a06:8100::/29
2a06:8140::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
27:7f:a7:e1:08:1d:08:fe:bc:59:6b:0e:9a:37:f6:0d:0d:7e:
d8:fe:91:28:d5:b8:86:58:93:ec:52:10:04:ec:e8:b8:e8:91:
cc:8c:a7:f7:0b:54:25:35:61:bf:70:a7:f8:f1:9f:c2:4f:ab:
49:85:dc:98:ed:c6:a1:69:ab:68:83:01:87:7b:4a:67:36:5c:
5c:90:27:de:37:a9:ab:5b:55:70:a4:55:61:06:3d:20:74:73:
ed:52:f0:2a:0c:6f:d6:07:0e:42:fa:42:64:38:77:43:eb:54:
72:fd:ed:6b:66:28:fd:b8:39:5e:17:c1:32:21:3e:e8:62:a8:
42:96:fa:31:4e:18:c2:5b:12:65:06:9e:bd:0b:cc:47:d5:0a:
8a:48:46:e4:87:95:19:a2:4e:03:52:1b:04:ab:8a:6a:69:a2:
fb:3a:67:f8:0c:17:55:ab:0d:f8:84:3b:b7:03:2c:32:c3:f3:
ac:1d:40:fa:c9:ed:3d:5b:80:ae:6c:41:d0:de:53:df:f9:39:
4b:56:3b:9f:08:e2:27:eb:48:47:dc:72:8b:69:e1:2c:16:d5:
e6:c5:37:6a:4b:a9:28:2b:75:c8:a8:8f:4e:dd:2d:a8:16:d7:
d7:f5:54:39:55:57:fb:2c:55:67:74:93:8b:0f:a0:e8:4b:df:
ea:b2:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:20 2026 by rpki-client