Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/6Hz-graF3A3TzKiU9TF5SPg3ZbQ.roa
File: 6Hz-graF3A3TzKiU9TF5SPg3ZbQ.roa (raw, json)
Hash identifier: we1nA+m/JuF6parbhnTAu1bIwfcY90Qs5ZbrZu/N/Qk=
Subject key identifier: E8:7C:FE:82:B6:85:DC:0D:D3:CC:A8:94:F5:31:79:48:F8:37:65:B4
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019D3E4980F364178EFC9BB2CAF43004511E
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/6Hz-graF3A3TzKiU9TF5SPg3ZbQ.roa
Signing time: Mon 30 Mar 2026 10:28:17 +0000
ROA not before: Mon 30 Mar 2026 10:28:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8193
IP address blocks: 5.133.120.0/22 maxlen: 22
45.150.24.0/22 maxlen: 22
83.222.6.0/23 maxlen: 23
84.54.64.0/19 maxlen: 19
84.54.66.0/23 maxlen: 23
84.54.70.0/23 maxlen: 23
84.54.70.0/24 maxlen: 24
84.54.71.0/24 maxlen: 24
84.54.72.0/23 maxlen: 23
84.54.72.0/24 maxlen: 24
84.54.73.0/24 maxlen: 24
84.54.76.0/23 maxlen: 23
84.54.78.0/23 maxlen: 23
84.54.80.0/23 maxlen: 23
84.54.84.0/23 maxlen: 23
84.54.86.0/23 maxlen: 23
84.54.90.0/23 maxlen: 23
84.54.92.0/23 maxlen: 23
84.54.94.0/23 maxlen: 23
84.54.96.0/20 maxlen: 20
84.54.103.0/24 maxlen: 24
84.54.104.0/24 maxlen: 24
84.54.112.0/24 maxlen: 24
84.54.115.0/24 maxlen: 24
84.54.116.0/23 maxlen: 23
84.54.118.0/23 maxlen: 23
84.54.118.0/24 maxlen: 24
84.54.120.0/23 maxlen: 23
84.54.122.0/23 maxlen: 23
86.62.0.0/22 maxlen: 22
86.62.1.0/24 maxlen: 24
87.192.224.0/22 maxlen: 22
87.192.228.0/22 maxlen: 22
87.192.232.0/22 maxlen: 22
87.192.236.0/22 maxlen: 22
89.104.102.0/24 maxlen: 24
89.223.3.0/24 maxlen: 24
89.249.60.0/22 maxlen: 22
89.249.62.0/24 maxlen: 24
89.249.63.0/24 maxlen: 24
90.156.160.0/24 maxlen: 24
90.156.161.0/24 maxlen: 24
90.156.162.0/24 maxlen: 24
90.156.163.0/24 maxlen: 24
90.156.164.0/24 maxlen: 24
90.156.165.0/24 maxlen: 24
90.156.166.0/24 maxlen: 24
90.156.167.0/24 maxlen: 24
90.156.192.0/21 maxlen: 21
93.188.80.0/21 maxlen: 21
93.188.84.0/22 maxlen: 22
94.230.232.0/24 maxlen: 24
109.94.174.0/24 maxlen: 24
109.94.175.0/24 maxlen: 24
144.124.192.0/20 maxlen: 24
144.124.192.0/22 maxlen: 22
144.124.192.0/24 maxlen: 24
144.124.193.0/24 maxlen: 24
144.124.194.0/24 maxlen: 24
144.124.196.0/22 maxlen: 22
144.124.196.0/24 maxlen: 24
144.124.199.0/24 maxlen: 24
144.124.200.0/23 maxlen: 23
144.124.202.0/23 maxlen: 23
185.4.160.0/22 maxlen: 22
185.203.236.0/22 maxlen: 22
185.203.236.0/24 maxlen: 24
185.203.237.0/24 maxlen: 24
194.93.24.0/22 maxlen: 22
198.163.192.0/20 maxlen: 24
198.163.192.0/23 maxlen: 23
198.163.192.0/24 maxlen: 24
198.163.193.0/24 maxlen: 24
198.163.194.0/23 maxlen: 23
198.163.194.0/24 maxlen: 24
198.163.195.0/24 maxlen: 24
198.163.196.0/24 maxlen: 24
198.163.197.0/24 maxlen: 24
198.163.198.0/24 maxlen: 24
198.163.199.0/24 maxlen: 24
198.163.200.0/24 maxlen: 24
198.163.201.0/24 maxlen: 24
198.163.202.0/24 maxlen: 24
198.163.203.0/24 maxlen: 24
213.206.60.0/22 maxlen: 22
213.206.60.0/24 maxlen: 24
213.206.61.0/24 maxlen: 24
213.206.62.0/24 maxlen: 24
213.206.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:49:80:f3:64:17:8e:fc:9b:b2:ca:f4:30:04:51:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Mar 30 10:28:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e87cfe82b685dc0dd3cca894f5317948f83765b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:e0:2c:a0:97:18:ed:ce:8e:09:0e:fd:04:
79:77:db:d6:61:73:9d:44:9d:77:58:96:22:a7:af:
34:21:39:56:61:d5:a5:94:1b:12:1b:7b:db:ac:a8:
f2:b2:a1:51:f4:89:5c:71:16:67:a8:d8:2e:c6:0a:
bb:fc:25:97:84:d2:c0:e6:8a:36:d6:cb:1b:42:70:
78:d6:43:a2:0a:74:57:48:8a:52:a9:23:23:fe:0f:
36:47:54:8b:77:e6:1e:fd:49:43:5b:a4:c9:35:ad:
61:64:63:49:d0:2e:1a:9c:aa:9c:5e:19:18:0a:25:
20:e7:ae:8a:06:99:8b:d4:db:ef:09:7c:24:14:14:
5b:99:8a:48:75:bf:a9:a4:66:9e:a8:3f:fb:3c:ad:
a4:01:b0:67:a6:1f:bb:dc:63:4b:75:69:08:4e:6e:
ab:33:4a:6d:be:78:b9:62:be:6f:92:1c:64:cf:81:
2e:b8:60:73:aa:ed:e4:17:6a:f9:6e:2c:30:e2:2e:
0f:08:35:3b:0f:83:82:99:a4:16:ec:fe:72:d0:53:
41:53:32:e7:4d:d4:58:1a:4b:dc:d7:7e:18:e0:10:
18:01:75:8f:e8:95:8b:8e:ef:d3:ca:54:58:12:72:
b5:41:ca:b8:c1:fb:82:e1:ab:93:9e:6b:c4:f9:66:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7C:FE:82:B6:85:DC:0D:D3:CC:A8:94:F5:31:79:48:F8:37:65:B4
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/6Hz-graF3A3TzKiU9TF5SPg3ZbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.120.0/22
45.150.24.0/22
83.222.6.0/23
84.54.64.0-84.54.112.255
84.54.115.0-84.54.123.255
86.62.0.0/22
87.192.224.0/20
89.104.102.0/24
89.223.3.0/24
89.249.60.0/22
90.156.160.0/21
90.156.192.0/21
93.188.80.0/21
94.230.232.0/24
109.94.174.0/23
144.124.192.0/20
185.4.160.0/22
185.203.236.0/22
194.93.24.0/22
198.163.192.0/20
213.206.60.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:9c:b6:99:b6:ae:81:1b:94:92:0d:d9:9c:9e:b3:fc:15:b9:
73:25:59:b4:f1:cc:d9:19:7a:39:9d:6d:b3:11:19:14:4e:77:
66:96:15:76:ac:0c:ae:f3:37:f0:98:34:a7:a2:0b:a6:48:04:
8a:a4:8d:12:29:b1:e2:86:99:af:d3:c5:23:c5:2b:92:41:f7:
40:a1:b7:d8:8e:10:3e:cd:b0:52:dd:20:0f:6a:f0:40:d4:33:
72:8c:8c:04:3c:34:d0:76:c5:5b:8b:26:33:ca:60:74:8c:0c:
7a:a2:54:b6:2b:b4:38:f4:2c:81:ab:58:87:35:72:b1:e0:ea:
e2:bc:09:1e:14:ca:9f:a2:87:11:3c:fd:c0:68:8c:ef:a3:58:
b6:99:3b:20:6e:f1:17:69:b3:46:d5:b8:21:9f:cb:6b:c9:fa:
e3:a4:50:9a:37:74:38:79:9a:de:4a:c1:e4:83:1f:6c:a1:ad:
3f:3a:48:d0:cb:68:3e:1a:51:7b:7c:60:0b:f2:04:aa:20:9c:
17:26:de:e5:ec:f6:47:6b:48:11:9d:52:e5:0f:75:90:d7:37:
98:cf:ff:8e:39:60:2e:af:31:c6:ab:1e:ad:cd:cd:1b:d7:73:
1e:c2:6c:fb:22:c9:2b:e4:d5:a6:3b:cb:6a:ee:de:31:dc:8a:
22:25:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 19:14:24 2026 by rpki-client