Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9GlAd--ziJn6zEERuSI1wMxCVUI.roa
File: 9GlAd--ziJn6zEERuSI1wMxCVUI.roa (raw, json)
Hash identifier: yW98a8lXMRGOAvXCAcelUQyydp3bl59KXdnIoFgiRQU=
Subject key identifier: F4:69:40:77:EF:B3:88:99:FA:CC:41:11:B9:22:35:C0:CC:42:55:42
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019C4C021F402418A93AE4CAEE383366EE86
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9GlAd--ziJn6zEERuSI1wMxCVUI.roa
Signing time: Wed 11 Feb 2026 09:22:13 +0000
ROA not before: Wed 11 Feb 2026 09:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8193
IP address blocks: 5.133.120.0/22 maxlen: 22
45.150.24.0/22 maxlen: 22
83.222.6.0/23 maxlen: 23
84.54.64.0/19 maxlen: 19
84.54.66.0/23 maxlen: 23
84.54.70.0/23 maxlen: 23
84.54.70.0/24 maxlen: 24
84.54.71.0/24 maxlen: 24
84.54.72.0/23 maxlen: 23
84.54.72.0/24 maxlen: 24
84.54.73.0/24 maxlen: 24
84.54.76.0/23 maxlen: 23
84.54.78.0/23 maxlen: 23
84.54.80.0/23 maxlen: 23
84.54.84.0/23 maxlen: 23
84.54.86.0/23 maxlen: 23
84.54.90.0/23 maxlen: 23
84.54.92.0/23 maxlen: 23
84.54.94.0/23 maxlen: 23
84.54.96.0/20 maxlen: 20
84.54.103.0/24 maxlen: 24
84.54.104.0/24 maxlen: 24
84.54.112.0/24 maxlen: 24
84.54.115.0/24 maxlen: 24
84.54.116.0/23 maxlen: 23
84.54.118.0/23 maxlen: 23
84.54.118.0/24 maxlen: 24
84.54.120.0/23 maxlen: 23
84.54.122.0/23 maxlen: 23
86.62.0.0/22 maxlen: 22
86.62.1.0/24 maxlen: 24
87.192.224.0/22 maxlen: 22
87.192.228.0/22 maxlen: 22
87.192.232.0/22 maxlen: 22
87.192.236.0/22 maxlen: 22
89.104.102.0/24 maxlen: 24
89.223.3.0/24 maxlen: 24
89.249.60.0/22 maxlen: 22
89.249.62.0/24 maxlen: 24
89.249.63.0/24 maxlen: 24
90.156.160.0/24 maxlen: 24
90.156.161.0/24 maxlen: 24
90.156.162.0/24 maxlen: 24
90.156.163.0/24 maxlen: 24
90.156.164.0/24 maxlen: 24
90.156.165.0/24 maxlen: 24
90.156.166.0/24 maxlen: 24
90.156.167.0/24 maxlen: 24
90.156.192.0/21 maxlen: 21
93.188.80.0/21 maxlen: 21
93.188.84.0/22 maxlen: 22
94.230.232.0/24 maxlen: 24
109.94.174.0/24 maxlen: 24
109.94.175.0/24 maxlen: 24
144.124.192.0/20 maxlen: 20
144.124.192.0/22 maxlen: 22
144.124.192.0/24 maxlen: 24
144.124.193.0/24 maxlen: 24
144.124.194.0/24 maxlen: 24
144.124.196.0/22 maxlen: 22
144.124.196.0/24 maxlen: 24
144.124.199.0/24 maxlen: 24
144.124.200.0/23 maxlen: 23
144.124.202.0/23 maxlen: 23
185.4.160.0/22 maxlen: 22
185.203.236.0/22 maxlen: 22
185.203.236.0/24 maxlen: 24
185.203.237.0/24 maxlen: 24
194.93.24.0/22 maxlen: 22
198.163.192.0/20 maxlen: 20
198.163.192.0/23 maxlen: 23
198.163.192.0/24 maxlen: 24
198.163.193.0/24 maxlen: 24
198.163.194.0/23 maxlen: 23
198.163.194.0/24 maxlen: 24
198.163.195.0/24 maxlen: 24
198.163.196.0/24 maxlen: 24
198.163.197.0/24 maxlen: 24
198.163.198.0/24 maxlen: 24
198.163.199.0/24 maxlen: 24
198.163.200.0/24 maxlen: 24
198.163.201.0/24 maxlen: 24
198.163.202.0/24 maxlen: 24
198.163.203.0/24 maxlen: 24
213.206.60.0/22 maxlen: 22
213.206.60.0/24 maxlen: 24
213.206.61.0/24 maxlen: 24
213.206.62.0/24 maxlen: 24
213.206.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:02:1f:40:24:18:a9:3a:e4:ca:ee:38:33:66:ee:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Feb 11 09:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4694077efb38899facc4111b92235c0cc425542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:13:e1:66:5d:a8:78:ea:20:9f:1e:c7:c8:
30:d0:b4:2b:86:92:64:f5:44:3a:7d:39:29:a4:13:
12:be:7c:bf:36:d9:71:32:ca:89:ac:db:20:49:d3:
b8:7b:33:da:9b:1a:25:53:64:9c:49:fc:e5:03:f1:
60:ad:8d:73:53:0a:f5:c4:89:d9:06:b9:63:cf:be:
d8:2c:96:3e:a8:34:5f:05:ca:7a:a9:f4:60:95:ce:
51:1a:a1:66:96:cb:b0:77:41:1e:ba:4e:db:86:ef:
fd:27:7b:58:64:6e:cb:be:31:a4:de:a0:89:84:bd:
64:ec:5f:02:49:99:66:1a:c6:61:48:67:50:b6:dd:
28:5c:34:80:e2:04:cf:5c:63:5e:c9:33:7b:46:70:
94:2e:18:3f:86:bc:18:a3:80:4d:1c:80:b9:dc:76:
8a:be:d0:21:85:22:f2:f5:09:46:b0:60:37:d9:12:
a9:39:09:55:aa:f0:42:52:99:a0:26:b2:ab:90:93:
09:a8:56:d2:e0:9f:f4:ce:b6:5f:62:68:19:02:a9:
b9:3b:66:a0:e0:0b:98:a9:7a:a0:13:7c:2d:25:67:
ff:62:f5:6d:59:26:d7:4c:54:ab:f4:0a:54:4c:ce:
fd:ac:1c:65:64:75:24:28:41:7a:9a:f1:04:10:b9:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:69:40:77:EF:B3:88:99:FA:CC:41:11:B9:22:35:C0:CC:42:55:42
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9GlAd--ziJn6zEERuSI1wMxCVUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.120.0/22
45.150.24.0/22
83.222.6.0/23
84.54.64.0-84.54.112.255
84.54.115.0-84.54.123.255
86.62.0.0/22
87.192.224.0/20
89.104.102.0/24
89.223.3.0/24
89.249.60.0/22
90.156.160.0/21
90.156.192.0/21
93.188.80.0/21
94.230.232.0/24
109.94.174.0/23
144.124.192.0/20
185.4.160.0/22
185.203.236.0/22
194.93.24.0/22
198.163.192.0/20
213.206.60.0/22
Signature Algorithm: sha256WithRSAEncryption
03:2c:db:45:a7:ef:56:b9:71:2b:ed:eb:71:9e:ae:79:76:07:
eb:2b:27:7b:ed:a1:3c:95:e0:04:1a:3b:ac:ab:e5:8b:6d:6f:
be:35:a1:3c:91:5e:6b:fb:75:70:12:81:16:29:37:fa:aa:a8:
2b:2e:0c:dc:49:2f:db:e2:4a:0f:ff:4c:a5:f6:16:17:f1:d1:
e1:cd:17:32:03:d0:c8:bf:65:87:1e:48:6e:1f:b6:73:7a:c5:
1a:3d:f1:8c:6b:cc:93:0b:dc:f4:ab:5a:89:80:0a:7f:f3:a9:
87:6d:9b:19:14:ba:87:ed:43:db:2a:72:b5:f4:c4:1c:cf:4a:
79:5f:56:3f:12:14:92:18:40:e6:f9:81:7a:9a:aa:a2:d9:af:
a3:30:94:92:59:69:10:45:2e:c2:8c:a9:2e:04:26:67:43:84:
1a:16:ca:28:a8:1d:0a:85:15:3f:4f:0b:36:1f:6a:51:3c:66:
a0:1b:b8:ed:ed:f2:72:7a:52:1b:6d:06:be:8e:66:c0:08:5d:
b2:82:01:53:26:7e:98:6b:9c:85:f7:c0:9d:67:93:16:cb:fd:
80:1e:b4:7d:09:1c:e0:18:1a:0f:dd:16:26:20:60:2c:47:b9:
21:b0:de:2d:0e:6b:f0:6d:a8:d0:1c:25:da:6b:f8:6f:8a:77:
3f:bd:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:00:48 2026 by rpki-client