Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/PPe7b3DP3EbyqgiJ60wDtHpl8Tk.roa
File: PPe7b3DP3EbyqgiJ60wDtHpl8Tk.roa (raw, json)
Hash identifier: gl6f8DXeLthMCjyLTaJ3OgpTkOvLgi2P9WVTX4qF9dE=
Subject key identifier: 3C:F7:BB:6F:70:CF:DC:46:F2:AA:08:89:EB:4C:03:B4:7A:65:F1:39
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019F4C3843FE878007E75CEBE577B6756A15
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/PPe7b3DP3EbyqgiJ60wDtHpl8Tk.roa
Signing time: Fri 10 Jul 2026 13:29:43 +0000
ROA not before: Fri 10 Jul 2026 13:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210756
IP address blocks: 5.8.42.0/24 maxlen: 24
5.8.43.0/24 maxlen: 24
5.8.69.0/24 maxlen: 24
5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.101.218.0/24 maxlen: 24
5.188.2.0/24 maxlen: 24
5.188.3.0/24 maxlen: 24
5.188.7.0/24 maxlen: 24
5.188.35.0/24 maxlen: 24
5.188.37.0/24 maxlen: 24
5.188.38.0/24 maxlen: 24
5.188.39.0/24 maxlen: 24
5.188.121.0/24 maxlen: 24
5.188.149.0/24 maxlen: 24
5.188.150.0/24 maxlen: 24
5.188.170.0/24 maxlen: 24
5.188.171.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
5.188.212.0/24 maxlen: 24
5.188.224.0/24 maxlen: 24
5.188.229.0/24 maxlen: 24
5.189.201.0/24 maxlen: 24
5.189.205.0/24 maxlen: 24
5.189.223.0/24 maxlen: 24
31.184.204.0/24 maxlen: 24
31.184.205.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
37.9.52.0/24 maxlen: 24
37.9.53.0/24 maxlen: 24
37.9.54.0/24 maxlen: 24
37.9.55.0/24 maxlen: 24
37.128.164.0/24 maxlen: 24
37.128.165.0/24 maxlen: 24
37.128.166.0/24 maxlen: 24
37.128.167.0/24 maxlen: 24
45.147.162.0/24 maxlen: 24
45.147.163.0/24 maxlen: 24
79.133.127.0/24 maxlen: 24
82.97.207.0/24 maxlen: 24
83.229.14.0/24 maxlen: 24
83.229.25.0/24 maxlen: 24
91.243.80.0/24 maxlen: 24
91.243.82.0/24 maxlen: 24
91.243.83.0/24 maxlen: 24
91.243.84.0/24 maxlen: 24
91.243.86.0/24 maxlen: 24
92.38.128.0/24 maxlen: 24
92.38.129.0/24 maxlen: 24
92.38.130.0/24 maxlen: 24
92.38.131.0/24 maxlen: 24
92.38.136.0/24 maxlen: 24
92.38.137.0/24 maxlen: 24
92.38.138.0/24 maxlen: 24
92.38.139.0/24 maxlen: 24
92.38.152.0/24 maxlen: 24
92.38.153.0/24 maxlen: 24
92.38.156.0/24 maxlen: 24
92.38.188.0/24 maxlen: 24
92.38.189.0/24 maxlen: 24
92.38.190.0/24 maxlen: 24
92.38.191.0/24 maxlen: 24
92.223.4.0/24 maxlen: 24
92.223.5.0/24 maxlen: 24
92.223.6.0/24 maxlen: 24
92.223.8.0/24 maxlen: 24
92.223.9.0/24 maxlen: 24
92.223.14.0/24 maxlen: 24
92.223.32.0/24 maxlen: 24
92.223.33.0/24 maxlen: 24
92.223.34.0/24 maxlen: 24
92.223.35.0/24 maxlen: 24
92.223.36.0/24 maxlen: 24
92.223.38.0/24 maxlen: 24
92.223.41.0/24 maxlen: 24
92.223.43.0/24 maxlen: 24
92.223.49.0/24 maxlen: 24
92.223.60.0/24 maxlen: 24
92.223.64.0/24 maxlen: 24
92.223.65.0/24 maxlen: 24
92.223.67.0/24 maxlen: 24
92.223.72.0/24 maxlen: 24
92.223.80.0/24 maxlen: 24
92.223.87.0/24 maxlen: 24
92.223.91.0/24 maxlen: 24
92.223.103.0/24 maxlen: 24
92.223.106.0/24 maxlen: 24
92.223.108.0/24 maxlen: 24
92.223.109.0/24 maxlen: 24
92.223.110.0/24 maxlen: 24
92.223.111.0/24 maxlen: 24
92.223.114.0/24 maxlen: 24
92.223.115.0/24 maxlen: 24
92.223.122.0/24 maxlen: 24
92.223.123.0/24 maxlen: 24
95.85.88.0/24 maxlen: 24
95.181.176.0/24 maxlen: 24
95.181.177.0/24 maxlen: 24
95.181.178.0/24 maxlen: 24
95.181.179.0/24 maxlen: 24
95.181.180.0/24 maxlen: 24
95.181.181.0/24 maxlen: 24
95.181.182.0/24 maxlen: 24
95.181.183.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.215.0/24 maxlen: 24
146.185.218.0/24 maxlen: 24
185.14.46.0/24 maxlen: 24
185.101.137.0/24 maxlen: 24
193.17.93.0/24 maxlen: 24
2a11:27c0::/44 maxlen: 44
2a11:27c0:10::/44 maxlen: 44
2a11:27c0:20::/44 maxlen: 44
2a11:27c0:100::/44 maxlen: 44
2a11:27c0:110::/44 maxlen: 44
2a11:27c0:120::/44 maxlen: 44
2a11:27c0:130::/44 maxlen: 44
2a11:27c0:140::/44 maxlen: 44
2a11:27c0:150::/44 maxlen: 44
2a11:27c0:160::/44 maxlen: 44
2a11:27c0:170::/44 maxlen: 44
2a11:27c0:180::/44 maxlen: 44
2a11:27c0:190::/44 maxlen: 44
2a11:27c0:1a0::/44 maxlen: 44
2a11:27c0:1b0::/44 maxlen: 44
2a11:27c0:1bf::/48 maxlen: 48
2a11:27c0:1c0::/44 maxlen: 44
2a11:27c0:1d0::/44 maxlen: 44
2a11:27c0:1e0::/44 maxlen: 44
2a11:27c0:1f0::/44 maxlen: 44
2a11:27c0:200::/44 maxlen: 44
2a11:27c0:210::/44 maxlen: 44
2a11:27c0:1000::/44 maxlen: 44
2a11:27c0:1010::/44 maxlen: 44
2a11:27c0:1020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:38:43:fe:87:80:07:e7:5c:eb:e5:77:b6:75:6a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jul 10 13:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cf7bb6f70cfdc46f2aa0889eb4c03b47a65f139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:51:f4:9b:50:09:4e:b2:db:41:d1:cb:3f:
7c:ab:a5:f0:b3:50:f5:bf:e8:f4:85:69:d3:e4:40:
76:73:91:3d:f1:c1:52:ad:fa:5e:26:5b:32:3d:19:
9a:15:7f:b2:c9:2c:bd:22:24:7d:21:f5:b2:b1:c7:
7d:fa:05:99:4e:7b:44:1f:a2:4d:8b:97:bb:bf:e1:
2a:ae:48:8e:4f:fb:ed:88:86:b5:4e:43:78:67:ea:
03:39:b5:f3:18:00:29:4a:45:cc:9b:3f:14:ea:0b:
60:f7:8e:0d:d2:88:cd:f0:b0:93:58:22:5e:94:dc:
b0:51:b4:72:0c:19:48:3e:b2:ca:2a:8f:de:d9:fe:
ce:be:16:09:d3:67:b2:a2:12:10:57:6a:a7:93:c7:
03:47:ff:c8:6f:57:bd:5b:c6:ea:d1:17:82:a8:a8:
e5:1e:4a:aa:8c:79:d4:32:9c:c2:28:fd:ee:00:1b:
e4:e7:b8:d6:ec:8a:ca:56:7a:1c:c9:1a:bd:3c:57:
d6:6b:7d:49:18:c4:a3:e3:f2:bd:f5:14:a9:97:a9:
5e:8f:88:73:46:0d:3a:a2:59:ac:04:d8:b9:5c:9d:
8b:ea:34:41:9e:dc:bd:b3:5c:02:34:6c:f0:11:c7:
a6:e8:3a:43:c9:de:de:9d:5a:11:cf:25:5d:60:93:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F7:BB:6F:70:CF:DC:46:F2:AA:08:89:EB:4C:03:B4:7A:65:F1:39
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/PPe7b3DP3EbyqgiJ60wDtHpl8Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.42.0/23
5.8.69.0/24
5.101.68.0-5.101.70.255
5.101.218.0/24
5.188.2.0/23
5.188.7.0/24
5.188.35.0/24
5.188.37.0-5.188.39.255
5.188.121.0/24
5.188.149.0-5.188.150.255
5.188.170.0/23
5.188.176.0/22
5.188.212.0/24
5.188.224.0/24
5.188.229.0/24
5.189.201.0/24
5.189.205.0/24
5.189.223.0/24
31.184.204.0/23
37.9.36.0/22
37.9.52.0/22
37.128.164.0/22
45.147.162.0/23
79.133.127.0/24
82.97.207.0/24
83.229.14.0/24
83.229.25.0/24
91.243.80.0/24
91.243.82.0-91.243.84.255
91.243.86.0/24
92.38.128.0/22
92.38.136.0/22
92.38.152.0/23
92.38.156.0/24
92.38.188.0/22
92.223.4.0-92.223.6.255
92.223.8.0/23
92.223.14.0/24
92.223.32.0-92.223.36.255
92.223.38.0/24
92.223.41.0/24
92.223.43.0/24
92.223.49.0/24
92.223.60.0/24
92.223.64.0/23
92.223.67.0/24
92.223.72.0/24
92.223.80.0/24
92.223.87.0/24
92.223.91.0/24
92.223.103.0/24
92.223.106.0/24
92.223.108.0/22
92.223.114.0/23
92.223.122.0/23
95.85.88.0/24
95.181.176.0/21
146.185.196.0/22
146.185.215.0/24
146.185.218.0/24
185.14.46.0/24
185.101.137.0/24
193.17.93.0/24
IPv6:
2a11:27c0::-2a11:27c0:2f:ffff:ffff:ffff:ffff:ffff
2a11:27c0:100::-2a11:27c0:21f:ffff:ffff:ffff:ffff:ffff
2a11:27c0:1000::-2a11:27c0:102f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
39:20:55:aa:38:66:a2:69:aa:6f:78:bc:ee:c1:7f:9e:4a:27:
d1:5f:ea:64:42:96:f9:36:a1:fb:a1:dd:f4:bf:f6:27:ff:60:
cb:a3:95:3e:bb:58:95:43:db:83:44:7f:49:6b:ee:78:07:88:
f9:53:3e:e4:6e:df:94:62:24:9d:6a:51:09:e9:3f:e6:e9:81:
e0:36:25:4c:30:a9:90:0e:a4:87:11:a0:db:dd:bf:8e:c9:e0:
65:a7:42:01:85:3a:9d:d3:00:b9:84:35:f0:5b:47:c8:83:18:
bb:21:d9:09:63:fd:29:98:3a:28:50:05:86:58:f3:3f:f2:22:
5a:11:e5:b5:d2:44:f7:b4:90:15:ef:7a:9f:9b:76:1a:64:63:
ec:d4:14:ce:df:f1:1c:29:5b:5c:8d:17:fc:8d:3d:26:ef:fc:
26:87:0f:96:6d:8d:35:14:d3:cb:80:de:a8:5f:9a:16:6b:2c:
80:54:8f:2c:cb:21:05:a0:92:a5:2a:ca:5e:78:ec:b9:c6:29:
2a:7f:b5:01:eb:16:d3:5c:e9:72:c1:f5:77:c7:45:19:7f:27:
01:d0:0b:ea:ab:36:ce:4c:a3:c1:c1:c6:ca:0c:34:47:c7:93:
6a:5b:05:9b:af:3a:06:ae:b7:55:11:06:4b:d5:f6:3f:aa:68:
3a:02:cc:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:29 2026 by rpki-client