Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/h47V2oqauqZZ_rfHQWw19ZbUYg0.roa
File: h47V2oqauqZZ_rfHQWw19ZbUYg0.roa (raw, json)
Hash identifier: TrkwxoC10+VUKUU/FFOH1cGks+KjznkFnR4WMUPTGNA=
Subject key identifier: 87:8E:D5:DA:8A:9A:BA:A6:59:FE:B7:C7:41:6C:35:F5:96:D4:62:0D
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 019F8E9AC01DC35D36E5B9E3C4C7424059E1
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/h47V2oqauqZZ_rfHQWw19ZbUYg0.roa
Signing time: Thu 23 Jul 2026 10:52:14 +0000
ROA not before: Thu 23 Jul 2026 10:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 5.178.40.0/21 maxlen: 24
79.140.80.0/20 maxlen: 24
80.173.136.0/23 maxlen: 23
80.173.152.0/21 maxlen: 21
80.173.172.0/23 maxlen: 23
89.221.32.0/20 maxlen: 20
93.186.128.0/21 maxlen: 24
93.186.136.0/22 maxlen: 22
149.3.176.0/21 maxlen: 21
176.115.184.0/22 maxlen: 22
185.70.200.0/22 maxlen: 22
185.100.112.0/22 maxlen: 22
195.22.192.0/19 maxlen: 24
213.144.160.0/19 maxlen: 19
2001:41a8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:9a:c0:1d:c3:5d:36:e5:b9:e3:c4:c7:42:40:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Jul 23 10:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=878ed5da8a9abaa659feb7c7416c35f596d4620d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:ed:eb:e1:e7:1c:6b:7e:4d:f4:a4:b7:1a:
b8:75:cf:ed:f2:9e:84:cd:cb:00:03:6d:b5:c9:d5:
63:72:da:c2:24:30:71:0f:93:92:3a:7b:e9:94:57:
93:1d:98:53:fb:80:a4:27:52:2c:4f:da:88:72:fc:
b0:c2:aa:d3:8e:16:6f:73:cf:e6:6f:ad:37:43:85:
ae:6c:f1:cc:aa:6c:d2:cc:e4:36:1d:e6:91:db:a7:
44:1c:58:69:5a:9a:b4:f1:12:88:f4:7d:d4:a9:66:
50:39:54:67:cd:de:4a:43:8a:bf:d4:d2:5d:7e:87:
8e:7a:f1:63:c3:40:71:8b:28:e3:29:66:19:f6:cc:
18:4c:b9:8a:64:44:cf:0a:18:02:fa:61:31:f6:ff:
99:8b:d0:e2:ff:5e:67:f7:a2:43:ee:c5:10:bb:81:
c3:f0:8b:68:02:5c:44:f9:c5:47:be:c8:d2:a9:3e:
77:1a:09:51:88:fa:68:f3:94:4e:ae:13:c1:da:79:
f4:29:11:ff:38:96:88:af:6c:17:d5:61:03:65:43:
40:e1:c9:a4:6e:cc:74:97:57:78:08:70:4a:c3:c7:
77:20:19:00:2b:e4:55:fb:2f:e6:c6:d4:3f:3a:56:
da:3b:8e:b1:4e:df:3c:78:92:d4:f6:58:1a:1a:85:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:D5:DA:8A:9A:BA:A6:59:FE:B7:C7:41:6C:35:F5:96:D4:62:0D
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/h47V2oqauqZZ_rfHQWw19ZbUYg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.40.0/21
79.140.80.0/20
80.173.136.0/23
80.173.152.0/21
80.173.172.0/23
89.221.32.0/20
93.186.128.0-93.186.139.255
149.3.176.0/21
176.115.184.0/22
185.70.200.0/22
185.100.112.0/22
195.22.192.0/19
213.144.160.0/19
IPv6:
2001:41a8::/32
Signature Algorithm: sha256WithRSAEncryption
5f:a3:b6:1b:01:c2:6c:2b:65:a4:04:63:3b:66:86:c8:02:bb:
bc:7f:37:43:76:1a:d9:3b:49:9c:cc:89:b9:a5:b9:fd:c8:6a:
0e:e0:c8:14:6d:23:d9:c5:00:e6:63:3d:b9:1f:c2:af:ca:ab:
f5:52:2c:3d:97:61:26:4a:cb:82:9c:41:a1:40:ab:b3:c4:f8:
07:07:fa:a4:c5:8b:e8:a7:26:b2:1c:0e:7c:f6:bb:1b:f8:1c:
1a:cd:59:84:cc:50:c2:38:28:99:64:76:24:36:e5:f7:6b:bb:
d5:cb:05:72:53:b2:e7:1a:b8:bc:f8:e1:a0:bf:08:9d:60:cb:
12:70:20:b4:37:83:76:f1:10:84:79:45:b9:13:d3:e9:1b:6d:
19:0a:3a:82:21:d1:ee:2d:02:91:75:9d:7d:a4:fc:b7:cd:45:
e7:68:64:08:82:e3:c7:8e:24:e6:70:13:0c:1a:37:40:8d:42:
cc:6a:bd:99:f5:a4:c6:d3:c4:ba:ff:a1:53:40:2d:a7:f3:f9:
be:84:44:a8:0b:6a:22:95:85:80:f5:f3:db:24:d7:12:44:1c:
20:fb:67:00:c4:c8:90:79:1b:b7:e0:f3:30:ad:8f:50:b1:e5:
4a:45:28:8d:dd:7d:6b:ed:33:f1:57:2e:d0:fa:5d:fd:d3:9e:
56:12:de:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:21 2026 by rpki-client