Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5M7aqsAhmgV6yjIwwPvedNjrDRo.roa
File: 5M7aqsAhmgV6yjIwwPvedNjrDRo.roa (raw, json)
Hash identifier: EqiWOdPTXfry4bAHjazulSByZ9APt6I6KFLXLIxW08Q=
Subject key identifier: E4:CE:DA:AA:C0:21:9A:05:7A:CA:32:30:C0:FB:DE:74:D8:EB:0D:1A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F7F3CBCF8EB0EBB4657FAC6AE5A34FCF6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5M7aqsAhmgV6yjIwwPvedNjrDRo.roa
Signing time: Mon 20 Jul 2026 11:15:14 +0000
ROA not before: Mon 20 Jul 2026 11:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28964
IP address blocks: 77.105.8.0/24 maxlen: 24
77.105.16.0/24 maxlen: 24
77.105.39.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.192.0/24 maxlen: 24
188.255.195.0/24 maxlen: 24
188.255.207.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:3c:bc:f8:eb:0e:bb:46:57:fa:c6:ae:5a:34:fc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 20 11:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4cedaaac0219a057aca3230c0fbde74d8eb0d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:1e:2d:a6:74:4d:94:e3:5e:d3:14:23:1e:
bb:b5:de:0e:54:41:89:fa:97:0e:fd:e3:a0:63:0f:
ee:8c:67:f4:43:85:4f:fb:de:d1:ec:f7:fc:e9:f0:
92:27:ab:38:8b:16:a2:1c:3e:05:83:4c:01:c8:44:
35:da:1b:6e:12:bf:92:63:8f:a9:f5:94:f2:11:39:
63:28:54:69:f3:f5:55:6b:bf:f1:d7:fb:9d:1f:23:
32:5c:12:8e:a0:d5:2b:b7:db:e4:97:6e:2e:3b:c8:
e4:14:11:30:4a:f1:79:ba:06:db:99:fc:cf:a3:78:
a2:5c:13:f5:8c:c3:ac:c2:35:d1:f3:91:9c:db:98:
f2:de:90:0d:bf:d7:ab:ee:b9:b6:fe:07:2b:e3:2b:
70:03:22:45:dc:1b:4f:3c:03:1f:dc:04:13:ba:4b:
28:02:5c:7a:5b:f0:02:cb:0d:80:9e:ae:37:59:b2:
12:55:c3:e1:1a:ce:ed:5a:73:73:e5:5c:c1:c0:5e:
d3:16:f2:f8:8d:72:fa:55:55:49:c4:07:68:57:eb:
20:64:0a:9a:83:07:98:95:9e:6d:f4:c5:f7:34:1b:
54:49:15:68:7f:be:eb:38:0a:a6:53:d4:92:06:e2:
bc:c5:aa:0e:f2:25:11:f8:ea:1b:6f:72:08:53:a9:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CE:DA:AA:C0:21:9A:05:7A:CA:32:30:C0:FB:DE:74:D8:EB:0D:1A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5M7aqsAhmgV6yjIwwPvedNjrDRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
77.105.16.0/24
77.105.39.0/24
79.175.66.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0/23
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
178.219.2.0/24
178.253.212.0/24
178.253.216.0-178.253.218.255
178.253.235.0/24
178.253.238.0/24
178.253.246.0/24
188.255.179.0/24
188.255.190.0/24
188.255.192.0/24
188.255.195.0/24
188.255.207.0/24
188.255.217.0/24
188.255.228.0/24
212.69.2.0/23
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ad:87:01:8c:9d:0e:51:c0:2b:70:9f:56:f2:d1:ba:01:aa:
49:ff:d2:cb:29:a6:bb:5d:4a:4f:d7:19:a5:b2:fc:d0:ac:ca:
e5:b2:06:ce:8c:ba:01:4d:26:10:35:6b:8f:ab:ea:22:ee:42:
99:db:02:1a:a3:34:d4:d0:32:1f:93:8e:eb:c1:44:b8:8d:a6:
da:8a:9f:55:d5:5f:a9:b9:85:b1:4d:1f:1d:2a:d4:3c:cb:84:
fe:ca:79:9b:83:0c:9a:de:06:54:ec:42:fe:1c:c7:a8:5c:4f:
e0:22:e9:16:fc:60:da:07:b2:49:09:ec:06:d3:8f:dc:fa:af:
97:29:78:2d:42:59:20:fc:c4:c1:b4:74:f2:84:95:54:b8:f3:
84:8a:e1:be:d9:64:d3:29:22:b8:8a:b6:ab:08:08:68:2e:4a:
59:0d:fa:e9:85:2a:dd:42:4c:a7:51:3e:4a:b5:8a:e0:9b:bb:
86:29:56:ed:bf:b6:92:a9:88:84:11:84:37:e5:29:8d:39:08:
c6:38:35:71:9f:1d:51:b0:d8:51:cd:42:13:ae:b3:5b:a2:d3:
58:ee:4c:98:ff:46:5f:0b:ff:62:0c:6f:ff:8a:51:48:f3:b7:
72:8d:94:67:4c:b0:80:3d:16:56:f1:ff:1f:54:41:53:42:31:
3b:3e:e3:06
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAZ9/PLz46w67Rlf6xq5aNPz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNzIwMTExNTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGNlZGFhYWMwMjE5YTA1N2FjYTMyMzBjMGZiZGU3NGQ4ZWIwZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1YeLaZ0TZTjXtMUIx67td4OVEGJ
+pcO/eOgYw/ujGf0Q4VP+97R7Pf86fCSJ6s4ixaiHD4Fg0wByEQ12htuEr+SY4+p
9ZTyETljKFRp8/VVa7/x1/udHyMyXBKOoNUrt9vkl24uO8jkFBEwSvF5ugbbmfzP
o3iiXBP1jMOswjXR85Gc25jy3pANv9er7rm2/gcr4ytwAyJF3BtPPAMf3AQTukso
Alx6W/ACyw2Anq43WbISVcPhGs7tWnNz5VzBwF7TFvL4jXL6VVVJxAdoV+sgZAqa
gweYlZ5t9MX3NBtUSRVof77rOAqmU9SSBuK8xaoO8iUR+Oobb3IIU6n01wIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFOTO2qrAIZoFesoyMMD73nTY6w0aMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvNU03YXFzQWhtZ1Y2eWpJd3dQdmVkTmpyRFJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBABN
aQgDBABNaRADBABNaScDBABPr0IDBABPr3gDBABREjMDBAFREjgDBABdukEDBABd
uk0DBAFteTADBABteTUDBACy2wIDBACy/dQwDAMEA7L92AMEALL92gMEALL96wME
ALL97gMEALL99gMEALz/swMEALz/vgMEALz/wAMEALz/wwMEALz/zwMEALz/2QME
ALz/5AMEAdRFAgMEANRFEwMEANRFFQMEANRFHjANBgkqhkiG9w0BAQsFAAOCAQEA
aK2HAYydDlHAK3CfVvLRugGqSf/Syymmu11KT9cZpbL80KzK5bIGzoy6AU0mEDVr
j6vqIu5CmdsCGqM01NAyH5OO68FEuI2m2oqfVdVfqbmFsU0fHSrUPMuE/sp5m4MM
mt4GVOxC/hzHqFxP4CLpFvxg2geySQnsBtOP3Pqvlyl4LUJZIPzEwbR08oSVVLjz
hIrhvtlk0ykiuIq2qwgIaC5KWQ366YUq3UJMp1E+SrWK4Ju7hilW7b+2kqmIhBGE
N+UpjTkIxjg1cZ8dUbDYUc1CE66zW6LTWO5MmP9GXwv/Ygxv/4pRSPO3co2UZ0yw
gD0WVvH/H1RBU0IxOz7jBg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:24 2026 by rpki-client