Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/7NU7YP8yxLFpnQBBYtcuaRDEGUA.roa
File: 7NU7YP8yxLFpnQBBYtcuaRDEGUA.roa (raw, json)
Hash identifier: k/zbB18PgkPmziRqyXI4Gk2XiCOO31h3yiv35i98mj8=
Subject key identifier: EC:D5:3B:60:FF:32:C4:B1:69:9D:00:41:62:D7:2E:69:10:C4:19:40
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 01A0AEEF34B507D927B919F730FB1070250A
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/7NU7YP8yxLFpnQBBYtcuaRDEGUA.roa
Signing time: Thu 17 Sep 2026 10:35:07 +0000
ROA not before: Thu 17 Sep 2026 10:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60404
IP address blocks: 5.2.64.0/20 maxlen: 20
5.2.64.0/24 maxlen: 24
5.2.65.0/24 maxlen: 24
5.2.66.0/24 maxlen: 24
5.2.67.0/24 maxlen: 24
5.2.68.0/24 maxlen: 24
5.2.70.0/24 maxlen: 24
5.2.71.0/24 maxlen: 24
5.2.72.0/24 maxlen: 24
5.2.73.0/24 maxlen: 24
5.2.74.0/24 maxlen: 24
5.2.75.0/24 maxlen: 24
5.2.76.0/24 maxlen: 24
5.2.77.0/24 maxlen: 24
5.2.78.0/24 maxlen: 24
5.2.79.0/24 maxlen: 24
5.255.96.0/19 maxlen: 19
5.255.96.0/24 maxlen: 24
5.255.97.0/24 maxlen: 24
5.255.98.0/24 maxlen: 24
5.255.99.0/24 maxlen: 24
5.255.100.0/24 maxlen: 24
5.255.101.0/24 maxlen: 24
5.255.102.0/24 maxlen: 24
5.255.103.0/24 maxlen: 24
5.255.104.0/24 maxlen: 24
5.255.105.0/24 maxlen: 24
5.255.106.0/24 maxlen: 24
5.255.107.0/24 maxlen: 24
5.255.108.0/24 maxlen: 24
5.255.109.0/24 maxlen: 24
5.255.110.0/24 maxlen: 24
5.255.111.0/24 maxlen: 24
5.255.112.0/24 maxlen: 24
5.255.113.0/24 maxlen: 24
5.255.114.0/24 maxlen: 24
5.255.115.0/24 maxlen: 24
5.255.116.0/24 maxlen: 24
5.255.117.0/24 maxlen: 24
5.255.118.0/24 maxlen: 24
5.255.119.0/24 maxlen: 24
5.255.120.0/24 maxlen: 24
5.255.121.0/24 maxlen: 24
5.255.122.0/24 maxlen: 24
5.255.123.0/24 maxlen: 24
5.255.124.0/24 maxlen: 24
5.255.125.0/24 maxlen: 24
5.255.126.0/24 maxlen: 24
5.255.127.0/24 maxlen: 24
88.214.28.0/24 maxlen: 24
88.214.29.0/24 maxlen: 24
88.214.30.0/24 maxlen: 24
88.214.31.0/24 maxlen: 24
103.251.164.0/22 maxlen: 22
103.251.164.0/24 maxlen: 24
103.251.165.0/24 maxlen: 24
103.251.166.0/24 maxlen: 24
103.251.167.0/24 maxlen: 24
150.129.8.0/22 maxlen: 22
150.129.8.0/24 maxlen: 24
150.129.9.0/24 maxlen: 24
150.129.10.0/24 maxlen: 24
185.31.172.0/22 maxlen: 24
185.31.172.0/24 maxlen: 24
185.31.173.0/24 maxlen: 24
185.31.174.0/24 maxlen: 24
185.31.175.0/24 maxlen: 24
192.76.150.0/24 maxlen: 24
192.76.153.0/24 maxlen: 24
192.76.160.0/24 maxlen: 24
192.76.163.0/24 maxlen: 24
2a01:6340::/29 maxlen: 29
2a04:52c0::/32 maxlen: 32
2a04:52c0:1::/48 maxlen: 64
2a04:52c0:101::/48 maxlen: 64
2a04:52c0:102::/48 maxlen: 64
2a04:52c0:103::/48 maxlen: 64
2a04:52c0:104::/48 maxlen: 64
2a04:52c0:105::/48 maxlen: 64
2a04:52c0:106::/48 maxlen: 64
2a04:52c0:107::/48 maxlen: 64
2a04:52c0:108::/48 maxlen: 64
2a04:52c0:109::/48 maxlen: 64
2a04:52c0:110::/48 maxlen: 64
2a04:52c0:111::/48 maxlen: 64
2a04:52c0:112::/48 maxlen: 64
2a04:52c0:113::/48 maxlen: 64
2a04:52c0:114::/48 maxlen: 64
2a04:52c0:115::/48 maxlen: 64
2a04:52c0:116::/48 maxlen: 64
2a04:52c0:117::/48 maxlen: 64
2a04:52c0:118::/48 maxlen: 64
2a04:52c0:119::/48 maxlen: 64
2a04:52c0:120::/48 maxlen: 64
2a04:52c0:121::/48 maxlen: 64
2a04:52c0:122::/48 maxlen: 64
2a04:52c0:123::/48 maxlen: 64
2a04:52c0:124::/48 maxlen: 64
2a04:52c0:125::/48 maxlen: 64
2a04:52c0:126::/48 maxlen: 64
2a04:52c0:127::/48 maxlen: 64
2a04:52c0:128::/48 maxlen: 64
2a04:52c0:129::/48 maxlen: 64
2a04:52c0:130::/48 maxlen: 64
2a04:52c0:131::/48 maxlen: 64
2a04:52c0:132::/48 maxlen: 64
2a04:52c0:133::/48 maxlen: 64
2a04:52c0:134::/48 maxlen: 64
2a04:52c0:135::/48 maxlen: 64
2a04:52c0:136::/48 maxlen: 64
2a04:52c0:138::/48 maxlen: 64
2a04:52c0:139::/48 maxlen: 64
2a04:52c0:140::/48 maxlen: 64
2a04:52c0:141::/48 maxlen: 64
2a04:52c0:142::/48 maxlen: 64
2a04:52c0:1000::/48 maxlen: 64
2a04:52c0:1674::/48 maxlen: 64
2a04:52c0:1a00::/48 maxlen: 64
2a04:52c0:2000::/36 maxlen: 64
2a04:52c0:5001::/48 maxlen: 64
2a04:52c0:6000::/36 maxlen: 64
2a04:52c0:7000::/36 maxlen: 64
2a04:52c0:9000::/36 maxlen: 64
2a0f:6bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:ef:34:b5:07:d9:27:b9:19:f7:30:fb:10:70:25:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Sep 17 10:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecd53b60ff32c4b1699d004162d72e6910c41940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:60:96:ac:6d:93:c6:40:16:f3:74:98:b5:7f:
62:cd:2c:f8:6d:be:e8:81:a6:80:72:13:c7:26:12:
68:6d:28:82:be:09:4e:b6:4d:e7:0b:18:fb:ee:73:
17:6c:c4:ad:72:67:80:12:25:8f:e0:7c:63:87:14:
11:07:74:20:ce:71:40:9d:c0:0f:c6:ed:ed:3d:e7:
ab:df:31:6d:c0:a8:c1:5d:6a:8e:47:d2:9b:d6:41:
18:88:89:28:05:f4:f4:9a:6c:6c:89:57:de:16:ce:
55:e7:8f:33:11:2e:72:70:9d:75:c9:29:7f:85:d5:
50:11:5c:55:fa:d6:ea:71:12:5a:64:bd:86:f7:0b:
fb:1f:7d:ec:66:6f:52:21:f3:a7:99:fa:14:6c:81:
e7:50:73:9c:54:e4:7c:e9:e3:0a:71:e0:79:99:1b:
ab:7b:ac:1b:09:e1:5a:8c:c0:8d:a1:0d:ec:c7:28:
b3:ed:d0:bf:d6:38:69:1d:db:9c:7c:30:c2:5f:32:
a9:27:04:a8:5f:b6:9c:07:54:36:88:96:38:d7:15:
18:e9:6b:d3:31:bd:99:78:a2:cf:11:5d:53:ef:f2:
df:31:23:bd:82:f3:15:3a:2c:e2:a5:2b:26:df:a8:
53:f8:13:64:b6:da:53:e4:ae:ca:b4:5c:51:85:b4:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D5:3B:60:FF:32:C4:B1:69:9D:00:41:62:D7:2E:69:10:C4:19:40
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/7NU7YP8yxLFpnQBBYtcuaRDEGUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.64.0/20
5.255.96.0/19
88.214.28.0/22
103.251.164.0/22
150.129.8.0/22
185.31.172.0/22
192.76.150.0/24
192.76.153.0/24
192.76.160.0/24
192.76.163.0/24
IPv6:
2a01:6340::/29
2a04:52c0::/32
2a0f:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
92:92:46:aa:a0:f1:6e:34:a3:0d:96:d7:00:7d:e6:2b:97:ac:
ca:96:00:1e:89:f5:e9:fd:fc:db:a8:7f:d0:c0:71:7f:9c:5c:
62:39:e0:86:c3:62:67:cc:26:81:1e:93:2a:52:b8:b9:6b:42:
94:45:ef:30:14:cb:7b:f6:09:86:96:3d:f8:dc:d9:79:27:5a:
d5:ad:01:e5:dc:41:1f:30:18:1c:72:d5:48:ad:18:57:a3:3e:
83:15:cb:cc:37:d2:ff:00:e0:48:00:54:a0:7a:5a:bf:96:c5:
bf:7b:42:77:01:47:6f:0f:de:b0:b8:05:25:3b:eb:d4:e0:70:
f1:df:2d:d3:cc:17:d2:81:59:8a:80:b9:ac:d4:fe:51:ba:0e:
ca:57:2b:0f:95:b3:9a:fb:27:a1:e1:28:05:af:c2:60:13:f2:
f9:1a:1b:bf:d9:6a:c6:99:0e:e3:55:7f:56:c3:0d:d9:f1:bd:
57:db:52:74:0a:d7:e1:7c:c7:cb:11:57:38:d0:20:e8:60:f4:
bf:49:51:c4:6f:94:8e:84:2b:17:78:b2:d9:59:f2:91:86:d2:
7e:36:e4:b0:e3:96:ec:07:c6:84:56:2d:21:73:de:df:57:56:
5e:15:a2:28:75:f7:5a:14:b2:00:3e:79:10:f9:0a:0b:9e:9f:
c8:5a:2b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:44:54 2026 by rpki-client