Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Tw6N0Y20UoxYGvbpaDyWCeDYFG8.roa
File: Tw6N0Y20UoxYGvbpaDyWCeDYFG8.roa (raw, json)
Hash identifier: 0qcw4i362VL9/ptcE9+ZcOPIJKvpoc3oJERiKtGCkhY=
Subject key identifier: 4F:0E:8D:D1:8D:B4:52:8C:58:1A:F6:E9:68:3C:96:09:E0:D8:14:6F
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019D06A8AA754D9F4D25FB9061A585644540
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Tw6N0Y20UoxYGvbpaDyWCeDYFG8.roa
Signing time: Thu 19 Mar 2026 15:13:30 +0000
ROA not before: Thu 19 Mar 2026 15:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 5.180.136.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
45.9.74.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
45.133.245.0/24 maxlen: 24
45.133.246.0/24 maxlen: 24
46.17.106.0/24 maxlen: 24
85.209.0.0/24 maxlen: 24
95.214.8.0/24 maxlen: 24
139.28.220.0/24 maxlen: 24
139.28.221.0/24 maxlen: 24
185.17.2.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.94.167.0/24 maxlen: 24
185.104.250.0/24 maxlen: 24
185.105.118.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.188.181.0/24 maxlen: 24
185.229.65.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
193.109.84.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
194.53.54.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.67.200.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
2a0a:9300:1::/48 maxlen: 48
2a0a:9300:aaaa::/48 maxlen: 48
2a0b:da00::/32 maxlen: 32
2a0b:da01::/32 maxlen: 32
2a0b:da02::/32 maxlen: 32
2a0b:da03::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:a8:aa:75:4d:9f:4d:25:fb:90:61:a5:85:64:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Mar 19 15:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f0e8dd18db4528c581af6e9683c9609e0d8146f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:7a:9f:fe:72:c8:9b:2c:d7:32:25:27:cb:
32:de:e8:ef:c2:6b:7d:1b:b6:49:24:84:30:4e:3c:
c0:e0:3f:cc:de:8e:02:59:11:e6:b5:de:5f:c9:4f:
34:64:80:88:e7:3e:79:95:ef:3f:4d:27:12:75:f5:
aa:c2:40:06:5d:29:b2:ed:4c:3a:d2:19:c8:ef:fe:
10:14:6c:f5:66:c7:93:db:8f:87:f3:ce:ff:6a:40:
38:86:02:83:5c:88:97:ec:f7:8d:7c:93:da:78:25:
5d:c4:00:d2:f8:ec:40:93:e6:00:36:78:81:1f:7a:
65:7e:20:0a:f8:24:7f:12:79:45:57:ff:cf:ff:98:
2e:a5:2d:37:91:e9:5c:fb:80:03:70:70:47:e0:ae:
24:b9:e6:2b:a6:a1:fe:13:11:0d:78:40:d1:fc:f6:
58:ac:7f:a0:23:df:49:ea:91:64:56:07:dc:d2:20:
8a:6f:2e:02:a6:4e:a5:fc:42:0c:9a:76:e3:5e:53:
4f:c0:78:96:b8:f3:40:02:94:67:39:7e:0b:77:07:
47:52:13:2a:47:ac:25:cb:fe:7b:ea:3f:bb:91:6f:
ff:2c:92:64:af:1c:98:ff:bb:8c:67:cc:c3:79:8d:
89:c4:2e:f8:0f:88:a9:14:da:57:06:48:f3:4d:c9:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0E:8D:D1:8D:B4:52:8C:58:1A:F6:E9:68:3C:96:09:E0:D8:14:6F
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Tw6N0Y20UoxYGvbpaDyWCeDYFG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.9.74.0/24
45.89.64.0/24
45.133.245.0-45.133.246.255
46.17.106.0/24
85.209.0.0/24
95.214.8.0/24
139.28.220.0/23
185.17.2.0/24
185.58.207.0/24
185.94.167.0/24
185.104.250.0/24
185.105.118.0/24
185.112.83.0/24
185.125.228.0/24
185.125.230.0/23
185.188.181.0/24
185.229.65.0-185.229.66.255
192.162.100.0/24
192.162.102.0/23
193.0.200.0/24
193.0.202.0/23
193.109.84.0/24
193.124.180.0/23
194.53.54.0/24
194.63.140.0/22
194.67.200.0/24
195.66.87.0/24
IPv6:
2a0a:9300:1::/48
2a0a:9300:aaaa::/48
2a0b:da00::/30
Signature Algorithm: sha256WithRSAEncryption
8b:9c:31:cf:83:85:52:45:59:47:3c:bf:15:08:7d:7d:e8:83:
ea:d3:d9:bd:a8:83:61:ec:a7:99:c5:98:2c:0e:95:42:2c:cd:
f8:d1:16:64:c8:33:87:d0:31:4f:c8:a2:24:d6:82:10:15:4c:
dd:44:a6:29:18:2a:e5:ae:0a:24:5c:a5:6e:07:ec:8f:89:1b:
a1:96:71:e7:55:98:ee:81:72:f5:ef:60:8e:7b:f1:35:fa:57:
77:c0:91:c4:25:fc:c6:77:c6:91:b2:d3:b7:31:25:80:da:9c:
0d:d5:0e:22:4e:71:1b:d4:17:70:bc:71:d7:01:e7:23:1e:99:
cd:65:5f:7e:d1:d6:c6:52:2f:0d:98:f0:64:54:31:92:18:af:
00:e2:fb:9f:ec:44:6c:bf:f3:18:10:30:8a:e3:80:3a:56:2a:
4a:90:e3:d0:86:9f:77:47:29:60:e0:b3:e7:04:4d:4d:e7:87:
fb:f5:40:86:d7:62:d5:13:f2:b7:cf:40:d8:9c:49:19:50:37:
99:4c:11:69:3d:d1:e1:a6:c5:f6:30:80:0b:2a:53:e0:15:c1:
2b:86:12:5b:4a:63:03:14:b3:28:f2:47:9f:43:2b:94:3d:0b:
0e:60:3c:aa:35:52:14:91:33:33:d7:ea:c8:83:bf:de:24:ff:
4d:81:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:32:46 2026 by rpki-client