Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/lsNTamdNLUPMfM4Ob8XCKFF9wQA.roa
File: lsNTamdNLUPMfM4Ob8XCKFF9wQA.roa (raw, json)
Hash identifier: 7GuvI+Mg9B///NEDqc9jZWHNpHYCkVprHQD8RhHYwoU=
Subject key identifier: 96:C3:53:6A:67:4D:2D:43:CC:7C:CE:0E:6F:C5:C2:28:51:7D:C1:00
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A0D385C5D319509CBD1AD25A670916FB9B
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/lsNTamdNLUPMfM4Ob8XCKFF9wQA.roa
Signing time: Thu 24 Sep 2026 13:05:54 +0000
ROA not before: Thu 24 Sep 2026 13:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205090
IP address blocks: 45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
45.132.255.0/24 maxlen: 24
45.142.122.0/24 maxlen: 24
82.115.222.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.40.4.0/24 maxlen: 24
185.102.139.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.104.251.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.102.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
185.221.160.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
185.232.169.0/24 maxlen: 24
185.233.83.0/24 maxlen: 24
185.233.200.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
2a09:5302::/32 maxlen: 32
2a09:5302:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:85:c5:d3:19:50:9c:bd:1a:d2:5a:67:09:16:fb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Sep 24 13:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96c3536a674d2d43cc7cce0e6fc5c228517dc100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:ec:c0:8b:79:af:0f:34:1b:44:d6:af:24:
b2:6c:b9:42:e7:52:05:45:d2:a2:79:a1:89:53:bf:
d3:08:85:19:72:63:ff:85:45:1f:7d:3b:53:ea:84:
92:d1:b9:68:42:8f:1d:0b:91:8e:fc:af:b8:40:57:
f2:b2:37:b5:36:fc:79:17:07:cb:83:8e:6c:c2:a3:
94:87:7f:b6:75:9f:1c:02:01:d7:ee:d8:0b:f3:7b:
b2:3e:ce:17:c2:44:81:1b:b2:c3:e4:90:14:f4:96:
66:98:fa:80:8c:ea:73:c0:ab:77:fa:ba:84:bb:ec:
6b:05:e9:c2:41:ea:39:de:7c:50:a0:29:86:fa:de:
a1:05:00:11:ef:26:5e:67:27:cf:05:bb:66:21:79:
23:a0:90:89:49:da:f3:76:73:e6:72:8d:f1:00:e5:
86:7d:58:f9:a4:19:03:5c:2a:ef:e2:fd:1d:90:5d:
32:90:eb:51:3b:12:07:b6:0f:43:c5:f2:e4:7e:f5:
53:ef:f5:e1:f4:74:a7:7b:24:9f:59:61:ce:c9:71:
21:4a:f6:aa:39:6a:35:d6:e6:c8:ff:2c:b4:cf:7a:
7f:e7:1c:47:2c:f9:09:8b:3e:a7:3e:b7:77:86:9d:
4a:a1:12:fa:e8:fb:5a:42:10:22:9d:48:d8:42:2f:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C3:53:6A:67:4D:2D:43:CC:7C:CE:0E:6F:C5:C2:28:51:7D:C1:00
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/lsNTamdNLUPMfM4Ob8XCKFF9wQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
45.132.255.0/24
45.142.122.0/24
82.115.222.0/24
84.252.73.0-84.252.75.255
85.209.2.0/24
185.40.4.0/24
185.102.139.0/24
185.103.109.0/24
185.104.251.0/24
185.112.101.0-185.112.103.255
185.217.198.0/23
185.221.160.0/24
185.221.162.0/24
185.232.169.0/24
185.233.83.0/24
185.233.200.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
Signature Algorithm: sha256WithRSAEncryption
4f:f8:b6:a5:d3:52:62:2a:e8:24:34:0a:bf:95:bb:50:f6:a4:
2c:a8:cb:8d:e8:d1:7c:ac:b3:4c:4e:57:ec:d9:d5:41:10:5b:
0b:dd:48:12:9a:85:68:e4:39:81:08:4d:4c:c4:31:8b:60:7f:
b5:da:17:c3:dc:00:aa:2f:b6:2b:07:a1:5b:fe:bd:3f:7a:ba:
22:39:9c:a0:79:a8:83:a8:05:95:b8:0c:e9:80:95:c3:16:6f:
21:ee:e0:8b:2e:7d:05:f8:30:5f:db:77:03:3d:b8:2d:61:02:
48:c6:ff:a3:d6:4f:ca:2f:bf:a7:32:31:a0:32:56:33:54:ca:
31:0b:00:c1:6c:78:72:2b:21:d4:62:76:88:80:6c:35:27:2c:
e2:3b:d7:06:bb:9e:f8:1a:77:8a:fa:93:1d:ad:19:9a:b6:e8:
25:b2:05:7f:3c:0b:aa:75:19:f5:79:73:39:e3:84:62:f2:5b:
05:e7:62:2f:27:da:e9:ea:10:4b:ec:fc:20:8b:c0:3d:c4:9f:
96:b4:d6:73:61:fa:48:55:a8:3b:92:fd:bc:dc:35:ae:a7:2c:
d9:03:7c:a5:b6:4c:12:6d:39:41:e1:d6:b0:1e:4c:bc:73:c1:
7f:46:15:ee:dd:75:90:be:60:23:dd:a4:7b:2c:a4:84:7f:19:
17:da:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:46:04 2026 by rpki-client