Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/oA5D4BPvbArjujlSQCB3DiYiGdw.roa
File: oA5D4BPvbArjujlSQCB3DiYiGdw.roa (raw, json)
Hash identifier: P2esYkdenSsG8v9sUZIxAD+cF9LrXcYHaciSl6s3USw=
Subject key identifier: A0:0E:43:E0:13:EF:6C:0A:E3:BA:39:52:40:20:77:0E:26:22:19:DC
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A1A7BA7A023937ABD226A6B6A4079D7A7E
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/oA5D4BPvbArjujlSQCB3DiYiGdw.roa
Signing time: Wed 04 Nov 2026 18:02:58 +0000
ROA not before: Wed 04 Nov 2026 18:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204339
IP address blocks: 45.9.72.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
45.138.73.0/24 maxlen: 24
45.138.74.0/24 maxlen: 24
46.17.105.0/24 maxlen: 24
91.217.76.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
185.17.1.0/24 maxlen: 24
185.40.7.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.102.136.0/24 maxlen: 24
185.106.93.0/24 maxlen: 24
185.106.94.0/24 maxlen: 24
185.117.116.0/24 maxlen: 24
185.117.119.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
185.200.190.0/24 maxlen: 24
185.217.197.0/24 maxlen: 24
185.233.82.0/24 maxlen: 24
185.252.144.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.190.0/24 maxlen: 24
2a04:5200:68::/48 maxlen: 48
2a04:5201:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:ba:7a:02:39:37:ab:d2:26:a6:b6:a4:07:9d:7a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Nov 4 18:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a00e43e013ef6c0ae3ba39524020770e262219dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:76:c6:a3:6b:7e:64:a5:0d:83:45:70:87:
48:41:e6:65:e8:48:cc:96:3a:72:66:de:fa:62:71:
e7:3c:1f:f2:af:4a:a1:78:94:dd:e6:b3:d3:ee:ed:
90:70:a9:72:1f:9c:ea:28:8d:5d:2a:65:b6:9a:8e:
4f:01:12:1c:de:52:45:d9:da:f3:10:c3:82:8a:a6:
a2:4f:7e:2b:af:32:44:26:61:f0:f4:9c:7d:a5:07:
13:5a:65:90:b8:54:04:d6:fa:77:35:6b:d8:39:0a:
1e:b0:e4:c8:f0:95:49:70:b0:b9:95:49:59:80:5c:
f3:64:d7:8b:f2:99:80:f0:b9:9a:dd:3f:dd:bb:02:
f3:4e:0c:3e:58:b5:89:96:21:5a:f3:ac:d9:a6:de:
72:e2:83:ca:49:5a:47:1c:4a:ab:e9:bb:97:17:f6:
70:e3:f2:ad:6b:d3:60:c7:30:80:fd:b5:21:32:1d:
ee:49:08:c3:50:3e:a7:1e:7f:ba:ae:48:41:ad:d2:
9e:7f:59:63:79:a2:b5:e5:8a:2a:8f:d2:e2:a2:e9:
b6:b9:a6:f1:05:90:b7:8e:a0:1c:b8:85:fc:e0:0d:
c3:5a:79:11:9b:5d:70:88:27:17:d7:2f:df:a5:98:
95:8e:ea:f1:8a:2a:e8:30:cc:e8:d5:08:62:a9:4d:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0E:43:E0:13:EF:6C:0A:E3:BA:39:52:40:20:77:0E:26:22:19:DC
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/oA5D4BPvbArjujlSQCB3DiYiGdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.72.0/24
45.132.252.0/24
45.138.73.0-45.138.74.255
46.17.105.0/24
91.217.76.0/24
95.214.9.0/24
185.17.1.0/24
185.40.7.0/24
185.58.204.0/24
185.102.136.0/24
185.106.93.0-185.106.94.255
185.117.116.0/24
185.117.119.0/24
185.200.188.0/24
185.200.190.0/24
185.217.197.0/24
185.233.82.0/24
185.252.144.0/24
193.124.182.0/23
193.124.190.0/24
IPv6:
2a04:5200:68::/48
2a04:5201:2::/48
Signature Algorithm: sha256WithRSAEncryption
6f:c8:52:18:83:0b:fa:69:11:2c:4b:bf:3b:10:a1:4a:23:6e:
76:a5:86:59:b8:67:d9:27:60:5a:4c:49:3b:5f:e9:c2:a4:49:
7b:fc:99:60:29:06:5b:23:7a:d0:fa:8d:10:fe:f4:9b:be:e0:
df:82:ca:2c:a3:54:5d:e3:02:e2:d4:ec:b5:df:48:5b:8c:70:
92:66:e8:d9:17:f1:7d:c6:0c:01:75:a9:a0:72:b1:f2:1e:8f:
7a:ea:87:e4:f0:17:9f:e6:a2:5e:a0:06:78:c9:fa:fd:bf:92:
0c:9e:4f:f4:db:61:3f:8f:0b:48:73:f6:92:35:2e:4d:6f:fc:
10:e0:a1:92:30:04:30:b6:9d:35:4a:c5:7f:06:df:8f:be:50:
03:d8:c2:51:b8:d5:c4:aa:a1:b1:cf:b5:29:04:a5:f8:2b:35:
78:b5:6e:ac:05:39:dd:18:6e:2d:cd:2c:d7:86:5f:7c:89:c5:
13:63:d8:29:4d:34:dd:e1:da:d3:b1:b3:3d:35:12:37:0a:98:
3f:2c:a3:33:e9:fb:b8:a4:5c:ef:c3:ee:94:b7:ca:86:6d:86:
26:ed:29:d1:7f:c2:3d:b6:9e:de:43:18:1a:62:5f:d4:8a:bd:
54:e3:2c:b4:29:e5:95:21:b2:41:c2:58:be:e9:4d:a0:26:39:
7b:11:21:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:34 2026 by rpki-client