Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/auNVP4GRdb-yov4RSHrL_OcE8r0.roa
File: auNVP4GRdb-yov4RSHrL_OcE8r0.roa (raw, json)
Hash identifier: 5t12mbfhtFY5bSdUBeTultxiZTke4fOQV/q83M9/n1I=
Subject key identifier: 6A:E3:55:3F:81:91:75:BF:B2:A2:FE:11:48:7A:CB:FC:E7:04:F2:BD
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019F90848F934384F452DAFF8B0FAFE1D939
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/auNVP4GRdb-yov4RSHrL_OcE8r0.roa
Signing time: Thu 23 Jul 2026 19:47:14 +0000
ROA not before: Thu 23 Jul 2026 19:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41079
IP address blocks: 91.199.22.0/24 maxlen: 24
91.228.196.0/22 maxlen: 24
91.234.146.0/24 maxlen: 24
91.237.52.0/24 maxlen: 24
91.239.66.0/23 maxlen: 24
178.250.40.0/21 maxlen: 24
185.5.96.0/22 maxlen: 24
185.25.148.0/22 maxlen: 24
185.123.160.0/22 maxlen: 24
185.140.120.0/22 maxlen: 22
185.180.204.0/22 maxlen: 24
185.193.112.0/22 maxlen: 22
185.201.112.0/22 maxlen: 24
185.204.216.0/22 maxlen: 24
185.208.164.0/24 maxlen: 24
185.243.52.0/22 maxlen: 24
193.17.184.0/24 maxlen: 24
193.218.152.0/22 maxlen: 24
195.78.66.0/23 maxlen: 24
195.114.0.0/23 maxlen: 24
195.242.116.0/23 maxlen: 24
2a02:1778::/32 maxlen: 32
2a02:1778::/48 maxlen: 64
2a02:1778:194::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:84:8f:93:43:84:f4:52:da:ff:8b:0f:af:e1:d9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jul 23 19:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ae3553f819175bfb2a2fe11487acbfce704f2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:1e:b3:44:c5:5a:94:35:19:98:54:13:50:
2a:be:39:01:25:b3:d7:d0:d0:94:d2:9e:30:8a:0e:
a4:45:f2:15:77:2e:ec:1d:08:a9:a5:9e:86:42:a5:
68:34:cc:71:05:13:be:e6:98:c4:81:e9:92:c2:50:
35:65:1a:7d:56:08:e5:77:7c:24:88:c4:ee:4a:43:
70:a6:73:5d:ed:bd:1d:a7:e8:e2:84:d7:2e:2c:f1:
a1:29:48:f2:55:c1:8c:da:3b:fc:1b:25:e7:40:8d:
a4:c3:bb:87:29:e1:c2:18:2e:08:ae:81:c3:0f:ce:
86:7c:be:0f:86:40:14:b2:d1:e8:c6:ca:f6:3e:d9:
04:5f:9b:f2:cd:3e:0a:a8:4a:cd:5a:2e:10:75:1a:
62:ec:e2:1b:b5:84:63:2e:7b:32:59:c1:b1:01:e1:
83:a0:54:c1:ff:96:e8:56:55:3a:9c:01:30:9d:a2:
77:a4:44:9f:3c:49:11:47:6a:7a:0f:43:59:b0:4d:
21:8c:f2:f5:50:94:1b:e2:4c:2b:fc:cd:7a:ae:a9:
23:d6:af:f5:bc:91:3e:28:db:d5:0f:ac:2a:b8:9f:
da:24:ef:07:ed:ef:63:26:d8:3a:fa:9b:06:78:41:
e8:44:94:09:7c:25:66:c5:22:f2:d4:ff:a8:22:20:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E3:55:3F:81:91:75:BF:B2:A2:FE:11:48:7A:CB:FC:E7:04:F2:BD
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/auNVP4GRdb-yov4RSHrL_OcE8r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.22.0/24
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
178.250.40.0/21
185.5.96.0/22
185.25.148.0/22
185.123.160.0/22
185.140.120.0/22
185.180.204.0/22
185.193.112.0/22
185.201.112.0/22
185.204.216.0/22
185.208.164.0/24
185.243.52.0/22
193.17.184.0/24
193.218.152.0/22
195.78.66.0/23
195.114.0.0/23
195.242.116.0/23
IPv6:
2a02:1778::/32
Signature Algorithm: sha256WithRSAEncryption
0f:ba:46:c0:7a:56:c5:a2:c3:d2:6d:07:ba:e4:b7:20:cc:6b:
56:2a:e8:92:83:ee:b2:d0:47:60:86:5e:b1:72:75:cc:70:83:
dc:f4:fd:3f:a7:62:3d:bf:41:ad:88:66:9b:b4:6d:9e:54:47:
80:b9:90:3b:14:da:69:d6:0c:15:db:16:2a:1b:31:74:74:ed:
db:d2:51:c3:c4:f7:fb:55:14:77:8c:f9:69:3d:ad:08:8b:90:
07:bf:55:42:e4:73:09:e0:ca:8d:b8:5c:bf:85:72:2d:53:1d:
85:d4:7d:d5:12:bb:3c:9d:f4:7b:1f:7f:70:3d:fa:14:4e:82:
9d:3a:3d:5b:f7:db:74:73:da:71:cb:f2:9a:f7:f4:fe:f4:47:
8c:7a:e0:39:be:94:3f:93:8a:d4:7a:57:1d:a5:62:80:75:36:
07:9a:40:ca:ca:66:ab:de:bb:2f:6d:ce:c9:f9:bd:37:11:0c:
85:b7:68:b0:a6:b3:d3:a2:fd:23:5d:12:b1:59:c9:65:8a:9a:
51:0c:75:64:fe:a6:98:9c:c5:30:1c:b6:77:8f:26:a4:fa:86:
0b:e1:83:91:61:98:07:38:45:dc:8c:71:8e:5a:b6:c9:c4:09:
6a:8e:bc:e2:21:4a:36:c5:56:9c:d6:b5:d6:e3:f7:26:0a:1e:
2c:17:73:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:07 2026 by rpki-client