Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Ja5LoDyU5Dt2csY3QDw1Dyrr1eg.roa
File: Ja5LoDyU5Dt2csY3QDw1Dyrr1eg.roa (raw, json)
Hash identifier: GCWdAOmBwk9zzmdyyPbzfJWG0/aEE4fggrvOsUbKx9A=
Subject key identifier: 25:AE:4B:A0:3C:94:E4:3B:76:72:C6:37:40:3C:35:0F:2A:EB:D5:E8
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 019ED5373F2F88ABCF7042C487A78819C290
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Ja5LoDyU5Dt2csY3QDw1Dyrr1eg.roa
Signing time: Wed 17 Jun 2026 10:53:48 +0000
ROA not before: Wed 17 Jun 2026 10:53:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202766
IP address blocks: 77.72.104.0/21 maxlen: 24
84.18.0.0/19 maxlen: 24
92.60.160.0/20 maxlen: 24
176.98.220.0/22 maxlen: 24
185.66.60.0/22 maxlen: 24
185.145.224.0/22 maxlen: 24
185.155.64.0/22 maxlen: 24
185.173.44.0/22 maxlen: 24
185.187.180.0/22 maxlen: 24
185.224.76.0/22 maxlen: 24
193.34.240.0/22 maxlen: 24
195.5.64.0/19 maxlen: 24
195.5.64.0/24 maxlen: 24
195.5.65.0/24 maxlen: 24
195.5.66.0/24 maxlen: 24
195.5.67.0/24 maxlen: 24
212.49.128.0/18 maxlen: 24
212.59.192.0/19 maxlen: 19
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 24
212.66.164.0/22 maxlen: 24
212.66.168.0/21 maxlen: 24
212.66.176.0/20 maxlen: 24
212.163.0.0/16 maxlen: 24
213.9.128.0/17 maxlen: 24
213.192.192.0/18 maxlen: 24
213.192.203.0/24 maxlen: 24
2001:ac0::/29 maxlen: 48
2001:ac0::/32 maxlen: 48
2a0d:59c0::/29 maxlen: 48
2a0d:59c1::/32 maxlen: 32
2a0d:59c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:37:3f:2f:88:ab:cf:70:42:c4:87:a7:88:19:c2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jun 17 10:53:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25ae4ba03c94e43b7672c637403c350f2aebd5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:49:46:2c:ae:7c:59:a6:a7:bc:1f:f6:62:
8a:f9:99:6d:c3:90:a5:5f:3a:2a:98:f2:d2:c3:fb:
03:c8:2a:8b:85:2a:12:20:c1:f1:62:c9:bc:f3:ee:
da:cf:15:57:96:42:64:c5:6f:79:40:99:75:5a:b1:
f6:f8:c7:98:ca:f3:d5:a3:6c:85:0c:b5:77:f8:11:
f4:e2:7a:3a:fd:74:65:94:89:c5:ef:b6:1b:67:60:
80:72:0f:a1:28:3c:56:bf:62:3c:5a:df:e1:38:bf:
2b:5d:00:4c:81:c0:f1:5f:2d:b8:75:f7:ca:75:2c:
af:68:f8:ae:97:a1:02:5a:5f:5f:be:6e:7b:b4:4e:
30:5e:fe:09:6c:0a:e8:b3:d9:75:90:f9:5f:7a:5e:
41:12:62:36:b3:b4:80:3e:25:35:e0:8f:c3:da:8b:
e0:39:e1:41:63:1f:6a:91:4e:94:5f:ba:32:94:f3:
72:ae:ed:7a:45:cf:c4:f9:ab:d0:9f:25:f7:c4:48:
2d:9c:98:08:0e:e7:5a:90:19:c4:b8:7a:69:74:23:
e9:d8:6a:a1:68:d4:3f:92:eb:53:14:d9:ea:81:dd:
30:76:34:a2:e5:9d:69:4c:92:72:ef:c5:5b:2a:4e:
7d:5d:17:20:d8:eb:1d:48:ab:f2:9b:36:e4:61:bf:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:4B:A0:3C:94:E4:3B:76:72:C6:37:40:3C:35:0F:2A:EB:D5:E8
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Ja5LoDyU5Dt2csY3QDw1Dyrr1eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.104.0/21
84.18.0.0/19
92.60.160.0/20
176.98.220.0/22
185.66.60.0/22
185.145.224.0/22
185.155.64.0/22
185.173.44.0/22
185.187.180.0/22
185.224.76.0/22
193.34.240.0/22
195.5.64.0/19
212.49.128.0/18
212.59.192.0/19
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/29
2a0d:59c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:0d:01:01:47:41:ce:ba:48:1f:be:ef:c6:9c:b6:fc:43:3e:
b3:2f:58:6d:f2:67:a2:0a:82:26:c1:67:2f:61:7b:a1:aa:91:
6c:ca:32:fc:89:f2:4f:e6:4f:13:ac:08:a0:51:3a:0b:74:f5:
bc:c9:92:eb:99:84:09:14:cf:cd:06:c6:4e:44:bb:ac:9f:04:
44:65:28:88:72:5e:fb:40:ed:04:d2:9c:e1:01:56:9b:c6:87:
33:2e:ea:20:09:63:02:6f:7b:4f:e8:7f:6c:a8:32:ff:72:f0:
88:53:af:ac:55:51:36:d2:78:4d:11:11:6b:ba:16:fa:3f:07:
c6:26:15:83:23:53:4e:9e:12:55:ed:b0:b1:fe:9f:2e:e7:aa:
27:d7:b3:b4:45:c7:56:f4:f4:ca:f1:e9:e9:18:d6:58:00:34:
b4:c0:7c:76:49:99:e9:a2:fd:0d:36:16:48:fa:84:4b:a3:75:
15:7f:52:86:d9:1e:63:2c:ff:c0:22:aa:a2:de:c8:0e:a8:12:
70:c3:6a:6b:8a:ff:ea:0f:d6:16:8d:65:aa:25:1c:b4:cd:5a:
43:14:fa:11:6e:b7:eb:d5:f2:2c:0c:aa:3f:68:eb:bb:b3:57:
66:25:ca:c4:b3:98:2a:88:41:13:2d:70:0c:ee:93:79:cd:25:
1d:b6:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:58 2026 by rpki-client