Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/AhxzP9C0Xy3d2S4k2w7Bmpw6rBA.roa
File: AhxzP9C0Xy3d2S4k2w7Bmpw6rBA.roa (raw, json)
Hash identifier: NHQMdNh4Ym+0k0zIiZ+2OzU8E5q7yos10YV7kXoqN9k=
Subject key identifier: 02:1C:73:3F:D0:B4:5F:2D:DD:D9:2E:24:DB:0E:C1:9A:9C:3A:AC:10
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019F1C4EF4952191B9B98352DFAAA6E30914
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/AhxzP9C0Xy3d2S4k2w7Bmpw6rBA.roa
Signing time: Wed 01 Jul 2026 06:12:43 +0000
ROA not before: Wed 01 Jul 2026 06:12:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41368
IP address blocks: 5.34.128.0/19 maxlen: 24
5.183.184.0/22 maxlen: 24
81.16.212.0/22 maxlen: 24
89.29.128.0/20 maxlen: 20
89.29.129.0/24 maxlen: 24
89.29.132.0/24 maxlen: 24
89.29.133.0/24 maxlen: 24
89.29.135.0/24 maxlen: 24
89.29.144.0/21 maxlen: 21
89.29.149.0/24 maxlen: 24
89.29.150.0/24 maxlen: 24
89.29.151.0/24 maxlen: 24
89.29.152.0/22 maxlen: 22
89.29.155.0/24 maxlen: 24
89.29.156.0/24 maxlen: 24
89.29.157.0/24 maxlen: 24
89.29.158.0/24 maxlen: 24
89.29.159.0/24 maxlen: 24
89.29.232.0/22 maxlen: 22
89.29.233.0/24 maxlen: 24
89.29.234.0/24 maxlen: 24
89.29.236.0/22 maxlen: 22
89.29.254.0/24 maxlen: 24
176.57.104.0/22 maxlen: 22
176.57.108.0/22 maxlen: 22
176.57.108.0/24 maxlen: 24
176.57.110.0/23 maxlen: 23
185.40.37.0/24 maxlen: 24
185.40.38.0/23 maxlen: 24
185.40.39.0/24 maxlen: 24
185.64.243.0/24 maxlen: 24
185.74.240.0/22 maxlen: 24
185.93.80.0/22 maxlen: 24
185.123.56.0/22 maxlen: 24
185.139.176.0/22 maxlen: 22
185.145.40.0/22 maxlen: 24
185.214.136.0/22 maxlen: 24
185.214.138.0/24 maxlen: 24
188.92.124.0/22 maxlen: 24
193.56.164.0/22 maxlen: 24
212.119.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:4e:f4:95:21:91:b9:b9:83:52:df:aa:a6:e3:09:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jul 1 06:12:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=021c733fd0b45f2dddd92e24db0ec19a9c3aac10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5b:35:9a:d2:91:2e:74:3f:31:97:88:b1:6c:
b0:be:9e:23:83:66:72:59:c2:79:91:d8:1b:57:05:
b1:91:bd:ac:77:03:78:a0:b1:4e:39:5f:7f:5e:87:
cd:3a:4e:8d:1f:29:53:c0:a4:f8:45:6a:ad:7a:43:
27:ef:96:a7:3b:bb:2d:55:86:7e:af:4b:46:0e:74:
2b:fc:1b:8b:ae:b9:18:88:b6:e4:9f:4f:9c:b4:d1:
a0:76:c7:11:3c:37:e7:b5:54:fb:a9:41:dc:78:f2:
ca:3d:91:49:ee:86:87:75:cd:64:55:e9:e6:8b:6d:
25:3d:b5:e2:ad:b4:a5:cb:ac:8d:22:9f:77:e1:61:
4f:7e:bc:09:cd:de:4a:19:7c:cc:ba:93:48:90:9b:
cd:90:be:5e:e8:77:d6:22:6a:30:04:ef:94:4e:b8:
63:28:47:d2:bb:c8:28:9d:0a:c6:70:b3:94:63:6e:
09:d6:1a:29:15:46:18:0c:4c:d2:69:2f:07:1f:ab:
4b:65:03:a5:1f:2c:aa:d4:a3:39:28:ed:2b:d0:26:
ed:9a:d5:bd:c3:fa:7a:ef:c4:24:bb:92:32:18:b9:
38:fc:10:ca:4c:41:d2:fb:3e:d5:45:4b:4e:b5:a7:
15:0e:14:ca:44:fd:1f:04:ac:65:1d:d0:dd:fa:da:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:73:3F:D0:B4:5F:2D:DD:D9:2E:24:DB:0E:C1:9A:9C:3A:AC:10
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/AhxzP9C0Xy3d2S4k2w7Bmpw6rBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.128.0/19
5.183.184.0/22
81.16.212.0/22
89.29.128.0/19
89.29.232.0/21
89.29.254.0/24
176.57.104.0/21
185.40.37.0-185.40.39.255
185.64.243.0/24
185.74.240.0/22
185.93.80.0/22
185.123.56.0/22
185.139.176.0/22
185.145.40.0/22
185.214.136.0/22
188.92.124.0/22
193.56.164.0/22
212.119.52.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:52:cc:f0:5b:a6:84:a8:bb:40:82:36:92:de:14:96:3d:74:
6b:6c:3a:47:c7:d4:7d:e3:04:b9:27:8b:87:1c:1b:39:1a:9c:
c0:b1:b4:48:42:0a:d6:71:99:46:20:5d:ae:86:7b:bf:fb:5a:
43:34:fb:2f:5c:5a:a3:48:4d:0d:e3:54:62:44:18:47:26:1e:
2d:17:39:ed:56:e9:75:ec:50:a7:8c:ea:8a:1f:3f:6e:fc:ed:
fc:63:88:3d:71:75:76:b6:5e:96:1e:8a:12:80:f0:88:bc:df:
02:0d:f8:7f:6b:0b:ea:1d:ef:00:8d:11:59:cd:3e:9e:76:ad:
0a:94:72:aa:ef:d2:0b:83:d8:d3:38:df:08:e5:28:ff:1f:c8:
cf:42:4d:8b:5c:ab:63:01:a8:99:55:b6:e4:4f:7c:0c:62:2c:
47:6f:41:81:6c:32:41:3a:d9:88:65:9f:e1:e8:c7:37:09:83:
bc:84:d5:b6:16:20:7b:7e:36:66:6d:b5:4b:e7:4e:b9:68:65:
51:68:05:ea:9c:fa:9e:8b:cd:f1:5c:7e:6e:93:08:0a:2a:b5:
81:8a:91:b5:8b:c5:3a:5a:7d:4b:cd:7c:25:f0:44:3c:c3:54:
55:73:9e:d5:03:b3:8c:e0:62:78:29:4f:27:e4:39:3d:23:8a:
9d:3c:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:16 2026 by rpki-client