Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/To3mp3sFV5SaLTdDmbaqrJ3LmUc.roa
File: To3mp3sFV5SaLTdDmbaqrJ3LmUc.roa (raw, json)
Hash identifier: Lfo9wOiNZm8KgvcU4HJl6vBiwCP1wLfrg+d0Uy5SQ1k=
Subject key identifier: 4E:8D:E6:A7:7B:05:57:94:9A:2D:37:43:99:B6:AA:AC:9D:CB:99:47
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019E1D18FB43D7C6D5AC7A5F75C0552E38EB
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/To3mp3sFV5SaLTdDmbaqrJ3LmUc.roa
Signing time: Tue 12 May 2026 16:50:36 +0000
ROA not before: Tue 12 May 2026 16:50:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 5.183.253.0/24 maxlen: 24
45.10.164.0/24 maxlen: 24
45.10.165.0/24 maxlen: 24
45.132.185.0/24 maxlen: 24
45.138.101.0/24 maxlen: 24
45.138.102.0/24 maxlen: 24
45.138.103.0/24 maxlen: 24
45.148.125.0/24 maxlen: 24
45.148.127.0/24 maxlen: 24
45.151.233.0/24 maxlen: 24
46.21.80.0/24 maxlen: 24
46.21.81.0/24 maxlen: 24
46.21.82.0/24 maxlen: 24
46.21.83.0/24 maxlen: 24
83.171.224.0/24 maxlen: 24
83.171.225.0/24 maxlen: 24
83.171.226.0/24 maxlen: 24
83.171.227.0/24 maxlen: 24
92.118.169.0/24 maxlen: 24
92.118.170.0/24 maxlen: 24
93.177.116.0/24 maxlen: 24
93.177.117.0/24 maxlen: 24
109.122.194.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
141.98.85.0/24 maxlen: 24
141.98.86.0/24 maxlen: 24
141.98.87.0/24 maxlen: 24
147.78.181.0/24 maxlen: 24
185.58.115.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
185.68.246.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
185.79.138.0/24 maxlen: 24
185.79.139.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
185.88.37.0/24 maxlen: 24
185.88.101.0/24 maxlen: 24
185.95.231.0/24 maxlen: 24
185.113.139.0/24 maxlen: 24
193.221.203.0/24 maxlen: 24
194.104.9.0/24 maxlen: 24
194.104.10.0/24 maxlen: 24
213.108.1.0/24 maxlen: 24
213.108.2.0/24 maxlen: 24
213.108.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:18:fb:43:d7:c6:d5:ac:7a:5f:75:c0:55:2e:38:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: May 12 16:50:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e8de6a77b0557949a2d374399b6aaac9dcb9947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:58:36:f5:9d:aa:de:e2:cf:9d:9c:23:a5:
9e:5f:83:c4:15:c6:7d:b6:31:c4:3a:5c:7e:2e:19:
17:ca:ec:c8:2a:de:35:7e:9e:71:9c:25:8f:ec:78:
fe:97:57:31:ba:dc:da:9b:20:01:51:78:bd:eb:ca:
68:91:20:81:ff:01:6f:5a:95:55:7f:a0:76:1d:ab:
8c:e7:e5:1d:04:57:dd:30:8c:f7:4f:53:02:c4:9a:
8d:44:88:8b:e0:e7:f2:55:dd:01:dd:7f:ba:be:fa:
09:e4:db:1f:d6:bd:d1:da:ba:d6:e2:8e:dd:ed:92:
4f:cd:cd:1c:9a:a0:ea:49:25:28:b5:f2:ae:b0:f9:
70:0f:16:b6:b9:46:1f:7b:e3:5f:df:aa:de:af:01:
56:26:10:26:d4:72:06:37:b0:f2:23:08:6d:77:88:
92:a0:ef:3d:90:8c:9d:3c:c6:ce:48:42:e5:80:c2:
7e:40:64:c0:87:10:ca:a6:b1:98:36:f9:b1:a4:dc:
87:46:58:e4:97:b0:f2:71:82:58:92:99:1f:d1:ab:
e5:0d:1f:bd:de:cf:2d:ae:1b:fd:ce:42:29:94:29:
cb:fa:45:14:22:a6:9f:e8:d1:35:8a:42:39:ba:31:
31:dd:2d:76:5a:4f:6f:17:4e:da:46:6a:0d:8b:f9:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8D:E6:A7:7B:05:57:94:9A:2D:37:43:99:B6:AA:AC:9D:CB:99:47
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/To3mp3sFV5SaLTdDmbaqrJ3LmUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.253.0/24
45.10.164.0/23
45.132.185.0/24
45.138.101.0-45.138.103.255
45.148.125.0/24
45.148.127.0/24
45.151.233.0/24
46.21.80.0/22
83.171.224.0/22
92.118.169.0-92.118.170.255
93.177.116.0/23
109.122.194.0/23
141.98.85.0-141.98.87.255
147.78.181.0/24
185.58.115.0/24
185.68.184.0/24
185.68.246.0/23
185.79.138.0/23
185.88.36.0/23
185.88.101.0/24
185.95.231.0/24
185.113.139.0/24
193.221.203.0/24
194.104.9.0-194.104.10.255
213.108.1.0-213.108.3.255
Signature Algorithm: sha256WithRSAEncryption
85:bb:ae:29:50:79:86:6e:f8:d8:41:85:4d:da:85:94:d4:52:
ac:d6:fe:46:37:7b:fc:c2:fc:bb:0b:77:3d:07:6b:c1:7b:25:
c6:d3:70:09:9d:93:70:4d:86:6a:02:46:36:1c:4a:49:57:0d:
48:a5:06:0f:f4:c0:fd:ec:ce:96:69:d8:86:52:1d:4a:4e:7e:
67:f9:7c:96:99:2f:c9:0c:01:69:63:80:33:88:dc:ce:ab:f0:
4e:2a:62:77:ee:5f:0a:68:75:eb:13:31:e3:61:4c:4e:68:06:
eb:1a:91:45:48:0f:20:5a:8b:75:09:73:a4:2f:ad:35:75:fd:
1f:d4:8b:d7:33:11:b4:64:f6:b2:54:30:dc:2e:44:e6:a9:2f:
1d:83:8c:b9:9c:05:8c:a0:12:b8:da:88:df:86:21:55:08:8f:
95:90:19:34:39:5c:80:18:63:3f:05:a8:9a:3d:24:97:cc:40:
cf:86:53:f3:bc:02:75:0b:d0:cb:07:6d:0b:14:42:a6:40:31:
6a:b7:08:eb:89:20:2a:06:b5:d1:bb:b4:b7:12:11:2a:d3:0e:
28:c8:5e:e4:6d:fb:7d:cc:88:ae:07:e2:ca:94:8d:83:60:e0:
da:e6:fc:9f:cc:39:e4:c7:c3:96:3f:5a:d6:74:5c:1f:a9:87:
4e:f3:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:45:56 2026 by rpki-client