Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/cmtH32Fxtve2CBiWuQ9hI9U_gZE.roa
File: cmtH32Fxtve2CBiWuQ9hI9U_gZE.roa (raw, json)
Hash identifier: zlTR8pSjgYOAMmSREpfTgbmKVNadEvLRtcVkTjhPojg=
Subject key identifier: 72:6B:47:DF:61:71:B6:F7:B6:08:18:96:B9:0F:61:23:D5:3F:81:91
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A1C6C0A748C2C43A428A43EE522BE3FE78
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/cmtH32Fxtve2CBiWuQ9hI9U_gZE.roa
Signing time: Tue 10 Nov 2026 18:37:56 +0000
ROA not before: Tue 10 Nov 2026 18:37:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 89.19.56.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.24.110.0/23 maxlen: 24
185.59.232.0/22 maxlen: 24
185.68.245.0/24 maxlen: 24
185.71.144.0/23 maxlen: 24
185.71.212.0/23 maxlen: 24
185.79.48.0/22 maxlen: 24
185.79.51.0/24 maxlen: 24
185.79.76.0/23 maxlen: 24
185.79.78.0/23 maxlen: 24
185.79.79.0/24 maxlen: 24
185.81.146.0/24 maxlen: 24
185.81.147.0/24 maxlen: 24
185.81.172.0/24 maxlen: 24
185.81.173.0/24 maxlen: 24
185.81.174.0/23 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/23 maxlen: 24
185.81.186.0/23 maxlen: 24
185.88.96.0/23 maxlen: 24
185.89.40.0/24 maxlen: 24
185.89.104.0/22 maxlen: 22
185.89.108.0/22 maxlen: 24
185.95.100.0/23 maxlen: 24
185.95.102.0/23 maxlen: 24
185.96.39.0/24 maxlen: 24
185.96.80.0/24 maxlen: 24
185.96.81.0/24 maxlen: 24
185.96.82.0/24 maxlen: 24
185.96.83.0/24 maxlen: 24
185.96.132.0/24 maxlen: 24
185.96.133.0/24 maxlen: 24
185.96.134.0/23 maxlen: 24
185.97.0.0/22 maxlen: 24
185.98.43.0/24 maxlen: 24
185.101.203.0/24 maxlen: 24
185.104.151.0/24 maxlen: 24
185.105.44.0/23 maxlen: 24
185.112.56.0/23 maxlen: 24
185.168.210.0/23 maxlen: 24
185.175.224.0/24 maxlen: 24
185.180.110.0/23 maxlen: 24
185.182.128.0/23 maxlen: 24
185.185.144.0/22 maxlen: 24
185.185.147.0/24 maxlen: 24
193.221.212.0/23 maxlen: 24
193.221.214.0/23 maxlen: 24
193.221.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:c0:a7:48:c2:c4:3a:42:8a:43:ee:52:2b:e3:fe:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Nov 10 18:37:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=726b47df6171b6f7b6081896b90f6123d53f8191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:43:d7:3b:64:79:aa:0d:19:f4:7b:28:ef:
19:21:38:06:dd:c8:da:76:48:40:91:33:6b:b9:a7:
f2:c3:4b:a6:3c:f1:51:02:26:c4:21:eb:ba:74:69:
fa:fc:aa:c1:c0:e9:e4:92:a8:ee:a4:0f:f4:2d:ac:
bd:26:b9:5a:cd:97:59:ba:da:1d:2d:29:c3:cd:cb:
01:87:f1:71:3e:07:a0:ff:10:55:0e:ea:72:2d:4d:
6f:82:42:78:39:0d:4e:50:ac:73:27:0d:f7:60:b6:
59:fd:34:01:18:65:76:a6:8e:5c:9c:df:2d:b2:d8:
24:c2:d5:62:7c:88:28:b5:7b:d9:bd:ba:40:41:bb:
33:a1:05:c7:e4:ee:52:8c:5c:2c:62:90:82:d1:0a:
aa:ff:cd:e8:b5:cc:1e:4c:7c:87:0e:af:08:47:18:
72:bf:89:77:f1:33:26:ed:67:4e:a8:82:31:49:d7:
e5:05:6e:45:69:75:f8:a4:af:84:92:4a:cf:9e:00:
1b:51:1e:f2:d5:62:fd:be:22:24:f8:b7:cc:d2:e1:
aa:4c:5d:13:9f:bf:c9:6d:9d:0c:67:b7:20:24:0b:
6c:7b:6b:08:55:72:40:1e:7b:ed:d2:1b:a3:c2:dc:
5d:f1:1a:8a:00:83:75:c3:b7:a8:b6:37:63:fa:37:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6B:47:DF:61:71:B6:F7:B6:08:18:96:B9:0F:61:23:D5:3F:81:91
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/cmtH32Fxtve2CBiWuQ9hI9U_gZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/24
89.19.58.0/23
185.24.110.0/23
185.59.232.0/22
185.68.245.0/24
185.71.144.0/23
185.71.212.0/23
185.79.48.0/22
185.79.76.0/22
185.81.146.0/23
185.81.172.0/22
185.81.184.0/22
185.88.96.0/23
185.89.40.0/24
185.89.104.0/21
185.95.100.0/22
185.96.39.0/24
185.96.80.0/22
185.96.132.0/22
185.97.0.0/22
185.98.43.0/24
185.101.203.0/24
185.104.151.0/24
185.105.44.0/23
185.112.56.0/23
185.168.210.0/23
185.175.224.0/24
185.180.110.0/23
185.182.128.0/23
185.185.144.0/22
193.221.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:d8:7d:62:9a:6d:4e:8b:8e:26:22:a8:05:f8:4c:a6:c1:99:
53:c0:5b:1d:c1:ba:33:c1:f2:5a:30:52:fe:e1:f6:40:9e:32:
f4:4d:aa:96:bc:94:3c:ef:53:cd:0f:7e:e9:ea:43:05:88:1f:
8b:43:15:84:70:0b:6c:02:59:b2:db:60:7a:22:62:45:0c:c8:
f9:4b:2e:7d:0e:7a:87:15:91:dd:39:03:ba:81:18:97:53:5c:
64:1f:5c:16:05:1e:de:e6:5e:9f:96:da:5d:d9:b8:ce:9e:0e:
24:52:e8:99:9e:a6:b3:1e:ff:77:94:31:5a:7b:7e:e2:40:93:
7c:0b:2b:de:4e:2d:02:cf:cb:70:15:d1:23:1c:4a:ee:eb:ed:
b6:48:8e:0c:b6:59:5c:d4:25:6e:e7:37:cc:f5:a2:54:c7:61:
12:1a:fc:67:52:fe:4e:54:18:3d:cc:c9:92:77:ed:1d:47:a0:
09:9b:22:a4:23:1f:85:bf:f1:16:e9:fe:60:7b:24:18:06:5f:
98:84:1c:43:1b:ab:43:71:cc:ae:95:c7:05:12:d8:a2:50:c8:
a8:bc:2e:0a:8e:fe:c0:9c:1d:50:e9:57:93:da:91:46:3d:93:
1e:b2:bc:91:70:5e:28:a4:70:d2:79:33:83:54:d5:67:a3:e9:
19:da:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:17:29 2026 by rpki-client