Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/wMzSJ91CuKI85tvFvIdy62d6ztA.roa
File: wMzSJ91CuKI85tvFvIdy62d6ztA.roa (raw, json)
Hash identifier: ap4fG/mFh2KxJadGU6p2Z75DUVreihTzZEpYHo0GWe8=
Subject key identifier: C0:CC:D2:27:DD:42:B8:A2:3C:E6:DB:C5:BC:87:72:EB:67:7A:CE:D0
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019E1B627186B4C87836F1C24FE1E08E3EA1
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/wMzSJ91CuKI85tvFvIdy62d6ztA.roa
Signing time: Tue 12 May 2026 08:51:36 +0000
ROA not before: Tue 12 May 2026 08:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207713
IP address blocks: 45.93.213.0/24 maxlen: 24
45.93.214.0/24 maxlen: 24
45.151.234.0/24 maxlen: 24
45.151.235.0/24 maxlen: 24
160.20.156.0/24 maxlen: 24
160.20.157.0/24 maxlen: 24
185.68.186.0/24 maxlen: 24
185.68.187.0/24 maxlen: 24
185.71.214.0/24 maxlen: 24
185.71.215.0/24 maxlen: 24
185.73.180.0/24 maxlen: 24
185.73.181.0/24 maxlen: 24
185.75.132.0/24 maxlen: 24
185.76.240.0/24 maxlen: 24
185.76.241.0/24 maxlen: 24
185.76.242.0/24 maxlen: 24
185.77.138.0/24 maxlen: 24
185.77.139.0/24 maxlen: 24
185.79.132.0/24 maxlen: 24
185.79.133.0/24 maxlen: 24
185.88.98.0/24 maxlen: 24
185.88.99.0/24 maxlen: 24
185.95.228.0/24 maxlen: 24
185.95.230.0/24 maxlen: 24
185.100.156.0/24 maxlen: 24
185.102.114.0/24 maxlen: 24
185.111.24.0/24 maxlen: 24
185.182.130.0/24 maxlen: 24
185.182.131.0/24 maxlen: 24
193.38.228.0/24 maxlen: 24
193.38.229.0/24 maxlen: 24
193.38.230.0/24 maxlen: 24
193.38.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:62:71:86:b4:c8:78:36:f1:c2:4f:e1:e0:8e:3e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: May 12 08:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0ccd227dd42b8a23ce6dbc5bc8772eb677aced0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5e:d5:b8:a8:74:98:28:34:a5:86:2f:80:fa:
8b:b5:95:c6:cb:51:0b:0b:8f:1d:af:3f:7e:d2:0f:
14:11:aa:6d:b4:21:5b:10:c2:6b:16:32:0b:56:64:
e0:d8:0a:70:1c:f9:89:ba:e5:90:da:81:42:3a:fb:
37:e2:ef:23:20:aa:d6:00:2f:76:1a:f8:16:8b:4d:
bb:3f:af:e0:0d:f6:29:19:1f:a6:86:48:21:3f:ba:
57:89:6d:cb:7e:6e:16:ef:11:8a:2c:fe:1e:d1:04:
c1:85:55:08:d3:fc:83:bb:d5:a8:03:d4:10:c0:bf:
72:ce:41:41:e1:d3:f9:11:6f:69:52:ab:53:5a:5d:
07:c6:b2:92:85:91:83:3f:c9:81:96:48:39:cc:bb:
0e:89:59:14:84:79:2f:58:71:be:cb:ec:e2:2e:b7:
42:90:d0:8b:39:1b:cf:4a:e5:b4:99:33:ad:dc:c1:
c6:96:a8:1f:88:3f:66:77:c6:d5:7f:7d:cd:3e:ec:
2f:38:03:2a:6d:a1:5b:3d:17:b7:67:44:6c:47:b0:
c4:dd:a1:a8:fc:68:d3:16:d8:a8:a6:72:b8:5d:c6:
e6:53:2c:c5:35:b1:10:43:14:ed:22:49:33:32:4d:
c0:82:09:08:9d:ca:78:71:60:f0:f7:d5:5a:75:98:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CC:D2:27:DD:42:B8:A2:3C:E6:DB:C5:BC:87:72:EB:67:7A:CE:D0
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/wMzSJ91CuKI85tvFvIdy62d6ztA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.213.0-45.93.214.255
45.151.234.0/23
160.20.156.0/23
185.68.186.0/23
185.71.214.0/23
185.73.180.0/23
185.75.132.0/24
185.76.240.0-185.76.242.255
185.77.138.0/23
185.79.132.0/23
185.88.98.0/23
185.95.228.0/24
185.95.230.0/24
185.100.156.0/24
185.102.114.0/24
185.111.24.0/24
185.182.130.0/23
193.38.228.0/22
Signature Algorithm: sha256WithRSAEncryption
64:1e:c3:37:6d:1e:f1:96:29:62:1a:c0:d1:f8:62:a8:c5:d9:
a9:91:38:16:58:db:3b:0e:83:2e:66:4d:41:f3:b7:9a:71:e2:
2b:a0:af:04:9e:c3:ba:3c:7a:c0:68:89:fe:25:49:11:dc:5e:
43:75:90:92:02:41:61:87:63:20:a8:16:34:60:08:d9:0e:f4:
0b:99:67:37:c3:31:90:68:dd:8e:d5:9e:fc:83:26:8a:37:4f:
27:aa:0d:97:11:c9:a3:b0:d4:71:8a:a4:b6:9f:3b:ca:39:10:
13:8a:9c:e4:96:ac:93:a1:1e:71:90:e3:96:e5:4b:a2:a9:09:
63:44:05:84:39:1b:ec:ed:83:57:a5:59:03:49:48:c4:bd:31:
2d:cf:7d:e2:54:34:8f:4a:d9:10:c2:ff:88:6d:a6:e9:8a:ee:
47:2f:b5:28:f1:2f:35:61:c1:a3:ed:61:33:e7:3e:b3:eb:66:
97:dc:46:b9:43:9e:90:40:5f:e4:9b:96:cb:fc:86:2a:9b:04:
12:d9:b0:83:15:97:29:f1:0f:39:18:29:5c:46:ae:62:07:6e:
3e:86:84:83:26:90:c8:b4:b9:d5:e7:89:2c:7b:c0:3d:75:10:
20:e3:6a:55:91:72:60:8c:90:5c:f4:5a:8b:6b:da:c5:8b:4e:
43:d5:ca:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:56 2026 by rpki-client