Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/189-AMpP1NIU3eX6E6TgSKDQxCw.roa
File: 189-AMpP1NIU3eX6E6TgSKDQxCw.roa (raw, json)
Hash identifier: 6qdFChm/yc6IeFFl2FMtTFYStfg0kPnB4dIgZqsOhNs=
Subject key identifier: D7:CF:7E:00:CA:4F:D4:D2:14:DD:E5:FA:13:A4:E0:48:A0:D0:C4:2C
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 019F8E770DD4CE3A602F40868B8DC88626B4
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/189-AMpP1NIU3eX6E6TgSKDQxCw.roa
Signing time: Thu 23 Jul 2026 10:13:14 +0000
ROA not before: Thu 23 Jul 2026 10:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48519
IP address blocks: 185.119.136.0/22 maxlen: 24
195.253.48.0/22 maxlen: 22
195.253.52.0/23 maxlen: 23
195.253.65.0/24 maxlen: 24
195.253.66.0/24 maxlen: 24
195.253.84.0/22 maxlen: 22
195.253.88.0/23 maxlen: 23
195.253.90.0/23 maxlen: 23
195.253.96.0/19 maxlen: 24
195.253.128.0/22 maxlen: 22
2a01:5b0:2::/48 maxlen: 48
2a01:5b0:5::/48 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
2a01:5b0:8::/46 maxlen: 48
2a01:5b0:10::/45 maxlen: 48
2a01:5b0:12::/47 maxlen: 47
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:40::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:77:0d:d4:ce:3a:60:2f:40:86:8b:8d:c8:86:26:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jul 23 10:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7cf7e00ca4fd4d214dde5fa13a4e048a0d0c42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:29:62:14:fb:ba:cf:4f:b7:3a:93:1e:9e:
0a:71:7c:e8:c2:7a:db:be:4e:5f:e7:67:65:0a:24:
2a:c5:11:3a:b5:b5:d1:eb:bd:12:c9:18:0b:d4:64:
99:44:27:c4:c2:cf:25:84:a5:56:31:80:da:98:98:
95:0f:6c:f1:e1:8c:78:8c:39:84:48:0a:15:13:86:
c9:9c:8a:5b:68:9e:9b:3e:44:38:a0:ad:c9:39:e0:
a5:c7:1c:29:75:d3:3f:f6:9b:a4:74:2d:f6:b9:b9:
d6:40:79:70:77:4b:14:a7:ed:a3:73:60:c2:b5:77:
77:c9:d8:b2:79:9c:86:4b:55:41:a5:94:22:63:0b:
c5:3b:61:93:3a:a8:0e:90:e8:76:d5:d6:fe:d2:1d:
48:f1:3c:4f:e9:36:0b:27:79:38:4d:9b:9a:72:a8:
13:50:f7:66:60:bf:e6:0b:82:aa:ba:2e:ed:be:6b:
dc:35:75:d0:7d:ca:3f:fd:26:52:d8:26:28:bb:55:
b5:80:7d:47:4d:f8:13:f1:cf:d0:5b:a2:87:e1:62:
df:56:77:43:f1:26:c6:e8:33:b7:12:08:db:c7:88:
20:f7:0e:22:c2:0a:63:1a:f1:09:c7:96:33:52:a9:
1a:5a:78:ba:b3:0d:42:6d:07:03:e8:5c:7f:9e:d7:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:7E:00:CA:4F:D4:D2:14:DD:E5:FA:13:A4:E0:48:A0:D0:C4:2C
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/189-AMpP1NIU3eX6E6TgSKDQxCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.48.0-195.253.53.255
195.253.65.0-195.253.66.255
195.253.84.0-195.253.91.255
195.253.96.0-195.253.131.255
IPv6:
2a01:5b0:2::/48
2a01:5b0:5::-2a01:5b0:6:ffff:ffff:ffff:ffff:ffff
2a01:5b0:8::/46
2a01:5b0:10::/45
2a01:5b0:20::-2a01:5b0:43:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
20:9b:66:3c:d0:d3:d9:de:c8:78:75:16:69:57:cc:9d:7f:12:
bd:58:e0:e4:87:11:5e:df:eb:9f:c8:e3:7a:92:33:af:f6:d5:
92:d9:3e:9a:99:4c:be:39:9c:a5:1b:64:ef:0e:2a:28:0e:f7:
68:44:a1:31:55:20:b4:82:41:1b:6c:68:8b:e0:a9:06:b2:3e:
16:ee:43:0f:4c:70:7e:58:b2:fd:f8:3b:ad:00:4f:6d:6e:d4:
df:75:8d:6b:a9:35:aa:f1:1e:60:f5:bc:8d:44:3d:00:70:56:
f6:01:18:5a:37:ed:0f:ab:3c:3f:0a:94:d4:72:9f:59:d6:35:
ac:76:1f:0c:57:97:dc:6c:70:91:7c:f0:05:63:f0:06:e2:55:
73:ec:4f:86:b2:23:b6:96:0d:4f:36:5d:ff:7c:b6:84:de:9e:
ac:8c:90:a3:fb:3f:81:8f:10:07:a1:53:25:f1:98:66:37:36:
e2:45:d6:3d:29:cd:87:99:85:13:87:f6:74:b9:fe:8f:82:2d:
67:d1:3a:ee:d1:6e:70:38:86:9f:ca:5e:87:5b:e4:37:a0:fb:
31:86:6d:f7:c8:88:8c:cb:49:50:86:bd:aa:5c:81:9b:36:a8:
3a:a4:8a:ba:51:0e:6d:f3:86:3d:93:bc:67:ba:7a:8b:6c:a8:
7f:91:75:e8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgISAZ+Odw3UzjpgL0CGi43Ihia0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk
ODViMzAwHhcNMjYwNzIzMTAxMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2NmN2UwMGNhNGZkNGQyMTRkZGU1ZmExM2E0ZTA0OGEwZDBjNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHcpYhT7us9PtzqTHp4KcXzownrb
vk5f52dlCiQqxRE6tbXR670SyRgL1GSZRCfEws8lhKVWMYDamJiVD2zx4Yx4jDmE
SAoVE4bJnIpbaJ6bPkQ4oK3JOeClxxwpddM/9pukdC32ubnWQHlwd0sUp+2jc2DC
tXd3ydiyeZyGS1VBpZQiYwvFO2GTOqgOkOh21db+0h1I8TxP6TYLJ3k4TZuacqgT
UPdmYL/mC4Kqui7tvmvcNXXQfco//SZS2CYou1W1gH1HTfgT8c/QW6KH4WLfVndD
8SbG6DO3Egjbx4gg9w4iwgpjGvEJx5YzUqkaWni6sw1CbQcD6Fx/ntdlvQIDAQAB
o4ICjzCCAoswHQYDVR0OBBYEFNfPfgDKT9TSFN3l+hOk4Eig0MQsMB8GA1UdIwQY
MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt
MDYzY2U2Y2Y0NjBkLzEvMTg5LUFNcFAxTklVM2VYNkU2VGdTS0RReEN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk
LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGkBggrBgEFBQcBBwEB/wSBlDCBkTBEBAIAATA+AwQCuXeI
MAwDBATD/TADBAHD/TQwDAMEAMP9QQMEAMP9QjAMAwQCw/1UAwQCw/1YMAwDBAXD
/WADBALD/YAwSQQCAAIwQwMHACoBBbAAAjASAwcAKgEFsAAFAwcAKgEFsAAGAwcC
KgEFsAAIAwcDKgEFsAAQMBIDBwUqAQWwACADBwIqAQWwAEAwDQYJKoZIhvcNAQEL
BQADggEBACCbZjzQ09neyHh1FmlXzJ1/Er1Y4OSHEV7f65/I43qSM6/21ZLZPpqZ
TL45nKUbZO8OKigO92hEoTFVILSCQRtsaIvgqQayPhbuQw9McH5Ysv34O60AT21u
1N91jWupNarxHmD1vI1EPQBwVvYBGFo37Q+rPD8KlNRyn1nWNax2HwxXl9xscJF8
8AVj8AbiVXPsT4ayI7aWDU82Xf98toTenqyMkKP7P4GPEAehUyXxmGY3NuJF1j0p
zYeZhROH9nS5/o+CLWfROu7RbnA4hp/KXodb5Deg+zGGbffIiIzLSVCGvapcgZs2
qDqkirpRDm3zhj2TvGe6eotsqH+Rdeg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:07 2026 by rpki-client