Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/s07BOc0fvotVkrx6lP3Fx2gk7uQ.roa
File: s07BOc0fvotVkrx6lP3Fx2gk7uQ.roa (raw, json)
Hash identifier: uMGPwh+klm08fKQgfz6yUIl840Km6ZAmFYl1DgMKzeE=
Subject key identifier: B3:4E:C1:39:CD:1F:BE:8B:55:92:BC:7A:94:FD:C5:C7:68:24:EE:E4
Certificate issuer: /CN=511573efd2fbfe07a2f27209129e5bb485378ac7
Certificate serial: 019F45AF984B3C9F97FDD9F94AC57B954D63
Authority key identifier: 51:15:73:EF:D2:FB:FE:07:A2:F2:72:09:12:9E:5B:B4:85:37:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/s07BOc0fvotVkrx6lP3Fx2gk7uQ.roa
Signing time: Thu 09 Jul 2026 07:02:43 +0000
ROA not before: Thu 09 Jul 2026 07:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48101
IP address blocks: 37.25.44.0/24 maxlen: 24
37.25.45.0/24 maxlen: 24
37.25.46.0/23 maxlen: 23
81.85.192.0/18 maxlen: 19
91.151.240.0/20 maxlen: 22
91.228.232.0/23 maxlen: 24
91.228.234.0/24 maxlen: 24
95.166.0.0/18 maxlen: 21
98.96.160.0/20 maxlen: 23
134.19.192.0/22 maxlen: 22
134.19.196.0/22 maxlen: 23
134.65.128.0/21 maxlen: 21
134.65.136.0/22 maxlen: 22
134.65.140.0/22 maxlen: 22
134.65.144.0/22 maxlen: 22
134.65.148.0/22 maxlen: 22
134.65.152.0/21 maxlen: 21
146.103.128.0/18 maxlen: 19
176.20.128.0/18 maxlen: 21
185.16.160.0/22 maxlen: 24
185.122.192.0/22 maxlen: 22
199.15.232.0/22 maxlen: 22
199.15.236.0/24 maxlen: 24
199.15.237.0/24 maxlen: 24
199.15.238.0/24 maxlen: 24
199.15.239.0/24 maxlen: 24
2a04:200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.mft
rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:af:98:4b:3c:9f:97:fd:d9:f9:4a:c5:7b:95:4d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=511573efd2fbfe07a2f27209129e5bb485378ac7
Validity
Not Before: Jul 9 07:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b34ec139cd1fbe8b5592bc7a94fdc5c76824eee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:8e:dd:ed:e0:0f:7b:51:03:01:3c:e8:9c:
03:f6:b3:1d:50:f0:37:58:1a:dd:95:dc:ec:7c:c2:
e6:68:ef:80:b3:e1:3b:1e:da:bf:d1:5a:df:dd:93:
fe:e7:b1:5d:55:00:86:15:1a:44:18:d4:77:79:e9:
41:b4:ba:d2:a2:de:1a:75:17:5c:34:d0:53:86:dc:
71:7b:db:e8:01:e8:ea:51:c8:1a:bc:88:66:af:fc:
56:48:7c:33:16:e0:f5:e1:95:49:09:08:f4:e5:64:
13:c7:ce:71:d2:83:e0:0c:fa:32:b5:a3:68:96:8d:
7a:73:88:de:c9:47:4a:d7:2c:66:ad:6a:6a:20:52:
20:49:2e:a2:7a:3e:c7:d2:17:c2:06:63:60:04:27:
1b:4b:6b:09:92:46:7a:26:09:ff:2e:08:78:32:8c:
41:4e:32:95:56:5f:c9:f6:c1:75:cf:7e:2f:64:c2:
47:0b:8d:7d:ba:02:88:5f:be:2a:25:32:92:bb:5b:
f8:b9:ea:47:f5:ea:f3:26:fb:17:56:57:b9:6f:6a:
a3:51:20:ff:cc:c0:3e:78:d2:14:35:26:5f:3f:42:
2e:df:3c:0d:04:fc:dd:ad:0b:14:bc:a9:24:ec:18:
41:60:8f:6e:54:c9:99:03:54:10:18:3f:0b:43:e1:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4E:C1:39:CD:1F:BE:8B:55:92:BC:7A:94:FD:C5:C7:68:24:EE:E4
X509v3 Authority Key Identifier:
keyid:51:15:73:EF:D2:FB:FE:07:A2:F2:72:09:12:9E:5B:B4:85:37:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/s07BOc0fvotVkrx6lP3Fx2gk7uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.44.0/22
81.85.192.0/18
91.151.240.0/20
91.228.232.0-91.228.234.255
95.166.0.0/18
98.96.160.0/20
134.19.192.0/21
134.65.128.0/19
146.103.128.0/18
176.20.128.0/18
185.16.160.0/22
185.122.192.0/22
199.15.232.0/21
IPv6:
2a04:200::/29
Signature Algorithm: sha256WithRSAEncryption
7f:34:ad:c4:b7:6f:73:5b:f7:bf:ce:a4:ff:b3:61:b0:93:ab:
dd:cb:9c:85:ab:21:7c:a5:ee:77:3c:0f:19:07:dd:39:be:55:
ab:4c:ff:5c:ea:af:3e:b4:97:ae:ce:f1:20:08:a0:33:ec:81:
28:4b:7d:76:22:3f:be:44:19:41:d1:78:3e:ee:8e:9d:88:6d:
1d:38:41:20:05:c7:d3:48:db:7a:d6:c4:31:f3:05:82:eb:41:
b5:ec:48:c9:c9:7b:99:fe:b9:b4:ec:7d:5a:44:47:ab:7b:be:
64:28:e5:1b:c6:4f:ea:44:3d:48:55:59:a1:d1:7c:b1:08:a1:
0c:c6:87:f6:a9:37:62:3b:6b:dc:a8:d8:e5:5e:2c:5d:de:67:
2d:6c:9e:a3:b0:38:a9:3c:8a:0c:5f:19:7d:93:ba:23:09:ed:
f3:4c:e6:c8:fd:4b:38:36:bb:b2:93:24:84:b0:c1:97:e3:17:
8b:90:83:72:8b:28:6d:dd:6b:00:ac:3c:cc:b6:1d:04:52:42:
6c:9a:22:15:f5:4f:cb:04:de:0b:b0:5e:67:c1:05:e7:2f:a4:
12:62:79:78:71:5e:dc:0c:d4:71:b3:22:5a:0a:99:5d:20:3f:
9a:a8:bb:cc:fa:07:ad:f4:5b:af:02:20:ba:5a:5c:10:4a:0b:
ef:cf:06:b6
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAZ9Fr5hLPJ+X/dn5SsV7lU1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMTU3M2VmZDJmYmZlMDdhMmYyNzIwOTEyOWU1YmI0ODUz
NzhhYzcwHhcNMjYwNzA5MDcwMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzRlYzEzOWNkMWZiZThiNTU5MmJjN2E5NGZkYzVjNzY4MjRlZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoueO3e3gD3tRAwE86JwD9rMdUPA3
WBrdldzsfMLmaO+As+E7Htq/0Vrf3ZP+57FdVQCGFRpEGNR3eelBtLrSot4adRdc
NNBThtxxe9voAejqUcgavIhmr/xWSHwzFuD14ZVJCQj05WQTx85x0oPgDPoytaNo
lo16c4jeyUdK1yxmrWpqIFIgSS6iej7H0hfCBmNgBCcbS2sJkkZ6Jgn/Lgh4MoxB
TjKVVl/J9sF1z34vZMJHC419ugKIX74qJTKSu1v4uepH9erzJvsXVle5b2qjUSD/
zMA+eNIUNSZfP0Iu3zwNBPzdrQsUvKkk7BhBYI9uVMmZA1QQGD8LQ+HcewIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFLNOwTnNH76LVZK8epT9xcdoJO7kMB8GA1UdIwQY
MBaAFFEVc+/S+/4HovJyCRKeW7SFN4rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVJWejc5TDdfZ2VpOG5JSkVwNWJ0SVUzaXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUt
YzliNDcwZGMyNDBiLzEvczA3Qk9jMGZ2b3RWa3J4NmxQM0Z4MmdrN3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUtYzliNDcwZGMyNDBi
LzEvVVJWejc5TDdfZ2VpOG5JSkVwNWJ0SVUzaXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBcBAIAATBWAwQCJRksAwQG
UVXAAwQEW5fwMAwDBANb5OgDBABb5OoDBAZfpgADBARiYKADBAOGE8ADBAWGQYAD
BAaSZ4ADBAawFIADBAK5EKADBAK5esADBAPHD+gwDQQCAAIwBwMFAyoEAgAwDQYJ
KoZIhvcNAQELBQADggEBAH80rcS3b3Nb97/OpP+zYbCTq93LnIWrIXyl7nc8DxkH
3Tm+VatM/1zqrz60l67O8SAIoDPsgShLfXYiP75EGUHReD7ujp2IbR04QSAFx9NI
23rWxDHzBYLrQbXsSMnJe5n+ubTsfVpER6t7vmQo5RvGT+pEPUhVWaHRfLEIoQzG
h/apN2I7a9yo2OVeLF3eZy1snqOwOKk8igxfGX2TuiMJ7fNM5sj9Szg2u7KTJISw
wZfjF4uQg3KLKG3dawCsPMy2HQRSQmyaIhX1T8sE3guwXmfBBecvpBJieXhxXtwM
1HGzIloKmV0gP5qou8z6B630W68CILpaXBBKC+/PBrY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:51 2026 by rpki-client