Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/74QuZrGQeetigRkMq6uGFupi0HE.roa
File: 74QuZrGQeetigRkMq6uGFupi0HE.roa (raw, json)
Hash identifier: EQQ+vYhOzg8Yfql8iW0iHtQKpQRx8+F1DuJOIRGQ9KA=
Subject key identifier: EF:84:2E:66:B1:90:79:EB:62:81:19:0C:AB:AB:86:16:EA:62:D0:71
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 019E01F335D439BF5FDDEF3330EE6B63ACE1
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/74QuZrGQeetigRkMq6uGFupi0HE.roa
Signing time: Thu 07 May 2026 10:19:36 +0000
ROA not before: Thu 07 May 2026 10:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47952
IP address blocks: 45.136.106.0/24 maxlen: 24
45.139.220.0/24 maxlen: 24
45.139.221.0/24 maxlen: 24
45.139.223.0/24 maxlen: 24
45.145.21.0/24 maxlen: 24
45.145.22.0/24 maxlen: 24
45.145.23.0/24 maxlen: 24
81.200.140.0/24 maxlen: 24
81.200.141.0/24 maxlen: 24
81.200.142.0/24 maxlen: 24
81.200.143.0/24 maxlen: 24
91.106.216.0/24 maxlen: 24
91.106.217.0/24 maxlen: 24
91.106.218.0/24 maxlen: 24
91.106.219.0/24 maxlen: 24
91.194.52.0/24 maxlen: 24
91.194.54.0/24 maxlen: 24
153.56.138.0/24 maxlen: 24
185.82.220.0/24 maxlen: 24
185.82.221.0/24 maxlen: 24
185.82.222.0/24 maxlen: 24
185.82.223.0/24 maxlen: 24
185.126.177.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.201.212.0/24 maxlen: 24
185.201.213.0/24 maxlen: 24
185.201.214.0/24 maxlen: 24
185.201.215.0/24 maxlen: 24
193.35.204.0/24 maxlen: 24
193.35.205.0/24 maxlen: 24
193.35.206.0/24 maxlen: 24
193.35.207.0/24 maxlen: 24
2a0a:c4c0::/48 maxlen: 48
2a0a:c4c0:1::/48 maxlen: 48
2a0a:c4c0:2::/48 maxlen: 48
2a0a:c4c0:3::/48 maxlen: 48
2a0a:c4c0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:f3:35:d4:39:bf:5f:dd:ef:33:30:ee:6b:63:ac:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: May 7 10:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef842e66b19079eb6281190cabab8616ea62d071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:a3:6f:47:06:f4:0c:ca:c7:8b:9d:e9:80:
22:4e:04:e9:20:1f:ff:18:2b:4d:ae:96:af:ef:fe:
9f:8f:92:8f:ad:14:a6:9f:6b:7c:5d:7e:37:11:5c:
81:b4:36:8c:7d:b4:e5:31:57:2e:dd:39:e1:e8:af:
0e:1a:54:be:a4:51:61:31:50:c1:0e:6e:3d:69:a1:
94:ea:1f:0e:26:55:6d:1c:80:f9:87:50:ca:9a:80:
56:9f:f0:a8:d6:06:fd:fd:36:0e:78:62:f0:61:7d:
6e:ba:b8:a2:a2:ee:30:df:4e:f4:20:5e:28:65:91:
9d:87:58:f7:f6:a9:95:78:0a:39:71:9b:fe:96:7d:
48:97:99:b0:1e:08:7c:a4:6b:33:aa:b2:b0:43:ba:
61:aa:eb:0e:8f:15:36:b3:2f:13:f1:ab:ef:2d:45:
f2:13:4e:ba:79:06:7a:0b:e2:3e:40:1e:f2:af:d5:
72:19:f1:61:1a:d3:2e:31:be:91:6a:b3:c5:64:50:
8a:3b:fa:bc:41:cc:a0:05:15:92:a4:f9:fd:ce:23:
b0:b3:89:5f:73:94:8f:ab:10:61:94:4a:d9:6c:a8:
e0:c5:79:ec:98:f7:8f:1f:b1:48:4f:e4:e1:5d:59:
0f:b5:5e:ec:78:ed:d1:aa:f8:4e:dd:67:1f:4a:e5:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:84:2E:66:B1:90:79:EB:62:81:19:0C:AB:AB:86:16:EA:62:D0:71
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/74QuZrGQeetigRkMq6uGFupi0HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.106.0/24
45.139.220.0/23
45.139.223.0/24
45.145.21.0-45.145.23.255
81.200.140.0/22
91.106.216.0/22
91.194.52.0/24
91.194.54.0/24
153.56.138.0/24
185.82.220.0/22
185.126.177.0-185.126.179.255
185.201.212.0/22
193.35.204.0/22
IPv6:
2a0a:c4c0::/46
2a0a:c4c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
75:6c:56:f0:5b:38:2d:6c:fe:8c:fa:ee:8e:9e:35:fe:42:c5:
a6:60:f0:2f:dc:14:e3:42:ba:5c:0a:6f:7e:ee:35:15:3d:6c:
d1:51:ea:bd:76:62:4c:de:4e:ee:c5:e8:d8:f7:95:83:a0:04:
af:15:2f:fe:56:54:0b:c2:56:a3:df:a7:52:8f:02:e9:27:16:
60:9f:73:e0:e0:fd:15:bc:bb:20:5d:c5:b8:dd:2e:3a:8f:de:
10:b7:b5:e0:56:e9:02:58:ff:9d:12:25:54:2d:11:95:07:f1:
49:1c:09:41:7f:cd:2f:38:49:38:44:e2:8b:f8:be:d1:15:9f:
fe:df:33:73:98:0a:13:1e:9a:11:00:da:f4:a0:6b:73:a1:9a:
34:ed:73:ab:b5:22:99:01:a0:3a:18:0a:2e:56:5f:0e:ff:6e:
de:03:df:0a:d1:07:12:64:4e:d3:4a:c1:6c:c5:a6:93:29:42:
a5:db:68:eb:c9:78:cb:3a:aa:43:7d:70:89:7c:90:7e:72:7d:
04:67:31:6d:1e:e5:c2:8c:43:43:d2:28:3a:ee:bd:69:42:8b:
09:4f:d2:b0:ee:5a:bf:9d:2b:5c:4a:3d:f1:9f:d7:17:37:56:
d4:c4:8f:85:d2:e8:af:a6:20:23:7c:fd:5d:dd:c4:82:6a:15:
b3:48:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:09 2026 by rpki-client