Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/51sMMW7XNb-MLf8Lv5YXdcOtSCk.roa
File: 51sMMW7XNb-MLf8Lv5YXdcOtSCk.roa (raw, json)
Hash identifier: mnXXWe8YXIcnA1Q/81dW5+gt1IIDz+CKkOS5vMvKy6I=
Subject key identifier: E7:5B:0C:31:6E:D7:35:BF:8C:2D:FF:0B:BF:96:17:75:C3:AD:48:29
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0C9618868C057DEB1F68184C6AC06FA57
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/51sMMW7XNb-MLf8Lv5YXdcOtSCk.roa
Signing time: Tue 22 Sep 2026 13:50:07 +0000
ROA not before: Tue 22 Sep 2026 13:50:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 85.204.176.0/22 maxlen: 24
85.204.180.0/24 maxlen: 24
85.204.182.0/23 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.172.0/22 maxlen: 24
86.107.64.0/22 maxlen: 24
86.107.160.0/22 maxlen: 24
86.107.164.0/22 maxlen: 24
89.32.172.0/22 maxlen: 24
89.34.64.0/24 maxlen: 24
89.35.8.0/22 maxlen: 24
89.35.12.0/22 maxlen: 24
93.117.132.0/22 maxlen: 24
93.118.176.0/22 maxlen: 24
93.118.188.0/22 maxlen: 24
93.119.108.0/22 maxlen: 24
93.119.140.0/22 maxlen: 24
93.119.196.0/22 maxlen: 24
93.119.228.0/22 maxlen: 24
93.119.232.0/22 maxlen: 24
93.119.236.0/22 maxlen: 24
188.208.96.0/22 maxlen: 24
188.208.104.0/22 maxlen: 24
188.208.112.0/22 maxlen: 24
188.208.125.0/24 maxlen: 24
188.208.192.0/22 maxlen: 24
188.208.204.0/22 maxlen: 24
188.210.240.0/21 maxlen: 24
188.210.248.0/22 maxlen: 24
188.212.8.0/21 maxlen: 24
188.213.36.0/22 maxlen: 24
188.213.52.0/22 maxlen: 24
188.213.220.0/22 maxlen: 24
188.213.236.0/22 maxlen: 24
188.213.244.0/22 maxlen: 24
188.214.60.0/22 maxlen: 24
188.214.137.0/24 maxlen: 24
188.214.138.0/24 maxlen: 24
188.214.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:61:88:68:c0:57:de:b1:f6:81:84:c6:ac:06:fa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 22 13:50:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e75b0c316ed735bf8c2dff0bbf961775c3ad4829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:00:d1:a7:b1:44:6f:2b:f9:a8:8b:f4:35:
6f:ae:4d:72:da:61:9c:09:08:77:1a:25:c0:b5:c2:
15:ae:95:af:dc:a2:52:61:e0:e8:76:ea:e9:87:04:
52:84:2a:20:01:63:6b:4c:a1:c8:28:e6:d5:d5:df:
0f:f1:9d:1c:86:22:ca:24:5c:14:a0:12:3c:8a:db:
38:29:e2:70:24:ed:1d:08:0c:49:cd:aa:4d:85:ad:
80:7e:24:56:e3:5e:87:8e:89:58:5c:2c:09:e2:6c:
f9:09:5b:a5:9d:5d:da:dc:59:f1:a8:7b:bd:dc:1b:
30:d1:c7:b3:36:16:38:b7:db:84:a0:0f:c6:ba:dc:
1f:d3:13:33:0f:7a:91:e8:16:0a:4c:d4:0c:92:04:
bc:a7:55:e6:dc:99:86:06:8c:5b:db:ce:c5:2c:92:
91:54:23:3e:cb:f7:7e:18:4a:d5:42:e7:d1:42:3d:
1b:fc:e4:30:2b:11:5f:7b:1b:e8:86:d4:f2:0a:93:
eb:bf:31:0b:72:01:b8:84:f7:3e:86:80:b6:0c:f8:
5c:e0:73:fd:31:ab:35:02:d4:72:72:65:6f:c3:0d:
05:77:6f:5c:cc:a8:5e:a1:53:ff:5a:3d:c7:8d:33:
17:f1:79:ba:e1:28:4a:ee:df:0c:4a:61:fe:0a:92:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:0C:31:6E:D7:35:BF:8C:2D:FF:0B:BF:96:17:75:C3:AD:48:29
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/51sMMW7XNb-MLf8Lv5YXdcOtSCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.176.0-85.204.180.255
85.204.182.0/23
86.104.196.0/22
86.105.172.0/22
86.107.64.0/22
86.107.160.0/21
89.32.172.0/22
89.34.64.0/24
89.35.8.0/21
93.117.132.0/22
93.118.176.0/22
93.118.188.0/22
93.119.108.0/22
93.119.140.0/22
93.119.196.0/22
93.119.228.0-93.119.239.255
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.125.0/24
188.208.192.0/22
188.208.204.0/22
188.210.240.0-188.210.251.255
188.212.8.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.137.0-188.214.138.255
188.214.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:71:c1:a6:d6:e5:3d:0a:3e:9a:ba:b5:af:03:c1:86:b6:8d:
ec:a6:23:08:98:c9:d5:a8:e2:63:47:fb:ad:ab:b4:3f:36:65:
c9:bc:15:39:15:5d:a3:e5:17:77:70:8d:16:44:c9:6d:48:f1:
1f:e0:61:aa:b2:e2:64:34:7c:5e:a8:86:3a:b4:30:ad:0c:d0:
de:e0:bf:c6:57:43:24:7c:29:65:a9:29:c9:a4:0f:a7:5e:52:
db:4e:be:74:01:4c:a8:5d:3b:98:59:6b:d5:df:be:3d:76:09:
7d:e6:11:50:71:19:4d:3b:a0:b5:af:14:11:c0:d9:19:c8:ed:
f1:2f:9b:4c:e4:5d:04:d9:36:f4:cb:f4:1c:ff:3a:54:00:09:
3c:9d:78:c0:d4:f1:b6:be:ca:32:79:da:7e:10:4c:16:3d:4d:
97:65:ca:a2:0e:15:48:be:b8:3d:8d:11:94:75:8f:49:9a:e3:
db:0a:a7:56:54:b4:a0:85:cf:d5:b9:59:b5:92:25:c8:a4:38:
1f:59:8a:20:a1:cf:d6:f1:93:67:5d:38:8f:6f:11:df:82:e2:
7d:2b:5f:7b:fa:e0:da:2d:37:37:33:77:5d:5a:64:e3:62:aa:
bc:b2:3a:ab:92:60:b0:c5:46:9a:33:ab:0f:d0:78:9a:83:0c:
d2:bc:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:20:57 2026 by rpki-client