Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/50FgNVwdKIXZBSoi9_tx_m369VY.roa
File: 50FgNVwdKIXZBSoi9_tx_m369VY.roa (raw, json)
Hash identifier: ECrdWmJHCoSD4ehG05AezfCmwTDPcEay5D7cVyccxQw=
Subject key identifier: E7:41:60:35:5C:1D:28:85:D9:05:2A:22:F7:FB:71:FE:6D:FA:F5:56
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F23690D8E44972660DF8D207E8CF599C1
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/50FgNVwdKIXZBSoi9_tx_m369VY.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198668
IP address blocks: 37.221.240.0/20 maxlen: 32
45.153.192.0/22 maxlen: 24
85.255.88.0/22 maxlen: 22
185.19.0.0/22 maxlen: 32
185.64.222.0/24 maxlen: 32
185.74.60.0/23 maxlen: 32
185.97.24.0/22 maxlen: 24
185.188.100.0/22 maxlen: 24
185.188.100.0/24 maxlen: 24
213.108.162.0/23 maxlen: 24
2a03:d840::/32 maxlen: 48
2a03:d840:ffff::/48 maxlen: 48
2a04:c740::/29 maxlen: 48
2a0d:3140::/29 maxlen: 29
2a0f:9300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0d:8e:44:97:26:60:df:8d:20:7e:8c:f5:99:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e74160355c1d2885d9052a22f7fb71fe6dfaf556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:e5:92:b9:7b:f9:4e:99:7a:1a:17:84:55:
13:4d:e3:09:1a:91:fa:93:2d:0f:10:8c:db:39:de:
d8:4d:a2:9d:8d:95:e6:8d:23:56:2f:86:cd:b2:df:
62:b8:b7:bf:33:32:0b:65:3b:50:20:a2:e1:9e:ea:
26:a6:1a:59:80:36:56:e4:bb:48:1c:d7:16:bf:c4:
10:f5:7d:5d:04:c5:a9:26:d7:59:d7:54:52:ca:85:
42:9e:6c:8c:30:1d:72:30:ef:ac:c5:6d:55:27:fc:
04:47:8b:14:68:e6:4b:95:e1:5a:91:a1:6e:67:65:
ed:d9:45:46:38:8c:36:42:fd:c6:4e:09:63:e0:13:
d1:0d:cf:c1:5d:82:ce:f5:da:fe:23:9a:07:44:2a:
d2:9c:f7:d5:59:1f:08:c6:4d:3a:2e:78:f4:50:c5:
e6:dd:a9:2d:88:b5:93:67:3b:73:15:e5:65:8f:1c:
4d:da:db:0e:fa:38:e6:eb:2b:00:e2:01:7d:78:ce:
e6:bb:75:2a:db:0f:05:46:36:75:59:0f:c7:4d:4d:
38:75:a6:63:75:5b:c8:11:35:1b:e7:8c:52:d1:09:
f4:56:8a:77:96:15:f4:1c:b1:10:b3:56:21:1f:df:
82:1f:08:b8:64:19:ea:4e:72:a8:ed:34:b1:39:f0:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:41:60:35:5C:1D:28:85:D9:05:2A:22:F7:FB:71:FE:6D:FA:F5:56
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/50FgNVwdKIXZBSoi9_tx_m369VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.240.0/20
45.153.192.0/22
85.255.88.0/22
185.19.0.0/22
185.64.222.0/24
185.74.60.0/23
185.97.24.0/22
185.188.100.0/22
213.108.162.0/23
IPv6:
2a03:d840::/32
2a04:c740::/29
2a0d:3140::/29
2a0f:9300::/29
Signature Algorithm: sha256WithRSAEncryption
67:53:b7:34:26:53:d3:92:bd:56:f4:50:ee:6d:0a:e9:c4:2c:
67:7a:54:86:18:0d:f0:67:0b:8c:6b:ef:2b:30:eb:66:b2:b5:
34:71:a7:5a:39:0c:71:d8:8e:81:68:20:a9:33:63:4c:28:fc:
9d:7f:00:98:68:05:23:06:ed:b2:05:66:49:00:98:73:1d:07:
cd:65:56:e3:e0:9e:2e:28:07:f1:f7:1b:38:a0:2a:40:03:77:
ae:cc:f0:72:58:94:69:a0:a2:a2:b2:51:72:bf:9c:41:0e:63:
6b:c9:8d:ce:9f:5d:de:b8:2d:2e:78:82:78:1f:65:34:eb:06:
33:9b:b3:89:c3:5a:9b:c6:61:44:be:f9:78:af:c3:7d:de:90:
49:70:74:0d:97:58:e7:57:8d:76:37:75:33:2e:ae:b1:91:84:
bc:61:d0:b6:40:46:ff:d5:53:18:e1:f6:de:1c:a2:90:26:aa:
a7:97:46:47:0e:b5:b6:fc:9c:23:7a:37:30:08:56:35:cf:c0:
c9:9f:58:1c:45:41:83:0c:4a:b8:86:35:3c:1a:ac:7f:4a:23:
7d:25:ff:48:c4:a7:7c:35:b7:25:4d:d0:6e:86:11:47:bc:58:
6e:44:94:1d:79:36:47:dc:d2:df:3c:fb:c4:aa:da:8d:e3:6e:
33:bd:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:47 2026 by rpki-client