Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Nm4xRZFoUQYgfkribm27I-ia0A4.roa
File: Nm4xRZFoUQYgfkribm27I-ia0A4.roa (raw, json)
Hash identifier: +WfDXeUOKEI8eZzwDRsNxLfNhVA9PG5muieZGc5CPQI=
Subject key identifier: 36:6E:31:45:91:68:51:06:20:7E:4A:E2:6E:6D:BB:23:E8:9A:D0:0E
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F23690A90384643962C37677E144AC34D
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Nm4xRZFoUQYgfkribm27I-ia0A4.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47232
IP address blocks: 5.39.200.0/22 maxlen: 24
5.39.200.0/23 maxlen: 23
46.29.224.0/21 maxlen: 32
46.29.228.0/23 maxlen: 32
78.111.112.0/20 maxlen: 32
78.111.114.0/23 maxlen: 32
78.111.116.0/23 maxlen: 32
91.192.32.0/22 maxlen: 24
93.91.144.0/20 maxlen: 32
93.91.149.0/24 maxlen: 32
93.91.150.0/23 maxlen: 32
93.91.152.0/24 maxlen: 32
93.91.153.0/24 maxlen: 32
93.91.154.0/24 maxlen: 32
109.235.0.0/21 maxlen: 24
185.15.108.0/22 maxlen: 32
185.52.172.0/24 maxlen: 32
185.64.220.0/22 maxlen: 32
185.125.128.0/22 maxlen: 32
213.108.162.0/23 maxlen: 32
213.109.172.0/22 maxlen: 32
217.75.208.0/20 maxlen: 32
2a02:17a0::/29 maxlen: 48
2a02:17a0:d000::/36 maxlen: 36
2a03:2a80::/29 maxlen: 48
2a03:2a82::/31 maxlen: 48
2a04:7bc0::/29 maxlen: 48
2a04:7bc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0a:90:38:46:43:96:2c:37:67:7e:14:4a:c3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=366e314591685106207e4ae26e6dbb23e89ad00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:17:eb:f0:34:b6:fa:59:eb:0e:45:cd:3b:
87:47:e0:a3:92:a9:60:65:30:7b:48:2a:ad:35:25:
bf:ee:91:e8:06:56:35:f6:e7:d7:34:65:ea:c0:d2:
f2:3f:0c:04:28:04:36:66:75:16:f4:2b:bc:ba:7e:
08:3d:60:7e:f4:6f:b5:b7:8a:15:df:50:05:16:77:
67:37:8f:37:ce:57:23:6b:a5:2e:19:62:0c:c4:de:
3e:c2:7b:10:4a:56:df:1c:b1:8d:3e:5c:da:48:84:
da:44:f8:7e:86:50:e2:31:17:fa:c7:08:e2:12:90:
81:f1:0f:a9:6d:10:48:7d:08:dc:df:a3:ef:66:d2:
c0:c8:b5:e6:c2:3e:c5:cb:82:65:6d:84:4d:0f:7d:
86:c6:d6:70:d7:23:b3:9c:e0:b0:87:6d:83:67:af:
2b:8a:22:d5:9f:06:82:dd:eb:88:8a:3f:4b:d7:6d:
0d:28:fc:a2:26:d2:cf:11:2d:49:62:db:2b:01:a0:
3d:89:b9:0a:3f:3b:d2:43:28:21:3c:0d:66:3e:b1:
bd:26:48:1e:a8:fe:00:77:7c:ea:12:dc:a0:13:7f:
03:10:e0:39:47:05:82:1e:4d:67:d2:85:a8:d1:78:
1a:b1:2c:8a:c8:ac:8b:a8:a6:0a:b7:7d:6a:dd:ce:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6E:31:45:91:68:51:06:20:7E:4A:E2:6E:6D:BB:23:E8:9A:D0:0E
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Nm4xRZFoUQYgfkribm27I-ia0A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.200.0/22
46.29.224.0/21
78.111.112.0/20
91.192.32.0/22
93.91.144.0/20
109.235.0.0/21
185.15.108.0/22
185.52.172.0/24
185.64.220.0/22
185.125.128.0/22
213.108.162.0/23
213.109.172.0/22
217.75.208.0/20
IPv6:
2a02:17a0::/29
2a03:2a80::/29
2a04:7bc0::/29
Signature Algorithm: sha256WithRSAEncryption
85:03:f1:f6:f4:cc:01:84:2b:39:73:95:05:c2:2d:60:fd:db:
f8:08:f6:e4:72:97:92:cf:8d:60:69:b2:63:1a:23:3e:63:05:
ca:e9:d4:f3:8e:06:80:a0:84:ff:e3:ea:22:f1:e4:b6:7e:e1:
ca:51:31:28:63:60:55:96:77:42:a5:8b:c5:8c:ec:fc:83:cd:
da:9a:70:4e:c4:ca:6e:dd:80:c2:ff:cb:6e:97:f9:82:52:0b:
28:2a:d4:5e:a1:7a:3f:17:c4:30:8f:09:f5:3f:70:75:d2:1b:
31:3a:ab:9c:e4:85:e6:46:a7:33:5e:94:c3:f1:88:df:a0:3d:
65:00:f2:a7:a8:09:6f:d7:a5:2d:49:d3:41:50:eb:79:8b:fa:
ac:91:8b:94:9b:ac:c4:cb:8e:36:08:7e:2c:f6:b9:ee:75:9b:
e1:a6:ff:ea:3a:e3:ae:ad:6f:6d:e2:9f:50:eb:f6:c6:93:5b:
95:7a:de:4e:44:2d:98:e3:20:0d:cc:b2:39:a4:f7:d8:76:d1:
59:34:1f:14:cd:b0:73:40:80:2f:7a:42:11:88:27:22:ef:25:
27:a5:51:be:48:0f:72:69:94:d9:1c:a8:cc:2e:a0:21:58:8a:
e1:be:79:26:69:d7:73:c5:92:04:d2:08:64:07:8b:17:c9:ec:
d6:8c:36:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:11 2026 by rpki-client