Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/LOSSfoVe0WtQ-UXwav1YUATxS78.roa
File: LOSSfoVe0WtQ-UXwav1YUATxS78.roa (raw, json)
Hash identifier: H+DrzI8SXckcpRRwjIN+v9EdmDroqGyQIw+MGUoYk4w=
Subject key identifier: 2C:E4:92:7E:85:5E:D1:6B:50:F9:45:F0:6A:FD:58:50:04:F1:4B:BF
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 01A1CBAE9B7FBF72DCD259CDD34BA6FF5363
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/LOSSfoVe0WtQ-UXwav1YUATxS78.roa
Signing time: Wed 11 Nov 2026 17:36:20 +0000
ROA not before: Wed 11 Nov 2026 17:36:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50131
IP address blocks: 37.72.132.0/24 maxlen: 32
45.142.156.0/24 maxlen: 32
45.142.157.0/24 maxlen: 32
45.142.158.0/23 maxlen: 32
45.145.72.0/23 maxlen: 32
45.145.74.0/23 maxlen: 32
45.150.164.0/22 maxlen: 32
45.150.224.0/24 maxlen: 32
45.150.225.0/24 maxlen: 32
45.150.226.0/23 maxlen: 32
45.151.132.0/22 maxlen: 32
45.154.212.0/22 maxlen: 32
62.204.54.0/24 maxlen: 32
91.246.39.0/24 maxlen: 24
94.154.114.0/24 maxlen: 32
146.19.114.0/24 maxlen: 32
146.19.223.0/24 maxlen: 32
176.116.1.0/24 maxlen: 32
178.22.30.0/24 maxlen: 32
188.93.139.0/24 maxlen: 32
193.105.95.0/24 maxlen: 32
193.218.200.0/23 maxlen: 32
193.221.94.0/23 maxlen: 32
194.124.218.0/23 maxlen: 32
194.124.224.0/24 maxlen: 32
194.124.225.0/24 maxlen: 32
194.147.98.0/23 maxlen: 32
194.147.100.0/23 maxlen: 32
212.18.111.0/24 maxlen: 32
217.114.47.0/24 maxlen: 32
2a0e:da40:4000::/34 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:ae:9b:7f:bf:72:dc:d2:59:cd:d3:4b:a6:ff:53:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Nov 11 17:36:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ce4927e855ed16b50f945f06afd585004f14bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:5b:0b:47:ed:eb:5e:cc:11:b3:e9:95:d3:
4c:97:81:3f:06:9a:b5:a4:56:32:05:a6:99:9e:42:
0c:dc:c9:43:10:44:d7:fa:e5:4e:13:d8:6c:93:e8:
ec:df:7d:1a:25:a5:4f:06:df:78:c1:51:65:a1:be:
aa:c9:3f:48:12:77:99:32:fd:51:37:04:32:41:55:
1e:f7:61:59:94:61:87:40:d8:8c:95:26:cd:2d:e7:
b0:ad:f8:58:ac:a5:2d:e3:80:dd:f5:1b:78:cd:77:
e1:85:fb:5c:5a:91:09:12:52:2a:b9:f4:79:c0:3e:
32:ed:a5:06:23:1c:a3:84:e8:c8:4a:3b:93:ee:b9:
69:6c:b0:b4:78:0b:7c:01:5f:b2:fb:a9:89:25:1d:
72:05:e8:6d:6e:1e:4f:3b:ec:e3:a7:20:29:91:a1:
ce:f2:c8:11:a4:3e:cc:07:2c:2b:66:b4:a0:be:21:
92:fe:fe:d2:bf:09:02:c8:8f:20:4b:20:60:7b:9a:
b9:29:30:2c:b8:7c:2b:b0:0c:18:82:59:a7:7f:2e:
08:d1:24:fe:84:43:21:16:df:01:bc:f9:30:6e:66:
bd:bb:6a:ce:16:63:b5:dd:53:e6:16:61:c4:4a:92:
b8:07:8a:5d:f1:37:7a:b8:6e:3f:74:08:42:b0:b9:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:92:7E:85:5E:D1:6B:50:F9:45:F0:6A:FD:58:50:04:F1:4B:BF
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/LOSSfoVe0WtQ-UXwav1YUATxS78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.132.0/24
45.142.156.0/22
45.145.72.0/22
45.150.164.0/22
45.150.224.0/22
45.151.132.0/22
45.154.212.0/22
62.204.54.0/24
91.246.39.0/24
94.154.114.0/24
146.19.114.0/24
146.19.223.0/24
176.116.1.0/24
178.22.30.0/24
188.93.139.0/24
193.105.95.0/24
193.218.200.0/23
193.221.94.0/23
194.124.218.0/23
194.124.224.0/23
194.147.98.0-194.147.101.255
212.18.111.0/24
217.114.47.0/24
IPv6:
2a0e:da40:4000::/34
Signature Algorithm: sha256WithRSAEncryption
c3:8a:5d:41:de:87:22:6a:28:38:0f:ba:83:72:67:a7:0f:e0:
7c:e4:a2:fc:98:32:31:c1:b6:05:e8:6a:99:8d:80:4b:58:8f:
33:30:f6:7d:2f:8a:bd:68:96:4c:6f:81:d2:c2:5c:98:0d:41:
e0:ca:2c:6f:5a:ca:35:b1:e5:d3:f6:18:d0:fd:53:94:b1:38:
75:70:5f:a6:c1:19:00:cf:07:7b:97:d8:34:9e:4a:50:2c:5f:
eb:b2:c7:0a:11:66:73:25:ec:9a:c3:48:3a:b7:0b:fa:17:ea:
50:69:30:57:9f:b0:42:d7:81:93:a8:41:86:28:a8:b2:1e:6d:
20:0a:82:db:62:9b:85:a6:fa:6a:b3:e7:1e:23:99:06:21:99:
6b:18:8b:ee:f7:3a:65:30:81:cd:d3:f2:ce:e8:e9:ce:2e:95:
76:d7:c3:8c:d8:8d:f0:85:37:e6:2b:e6:12:87:aa:5f:14:a9:
33:84:80:d7:b4:51:5f:a0:73:aa:ad:08:ed:2c:ac:51:c7:22:
6c:9e:45:a1:61:a7:51:c3:45:a7:5e:45:57:bf:46:7d:c5:fe:
ca:4d:a5:76:d9:76:e9:ad:45:9e:78:45:a6:9d:41:f5:fc:17:
fe:b0:b3:f2:57:e8:59:b0:8d:32:f0:e5:25:98:cf:dd:ea:1d:
04:46:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:51 2026 by rpki-client