Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/RBmruhotLIpYyp8LH9PtrGa2URQ.roa
File: RBmruhotLIpYyp8LH9PtrGa2URQ.roa (raw, json)
Hash identifier: 3bHS69p+AQSL63CyFLHfd8p6jPEKvwdnyFW0ZhH4SPc=
Subject key identifier: 44:19:AB:BA:1A:2D:2C:8A:58:CA:9F:0B:1F:D3:ED:AC:66:B6:51:14
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 01A0D2A566DE3FCDCC68BAD4E37461B4C0CD
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/RBmruhotLIpYyp8LH9PtrGa2URQ.roa
Signing time: Thu 24 Sep 2026 09:00:50 +0000
ROA not before: Thu 24 Sep 2026 09:00:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200780
IP address blocks: 5.42.200.0/24 maxlen: 24
45.9.104.0/22 maxlen: 24
45.85.133.0/24 maxlen: 24
45.85.134.0/23 maxlen: 23
45.155.228.0/22 maxlen: 24
45.156.188.0/22 maxlen: 24
46.19.104.0/21 maxlen: 24
77.236.98.0/23 maxlen: 24
88.218.32.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
91.227.36.0/22 maxlen: 24
91.233.66.0/24 maxlen: 24
91.234.104.0/22 maxlen: 24
93.177.69.0/24 maxlen: 24
93.177.70.0/23 maxlen: 24
95.178.108.0/22 maxlen: 24
185.40.102.0/23 maxlen: 24
185.62.224.0/22 maxlen: 24
185.73.204.0/22 maxlen: 24
185.73.204.0/24 maxlen: 24
185.144.24.0/22 maxlen: 24
185.217.200.0/22 maxlen: 24
194.11.255.0/24 maxlen: 24
194.13.1.0/24 maxlen: 24
194.13.64.0/24 maxlen: 24
194.13.67.0/24 maxlen: 24
194.88.112.0/22 maxlen: 22
194.106.208.0/23 maxlen: 24
195.35.96.0/24 maxlen: 24
195.133.148.0/22 maxlen: 24
2a05:46c0::/29 maxlen: 29
2a10:780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:66:de:3f:cd:cc:68:ba:d4:e3:74:61:b4:c0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Sep 24 09:00:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4419abba1a2d2c8a58ca9f0b1fd3edac66b65114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:4f:27:03:a9:d0:d6:31:cf:e4:f0:71:3c:
2c:3d:d1:77:38:9a:ef:02:59:88:44:9e:77:32:88:
f6:ff:55:51:5f:3f:39:b8:bf:d6:a2:44:87:06:db:
57:8c:d1:bd:b8:76:77:7a:c3:80:44:cc:e9:77:bd:
00:bb:b7:eb:be:91:0c:cd:a7:d0:da:c3:a4:b2:74:
7e:f9:49:34:fe:e2:f3:b3:cd:2b:22:f5:77:9d:cd:
f0:47:43:30:0a:8e:81:36:8f:74:7d:df:41:24:84:
45:10:c5:4b:fd:f3:2a:59:c8:94:68:e8:88:17:55:
99:9f:5d:4d:97:43:de:73:f4:5f:57:b9:f5:86:c5:
30:fb:e1:41:a6:b8:94:a6:fd:cd:68:7e:9b:d5:23:
fa:29:01:32:0c:33:8a:02:4a:14:f5:89:da:20:45:
5b:69:b7:5b:f7:35:27:f9:f1:b7:0f:70:cf:c1:38:
14:4b:da:89:4b:70:59:fc:ea:a5:65:a4:91:05:9d:
aa:f8:e5:3f:98:06:c0:83:cd:11:ff:fd:c0:76:bd:
73:10:0c:cd:70:88:30:b1:d3:1c:15:d7:5e:76:e0:
3a:f4:b9:70:d6:1c:fb:da:b8:ac:43:97:09:93:c6:
ff:89:aa:55:ed:ee:ff:2a:2a:d4:37:aa:99:d0:8e:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:19:AB:BA:1A:2D:2C:8A:58:CA:9F:0B:1F:D3:ED:AC:66:B6:51:14
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/RBmruhotLIpYyp8LH9PtrGa2URQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.200.0/24
45.9.104.0/22
45.85.133.0-45.85.135.255
45.155.228.0/22
45.156.188.0/22
46.19.104.0/21
77.236.98.0/23
88.218.32.0/23
89.40.220.0/23
91.227.36.0/22
91.233.66.0/24
91.234.104.0/22
93.177.69.0-93.177.71.255
95.178.108.0/22
185.40.102.0/23
185.62.224.0/22
185.73.204.0/22
185.144.24.0/22
185.217.200.0/22
194.11.255.0/24
194.13.1.0/24
194.13.64.0/24
194.13.67.0/24
194.88.112.0/22
194.106.208.0/23
195.35.96.0/24
195.133.148.0/22
IPv6:
2a05:46c0::/29
2a10:780::/32
Signature Algorithm: sha256WithRSAEncryption
a5:11:2f:27:50:07:63:fe:5a:9e:f9:91:37:95:e9:7b:0c:45:
de:19:01:34:b9:21:cb:18:35:ae:f6:4b:0a:e0:db:4a:ba:dd:
2b:4a:72:38:0c:43:56:3c:ad:58:05:56:f4:0f:30:bd:e7:c5:
15:9c:4d:ce:68:04:50:f9:61:8d:59:05:c0:3a:c4:fc:c9:03:
f8:39:95:33:19:71:fb:a8:4c:a3:e0:77:3a:4b:53:3f:e0:09:
55:8f:48:0b:e1:7b:9f:b4:c5:fc:30:52:83:96:a4:16:76:9c:
78:61:b5:9c:9a:8a:cb:7e:a3:e2:be:96:fe:7d:aa:30:ef:cd:
20:63:0f:5d:3c:aa:3e:2a:0d:c0:5c:47:bf:1b:1d:6d:6b:46:
50:12:f1:7e:85:a4:6a:a2:f4:8b:eb:bc:5f:b6:bb:4d:fc:38:
9d:e5:dd:9f:49:12:89:97:37:bc:b9:d6:8c:4c:d3:c4:90:98:
d2:6e:6c:ff:1e:66:b4:da:1b:9a:24:ad:88:3a:6f:42:61:93:
1d:ed:8c:1e:16:a7:78:4d:eb:1a:03:31:5f:48:3c:2f:81:f2:
ad:a2:f2:ea:23:4b:b9:1c:8f:e1:6e:0b:2b:3f:23:7a:a3:5f:
88:0f:3d:fe:bf:c2:d1:f5:1e:68:83:10:00:d4:ee:98:d4:ac:
5c:71:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:38:36 2026 by rpki-client