Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/AMvDAouKCIMdhoYVGla0M2NjhGk.roa
File: AMvDAouKCIMdhoYVGla0M2NjhGk.roa (raw, json)
Hash identifier: Sv9WH+b6FGXMCOz4SqhEWldc6CLB/Cyxf/vZtbug9gk=
Subject key identifier: 00:CB:C3:02:8B:8A:08:83:1D:86:86:15:1A:56:B4:33:63:63:84:69
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 019F8B282EB1365B3212E55D77597C34BFA3
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/AMvDAouKCIMdhoYVGla0M2NjhGk.roa
Signing time: Wed 22 Jul 2026 18:48:14 +0000
ROA not before: Wed 22 Jul 2026 18:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 37.98.224.0/21 maxlen: 24
85.113.90.0/23 maxlen: 24
85.194.196.0/22 maxlen: 24
109.205.112.0/21 maxlen: 24
167.160.5.0/24 maxlen: 24
185.58.12.0/24 maxlen: 24
185.58.14.0/24 maxlen: 24
185.76.32.0/22 maxlen: 24
185.98.157.0/24 maxlen: 24
185.181.52.0/22 maxlen: 24
192.161.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:28:2e:b1:36:5b:32:12:e5:5d:77:59:7c:34:bf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Jul 22 18:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00cbc3028b8a08831d8686151a56b43363638469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:b0:95:19:e8:b6:c8:64:8b:4c:81:95:d1:
a8:10:07:d7:30:fa:c9:02:0b:4f:93:e4:50:39:e7:
d4:cc:ad:08:17:07:41:5c:ba:7d:bf:e6:d3:77:d5:
70:b1:e6:8e:b5:c6:cf:8e:8f:ab:5d:1e:1a:2a:dc:
d9:60:c5:4e:98:69:65:1d:be:c2:e7:0d:49:e3:15:
14:bc:a5:bf:4e:7f:d1:e2:f7:b0:22:ce:24:7e:30:
b2:c2:e8:ed:8b:6d:fd:ef:6d:ff:86:56:19:c8:76:
3e:9a:f5:dc:54:53:19:2c:e7:28:9d:cf:c9:39:33:
d9:7d:2e:77:0b:77:de:52:a2:a2:c7:97:6e:6f:30:
30:2f:34:69:f7:25:d6:83:09:bf:f0:2a:24:f9:17:
44:c2:c3:45:ef:76:36:2d:2c:b7:a3:b2:e9:da:9a:
12:af:99:89:73:80:c3:78:a6:e9:9d:cd:db:a8:0f:
17:19:bc:99:15:e1:57:c3:94:16:21:d7:6f:60:35:
eb:5b:9d:2c:e9:54:6f:ff:da:9b:8d:da:ad:48:58:
23:c0:b7:a1:ff:36:21:6a:84:83:26:e0:ac:73:b7:
78:e3:04:3e:68:1d:82:99:e5:05:32:07:c0:58:b4:
39:63:7f:f6:21:4d:9c:bf:13:54:64:bb:55:d6:4f:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CB:C3:02:8B:8A:08:83:1D:86:86:15:1A:56:B4:33:63:63:84:69
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/AMvDAouKCIMdhoYVGla0M2NjhGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.224.0/21
85.113.90.0/23
85.194.196.0/22
109.205.112.0/21
167.160.5.0/24
185.58.12.0/24
185.58.14.0/24
185.76.32.0/22
185.98.157.0/24
185.181.52.0/22
192.161.6.0/23
Signature Algorithm: sha256WithRSAEncryption
33:9f:d4:a1:0e:ae:ac:4f:50:af:fc:c4:e6:af:5c:60:0a:c3:
eb:6f:57:a9:45:e7:80:53:07:32:5f:a2:c0:aa:cd:29:c0:05:
c7:cf:0c:40:2f:42:16:f3:23:8a:de:24:4d:4f:68:9c:cf:9d:
e7:54:4d:a4:0b:f2:c2:17:41:8f:ef:75:44:07:7a:e9:23:1b:
08:11:8e:2a:07:a2:38:39:11:dd:8f:2b:2a:38:bf:f0:51:0b:
48:68:ea:49:d0:1d:cc:44:ee:59:23:a7:e3:c9:00:7e:99:13:
6e:78:8b:f1:c6:58:f9:e4:7a:cf:36:ca:af:e7:97:8f:b4:ab:
38:1d:19:a9:c0:e3:a6:c4:8c:dc:6d:b4:27:e0:8b:1b:ce:39:
9d:87:24:11:7b:80:65:54:7d:93:0e:43:ba:1a:94:1f:ba:f8:
ac:b3:04:ab:d4:f3:80:e2:ad:c8:5a:1a:5a:e8:84:3e:dc:a0:
eb:9c:24:bf:13:9c:dc:df:34:6e:87:1c:7e:75:c0:60:e8:63:
a2:8b:6b:ae:e7:e8:c0:ee:ca:65:4e:3b:7f:91:f5:d7:05:52:
54:9c:15:76:63:03:aa:ef:22:7c:f0:d0:d4:86:f3:13:8c:29:
78:84:fd:a4:74:6d:c7:9f:07:2b:3d:14:94:dd:46:39:85:3c:
c1:d7:37:ce
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ+LKC6xNlsyEuVdd1l8NL+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjc2MGMwNTc3M2MxNWQ3MzY3NjQ1MDM0NDY2OGZlZmI3
MjM0NDcwHhcNMjYwNzIyMTg0ODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGNiYzMwMjhiOGEwODgzMWQ4Njg2MTUxYTU2YjQzMzYzNjM4NDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VuwlRnotshki0yBldGoEAfXMPrJ
AgtPk+RQOefUzK0IFwdBXLp9v+bTd9VwseaOtcbPjo+rXR4aKtzZYMVOmGllHb7C
5w1J4xUUvKW/Tn/R4vewIs4kfjCywujti239723/hlYZyHY+mvXcVFMZLOconc/J
OTPZfS53C3feUqKix5dubzAwLzRp9yXWgwm/8Cok+RdEwsNF73Y2LSy3o7Lp2poS
r5mJc4DDeKbpnc3bqA8XGbyZFeFXw5QWIddvYDXrW50s6VRv/9qbjdqtSFgjwLeh
/zYhaoSDJuCsc7d44wQ+aB2CmeUFMgfAWLQ5Y3/2IU2cvxNUZLtV1k8xPwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFADLwwKLigiDHYaGFRpWtDNjY4RpMB8GA1UdIwQY
MBaAFOv3YMBXc8Fdc2dkUDRGaP77cjRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYt
NDkwOTg4OTdlZTRhLzEvQU12REFvdUtDSU1kaG9ZVkdsYTBNMk5qaEdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYtNDkwOTg4OTdlZTRh
LzEvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQDJWLgAwQB
VXFaAwQCVcLEAwQDbc1wAwQAp6AFAwQAuToMAwQAuToOAwQCuUwgAwQAuWKdAwQC
ubU0AwQBwKEGMA0GCSqGSIb3DQEBCwUAA4IBAQAzn9ShDq6sT1Cv/MTmr1xgCsPr
b1epReeAUwcyX6LAqs0pwAXHzwxAL0IW8yOK3iRNT2icz53nVE2kC/LCF0GP73VE
B3rpIxsIEY4qB6I4ORHdjysqOL/wUQtIaOpJ0B3MRO5ZI6fjyQB+mRNueIvxxlj5
5HrPNsqv55ePtKs4HRmpwOOmxIzcbbQn4IsbzjmdhyQRe4BlVH2TDkO6GpQfuvis
swSr1POA4q3IWhpa6IQ+3KDrnCS/E5zc3zRuhxx+dcBg6GOii2uu5+jA7splTjt/
kfXXBVJUnBV2YwOq7yJ88NDUhvMTjCl4hP2kdG3HnwcrPRSU3UY5hTzB1zfO
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:27 2026 by rpki-client