Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Ym_r5R7AgsPIh7eaekC6oldM6_k.roa
File: Ym_r5R7AgsPIh7eaekC6oldM6_k.roa (raw, json)
Hash identifier: MQ13sclCLXk6CekwcrbM2XLxGacYKR6i5DDlylJjh8w=
Subject key identifier: 62:6F:EB:E5:1E:C0:82:C3:C8:87:B7:9A:7A:40:BA:A2:57:4C:EB:F9
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 019F14CEF8C6043B730439E625C90C7BB835
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Ym_r5R7AgsPIh7eaekC6oldM6_k.roa
Signing time: Mon 29 Jun 2026 19:15:36 +0000
ROA not before: Mon 29 Jun 2026 19:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16347
IP address blocks: 5.44.160.0/21 maxlen: 24
5.182.252.0/22 maxlen: 24
37.18.160.0/20 maxlen: 24
37.58.128.0/17 maxlen: 24
37.157.8.0/23 maxlen: 24
37.157.10.0/24 maxlen: 24
37.157.12.0/22 maxlen: 24
37.157.60.0/22 maxlen: 24
45.142.172.0/22 maxlen: 24
45.145.124.0/22 maxlen: 24
46.20.160.0/20 maxlen: 24
62.102.224.0/19 maxlen: 24
62.244.70.0/23 maxlen: 24
62.244.72.0/22 maxlen: 24
62.244.80.0/23 maxlen: 24
62.244.90.0/23 maxlen: 24
62.244.92.0/23 maxlen: 24
79.98.96.0/21 maxlen: 24
81.22.216.0/21 maxlen: 24
89.38.200.0/21 maxlen: 24
91.103.232.0/21 maxlen: 24
91.205.156.0/24 maxlen: 24
91.206.156.0/23 maxlen: 24
91.217.94.0/23 maxlen: 24
91.229.230.0/23 maxlen: 24
92.61.72.0/21 maxlen: 24
93.113.136.0/21 maxlen: 24
94.127.8.0/21 maxlen: 24
103.73.172.0/22 maxlen: 24
103.77.32.0/22 maxlen: 24
103.229.36.0/23 maxlen: 24
103.232.172.0/22 maxlen: 24
109.69.192.0/21 maxlen: 24
109.237.240.0/20 maxlen: 24
128.127.128.0/20 maxlen: 24
146.247.88.0/21 maxlen: 24
149.255.136.0/21 maxlen: 24
178.249.160.0/21 maxlen: 24
185.15.128.0/22 maxlen: 24
185.42.132.0/22 maxlen: 24
185.49.120.0/23 maxlen: 24
185.49.122.0/24 maxlen: 24
185.65.224.0/22 maxlen: 24
185.67.88.0/22 maxlen: 24
185.79.148.0/22 maxlen: 24
185.90.96.0/22 maxlen: 24
185.95.120.0/22 maxlen: 24
185.105.68.0/22 maxlen: 24
185.138.104.0/22 maxlen: 24
185.149.8.0/22 maxlen: 24
185.172.16.0/22 maxlen: 24
185.196.248.0/22 maxlen: 24
185.204.140.0/22 maxlen: 24
185.208.248.0/22 maxlen: 24
185.247.248.0/22 maxlen: 24
188.66.56.0/22 maxlen: 24
193.3.24.0/24 maxlen: 24
193.27.194.0/23 maxlen: 24
193.41.95.0/24 maxlen: 24
193.47.139.0/24 maxlen: 24
193.84.100.0/24 maxlen: 24
193.108.197.0/24 maxlen: 24
193.169.64.0/23 maxlen: 24
193.222.142.0/23 maxlen: 24
193.222.188.0/23 maxlen: 24
194.177.32.0/19 maxlen: 24
195.114.114.0/23 maxlen: 24
195.214.240.0/21 maxlen: 24
212.51.160.0/19 maxlen: 24
213.108.64.0/21 maxlen: 24
213.151.166.0/24 maxlen: 24
213.151.168.0/23 maxlen: 24
213.151.171.0/24 maxlen: 24
213.151.172.0/23 maxlen: 24
213.151.174.0/24 maxlen: 24
213.151.175.0/24 maxlen: 24
2a00:bc80::/32 maxlen: 32
2a01:6d8::/32 maxlen: 32
2a01:728::/29 maxlen: 48
2a03:4c00::/29 maxlen: 48
2a03:bf40::/32 maxlen: 32
2a05:df00::/29 maxlen: 29
2a0d:4240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:ce:f8:c6:04:3b:73:04:39:e6:25:c9:0c:7b:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jun 29 19:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=626febe51ec082c3c887b79a7a40baa2574cebf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:c5:e9:06:f8:55:0c:7d:4e:c5:56:20:32:
b3:1f:43:2a:b6:7a:d4:cb:7b:66:7b:6c:51:88:de:
1c:f7:e3:40:8c:07:92:8c:a6:ac:de:1c:c1:b4:a8:
33:1f:dd:f7:3f:02:25:2a:ac:7c:f7:e7:e9:8d:03:
2d:5c:da:d3:77:d0:76:51:91:6b:3a:34:89:a8:20:
90:b9:18:c6:35:97:4d:63:95:4d:9a:a7:a8:5e:dd:
a5:27:e9:4f:01:5c:64:78:94:d6:04:8e:b8:4a:b4:
5e:dc:c5:9e:bf:23:39:ea:55:d2:e9:61:70:84:e4:
67:e2:f0:6b:3a:b8:de:cc:b3:b4:ff:6a:2c:be:ad:
4f:5a:7d:74:58:fd:79:7d:8c:c8:9a:71:54:3f:b0:
3b:6f:ec:35:c6:1d:a7:72:d7:d1:96:fa:c5:b0:7b:
f8:eb:45:76:eb:ad:a2:9c:b9:23:51:e6:95:5a:04:
63:ba:8f:da:ba:a5:39:f9:76:13:96:c6:5f:10:5f:
dc:54:7d:ea:9d:fa:1a:fc:f2:bc:cc:16:3e:b9:84:
39:46:cd:89:c9:ee:5d:2f:16:ff:fe:66:b4:ba:21:
15:99:62:c5:38:97:a2:85:1a:fa:96:da:11:7f:d6:
01:2c:56:d8:d1:2a:bb:09:a8:8c:04:5d:ec:d2:34:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6F:EB:E5:1E:C0:82:C3:C8:87:B7:9A:7A:40:BA:A2:57:4C:EB:F9
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Ym_r5R7AgsPIh7eaekC6oldM6_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.160.0/21
5.182.252.0/22
37.18.160.0/20
37.58.128.0/17
37.157.8.0-37.157.10.255
37.157.12.0/22
37.157.60.0/22
45.142.172.0/22
45.145.124.0/22
46.20.160.0/20
62.102.224.0/19
62.244.70.0-62.244.75.255
62.244.80.0/23
62.244.90.0-62.244.93.255
79.98.96.0/21
81.22.216.0/21
89.38.200.0/21
91.103.232.0/21
91.205.156.0/24
91.206.156.0/23
91.217.94.0/23
91.229.230.0/23
92.61.72.0/21
93.113.136.0/21
94.127.8.0/21
103.73.172.0/22
103.77.32.0/22
103.229.36.0/23
103.232.172.0/22
109.69.192.0/21
109.237.240.0/20
128.127.128.0/20
146.247.88.0/21
149.255.136.0/21
178.249.160.0/21
185.15.128.0/22
185.42.132.0/22
185.49.120.0-185.49.122.255
185.65.224.0/22
185.67.88.0/22
185.79.148.0/22
185.90.96.0/22
185.95.120.0/22
185.105.68.0/22
185.138.104.0/22
185.149.8.0/22
185.172.16.0/22
185.196.248.0/22
185.204.140.0/22
185.208.248.0/22
185.247.248.0/22
188.66.56.0/22
193.3.24.0/24
193.27.194.0/23
193.41.95.0/24
193.47.139.0/24
193.84.100.0/24
193.108.197.0/24
193.169.64.0/23
193.222.142.0/23
193.222.188.0/23
194.177.32.0/19
195.114.114.0/23
195.214.240.0/21
212.51.160.0/19
213.108.64.0/21
213.151.166.0/24
213.151.168.0/23
213.151.171.0-213.151.175.255
IPv6:
2a00:bc80::/32
2a01:6d8::/32
2a01:728::/29
2a03:4c00::/29
2a03:bf40::/32
2a05:df00::/29
2a0d:4240::/29
Signature Algorithm: sha256WithRSAEncryption
46:54:61:da:f3:09:3c:8c:45:e1:3e:e9:f2:ac:a9:bb:3f:12:
7d:54:49:f7:64:42:39:c7:62:85:17:c0:21:ff:aa:96:7b:b4:
8f:11:08:65:21:7e:03:93:39:8a:8e:3c:38:df:6f:8d:28:fe:
0c:89:b6:22:29:84:83:7e:43:38:80:7c:47:30:eb:a5:c2:33:
f7:3b:d6:e8:9e:9b:55:bb:bc:0f:3c:fa:13:7c:41:37:14:76:
61:4a:20:2b:5a:20:6e:c3:a9:27:f5:45:9b:38:68:f2:db:97:
db:c8:31:c1:8f:c4:75:7e:0d:7b:c9:5e:88:bf:24:df:36:f0:
58:59:aa:06:9a:5b:0e:e1:e9:99:25:85:43:3f:e6:2e:85:f1:
ce:22:a2:8d:f0:e1:82:4b:d0:60:0a:4a:b3:51:e2:9a:aa:11:
8a:eb:30:dd:da:e2:e7:bd:d4:50:d0:4c:d8:6b:4a:79:02:ce:
86:ab:5b:12:d3:2d:50:f9:82:3e:f1:4e:f3:25:18:dc:9f:b9:
72:64:af:8d:4a:da:8a:08:1f:f5:f4:42:55:d6:12:1e:f9:11:
c1:ff:36:58:4c:f8:bb:22:9d:57:fa:7e:3f:11:9d:10:a7:bc:
2d:65:11:52:f9:7e:d6:0f:15:88:c8:18:d2:0e:51:9b:cb:fd:
83:c1:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:37 2026 by rpki-client