Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/12VrHFXwaw2Ns5zEn5WgEqmxGdI.roa
File: 12VrHFXwaw2Ns5zEn5WgEqmxGdI.roa (raw, json)
Hash identifier: 7TlSZ71dkSJQnGqHXDK1wFlvFHPaH/kJlSU72oOTi+U=
Subject key identifier: D7:65:6B:1C:55:F0:6B:0D:8D:B3:9C:C4:9F:95:A0:12:A9:B1:19:D2
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 019EFDDCEBBB45CEC9C5A57297EE84D95650
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/12VrHFXwaw2Ns5zEn5WgEqmxGdI.roa
Signing time: Thu 25 Jun 2026 08:19:34 +0000
ROA not before: Thu 25 Jun 2026 08:19:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 37.123.208.0/24 maxlen: 24
37.123.210.0/24 maxlen: 24
45.133.250.0/24 maxlen: 24
109.202.96.0/24 maxlen: 24
109.202.97.0/24 maxlen: 24
109.202.98.0/24 maxlen: 24
109.202.99.0/24 maxlen: 24
109.202.100.0/24 maxlen: 24
109.202.101.0/24 maxlen: 24
109.202.102.0/24 maxlen: 24
109.202.103.0/24 maxlen: 24
109.202.104.0/24 maxlen: 24
109.202.106.0/24 maxlen: 24
109.202.107.0/24 maxlen: 24
109.202.108.0/24 maxlen: 24
109.202.109.0/24 maxlen: 24
109.202.111.0/24 maxlen: 24
109.232.224.0/24 maxlen: 24
109.232.225.0/24 maxlen: 24
109.232.226.0/24 maxlen: 24
109.232.227.0/24 maxlen: 24
109.232.228.0/24 maxlen: 24
109.232.229.0/24 maxlen: 24
109.232.230.0/24 maxlen: 24
109.232.231.0/24 maxlen: 24
134.19.176.0/24 maxlen: 24
134.19.177.0/24 maxlen: 24
134.19.178.0/24 maxlen: 24
134.19.179.0/24 maxlen: 24
134.19.180.0/24 maxlen: 24
134.19.181.0/24 maxlen: 24
134.19.182.0/24 maxlen: 24
134.19.183.0/24 maxlen: 24
134.19.184.0/24 maxlen: 24
134.19.185.0/24 maxlen: 24
134.19.186.0/24 maxlen: 24
134.19.187.0/24 maxlen: 24
134.19.188.0/24 maxlen: 24
134.19.189.0/24 maxlen: 24
134.19.190.0/23 maxlen: 23
185.23.213.0/24 maxlen: 24
185.23.214.0/24 maxlen: 24
185.23.215.0/24 maxlen: 24
188.95.48.0/24 maxlen: 24
188.95.49.0/24 maxlen: 24
188.95.50.0/24 maxlen: 24
188.95.51.0/24 maxlen: 24
188.95.52.0/24 maxlen: 24
188.95.53.0/24 maxlen: 24
188.95.54.0/24 maxlen: 24
188.95.55.0/24 maxlen: 24
213.152.160.0/24 maxlen: 24
213.152.161.0/24 maxlen: 24
213.152.162.0/24 maxlen: 24
213.152.163.0/24 maxlen: 24
213.152.164.0/24 maxlen: 24
213.152.165.0/24 maxlen: 24
213.152.166.0/24 maxlen: 24
213.152.167.0/24 maxlen: 24
213.152.168.0/24 maxlen: 24
213.152.169.0/24 maxlen: 24
213.152.170.0/24 maxlen: 24
213.152.171.0/24 maxlen: 24
213.152.172.0/24 maxlen: 24
213.152.173.0/24 maxlen: 24
213.152.174.0/24 maxlen: 24
213.152.176.0/24 maxlen: 24
213.152.177.0/24 maxlen: 24
213.152.178.0/24 maxlen: 24
213.152.179.0/24 maxlen: 24
213.152.180.0/24 maxlen: 24
213.152.181.0/24 maxlen: 24
213.152.182.0/24 maxlen: 24
213.152.183.0/24 maxlen: 24
213.152.184.0/24 maxlen: 24
213.152.185.0/24 maxlen: 24
213.152.186.0/24 maxlen: 24
213.152.187.0/24 maxlen: 24
213.152.188.0/22 maxlen: 22
213.152.188.0/24 maxlen: 24
213.152.189.0/24 maxlen: 24
213.152.190.0/24 maxlen: 24
2a00:1678:127::/48 maxlen: 48
2a00:1678:a2b::/48 maxlen: 48
2a00:1678:b17::/48 maxlen: 48
2a00:1678:be1::/48 maxlen: 48
2a00:1678:be2::/48 maxlen: 48
2a00:1678:1122::/48 maxlen: 48
2a00:1678:1194::/48 maxlen: 48
2a00:1678:1337::/48 maxlen: 48
2a00:1678:2470::/48 maxlen: 48
2a00:1678:3cc0::/48 maxlen: 48
2a00:1678:5524::/48 maxlen: 48
2a00:1678:5afe::/48 maxlen: 48
2a00:1678:9000::/44 maxlen: 48
2a00:1678:b00b::/48 maxlen: 48
2a00:1678:baba::/48 maxlen: 48
2a00:1678:da7a::/48 maxlen: 48
2a00:1678:dea1::/48 maxlen: 48
2a00:1678:efa5::/48 maxlen: 48
2a00:1678:f113::/48 maxlen: 48
2a00:1678:fa11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:dc:eb:bb:45:ce:c9:c5:a5:72:97:ee:84:d9:56:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Jun 25 08:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7656b1c55f06b0d8db39cc49f95a012a9b119d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:ee:5a:b6:39:04:4f:a6:f1:f5:9e:d2:6c:
a9:4a:44:40:bb:0e:54:67:e7:6d:24:d7:77:d9:2d:
88:1f:8f:d2:40:79:f7:78:4b:45:b6:f0:59:49:79:
4c:b0:34:89:03:d2:5c:36:29:5b:e0:ed:12:30:e4:
88:53:9f:69:77:06:37:97:9c:d9:0b:f8:91:7e:f6:
31:52:cb:45:72:53:75:d3:6e:db:14:d1:e9:67:30:
cf:15:9b:aa:bb:1b:d5:5e:33:eb:ae:c5:07:de:35:
08:78:0e:84:d0:c3:55:0e:6b:87:06:21:f0:74:1c:
36:48:08:d5:b4:ea:ea:78:69:16:46:70:f3:fe:8f:
5c:01:7c:3c:b8:c0:e3:cd:5e:91:59:f7:e3:98:21:
f1:fb:45:fe:09:d1:2f:41:d1:2e:1d:b1:97:b7:79:
02:10:39:fe:90:f6:b9:e5:63:cf:a3:71:09:25:6b:
ab:47:de:23:b4:a5:f0:26:b5:dc:90:a9:a8:b2:3c:
5d:4f:f3:78:db:65:45:b1:22:7d:14:6f:bc:3f:7c:
02:96:57:04:9e:2d:39:d8:4f:f9:5c:df:00:6b:bf:
9f:cb:de:d7:c5:15:5c:47:ee:2e:2e:08:13:ef:48:
19:13:7c:0b:85:2d:3f:25:d1:f1:07:8a:6c:02:d4:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:6B:1C:55:F0:6B:0D:8D:B3:9C:C4:9F:95:A0:12:A9:B1:19:D2
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/12VrHFXwaw2Ns5zEn5WgEqmxGdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/24
37.123.210.0/24
45.133.250.0/24
109.202.96.0-109.202.104.255
109.202.106.0-109.202.109.255
109.202.111.0/24
109.232.224.0/21
134.19.176.0/20
185.23.213.0-185.23.215.255
188.95.48.0/21
213.152.160.0-213.152.174.255
213.152.176.0/20
IPv6:
2a00:1678:127::/48
2a00:1678:a2b::/48
2a00:1678:b17::/48
2a00:1678:be1::-2a00:1678:be2:ffff:ffff:ffff:ffff:ffff
2a00:1678:1122::/48
2a00:1678:1194::/48
2a00:1678:1337::/48
2a00:1678:2470::/48
2a00:1678:3cc0::/48
2a00:1678:5524::/48
2a00:1678:5afe::/48
2a00:1678:9000::/44
2a00:1678:b00b::/48
2a00:1678:baba::/48
2a00:1678:da7a::/48
2a00:1678:dea1::/48
2a00:1678:efa5::/48
2a00:1678:f113::/48
2a00:1678:fa11::/48
Signature Algorithm: sha256WithRSAEncryption
2b:e1:00:29:23:18:39:2e:d8:27:11:0e:d6:17:7b:10:6a:47:
aa:36:db:4f:e3:cf:6e:06:f7:2a:ca:2a:5a:c3:ca:da:fd:82:
14:b6:a6:7c:a4:46:3a:95:06:0e:a3:43:ea:f1:65:6f:19:41:
aa:bb:c7:20:95:f6:9b:bb:66:3f:ae:14:9d:7e:b5:40:cc:25:
7d:a5:f8:0d:7c:fa:10:5c:3d:e5:95:81:25:8f:bb:17:fc:5b:
62:9d:3d:aa:ec:5c:af:f8:b6:6f:40:a1:0f:cc:39:3a:88:4f:
76:48:65:7b:83:5d:f1:28:70:92:60:b4:85:24:c9:b7:0a:14:
99:83:61:7c:94:53:66:49:ed:e7:32:47:5e:b7:03:a2:b3:2b:
9a:26:c1:de:67:59:9a:bb:d5:79:aa:23:0b:8d:ec:06:c5:4e:
d2:d4:dd:b5:03:89:37:0a:e0:69:f0:77:86:8c:02:d1:a0:b2:
6b:8b:7c:46:b4:e2:cf:25:f6:fc:4c:3a:53:55:73:66:ac:8a:
6b:1c:56:11:10:47:6c:8f:8a:b1:42:f1:bb:c4:e6:1b:9c:95:
8f:6c:51:b1:db:17:a9:e7:c0:0e:b1:3c:0d:a4:95:6c:da:7c:
7e:d2:bc:c6:5e:47:26:ad:e1:d7:29:1b:96:66:4b:98:6a:71:
04:54:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:22 2026 by rpki-client