Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/t5uw45Hhtzxj2GLToAWcTHImtcg.roa
File: t5uw45Hhtzxj2GLToAWcTHImtcg.roa (raw, json)
Hash identifier: fqD4dYIocF+gCJ4U31lpisnaUUMjXKt9o0wyGOryKek=
Subject key identifier: B7:9B:B0:E3:91:E1:B7:3C:63:D8:62:D3:A0:05:9C:4C:72:26:B5:C8
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 019F94900533725DAF5B168EF7F1AC482CCB
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/t5uw45Hhtzxj2GLToAWcTHImtcg.roa
Signing time: Fri 24 Jul 2026 14:38:14 +0000
ROA not before: Fri 24 Jul 2026 14:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42739
IP address blocks: 37.139.144.0/24 maxlen: 24
37.139.145.0/24 maxlen: 24
37.139.146.0/24 maxlen: 24
37.139.147.0/24 maxlen: 24
37.139.148.0/24 maxlen: 24
37.139.149.0/24 maxlen: 24
37.139.150.0/24 maxlen: 24
37.139.151.0/24 maxlen: 24
77.242.224.0/20 maxlen: 20
77.242.229.0/24 maxlen: 24
77.242.230.0/24 maxlen: 24
77.242.231.0/24 maxlen: 24
77.242.233.0/24 maxlen: 24
77.242.234.0/24 maxlen: 24
77.242.235.0/24 maxlen: 24
78.159.64.0/20 maxlen: 20
78.159.78.0/23 maxlen: 23
78.159.83.0/24 maxlen: 24
92.55.192.0/18 maxlen: 18
92.55.192.0/25 maxlen: 25
92.55.193.0/25 maxlen: 25
92.55.193.192/29 maxlen: 29
92.55.193.200/29 maxlen: 29
92.55.193.224/29 maxlen: 29
92.55.193.240/28 maxlen: 28
92.55.196.0/24 maxlen: 24
92.55.197.0/24 maxlen: 24
92.55.202.0/23 maxlen: 23
92.55.220.0/24 maxlen: 24
92.55.221.0/24 maxlen: 24
92.55.222.0/24 maxlen: 24
92.55.223.0/24 maxlen: 24
92.55.225.0/24 maxlen: 24
92.55.226.0/24 maxlen: 24
92.55.228.0/22 maxlen: 22
92.55.236.0/22 maxlen: 22
92.55.240.0/23 maxlen: 23
92.55.250.0/24 maxlen: 24
92.55.251.0/24 maxlen: 24
185.46.92.0/22 maxlen: 22
188.112.0.0/18 maxlen: 18
188.112.4.0/24 maxlen: 24
188.112.5.0/24 maxlen: 24
188.112.10.0/24 maxlen: 24
188.112.11.0/24 maxlen: 24
188.112.12.0/24 maxlen: 24
188.112.13.0/24 maxlen: 24
188.112.14.0/24 maxlen: 24
188.112.19.0/24 maxlen: 24
188.112.20.0/24 maxlen: 24
188.112.24.0/23 maxlen: 23
188.112.26.0/24 maxlen: 24
188.112.27.0/24 maxlen: 24
188.112.28.0/24 maxlen: 24
188.112.36.0/24 maxlen: 24
188.112.37.0/24 maxlen: 24
188.112.38.0/24 maxlen: 24
188.112.39.0/24 maxlen: 24
188.112.42.0/24 maxlen: 24
188.112.43.0/24 maxlen: 24
188.112.48.0/24 maxlen: 24
188.112.52.0/24 maxlen: 24
188.112.55.0/24 maxlen: 24
188.112.56.0/24 maxlen: 24
188.112.57.0/24 maxlen: 24
188.112.58.0/23 maxlen: 23
188.112.60.0/24 maxlen: 24
188.112.61.0/24 maxlen: 24
188.112.62.0/27 maxlen: 27
188.112.62.64/29 maxlen: 29
188.112.62.88/29 maxlen: 29
188.112.62.112/28 maxlen: 28
188.112.63.0/25 maxlen: 25
188.112.63.128/26 maxlen: 26
188.112.63.192/26 maxlen: 26
2a02:7f0::/32 maxlen: 32
2a02:7f0::/40 maxlen: 40
2a02:7f0:10::/48 maxlen: 48
2a02:7f0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:90:05:33:72:5d:af:5b:16:8e:f7:f1:ac:48:2c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jul 24 14:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b79bb0e391e1b73c63d862d3a0059c4c7226b5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:dc:e1:df:1c:2b:a5:a7:85:13:f9:2a:d2:
14:86:9c:d0:a2:93:87:14:fa:15:ea:7c:62:01:85:
d4:65:95:be:c5:ad:ce:d6:7a:02:95:6f:ff:ca:9d:
6d:4c:20:ed:eb:dd:73:0e:75:68:39:aa:84:ea:71:
83:fe:57:c9:dd:b2:99:1a:d2:57:5b:1e:98:da:f5:
fb:50:d0:fd:57:17:1d:a4:03:af:ac:2d:88:40:90:
39:56:3c:bc:ec:d4:7a:62:35:f8:fd:4e:e0:fd:3e:
74:bd:5b:76:54:7a:9a:f4:54:5f:2e:c2:aa:2e:8b:
bf:f7:31:1d:28:2e:ac:dd:e6:27:eb:69:cc:5d:73:
ea:f0:f7:d1:5a:f9:68:79:ab:43:37:8e:3c:9b:48:
52:c8:88:0a:64:0b:0f:02:b8:26:49:d6:a1:76:b9:
4a:a7:5d:69:50:f0:62:79:76:9d:f7:dc:2a:32:9f:
cf:66:e6:16:0b:58:de:70:e8:2f:60:33:ea:54:52:
42:34:1e:fe:75:75:d7:af:ae:54:2f:d5:3d:35:a8:
2d:2d:cd:26:82:b5:9e:22:05:6c:16:1e:ee:42:24:
95:a5:3e:26:23:24:90:bb:df:aa:23:03:67:5c:ca:
90:e6:0f:89:05:db:f7:d9:01:f6:3f:82:92:b7:6d:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:B0:E3:91:E1:B7:3C:63:D8:62:D3:A0:05:9C:4C:72:26:B5:C8
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/t5uw45Hhtzxj2GLToAWcTHImtcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.144.0/21
77.242.224.0/20
78.159.64.0/20
78.159.83.0/24
92.55.192.0/18
185.46.92.0/22
188.112.0.0/18
IPv6:
2a02:7f0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:be:f3:34:b3:fd:38:28:93:29:68:2f:15:0c:63:0d:27:02:
6f:00:62:c1:38:37:75:b6:d0:17:5c:70:ec:33:7d:86:07:66:
d4:f0:fa:8c:7b:3c:de:8f:94:c2:5c:ca:b5:d8:e5:c2:4f:d2:
96:8c:a8:09:69:49:59:05:9a:1c:95:cb:85:4c:a1:1e:e2:aa:
64:09:f9:3b:9b:31:1b:d5:79:ea:de:a3:01:ba:eb:46:c3:e9:
29:65:60:7f:4a:68:9a:6f:8d:73:fc:36:a5:11:17:19:47:8c:
09:09:16:61:7f:1a:6e:08:b0:ff:d4:d2:ab:fc:e4:4b:a6:cb:
ce:84:78:a4:d8:de:cb:2b:89:a6:f7:c7:77:4f:50:9e:cd:fc:
45:c9:12:8d:a9:d4:db:44:a3:9e:89:93:34:69:ab:cd:5f:cf:
2a:38:1e:2a:6b:06:de:9d:07:ae:c1:69:cb:0d:bf:fe:67:94:
75:28:2d:76:f3:18:cb:2e:77:67:a1:ec:c6:1d:fe:1b:f6:a3:
6b:c3:8d:57:87:36:42:84:23:e8:a7:b5:ca:8f:ab:f0:f2:ad:
12:7c:d1:c0:39:fe:7f:78:b5:7a:4b:db:32:eb:c7:17:b1:77:
73:c1:66:cd:0f:f4:a1:70:94:94:c2:1a:8f:32:c9:e5:f8:40:
8f:99:91:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:48 2026 by rpki-client