Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/sl7rtV7gRWnH0rzgCWs0BxwC9uA.roa
File: sl7rtV7gRWnH0rzgCWs0BxwC9uA.roa (raw, json)
Hash identifier: 13ubUUikB/ayAhjAv3tgoeX0xlseT2rnUuFrpyiC5X0=
Subject key identifier: B2:5E:EB:B5:5E:E0:45:69:C7:D2:BC:E0:09:6B:34:07:1C:02:F6:E0
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019F4CED8A9BF408156571715067F4F055A2
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/sl7rtV7gRWnH0rzgCWs0BxwC9uA.roa
Signing time: Fri 10 Jul 2026 16:47:43 +0000
ROA not before: Fri 10 Jul 2026 16:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44285
IP address blocks: 5.1.43.0/24 maxlen: 24
37.32.32.0/22 maxlen: 24
37.75.243.0/24 maxlen: 24
37.75.244.0/22 maxlen: 22
37.75.244.0/24 maxlen: 24
37.75.245.0/24 maxlen: 24
37.75.246.0/24 maxlen: 24
37.75.247.0/24 maxlen: 24
45.9.252.0/22 maxlen: 24
45.9.252.0/24 maxlen: 24
45.9.253.0/24 maxlen: 24
45.9.254.0/24 maxlen: 24
45.87.4.0/23 maxlen: 24
45.140.224.0/22 maxlen: 22
45.156.180.0/22 maxlen: 24
45.156.192.0/22 maxlen: 24
46.28.72.0/21 maxlen: 24
46.28.72.0/24 maxlen: 24
46.28.73.0/24 maxlen: 24
46.28.74.0/24 maxlen: 24
78.110.120.0/22 maxlen: 24
80.249.114.0/24 maxlen: 24
84.47.224.0/21 maxlen: 21
84.47.224.0/22 maxlen: 22
84.47.224.0/24 maxlen: 24
84.47.225.0/24 maxlen: 24
84.47.226.0/24 maxlen: 24
84.47.227.0/24 maxlen: 24
84.47.228.0/22 maxlen: 22
84.47.228.0/24 maxlen: 24
84.47.229.0/24 maxlen: 24
84.47.230.0/23 maxlen: 24
84.47.231.0/24 maxlen: 24
85.198.24.0/22 maxlen: 24
85.198.48.0/20 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.121.128.0/22 maxlen: 24
185.121.128.0/24 maxlen: 24
185.121.129.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.182.248.0/22 maxlen: 22
185.182.248.0/23 maxlen: 23
185.182.250.0/23 maxlen: 23
185.182.250.0/24 maxlen: 24
185.182.251.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
195.110.38.0/23 maxlen: 23
195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
217.172.120.0/21 maxlen: 24
217.172.124.0/23 maxlen: 23
217.172.126.0/23 maxlen: 23
217.172.127.0/24 maxlen: 24
2a02:828::/29 maxlen: 29
2a02:828::/32 maxlen: 32
2a02:828::/48 maxlen: 48
2a02:828::/64 maxlen: 64
2a02:828:1::/48 maxlen: 48
2a02:829::/32 maxlen: 32
2a02:82a::/32 maxlen: 32
2a02:82b::/32 maxlen: 32
2a02:82c::/32 maxlen: 32
2a02:82d::/32 maxlen: 32
2a02:82e::/32 maxlen: 32
2a02:82f::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:ed:8a:9b:f4:08:15:65:71:71:50:67:f4:f0:55:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jul 10 16:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b25eebb55ee04569c7d2bce0096b34071c02f6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:89:33:32:e3:59:1a:be:f7:02:29:09:b5:
89:87:ab:b7:c2:12:52:15:0a:12:40:9f:a1:6f:f5:
44:33:d5:bd:f6:31:8c:32:34:19:a8:e6:25:f6:2f:
47:b0:e4:71:3c:1e:d8:18:f6:23:52:06:ed:35:fb:
c7:4d:f7:fa:03:17:88:ff:64:7f:78:8c:f7:9d:30:
c0:48:10:46:fb:54:df:fa:c1:1d:08:db:a3:52:5e:
4e:a1:e6:f7:97:cf:aa:a2:b0:14:00:a3:56:b7:82:
0f:2d:e5:58:5d:f2:eb:4f:0c:bc:ae:5b:42:9c:3f:
4e:2f:97:89:5d:8d:f2:bf:d8:1f:b7:20:7e:4e:90:
a1:d4:89:05:61:1a:2c:0e:e5:8e:d3:65:54:ee:df:
db:db:ef:95:fc:5e:fc:8d:4c:26:e3:31:47:a0:5a:
d9:46:21:41:ab:5b:4d:cb:de:22:1a:05:15:82:e1:
dd:8a:7f:d9:50:cf:bf:83:99:b3:97:0e:2d:10:4b:
6b:79:fd:f1:47:c4:dd:1d:cf:bc:09:d9:8f:e7:59:
1b:58:4a:7f:d3:75:ca:43:cb:9e:f5:c1:23:9f:29:
63:e9:27:7c:a6:09:71:0b:04:96:23:4b:f1:a7:3d:
74:ba:58:d1:73:89:8f:44:62:a3:87:1b:43:d6:7f:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:EB:B5:5E:E0:45:69:C7:D2:BC:E0:09:6B:34:07:1C:02:F6:E0
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/sl7rtV7gRWnH0rzgCWs0BxwC9uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.43.0/24
37.32.32.0/22
37.75.243.0-37.75.247.255
45.9.252.0/22
45.87.4.0/23
45.140.224.0/22
45.156.180.0/22
45.156.192.0/22
46.28.72.0/21
78.110.120.0/22
80.249.114.0/24
84.47.224.0/21
85.198.24.0/22
85.198.48.0/20
88.135.37.0-88.135.39.255
91.236.168.0/23
185.18.212.0/22
185.51.200.0/22
185.121.128.0/22
185.128.136.0/22
185.141.132.0/22
185.182.248.0/22
188.209.152.0/23
195.110.38.0/23
217.172.120.0/21
IPv6:
2a02:828::/29
Signature Algorithm: sha256WithRSAEncryption
3e:ef:fd:e6:2e:a0:07:a2:62:3f:3d:bd:b3:18:8a:81:b2:7c:
01:3e:c1:8c:9b:b1:d7:1a:ba:d2:7e:e9:96:73:47:8b:2f:80:
cb:35:3b:9b:8c:59:5d:fb:7f:1c:86:be:db:ec:8a:11:56:79:
0b:77:80:5d:48:d3:a9:e3:84:c4:53:b2:49:d0:01:71:6e:92:
48:d6:98:92:83:4e:90:dc:6d:7b:31:c8:d5:fd:83:1d:65:65:
9a:f9:ec:70:db:de:07:0b:14:de:40:99:0b:38:92:75:26:49:
5c:bc:1b:06:92:bc:73:39:f0:37:dd:d0:0c:c3:93:5a:63:02:
3d:34:99:02:7f:07:38:d2:1d:f4:a1:59:a5:2d:9c:e6:aa:0e:
5a:c1:95:39:89:5c:f8:3b:3a:01:87:ec:4c:29:0e:ed:59:6f:
92:c0:65:31:08:b9:ab:46:1a:39:34:5b:12:f6:e4:98:2b:6b:
c9:45:bf:9d:e5:98:1c:1d:56:a5:88:d9:80:61:14:f4:c5:9c:
12:f8:d8:cb:d0:30:0a:6a:f2:65:ad:20:29:6b:bd:b6:57:92:
62:27:47:b6:97:c7:0e:0e:1e:21:c7:08:4c:c4:48:1c:f3:90:
d2:b5:cf:a2:6b:65:40:e2:ce:fe:8d:00:a5:06:41:96:18:7c:
1b:4f:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:14 2026 by rpki-client