Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/VXfQ6NsG8mJQzkrAYILY85OMwDM.roa
File: VXfQ6NsG8mJQzkrAYILY85OMwDM.roa (raw, json)
Hash identifier: hHH+oXv9dUAcJXxcAv3HS+2a0elTC1lXlHvBusz7xaE=
Subject key identifier: 55:77:D0:E8:DB:06:F2:62:50:CE:4A:C0:60:82:D8:F3:93:8C:C0:33
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019FACF5C0196DE36AA8AE4B4BDA89A9DEBA
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/VXfQ6NsG8mJQzkrAYILY85OMwDM.roa
Signing time: Wed 29 Jul 2026 08:20:14 +0000
ROA not before: Wed 29 Jul 2026 08:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42772
IP address blocks: 37.17.0.0/17 maxlen: 17
37.17.6.0/23 maxlen: 23
37.17.8.0/21 maxlen: 21
37.17.16.0/22 maxlen: 22
37.17.20.0/22 maxlen: 22
37.17.24.0/21 maxlen: 21
37.17.32.0/21 maxlen: 21
37.17.40.0/21 maxlen: 21
37.17.48.0/20 maxlen: 20
37.17.64.0/19 maxlen: 19
37.17.96.0/20 maxlen: 20
37.17.112.0/22 maxlen: 22
37.17.117.0/24 maxlen: 24
37.17.118.0/24 maxlen: 24
37.17.119.0/24 maxlen: 24
37.17.120.0/21 maxlen: 21
46.53.128.0/21 maxlen: 21
46.53.128.0/24 maxlen: 24
46.53.129.0/24 maxlen: 24
46.53.130.0/24 maxlen: 24
46.53.131.0/24 maxlen: 24
46.53.132.0/24 maxlen: 24
46.53.133.0/24 maxlen: 24
46.53.134.0/24 maxlen: 24
46.53.135.0/24 maxlen: 24
46.53.136.0/21 maxlen: 21
46.53.136.0/24 maxlen: 24
46.53.137.0/24 maxlen: 24
46.53.138.0/24 maxlen: 24
46.53.139.0/24 maxlen: 24
46.53.140.0/24 maxlen: 24
46.53.141.0/24 maxlen: 24
46.53.142.0/23 maxlen: 23
46.53.142.0/24 maxlen: 24
46.53.143.0/24 maxlen: 24
46.53.144.0/21 maxlen: 21
46.53.144.0/24 maxlen: 24
46.53.145.0/24 maxlen: 24
46.53.146.0/24 maxlen: 24
46.53.147.0/24 maxlen: 24
46.53.148.0/24 maxlen: 24
46.53.149.0/24 maxlen: 24
46.53.150.0/24 maxlen: 24
46.53.151.0/24 maxlen: 24
46.53.152.0/21 maxlen: 21
46.53.160.0/21 maxlen: 21
46.53.163.0/24 maxlen: 24
46.53.164.0/24 maxlen: 24
46.53.165.0/24 maxlen: 24
46.53.167.0/24 maxlen: 24
46.53.168.0/21 maxlen: 21
46.53.173.0/24 maxlen: 24
46.53.174.0/23 maxlen: 23
46.53.176.0/22 maxlen: 22
46.53.180.0/22 maxlen: 22
46.53.184.0/21 maxlen: 21
46.53.184.0/23 maxlen: 23
46.53.186.0/24 maxlen: 24
46.53.189.0/24 maxlen: 24
46.53.190.0/23 maxlen: 23
46.53.192.0/22 maxlen: 22
46.53.192.0/24 maxlen: 24
46.53.193.0/24 maxlen: 24
46.53.194.0/24 maxlen: 24
46.53.195.0/24 maxlen: 24
46.53.197.0/24 maxlen: 24
46.53.198.0/23 maxlen: 23
46.53.200.0/22 maxlen: 22
46.53.204.0/24 maxlen: 24
46.53.205.0/24 maxlen: 24
46.53.206.0/24 maxlen: 24
46.53.207.0/24 maxlen: 24
46.53.208.0/22 maxlen: 22
46.53.208.0/24 maxlen: 24
46.53.209.0/24 maxlen: 24
46.53.210.0/24 maxlen: 24
46.53.211.0/24 maxlen: 24
46.53.212.0/22 maxlen: 22
46.53.216.0/23 maxlen: 23
46.53.216.0/24 maxlen: 24
46.53.217.0/24 maxlen: 24
46.53.218.0/23 maxlen: 23
46.53.218.0/24 maxlen: 24
46.53.219.0/24 maxlen: 24
46.53.220.0/22 maxlen: 22
46.53.220.0/24 maxlen: 24
46.53.221.0/24 maxlen: 24
46.53.222.0/24 maxlen: 24
46.53.223.0/24 maxlen: 24
46.53.224.0/22 maxlen: 22
46.53.228.0/22 maxlen: 22
46.53.232.0/21 maxlen: 21
46.53.240.0/21 maxlen: 21
46.53.240.0/22 maxlen: 22
46.53.248.0/21 maxlen: 21
46.53.248.0/22 maxlen: 22
46.56.129.0/24 maxlen: 24
46.56.130.0/23 maxlen: 23
46.56.132.0/24 maxlen: 24
46.56.133.0/24 maxlen: 24
46.56.134.0/24 maxlen: 24
46.56.135.0/24 maxlen: 24
46.56.136.0/23 maxlen: 23
46.56.138.0/23 maxlen: 23
46.56.140.0/22 maxlen: 22
46.56.144.0/20 maxlen: 20
46.56.160.0/21 maxlen: 21
46.56.168.0/21 maxlen: 21
46.56.176.0/20 maxlen: 20
46.56.176.0/21 maxlen: 21
46.56.184.0/21 maxlen: 21
46.56.192.0/21 maxlen: 21
46.56.200.0/21 maxlen: 21
46.56.208.0/24 maxlen: 24
46.56.209.0/24 maxlen: 24
46.56.210.0/24 maxlen: 24
46.56.211.0/24 maxlen: 24
46.56.212.0/24 maxlen: 24
46.56.213.0/24 maxlen: 24
46.56.214.0/23 maxlen: 23
46.56.214.0/24 maxlen: 24
46.56.216.0/21 maxlen: 21
46.56.224.0/21 maxlen: 21
46.56.232.0/21 maxlen: 21
46.56.240.0/21 maxlen: 21
46.56.248.0/21 maxlen: 21
46.182.48.0/21 maxlen: 21
77.74.32.0/21 maxlen: 21
77.74.34.0/24 maxlen: 24
77.74.35.0/24 maxlen: 24
77.74.36.0/24 maxlen: 24
77.74.37.0/24 maxlen: 24
77.74.38.0/24 maxlen: 24
77.74.39.0/24 maxlen: 24
93.191.96.0/22 maxlen: 22
93.191.100.0/24 maxlen: 24
93.191.101.0/24 maxlen: 24
93.191.102.0/24 maxlen: 24
93.191.103.0/24 maxlen: 24
128.65.0.0/18 maxlen: 18
128.65.0.0/24 maxlen: 24
128.65.1.0/24 maxlen: 24
128.65.2.0/23 maxlen: 23
128.65.4.0/23 maxlen: 23
128.65.6.0/23 maxlen: 23
128.65.8.0/21 maxlen: 21
128.65.16.0/22 maxlen: 22
128.65.20.0/22 maxlen: 22
128.65.24.0/21 maxlen: 21
128.65.24.0/22 maxlen: 22
128.65.28.0/22 maxlen: 22
128.65.32.0/21 maxlen: 21
128.65.40.0/21 maxlen: 21
128.65.48.0/20 maxlen: 20
128.65.56.0/21 maxlen: 21
128.65.56.0/22 maxlen: 22
128.65.60.0/22 maxlen: 22
128.140.240.0/20 maxlen: 20
128.140.240.0/24 maxlen: 24
128.140.244.0/22 maxlen: 22
128.140.248.0/22 maxlen: 22
178.163.128.0/17 maxlen: 17
178.163.128.0/24 maxlen: 24
178.163.129.0/24 maxlen: 24
178.163.130.0/24 maxlen: 24
178.163.131.0/24 maxlen: 24
178.163.132.0/24 maxlen: 24
178.163.133.0/24 maxlen: 24
178.163.134.0/24 maxlen: 24
178.163.135.0/24 maxlen: 24
178.163.136.0/24 maxlen: 24
178.163.138.0/24 maxlen: 24
178.163.140.0/22 maxlen: 22
178.163.144.0/21 maxlen: 21
178.163.152.0/21 maxlen: 21
178.163.160.0/24 maxlen: 24
178.163.161.0/24 maxlen: 24
178.163.162.0/24 maxlen: 24
178.163.163.0/24 maxlen: 24
178.163.164.0/24 maxlen: 24
178.163.165.0/24 maxlen: 24
178.163.168.0/21 maxlen: 21
178.163.176.0/21 maxlen: 21
178.163.184.0/21 maxlen: 21
178.163.192.0/22 maxlen: 22
178.163.196.0/22 maxlen: 22
178.163.200.0/23 maxlen: 23
178.163.202.0/23 maxlen: 23
178.163.204.0/23 maxlen: 23
178.163.206.0/23 maxlen: 23
178.163.208.0/21 maxlen: 21
178.163.216.0/22 maxlen: 22
185.61.104.0/23 maxlen: 23
185.61.105.0/24 maxlen: 24
185.61.106.0/23 maxlen: 23
195.222.64.0/20 maxlen: 20
195.222.64.0/24 maxlen: 24
195.222.66.0/24 maxlen: 24
195.222.67.0/24 maxlen: 24
195.222.68.0/24 maxlen: 24
195.222.70.0/24 maxlen: 24
195.222.71.0/24 maxlen: 24
195.222.72.0/24 maxlen: 24
195.222.73.0/24 maxlen: 24
195.222.79.0/24 maxlen: 24
195.222.80.0/21 maxlen: 21
195.222.80.0/24 maxlen: 24
195.222.81.0/24 maxlen: 24
195.222.82.0/24 maxlen: 24
195.222.88.0/23 maxlen: 23
195.222.90.0/24 maxlen: 24
195.222.91.0/24 maxlen: 24
195.222.92.0/22 maxlen: 22
195.222.92.0/24 maxlen: 24
195.222.95.0/24 maxlen: 24
2a00:1760::/32 maxlen: 32
2a00:1760:8000::/40 maxlen: 40
2a00:1760:8100::/40 maxlen: 40
2a00:1760:c000::/40 maxlen: 40
2a00:1760:c100::/40 maxlen: 40
2a00:1760:c200::/40 maxlen: 40
2a00:1760:c300::/40 maxlen: 40
2a00:1761::/32 maxlen: 32
2a00:1761:a000::/35 maxlen: 35
2a00:1761:a000::/40 maxlen: 40
2a00:1761:a100::/40 maxlen: 40
2a00:1761:a200::/40 maxlen: 40
2a00:1761:a300::/40 maxlen: 40
2a00:1762::/32 maxlen: 32
2a00:1762:8000::/40 maxlen: 40
2a00:1762:8100::/40 maxlen: 40
2a00:1763::/32 maxlen: 32
2a00:1763:8000::/40 maxlen: 40
2a00:1763:8100::/40 maxlen: 40
2a00:1765::/32 maxlen: 32
2a00:1765:8000::/40 maxlen: 40
2a00:1765:8100::/40 maxlen: 40
2a03:3000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:f5:c0:19:6d:e3:6a:a8:ae:4b:4b:da:89:a9:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jul 29 08:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5577d0e8db06f26250ce4ac06082d8f3938cc033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:b3:e8:46:ad:e1:5e:04:b5:ee:e0:42:80:
d3:e0:61:dd:89:7e:32:03:29:f9:8e:a9:a8:63:35:
5b:f6:45:ae:d4:bc:dd:72:2d:03:c2:9f:32:3c:78:
3c:c7:bb:d1:4b:13:32:c0:fb:bb:ce:3e:2d:ee:fd:
32:a6:0f:9e:c3:5d:a9:3f:02:eb:2d:96:cf:d9:ea:
7f:ec:1f:24:7a:ea:81:cd:e0:98:c4:9b:e8:a0:7b:
58:4d:df:77:bb:31:29:82:2e:dd:c3:eb:95:01:a7:
45:77:22:07:18:4f:ea:ad:e1:bf:68:53:02:9b:77:
5a:34:60:57:a0:ad:7b:1a:a1:a6:94:a9:8a:1e:2f:
b9:3e:ed:03:7e:f6:19:e3:d3:f6:0f:25:60:71:51:
c7:b5:48:01:98:ba:03:1a:ee:9d:70:4d:7b:b8:41:
17:42:90:5e:e9:b9:59:b4:29:4b:72:78:89:1c:9d:
58:2a:47:42:8c:7a:f7:12:27:09:c8:e0:fe:40:ad:
9b:09:43:10:90:b6:ed:95:f1:28:83:cd:7b:dd:93:
e7:0c:7d:4e:e1:dc:f5:da:af:2f:4b:25:bb:96:04:
15:9e:1d:e2:5a:ac:60:50:85:87:24:30:c2:99:d1:
38:6d:a8:80:f8:72:38:f7:3d:5c:b8:48:b2:42:65:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:77:D0:E8:DB:06:F2:62:50:CE:4A:C0:60:82:D8:F3:93:8C:C0:33
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/VXfQ6NsG8mJQzkrAYILY85OMwDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.0.0/17
46.53.128.0-46.53.195.255
46.53.197.0-46.53.255.255
46.56.129.0-46.56.255.255
46.182.48.0/21
77.74.32.0/21
93.191.96.0/21
128.65.0.0/18
128.140.240.0/20
178.163.128.0/17
185.61.104.0/22
195.222.64.0/19
IPv6:
2a00:1760::/30
2a00:1765::/32
2a03:3000::/32
Signature Algorithm: sha256WithRSAEncryption
94:51:e7:f1:21:f4:d5:96:06:74:f9:5c:f7:d5:5f:a8:2d:93:
fd:fc:be:7f:cf:0c:fd:a4:ea:9f:00:dc:70:23:26:6e:9a:7b:
fd:83:28:23:de:7f:0c:3e:86:bc:b9:05:b7:fd:ff:e6:80:aa:
0a:c9:c2:2d:9d:85:eb:87:e1:e9:89:cd:9d:e3:b4:46:46:8a:
29:9c:0c:1f:d3:a6:1f:e7:45:24:04:b1:8f:be:60:c3:04:d6:
72:b9:b0:13:9a:54:80:2b:92:48:62:c7:73:5c:bb:87:d9:76:
10:3a:14:13:ba:e5:6a:79:7b:20:46:a8:48:29:b5:3e:78:09:
11:bd:6c:8a:27:d2:09:ed:d9:a5:55:d1:cc:ff:f9:f1:66:f8:
14:d0:e5:46:03:c7:e4:1f:21:d2:92:1f:0a:00:8b:c2:41:28:
c0:bc:4f:4b:27:2f:8e:31:8b:d3:b4:9f:e8:cf:e3:34:c8:db:
1a:8c:8d:37:93:c1:62:5d:0f:f7:5e:cd:ab:7f:e0:a9:76:4b:
5c:9d:8a:14:7c:be:f4:e1:52:0d:0c:90:54:69:49:67:11:c4:
88:26:90:9e:bb:79:70:66:f9:e2:2f:d4:bd:43:eb:1b:b2:93:
ad:e5:7e:3f:4f:11:26:a0:ce:19:df:d0:79:bb:c8:dc:38:8d:
04:a4:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:06:49 2026 by rpki-client