Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/l39dZZ0P_zEgIWjx5h_nh-V8Wzo.roa
File: l39dZZ0P_zEgIWjx5h_nh-V8Wzo.roa (raw, json)
Hash identifier: M6ukkIyDO7550O9ZOGR/gd5QK+nifak36YjiL0bGzAE=
Subject key identifier: 97:7F:5D:65:9D:0F:FF:31:20:21:68:F1:E6:1F:E7:87:E5:7C:5B:3A
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019FA44C57D486ACB0EEC6C28A575A9F2ADE
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/l39dZZ0P_zEgIWjx5h_nh-V8Wzo.roa
Signing time: Mon 27 Jul 2026 15:58:14 +0000
ROA not before: Mon 27 Jul 2026 15:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 5.181.21.0/24 maxlen: 32
5.181.22.0/24 maxlen: 32
5.181.23.0/24 maxlen: 32
45.14.245.0/24 maxlen: 24
45.14.246.0/24 maxlen: 24
45.14.247.0/24 maxlen: 24
45.89.63.0/24 maxlen: 32
45.140.147.0/24 maxlen: 32
45.140.167.0/24 maxlen: 32
45.144.28.0/24 maxlen: 32
45.144.29.0/24 maxlen: 32
45.144.232.0/24 maxlen: 32
45.144.233.0/24 maxlen: 32
45.144.234.0/24 maxlen: 32
45.144.235.0/24 maxlen: 32
45.155.54.0/24 maxlen: 24
45.155.55.0/24 maxlen: 24
91.211.114.0/24 maxlen: 24
109.107.155.0/24 maxlen: 32
138.124.182.0/24 maxlen: 24
146.19.230.0/24 maxlen: 32
185.33.24.0/24 maxlen: 32
194.39.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4c:57:d4:86:ac:b0:ee:c6:c2:8a:57:5a:9f:2a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 27 15:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=977f5d659d0fff31202168f1e61fe787e57c5b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:eb:bc:b7:2a:40:da:58:1e:e9:66:dd:e4:
8d:78:94:39:27:0f:5a:19:13:57:bf:69:c8:cc:b1:
fb:30:6e:38:ef:fb:f6:bd:74:26:43:5d:68:ba:25:
fb:5a:82:05:3c:f0:9d:50:fa:55:4e:43:75:0c:2c:
17:e3:c5:74:a0:ba:f0:24:65:a7:c7:91:37:d7:a3:
a9:0f:ca:61:bb:70:2a:0e:95:94:17:fc:8c:16:dc:
7e:bb:f4:47:66:ab:87:88:ae:d8:f7:b8:26:27:d4:
d9:51:2d:39:0d:19:52:6e:fd:7b:1d:02:42:e0:09:
34:b4:14:c5:18:fb:63:e9:ef:c8:2c:09:0c:0d:f6:
25:f2:fb:c4:ce:61:72:ac:55:b2:9c:f4:26:6e:a5:
d3:cc:a1:39:9c:e7:c0:30:6d:88:20:f9:7d:5f:fc:
e2:0e:0a:5f:cb:63:e0:9a:76:2c:99:f2:ff:b6:e0:
b3:7f:6c:6f:10:18:50:d6:5c:d2:ff:55:2e:54:41:
44:23:5f:18:3b:09:42:44:ce:48:d9:bf:df:cd:46:
d2:28:94:d9:7a:62:0a:f9:4c:94:67:1b:04:59:d4:
ef:33:8f:18:cc:a9:2e:c1:e0:96:14:a9:f3:c8:73:
70:c3:11:a8:5f:37:fb:a9:4f:13:3e:91:eb:0c:a6:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:5D:65:9D:0F:FF:31:20:21:68:F1:E6:1F:E7:87:E5:7C:5B:3A
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/l39dZZ0P_zEgIWjx5h_nh-V8Wzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.21.0-5.181.23.255
45.14.245.0-45.14.247.255
45.89.63.0/24
45.140.147.0/24
45.140.167.0/24
45.144.28.0/23
45.144.232.0/22
45.155.54.0/23
91.211.114.0/24
109.107.155.0/24
138.124.182.0/24
146.19.230.0/24
185.33.24.0/24
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1e:d2:50:92:42:f2:8f:38:0c:69:06:82:57:8a:4e:00:30:
3c:cf:40:a4:2b:b6:5f:eb:13:ea:de:78:b0:78:df:67:59:f0:
b0:71:ec:87:6d:6c:9a:44:e0:31:5a:0b:e9:47:e1:af:38:37:
26:4b:c5:d3:7a:d1:6b:1c:01:38:3a:d6:47:10:37:cf:af:e9:
69:d1:77:bc:b2:cf:b4:da:65:c1:b8:e9:6d:85:45:53:7f:65:
f3:bb:4c:f8:f8:67:84:65:f2:5f:88:72:84:62:04:33:31:95:
77:1f:da:f7:b8:ec:8a:9c:01:d1:3a:96:7c:f3:c3:49:9e:0c:
d9:90:67:61:7b:da:fa:28:41:6f:94:04:9e:99:66:e7:41:38:
ae:88:18:1a:4a:ba:fd:dc:ba:a1:32:ec:87:15:41:87:51:22:
b5:7e:1e:2f:63:22:6b:fd:63:61:da:a2:be:a6:9e:ed:10:23:
6d:87:67:9c:8b:14:30:98:1f:d6:59:44:74:86:bc:4d:32:44:
da:f7:8c:b2:d8:3e:00:10:58:eb:f0:e6:c4:d2:61:e2:91:a4:
d0:f7:fe:37:94:e9:0e:72:be:a7:9c:3d:a6:79:1e:bb:4c:3f:
e8:92:0d:5c:a1:cc:05:a6:a7:3b:0d:ef:d9:4f:22:0e:62:00:
0e:27:e3:3f
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAZ+kTFfUhqyw7sbCildanyreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwNzI3MTU1ODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzdmNWQ2NTlkMGZmZjMxMjAyMTY4ZjFlNjFmZTc4N2U1N2M1YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeDrvLcqQNpYHulm3eSNeJQ5Jw9a
GRNXv2nIzLH7MG447/v2vXQmQ11ouiX7WoIFPPCdUPpVTkN1DCwX48V0oLrwJGWn
x5E316OpD8phu3AqDpWUF/yMFtx+u/RHZquHiK7Y97gmJ9TZUS05DRlSbv17HQJC
4Ak0tBTFGPtj6e/ILAkMDfYl8vvEzmFyrFWynPQmbqXTzKE5nOfAMG2IIPl9X/zi
Dgpfy2PgmnYsmfL/tuCzf2xvEBhQ1lzS/1UuVEFEI18YOwlCRM5I2b/fzUbSKJTZ
emIK+UyUZxsEWdTvM48YzKkuweCWFKnzyHNwwxGoXzf7qU8TPpHrDKZE1QIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFJd/XWWdD/8xICFo8eYf54flfFs6MB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvbDM5ZFpaMFBfekVnSVdqeDVoX25oLVY4V3pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkMAwDBAAFtRUD
BAMFtRAwDAMEAC0O9QMEAy0O8AMEAC1ZPwMEAC2MkwMEAC2MpwMEAS2QHAMEAi2Q
6AMEAS2bNgMEAFvTcgMEAG1rmwMEAIp8tgMEAJIT5gMEALkhGAMEAMInbjANBgkq
hkiG9w0BAQsFAAOCAQEACx7SUJJC8o84DGkGgleKTgAwPM9ApCu2X+sT6t54sHjf
Z1nwsHHsh21smkTgMVoL6Ufhrzg3JkvF03rRaxwBODrWRxA3z6/padF3vLLPtNpl
wbjpbYVFU39l87tM+PhnhGXyX4hyhGIEMzGVdx/a97jsipwB0TqWfPPDSZ4M2ZBn
YXva+ihBb5QEnplm50E4rogYGkq6/dy6oTLshxVBh1EitX4eL2Mia/1jYdqivqae
7RAjbYdnnIsUMJgf1llEdIa8TTJE2veMstg+ABBY6/DmxNJh4pGk0Pf+N5TpDnK+
p5w9pnkeu0w/6JINXKHMBaanOw3v2U8iDmIADifjPw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:12 2026 by rpki-client