Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Np3y97bRGHawIoBYon1tG6JN7UY.roa
File: Np3y97bRGHawIoBYon1tG6JN7UY.roa (raw, json)
Hash identifier: AVu1fuZB0FeI2fgcGRNDz4YETFrZ3mIFsSGRagOti0s=
Subject key identifier: 36:9D:F2:F7:B6:D1:18:76:B0:22:80:58:A2:7D:6D:1B:A2:4D:ED:46
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019C77ECCC308DFE72F0E79CC34E715DE3A8
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Np3y97bRGHawIoBYon1tG6JN7UY.roa
Signing time: Thu 19 Feb 2026 22:02:13 +0000
ROA not before: Thu 19 Feb 2026 22:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
45.133.247.0/24 maxlen: 24
85.209.3.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.138.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.200.188.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/22 maxlen: 22
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.196.0/22 maxlen: 22
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
2a0a:9307::/32 maxlen: 32
2a0d:2dc0::/32 maxlen: 32
2a0d:2dc1::/32 maxlen: 32
2a0d:2dc2::/32 maxlen: 32
2a0d:2dc3::/32 maxlen: 32
2a0e:d603::/32 maxlen: 32
2a0f:7b82::/32 maxlen: 32
2a0f:7b83::/32 maxlen: 32
2a0f:7b84::/32 maxlen: 32
2a0f:7b85::/32 maxlen: 32
2a0f:7b86::/32 maxlen: 32
2a0f:7b87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:ec:cc:30:8d:fe:72:f0:e7:9c:c3:4e:71:5d:e3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Feb 19 22:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=369df2f7b6d11876b0228058a27d6d1ba24ded46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fe:bb:04:b5:8c:6c:fc:67:7d:1c:92:dc:e8:
6d:37:8a:19:e6:da:70:ce:79:51:53:63:d0:c2:6f:
bf:74:28:c5:60:0e:0a:2c:bc:87:83:a0:1d:55:08:
fd:66:44:5f:f4:36:40:03:c9:90:9b:4c:07:8d:4e:
f5:a9:48:8a:04:64:70:25:05:7a:24:26:de:96:e0:
18:39:68:82:84:08:6d:bc:b8:b0:3c:03:4f:fd:2e:
68:67:39:06:e3:8f:3a:60:88:7c:2b:54:e0:7e:a2:
b1:b2:44:6c:d5:aa:54:df:36:d3:aa:9a:3b:e5:87:
de:68:ba:7d:ab:2b:24:ff:2f:ca:1b:79:51:06:ab:
44:24:1e:79:da:b4:7d:22:3e:dd:c8:60:57:dc:98:
63:52:df:ee:ab:9b:23:79:fa:d7:1d:68:3e:12:ee:
55:7c:cb:41:58:d0:9b:fa:93:f2:a2:44:83:7e:ac:
f5:73:f4:9d:96:95:5b:59:01:45:08:a7:95:d0:29:
94:d0:b8:48:7c:12:ac:c4:0a:3e:4a:94:b0:fa:5f:
c7:d0:c7:55:4c:c8:23:28:11:f4:77:6f:37:19:da:
2e:f5:6d:aa:db:b2:2f:e9:3c:8d:b9:d1:c2:d7:06:
30:70:5d:4b:20:6f:37:9e:09:7a:a5:ad:be:99:88:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9D:F2:F7:B6:D1:18:76:B0:22:80:58:A2:7D:6D:1B:A2:4D:ED:46
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Np3y97bRGHawIoBYon1tG6JN7UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
45.133.247.0/24
85.209.3.0/24
91.217.80.0/24
94.142.138.0-94.142.142.255
185.5.248.0/22
185.105.116.0/23
185.125.216.0/22
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.196.0/22
194.67.202.0-194.67.223.255
195.47.250.0/24
IPv6:
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9302:1::/48
2a0a:9307::/32
2a0d:2dc0::/30
2a0e:d603::/32
2a0f:7b82::-2a0f:7b87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:76:e4:6e:c2:b6:7e:87:85:d3:b2:b8:b2:f0:95:3b:b5:90:
9e:b5:76:1f:bb:a1:14:64:1c:e3:e6:5f:f0:37:8a:94:15:0e:
88:17:ca:e7:30:0f:12:06:0f:69:48:09:37:3b:54:40:55:88:
b8:85:ee:fe:df:b0:2c:7d:ec:b6:2f:ff:2e:4a:ed:c2:0f:3a:
12:ff:6c:b7:48:c8:8e:cb:67:a9:1c:9d:0f:36:33:2f:0c:25:
7c:96:88:18:fa:28:f2:cd:38:86:32:5a:dc:4f:72:ca:1d:75:
5c:e1:d2:bb:00:35:8f:22:1e:ea:02:d8:04:bd:b1:66:36:77:
9a:25:96:a9:3c:db:31:3c:a9:76:42:96:be:e6:64:bf:26:00:
ee:72:c8:2b:ef:39:66:83:f8:4d:9a:ab:2c:f9:84:ab:1d:44:
3a:fa:b1:3d:6c:50:a6:53:6a:d2:8b:bd:d3:32:6d:3c:39:48:
55:57:37:a9:c9:17:bd:80:af:25:b6:0c:06:4b:dc:a2:ca:3a:
c2:96:6a:ca:43:91:ac:c8:b0:89:df:42:27:33:b0:e2:a6:f3:
a0:ed:c2:62:6f:c1:02:8e:bb:f1:a7:83:b0:24:df:16:19:92:
54:df:a9:db:b8:bb:3d:50:98:19:ae:f7:6a:df:a3:28:9b:41:
98:7f:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:33 2026 by rpki-client