Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/gM2eMY70O5nbLkbWe5sMSuJu8MA.roa
File: gM2eMY70O5nbLkbWe5sMSuJu8MA.roa (raw, json)
Hash identifier: AQZM117azPrb7p+QgghXDGbAUmyMJMeIyAoEDWS1kI8=
Subject key identifier: 80:CD:9E:31:8E:F4:3B:99:DB:2E:46:D6:7B:9B:0C:4A:E2:6E:F0:C0
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A1A77E0CC5926090AAC4356F01D330B089
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/gM2eMY70O5nbLkbWe5sMSuJu8MA.roa
Signing time: Wed 04 Nov 2026 16:56:58 +0000
ROA not before: Wed 04 Nov 2026 16:56:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 45.8.211.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.133.247.0/24 maxlen: 24
85.209.3.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.138.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.200.188.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/22 maxlen: 22
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.196.0/22 maxlen: 22
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a04:5203::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
2a0a:9303::/32 maxlen: 32
2a0a:9304::/32 maxlen: 32
2a0a:9305::/32 maxlen: 32
2a0a:9306::/32 maxlen: 32
2a0a:9307::/32 maxlen: 32
2a0d:2dc0::/32 maxlen: 32
2a0d:2dc1::/32 maxlen: 32
2a0d:2dc2::/32 maxlen: 32
2a0d:2dc3::/32 maxlen: 32
2a0e:d603::/32 maxlen: 32
2a0f:7b82::/32 maxlen: 32
2a0f:7b83::/32 maxlen: 32
2a0f:7b84::/32 maxlen: 32
2a0f:7b85::/32 maxlen: 32
2a0f:7b86::/32 maxlen: 32
2a0f:7b87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:7e:0c:c5:92:60:90:aa:c4:35:6f:01:d3:30:b0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Nov 4 16:56:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80cd9e318ef43b99db2e46d67b9b0c4ae26ef0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:cf:6d:69:ee:84:9b:f3:ce:a1:cd:1b:94:
18:2d:f5:4d:c0:04:2f:44:87:be:75:c9:fe:5a:50:
fa:8a:bc:a4:f3:7b:26:a4:7f:bd:bc:a5:d0:91:98:
a4:db:f9:70:54:42:9d:75:c9:fc:82:63:4b:c7:a7:
b1:4d:10:62:f9:1e:29:35:62:87:a5:0a:8a:b8:2a:
2f:51:60:da:15:9b:57:dc:70:2f:52:ac:0a:09:94:
a8:f3:81:31:3d:4d:dc:63:77:33:80:12:67:0c:fe:
dd:39:4a:1c:0e:e8:78:85:17:3e:e8:b8:a3:de:28:
91:cd:87:f5:33:74:75:e3:62:e7:35:30:4d:d7:02:
fe:82:4a:15:48:0c:dc:a4:0d:56:d7:eb:15:21:5e:
97:af:39:c5:08:15:a2:f4:5b:ea:86:a4:bd:19:ef:
09:8e:5d:50:ff:39:1a:ac:d2:b7:d3:a5:5c:55:5f:
87:8b:12:79:b8:30:98:ad:0a:93:bf:83:1f:93:8b:
c5:c3:3d:4f:ba:bd:ef:af:3f:d4:14:bc:4a:b3:b1:
74:96:13:ac:86:69:55:cd:cb:16:36:10:6a:f4:92:
a8:f2:44:09:f2:44:b8:19:ee:99:bb:28:24:7b:6d:
da:ff:b0:a7:1d:8f:31:68:ac:a6:7a:bc:b0:72:99:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CD:9E:31:8E:F4:3B:99:DB:2E:46:D6:7B:9B:0C:4A:E2:6E:F0:C0
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/gM2eMY70O5nbLkbWe5sMSuJu8MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.211.0/24
45.89.66.0/23
45.128.176.0/22
45.133.247.0/24
85.209.3.0/24
91.217.80.0/24
94.142.138.0-94.142.142.255
185.5.248.0/22
185.105.116.0/23
185.125.216.0/22
185.200.188.0/24
193.124.176.0/20
193.168.224.0/24
194.67.196.0/22
194.67.202.0-194.67.223.255
195.47.250.0/24
IPv6:
2a04:5203::-2a04:5206:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9302:1::/48
2a0a:9303::-2a0a:9307:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:2dc0::/30
2a0e:d603::/32
2a0f:7b82::-2a0f:7b87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
81:88:cc:df:b2:26:b8:d4:b1:b5:61:3e:2a:bb:a7:1d:c3:aa:
96:ee:80:09:67:09:00:a6:35:75:78:c3:03:db:f6:04:e9:9d:
47:de:d1:96:65:4e:3a:77:1e:dc:de:45:28:e7:37:22:05:08:
be:a7:47:75:3c:be:8b:c3:9c:9c:21:02:96:06:48:fd:91:8b:
97:ee:d7:35:2f:a8:6b:08:ce:d6:34:6e:59:fb:82:b3:50:79:
8d:04:fa:f2:2e:81:fd:4b:c2:c0:b7:eb:e3:db:11:1a:5e:64:
fe:ee:bb:f6:aa:6e:c1:6f:01:64:e0:2e:97:f2:1c:38:d9:74:
bf:de:ef:85:bb:d6:6d:64:41:ee:24:8c:51:33:f1:19:f6:a7:
c9:58:e5:4b:14:22:0a:ad:b3:67:c6:0e:ed:25:aa:a9:48:93:
ea:d5:a3:c5:3b:a8:2e:00:32:c3:39:16:90:22:86:55:d6:b9:
42:47:53:fe:db:fa:57:20:ba:50:47:7e:f2:f3:0c:8c:90:b6:
75:7c:ba:bf:67:7e:3d:10:63:cd:87:58:60:2f:b4:20:bd:f6:
ff:eb:dd:12:28:15:82:7f:3b:7d:67:6c:3a:6d:66:a1:67:1d:
78:fc:df:05:32:ea:0d:9c:6b:12:c0:2d:8c:d3:f7:24:64:87:
bf:42:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 22:12:40 2026 by rpki-client