Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nXZg-q4p3DFha4P_eJ8m39YgqaM.roa
File: nXZg-q4p3DFha4P_eJ8m39YgqaM.roa (raw, json)
Hash identifier: S5mXcxEd4qDZITyi4YTzlebQDWYJbWnMOEnDe1Ymfo4=
Subject key identifier: 9D:76:60:FA:AE:29:DC:31:61:6B:83:FF:78:9F:26:DF:D6:20:A9:A3
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019CA5B1ED89272CFDE4D13CCEE6E5EC8F71
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nXZg-q4p3DFha4P_eJ8m39YgqaM.roa
Signing time: Sat 28 Feb 2026 19:20:27 +0000
ROA not before: Sat 28 Feb 2026 19:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204997
IP address blocks: 45.144.64.0/24 maxlen: 24
45.144.65.0/24 maxlen: 24
45.144.66.0/24 maxlen: 24
45.144.67.0/24 maxlen: 24
46.17.104.0/24 maxlen: 24
91.217.81.0/24 maxlen: 24
139.28.222.0/24 maxlen: 24
139.28.223.0/24 maxlen: 24
147.78.64.0/24 maxlen: 24
147.78.65.0/24 maxlen: 24
147.78.66.0/24 maxlen: 24
147.78.67.0/24 maxlen: 24
185.17.3.0/24 maxlen: 24
185.40.4.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.104.249.0/24 maxlen: 24
185.139.68.0/24 maxlen: 24
185.139.69.0/24 maxlen: 24
185.139.70.0/24 maxlen: 24
185.139.71.0/24 maxlen: 24
185.174.138.0/24 maxlen: 24
185.180.230.0/24 maxlen: 24
185.180.231.0/24 maxlen: 24
185.188.182.0/24 maxlen: 24
185.188.183.0/24 maxlen: 24
185.189.12.0/22 maxlen: 22
185.189.12.0/24 maxlen: 24
185.189.13.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
185.195.24.0/24 maxlen: 24
185.195.25.0/24 maxlen: 24
185.195.26.0/24 maxlen: 24
185.195.27.0/24 maxlen: 24
185.204.0.0/24 maxlen: 24
185.204.2.0/24 maxlen: 24
185.204.3.0/24 maxlen: 24
185.212.148.0/24 maxlen: 24
185.244.172.0/24 maxlen: 24
185.244.173.0/24 maxlen: 24
185.252.146.0/24 maxlen: 24
185.252.147.0/24 maxlen: 24
185.255.132.0/24 maxlen: 24
185.255.133.0/24 maxlen: 24
185.255.134.0/24 maxlen: 24
185.255.135.0/24 maxlen: 24
193.109.78.0/24 maxlen: 24
193.109.79.0/24 maxlen: 24
195.66.114.0/24 maxlen: 24
2a04:5200:fb01::/48 maxlen: 48
2a04:5200:fb02::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5200:fff2::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff4::/48 maxlen: 48
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5200:fff7::/48 maxlen: 48
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a5:b1:ed:89:27:2c:fd:e4:d1:3c:ce:e6:e5:ec:8f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Feb 28 19:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d7660faae29dc31616b83ff789f26dfd620a9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:97:5e:a0:5d:87:39:40:23:bb:13:d8:37:
f6:b3:5b:50:6a:2b:1e:00:db:4f:32:4b:2b:df:74:
ea:57:bd:4b:24:8c:39:51:8e:e8:03:b1:e7:fe:5f:
bd:d4:d8:9f:3d:a5:bc:e5:f0:ed:72:f8:b2:57:44:
35:76:9a:76:90:bd:ec:22:bc:c9:2e:98:d4:31:4d:
1f:44:41:40:ad:ec:02:5a:3e:18:30:ca:78:08:45:
d8:20:90:17:99:19:a4:be:48:ae:24:91:98:fe:e0:
bd:a4:6e:fd:2f:8f:4f:24:48:fb:27:71:32:29:a4:
ff:1b:75:d6:37:73:42:a4:0f:54:02:f4:57:60:83:
86:91:c4:9d:ef:69:aa:69:ef:dc:6e:aa:a7:04:7a:
e6:98:ea:23:a0:a0:3e:ba:f7:6b:b9:25:95:29:c4:
39:fd:fb:26:50:f2:5c:0b:8f:18:cf:d5:33:52:1e:
a3:99:e4:53:11:e3:a0:6d:cc:fb:54:d5:19:ff:a8:
c7:18:d5:af:c0:e8:44:69:13:2b:1e:3f:03:e3:90:
7e:d5:c7:0c:0e:00:56:a7:47:95:15:41:de:f7:46:
09:ba:a1:27:6f:5a:a5:32:83:94:cb:6e:21:8c:a8:
ff:92:12:a7:1b:d5:17:fb:b6:9a:f3:3f:69:15:c0:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:76:60:FA:AE:29:DC:31:61:6B:83:FF:78:9F:26:DF:D6:20:A9:A3
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/nXZg-q4p3DFha4P_eJ8m39YgqaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.64.0/22
46.17.104.0/24
91.217.81.0/24
139.28.222.0/23
147.78.64.0/22
185.17.3.0/24
185.40.4.0/24
185.104.248.0/23
185.139.68.0/22
185.174.138.0/24
185.180.230.0/23
185.188.182.0/23
185.189.12.0/22
185.195.24.0/22
185.204.0.0/24
185.204.2.0/23
185.212.148.0/24
185.244.172.0/23
185.252.146.0/23
185.255.132.0/22
193.109.78.0/23
195.66.114.0/24
IPv6:
2a04:5200:fb01::-2a04:5200:fb02:ffff:ffff:ffff:ffff:ffff
2a04:5200:ff00::/48
2a04:5200:ff10::/48
2a04:5200:fff1::-2a04:5200:fff9:ffff:ffff:ffff:ffff:ffff
2a04:5200:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
9d:27:1a:05:80:97:97:3c:2b:cd:f6:d0:1f:5a:f3:f7:83:e4:
e0:24:26:a0:00:9b:a2:1b:03:73:76:4a:ac:0d:93:0f:1f:51:
3a:fe:fe:ea:6f:c5:31:a2:33:2c:26:38:e2:11:85:38:d1:63:
9d:05:a6:9c:71:63:e7:96:7c:b4:b1:1c:a4:76:80:61:8d:94:
5e:5c:c6:0a:2c:07:d2:05:a6:a1:6d:df:9f:12:37:4e:b8:c5:
0d:bf:7f:39:67:85:7d:1f:f4:31:54:b3:94:78:95:fc:e1:2d:
c6:b3:69:7c:73:fc:13:01:5b:5f:65:37:f4:ee:92:18:be:b1:
70:79:a1:57:bb:5e:2f:d3:9c:9f:c8:21:32:a3:2e:3b:d0:c2:
32:96:1b:9d:22:62:a0:41:89:f3:6c:f2:2f:00:a5:8a:65:78:
9d:3c:62:ec:af:5d:8f:18:20:e4:12:32:23:8e:99:66:75:c1:
03:f9:1a:0d:5b:2f:58:2a:9e:69:36:0e:69:d1:e0:9f:eb:0c:
bc:58:b1:71:44:f2:a7:d1:d1:0d:48:f0:b2:d7:d5:1c:53:8e:
58:ce:2f:01:65:24:e7:0b:1d:8f:cd:a9:85:54:6e:36:61:a7:
56:05:10:e1:74:91:74:26:99:c8:26:2c:02:e9:65:35:37:6a:
69:f6:01:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:44:42 2026 by rpki-client