Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/nopQAUQRG4jx5x4s6u3QK-MZsbg.roa
File: nopQAUQRG4jx5x4s6u3QK-MZsbg.roa (raw, json)
Hash identifier: RDH8P9E/bjc7kW3A05V8yS4BKO/L6buzS6KDDdD3BXk=
Subject key identifier: 9E:8A:50:01:44:11:1B:88:F1:E7:1E:2C:EA:ED:D0:2B:E3:19:B1:B8
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019FA789117AF0417654E8633C5E8FF4C27E
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/nopQAUQRG4jx5x4s6u3QK-MZsbg.roa
Signing time: Tue 28 Jul 2026 07:03:25 +0000
ROA not before: Tue 28 Jul 2026 07:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 37.251.0.0/17 maxlen: 17
46.227.232.0/21 maxlen: 21
62.131.0.0/16 maxlen: 16
62.216.0.0/19 maxlen: 19
62.251.0.0/17 maxlen: 17
77.160.0.0/13 maxlen: 13
77.168.0.0/14 maxlen: 14
77.172.0.0/16 maxlen: 16
77.173.0.0/16 maxlen: 16
77.174.0.0/16 maxlen: 16
77.175.0.0/16 maxlen: 16
77.175.0.0/17 maxlen: 17
77.175.128.0/17 maxlen: 17
80.60.0.0/15 maxlen: 15
80.100.0.0/15 maxlen: 15
81.204.0.0/14 maxlen: 14
82.92.0.0/14 maxlen: 15
82.136.192.0/18 maxlen: 18
82.161.0.0/16 maxlen: 16
82.168.0.0/15 maxlen: 15
82.170.0.0/16 maxlen: 16
83.68.0.0/19 maxlen: 19
84.39.0.0/19 maxlen: 19
84.80.0.0/16 maxlen: 16
84.82.0.0/15 maxlen: 15
84.84.0.0/14 maxlen: 14
85.113.224.0/19 maxlen: 19
86.80.0.0/13 maxlen: 13
86.88.0.0/15 maxlen: 15
86.90.0.0/16 maxlen: 16
86.92.0.0/14 maxlen: 14
88.159.0.0/16 maxlen: 16
109.72.32.0/20 maxlen: 20
128.127.32.0/20 maxlen: 20
188.142.0.0/17 maxlen: 17
194.109.0.0/16 maxlen: 16
195.64.64.0/19 maxlen: 19
195.121.0.0/16 maxlen: 16
195.240.0.0/16 maxlen: 16
195.240.0.0/17 maxlen: 17
195.240.128.0/18 maxlen: 18
195.240.192.0/18 maxlen: 18
195.241.0.0/16 maxlen: 16
212.123.128.0/18 maxlen: 18
212.182.128.0/18 maxlen: 18
212.238.0.0/16 maxlen: 16
213.10.0.0/16 maxlen: 16
213.75.0.0/16 maxlen: 16
213.84.0.0/16 maxlen: 16
213.148.224.0/19 maxlen: 19
213.197.0.0/18 maxlen: 18
213.222.0.0/19 maxlen: 19
2a02:a400::/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:89:11:7a:f0:41:76:54:e8:63:3c:5e:8f:f4:c2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jul 28 07:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e8a500144111b88f1e71e2ceaedd02be319b1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:cc:b5:f4:81:92:30:02:96:b3:48:e1:5b:
be:f4:d1:fb:fe:8d:a2:a9:2c:b0:ec:fd:c5:2f:b4:
1b:98:e5:96:a0:72:a9:fd:29:8f:f3:6e:1b:76:45:
1d:0d:08:36:d3:28:75:51:7b:78:6a:66:84:83:ab:
f9:23:40:80:4f:ad:72:fd:f9:08:ac:f0:09:80:8c:
c0:9e:5a:93:3f:9a:3c:9f:5a:3c:c5:4f:ab:6f:ec:
8a:03:f7:1c:3f:f1:c5:2c:c9:54:40:fd:7d:2f:73:
45:22:e4:7c:0f:91:ce:52:ea:a0:7c:de:1a:b6:f4:
25:d1:28:41:c4:86:f9:d0:0a:60:dc:aa:29:f7:f7:
8d:c8:4a:79:0b:92:b7:51:6c:a6:8e:44:41:8a:60:
ad:ef:9d:5c:87:e8:97:62:2a:47:3c:6d:f6:77:6b:
7a:85:13:7d:6f:55:bc:0e:11:9e:38:c9:7c:d4:93:
d8:96:c1:56:ec:21:80:66:0c:ee:de:d8:d4:1d:0f:
dd:f9:fd:f9:0c:12:7f:88:30:9e:36:e4:2e:ba:40:
33:38:c5:29:6b:f6:36:e9:23:77:3a:74:54:68:ce:
09:e5:0f:f6:92:38:00:f8:55:89:67:e0:2c:d1:18:
3a:72:71:35:af:19:3e:0b:41:9f:76:18:90:d4:9a:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8A:50:01:44:11:1B:88:F1:E7:1E:2C:EA:ED:D0:2B:E3:19:B1:B8
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/nopQAUQRG4jx5x4s6u3QK-MZsbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.0.0/17
46.227.232.0/21
62.131.0.0/16
62.216.0.0/19
62.251.0.0/17
77.160.0.0/12
80.60.0.0/15
80.100.0.0/15
81.204.0.0/14
82.92.0.0/14
82.136.192.0/18
82.161.0.0/16
82.168.0.0-82.170.255.255
83.68.0.0/19
84.39.0.0/19
84.80.0.0/16
84.82.0.0-84.87.255.255
85.113.224.0/19
86.80.0.0-86.90.255.255
86.92.0.0/14
88.159.0.0/16
109.72.32.0/20
128.127.32.0/20
188.142.0.0/17
194.109.0.0/16
195.64.64.0/19
195.121.0.0/16
195.240.0.0/15
212.123.128.0/18
212.182.128.0/18
212.238.0.0/16
213.10.0.0/16
213.75.0.0/16
213.84.0.0/16
213.148.224.0/19
213.197.0.0/18
213.222.0.0/19
IPv6:
2a02:a400::/25
Signature Algorithm: sha256WithRSAEncryption
4c:4b:52:11:3a:8c:3b:1a:3f:95:0f:fc:ba:e0:8b:09:70:4c:
6f:2f:fc:78:83:21:ab:ae:84:12:45:00:b4:22:33:0d:9b:69:
b0:a9:84:6d:a6:28:b5:32:60:6f:e3:8e:b4:65:00:55:0b:ad:
43:66:2f:42:e0:21:ca:df:d4:8f:8d:8a:71:1a:bd:c8:ac:c3:
5b:c3:7f:a5:59:3e:be:5d:a8:3b:ba:3c:80:14:6c:ef:79:93:
76:a6:0e:d7:23:b4:b8:72:67:d6:da:30:dd:cf:32:67:fb:69:
fc:0c:dc:01:1f:eb:84:00:9b:eb:84:72:c9:c6:c2:d5:fd:7e:
6a:74:91:b7:1b:74:7f:17:40:d6:2a:07:78:e0:01:d0:e8:26:
cf:a3:c6:42:65:df:a3:f5:c0:d3:9c:1b:d4:6f:1c:6a:af:7c:
f3:e9:ec:fb:f0:ac:6b:5c:c9:1e:20:e9:20:3a:52:b7:39:d1:
81:f3:f8:5c:85:8b:96:44:7c:c9:04:6e:2c:1f:5f:95:0a:10:
bf:10:df:8c:ed:a5:fc:27:a6:f1:06:ba:66:33:7e:b4:78:b2:
70:ae:69:c4:2b:0c:03:e7:79:27:70:06:b0:58:0c:22:94:a2:
df:04:22:a5:67:25:5a:9f:2a:fe:d4:c5:3d:86:50:0b:95:dd:
e0:a9:d4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:59:25 2026 by rpki-client