Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/19x4kb04Y7lkLKvWJFOKELqw1Xg.roa
File: 19x4kb04Y7lkLKvWJFOKELqw1Xg.roa (raw, json)
Hash identifier: Vy1XCfN6ZIucvkieeZycIXSoBeKFfbKJvllTGh4DEl8=
Subject key identifier: D7:DC:78:91:BD:38:63:B9:64:2C:AB:D6:24:53:8A:10:BA:B0:D5:78
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 01A0D7D23C12FB7F2F1319932FC9D126713E
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/19x4kb04Y7lkLKvWJFOKELqw1Xg.roa
Signing time: Fri 25 Sep 2026 09:07:54 +0000
ROA not before: Fri 25 Sep 2026 09:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200651
IP address blocks: 37.156.68.0/24 maxlen: 24
37.228.128.0/24 maxlen: 24
37.228.129.0/24 maxlen: 24
85.193.77.0/24 maxlen: 24
94.198.190.0/24 maxlen: 24
95.133.164.0/24 maxlen: 24
95.133.166.0/23 maxlen: 23
185.10.68.0/24 maxlen: 24
185.100.84.0/23 maxlen: 23
185.100.84.0/24 maxlen: 24
185.100.85.0/24 maxlen: 24
185.100.86.0/24 maxlen: 24
185.100.87.0/24 maxlen: 24
185.146.232.0/24 maxlen: 24
185.146.233.0/24 maxlen: 24
185.146.234.0/24 maxlen: 24
185.165.168.0/24 maxlen: 24
185.165.169.0/24 maxlen: 24
185.165.170.0/24 maxlen: 24
185.165.171.0/24 maxlen: 24
185.219.128.0/24 maxlen: 24
185.246.188.0/24 maxlen: 24
185.246.189.0/24 maxlen: 24
185.246.190.0/24 maxlen: 24
185.246.191.0/24 maxlen: 24
185.247.224.0/24 maxlen: 24
185.247.224.78/32 maxlen: 32
185.247.225.0/24 maxlen: 24
185.247.226.0/24 maxlen: 24
188.240.231.0/24 maxlen: 24
188.241.54.0/24 maxlen: 24
213.218.160.0/24 maxlen: 24
213.218.161.0/24 maxlen: 24
2a06:1700::/48 maxlen: 48
2a06:1700:1::/48 maxlen: 48
2a06:1700:2::/48 maxlen: 48
2a06:1700:3::/48 maxlen: 48
2a06:1700:4::/48 maxlen: 48
2a06:1700:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:d2:3c:12:fb:7f:2f:13:19:93:2f:c9:d1:26:71:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Sep 25 09:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7dc7891bd3863b9642cabd624538a10bab0d578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:ee:ff:df:43:71:7a:1d:7f:98:64:c9:fd:
54:6a:91:da:a2:c0:11:ad:76:24:4e:6b:b6:37:23:
a0:5a:ce:b1:20:ed:88:c5:2e:a5:aa:a8:58:49:a9:
53:62:95:32:1d:01:b2:e4:30:8f:d6:29:23:77:be:
57:0a:41:ba:b2:89:61:18:5b:52:09:87:f5:91:7c:
47:50:8e:f1:0f:2f:e2:39:fa:6b:bf:40:e6:1d:b5:
2f:2f:51:b6:5e:50:96:82:b1:53:70:0f:db:9a:be:
98:51:c3:37:02:af:93:8c:42:b7:f4:20:a8:c3:28:
e3:4c:b2:43:bc:c7:ed:80:08:7c:69:3a:ef:ea:f9:
75:1c:5f:99:6c:da:8c:97:f9:48:d0:9d:73:02:22:
49:a1:86:3e:ba:53:80:32:d1:1a:a5:89:28:f4:04:
2f:a6:6d:70:ad:cc:21:81:54:5a:e7:00:cc:8d:e7:
7d:f6:53:3c:fa:b8:60:e3:37:62:3d:e9:c2:5b:27:
72:a3:38:bb:4e:d8:83:c9:ad:df:4a:f3:e8:0b:17:
10:61:de:bd:25:fe:7f:97:20:c3:2f:f1:4c:82:a9:
37:29:e2:27:da:61:95:fd:79:6f:13:74:a0:45:2c:
94:0f:51:bd:02:a4:85:89:4f:12:7e:5a:78:14:4e:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:78:91:BD:38:63:B9:64:2C:AB:D6:24:53:8A:10:BA:B0:D5:78
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/19x4kb04Y7lkLKvWJFOKELqw1Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.68.0/24
37.228.128.0/23
85.193.77.0/24
94.198.190.0/24
95.133.164.0/24
95.133.166.0/23
185.10.68.0/24
185.100.84.0/22
185.146.232.0-185.146.234.255
185.165.168.0/22
185.219.128.0/24
185.246.188.0/22
185.247.224.0-185.247.226.255
188.240.231.0/24
188.241.54.0/24
213.218.160.0/23
IPv6:
2a06:1700::-2a06:1700:4:ffff:ffff:ffff:ffff:ffff
2a06:1700:100::/48
Signature Algorithm: sha256WithRSAEncryption
c1:31:24:b2:2c:2f:ca:a5:75:1b:de:be:93:11:87:92:c4:8e:
40:fb:0c:1f:13:8b:55:2a:3d:2e:a6:66:a3:fc:a6:b7:a1:36:
4e:93:23:39:62:a8:dd:8f:5b:d9:24:5b:1d:9e:47:94:2d:99:
0b:7e:71:cb:b8:af:56:43:36:3f:7c:8b:c6:b7:8d:07:32:2b:
5e:f0:74:9f:fe:52:b8:dd:e1:d0:94:02:33:53:dd:ab:b8:e4:
51:bb:75:69:95:2d:14:67:07:60:36:86:ca:01:d6:33:c1:de:
36:13:c9:f8:2b:2d:3d:ee:a8:b4:75:2e:6b:71:4e:13:33:d6:
9d:84:1b:70:2b:0b:2c:14:73:2a:f9:2e:24:7b:95:a2:82:a2:
97:dc:87:e9:10:9a:ee:03:d5:61:cd:a5:ec:20:88:62:0f:bf:
77:47:62:97:0a:17:17:d0:ba:aa:9b:59:53:da:2a:fe:48:55:
3b:a3:86:27:79:74:f0:35:9f:c3:66:57:e8:80:92:5a:f3:e9:
94:31:8c:84:c7:b0:42:a7:ed:96:4b:2f:ad:76:8a:82:36:ab:
6b:a7:ed:d9:0f:15:24:00:97:71:eb:7e:58:29:11:35:ad:09:
aa:bb:21:1e:c3:a7:5c:65:14:22:8a:4c:1f:8d:02:45:e8:bd:
b0:e0:73:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:57:19 2026 by rpki-client