Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/f_cerM733PAzffZ3Zf5cTv0AkDA.roa
File: f_cerM733PAzffZ3Zf5cTv0AkDA.roa (raw, json)
Hash identifier: Rlu/ttDLjzeFI6hWoUDXOiSv/xiv8HyOJ0iPVTPMuoE=
Subject key identifier: 7F:F7:1E:AC:CE:F7:DC:F0:33:7D:F6:77:65:FE:5C:4E:FD:00:90:30
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01A01A817AF2AB12DA9E17007CF9AA4778F6
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/f_cerM733PAzffZ3Zf5cTv0AkDA.roa
Signing time: Wed 19 Aug 2026 14:51:28 +0000
ROA not before: Wed 19 Aug 2026 14:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3360
IP address blocks: 195.203.156.0/22 maxlen: 22
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:7::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:127::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:197::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:227::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:247::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:271::/48 maxlen: 48
2a03:5000:272::/48 maxlen: 48
2a03:5000:291::/48 maxlen: 48
2a03:5000:292::/48 maxlen: 48
2a03:5000:311::/48 maxlen: 48
2a03:5000:312::/48 maxlen: 48
2a03:5000:421::/48 maxlen: 48
2a03:5000:441::/48 maxlen: 48
2a03:5000:442::/48 maxlen: 48
2a03:5000:857::/48 maxlen: 48
2a03:5000:858::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:81:7a:f2:ab:12:da:9e:17:00:7c:f9:aa:47:78:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Aug 19 14:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ff71eaccef7dcf0337df67765fe5c4efd009030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:73:50:8b:1b:1f:25:3f:93:f0:4b:69:23:
67:fe:27:5f:ab:69:85:0e:76:07:b1:6d:81:d7:09:
11:0a:24:76:8b:fa:2a:9c:92:4d:92:2e:c2:09:9b:
1e:98:46:b9:bf:41:dd:c5:dc:d2:f7:85:5d:43:a2:
6a:af:56:b4:cf:18:52:2d:fb:d0:34:b2:b7:e2:f5:
bb:8c:fa:2c:51:15:5c:cd:44:9e:82:a6:09:bd:31:
d5:d3:8c:1c:54:0f:d5:e3:6e:e6:fc:8f:4e:62:f9:
66:2b:33:18:da:37:3d:83:e8:b3:8b:ca:0d:57:f2:
34:2a:0c:22:17:7a:2a:91:41:d9:40:68:bd:34:f0:
62:ae:14:a5:0c:86:ca:6f:e4:39:49:aa:da:a2:f7:
b7:39:63:58:31:19:75:5f:be:76:4b:f5:65:3b:29:
57:9c:52:f3:03:dd:52:78:31:7b:63:a4:d8:ae:ac:
d0:46:d7:15:7d:00:1f:ea:e4:0d:a5:35:a0:4e:9c:
29:e9:34:20:5d:79:b7:7c:0a:f1:e8:83:89:75:80:
63:1a:8e:a5:4a:5f:66:ca:45:8a:74:85:8f:cc:a6:
4c:21:75:19:b0:54:b4:02:1a:78:f4:99:05:b0:b5:
4b:69:c9:74:2d:f6:af:f6:10:00:b6:c5:72:73:3c:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F7:1E:AC:CE:F7:DC:F0:33:7D:F6:77:65:FE:5C:4E:FD:00:90:30
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/f_cerM733PAzffZ3Zf5cTv0AkDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.203.156.0/22
217.27.4.0/24
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:7::/48
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:127::/48
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:197::/48
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:227::/48
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:247::/48
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff
2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff
2a03:5000:421::/48
2a03:5000:441::-2a03:5000:442:ffff:ffff:ffff:ffff:ffff
2a03:5000:857::-2a03:5000:858:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a2:6e:4c:9d:f8:19:9e:57:27:b9:22:9e:e3:2b:6e:f6:e9:6a:
56:1c:b4:d5:3b:f3:d7:db:18:4a:8c:82:e6:7c:a7:a8:71:c9:
67:51:38:90:3c:3c:a4:a6:c8:64:62:64:17:6a:d5:9b:0a:8f:
2b:c6:44:28:56:83:80:21:66:fc:0e:ab:75:f1:ed:9a:10:d3:
c3:28:b1:d1:a0:b4:b5:60:8d:1e:9a:d5:3a:d2:ea:b2:a3:a3:
04:3c:5f:cf:70:95:c4:9b:38:fb:66:11:f5:fe:b0:cf:91:6a:
de:ea:b9:e1:f5:c3:82:58:65:1f:15:d7:da:13:d8:58:e9:8a:
8f:8e:20:5a:04:96:56:ba:c5:04:55:9e:08:ff:66:75:e8:24:
08:42:23:f9:de:4d:d8:ec:e5:4d:25:eb:d7:2b:2c:c4:53:b9:
e5:d2:86:a4:1a:96:ba:d4:13:c6:ac:8f:dd:42:c7:b8:1b:ac:
ed:49:b7:57:1f:7a:c7:20:9c:13:6a:d4:66:18:a0:83:af:a8:
5f:e7:96:d1:17:82:b5:06:4d:05:ea:1e:04:27:a3:2c:47:c8:
c9:a5:86:92:ab:5d:26:38:76:23:7f:42:29:9a:08:ad:60:ae:
44:4f:c7:dd:62:c3:03:05:b3:13:d4:7f:09:7b:00:18:b4:2a:
77:be:5f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:28:32 2026 by rpki-client