Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/0Czent4jORG4wzt6Ktd8Kikv7Uk.roa
File: 0Czent4jORG4wzt6Ktd8Kikv7Uk.roa (raw, json)
Hash identifier: BvPOV5QaKF2bFyZNfq3sXDqvOeFpCeyaCs2yPuBxw7Q=
Subject key identifier: D0:2C:DE:9E:DE:23:39:11:B8:C3:3B:7A:2A:D7:7C:2A:29:2F:ED:49
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019ED7126965B8AA5D43968F02843D77C7B0
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/0Czent4jORG4wzt6Ktd8Kikv7Uk.roa
Signing time: Wed 17 Jun 2026 19:32:48 +0000
ROA not before: Wed 17 Jun 2026 19:32:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.91.239.0/24 maxlen: 24
80.242.53.0/24 maxlen: 24
84.252.71.0/24 maxlen: 24
130.193.26.0/24 maxlen: 24
146.19.87.0/24 maxlen: 24
146.19.129.0/24 maxlen: 24
186.243.129.0/24 maxlen: 24
186.243.130.0/24 maxlen: 24
186.243.131.0/24 maxlen: 24
186.243.132.0/24 maxlen: 24
186.243.133.0/24 maxlen: 24
186.243.134.0/24 maxlen: 24
186.243.135.0/24 maxlen: 24
186.243.136.0/24 maxlen: 24
186.243.137.0/24 maxlen: 24
186.243.138.0/24 maxlen: 24
186.243.139.0/24 maxlen: 24
186.243.140.0/24 maxlen: 24
186.243.143.0/24 maxlen: 24
186.243.146.0/24 maxlen: 24
186.243.148.0/24 maxlen: 24
186.243.152.0/24 maxlen: 24
186.243.153.0/24 maxlen: 24
186.243.154.0/24 maxlen: 24
186.243.156.0/24 maxlen: 24
186.243.157.0/24 maxlen: 24
186.243.158.0/24 maxlen: 24
186.243.159.0/24 maxlen: 24
186.243.160.0/24 maxlen: 24
186.243.161.0/24 maxlen: 24
186.243.162.0/24 maxlen: 24
186.243.163.0/24 maxlen: 24
186.243.164.0/24 maxlen: 24
186.243.165.0/24 maxlen: 24
186.243.166.0/24 maxlen: 24
186.243.167.0/24 maxlen: 24
186.243.168.0/24 maxlen: 24
186.243.169.0/24 maxlen: 24
186.243.170.0/24 maxlen: 24
186.243.171.0/24 maxlen: 24
186.243.172.0/24 maxlen: 24
186.243.173.0/24 maxlen: 24
186.243.174.0/24 maxlen: 24
186.243.175.0/24 maxlen: 24
186.243.176.0/24 maxlen: 24
186.243.177.0/24 maxlen: 24
186.243.178.0/24 maxlen: 24
186.243.179.0/24 maxlen: 24
186.243.180.0/24 maxlen: 24
186.243.181.0/24 maxlen: 24
186.243.182.0/24 maxlen: 24
186.243.183.0/24 maxlen: 24
186.243.184.0/24 maxlen: 24
186.243.187.0/24 maxlen: 24
186.243.188.0/24 maxlen: 24
186.243.190.0/24 maxlen: 24
186.243.193.0/24 maxlen: 24
186.243.195.0/24 maxlen: 24
186.243.196.0/24 maxlen: 24
186.243.197.0/24 maxlen: 24
186.243.199.0/24 maxlen: 24
186.243.200.0/24 maxlen: 24
186.243.201.0/24 maxlen: 24
186.243.202.0/24 maxlen: 24
186.243.203.0/24 maxlen: 24
186.243.204.0/24 maxlen: 24
186.243.205.0/24 maxlen: 24
186.243.206.0/24 maxlen: 24
186.243.207.0/24 maxlen: 24
186.243.208.0/24 maxlen: 24
186.243.209.0/24 maxlen: 24
186.243.210.0/24 maxlen: 24
186.243.211.0/24 maxlen: 24
186.243.212.0/24 maxlen: 24
186.243.213.0/24 maxlen: 24
186.243.214.0/24 maxlen: 24
186.243.215.0/24 maxlen: 24
186.243.216.0/24 maxlen: 24
186.243.217.0/24 maxlen: 24
186.243.218.0/24 maxlen: 24
186.243.219.0/24 maxlen: 24
186.243.220.0/24 maxlen: 24
186.243.221.0/24 maxlen: 24
186.243.222.0/24 maxlen: 24
186.243.223.0/24 maxlen: 24
186.243.224.0/24 maxlen: 24
186.243.225.0/24 maxlen: 24
186.243.226.0/24 maxlen: 24
186.243.227.0/24 maxlen: 24
186.243.229.0/24 maxlen: 24
186.243.230.0/24 maxlen: 24
186.243.231.0/24 maxlen: 24
186.243.232.0/24 maxlen: 24
186.243.236.0/24 maxlen: 24
186.243.238.0/24 maxlen: 24
186.243.241.0/24 maxlen: 24
186.243.243.0/24 maxlen: 24
186.243.244.0/24 maxlen: 24
186.243.245.0/24 maxlen: 24
186.243.246.0/24 maxlen: 24
186.243.247.0/24 maxlen: 24
186.243.248.0/24 maxlen: 24
186.243.249.0/24 maxlen: 24
186.243.250.0/24 maxlen: 24
186.243.251.0/24 maxlen: 24
186.243.252.0/24 maxlen: 24
186.243.253.0/24 maxlen: 24
186.246.58.0/24 maxlen: 24
186.246.59.0/24 maxlen: 24
186.246.61.0/24 maxlen: 24
186.246.62.0/24 maxlen: 24
186.246.63.0/24 maxlen: 24
186.246.64.0/24 maxlen: 24
186.246.65.0/24 maxlen: 24
186.246.66.0/24 maxlen: 24
186.246.67.0/24 maxlen: 24
186.246.68.0/24 maxlen: 24
186.246.69.0/24 maxlen: 24
186.246.70.0/24 maxlen: 24
186.246.71.0/24 maxlen: 24
186.246.72.0/24 maxlen: 24
186.246.73.0/24 maxlen: 24
186.246.74.0/24 maxlen: 24
186.246.75.0/24 maxlen: 24
186.246.76.0/24 maxlen: 24
186.246.77.0/24 maxlen: 24
186.246.78.0/24 maxlen: 24
186.246.79.0/24 maxlen: 24
186.246.81.0/24 maxlen: 24
186.246.82.0/24 maxlen: 24
186.246.83.0/24 maxlen: 24
186.246.84.0/24 maxlen: 24
186.246.85.0/24 maxlen: 24
186.246.86.0/24 maxlen: 24
186.246.87.0/24 maxlen: 24
186.246.88.0/24 maxlen: 24
186.246.89.0/24 maxlen: 24
186.246.90.0/24 maxlen: 24
186.246.91.0/24 maxlen: 24
186.246.92.0/24 maxlen: 24
186.246.93.0/24 maxlen: 24
186.246.94.0/24 maxlen: 24
186.246.95.0/24 maxlen: 24
186.246.96.0/24 maxlen: 24
186.246.97.0/24 maxlen: 24
186.246.98.0/24 maxlen: 24
186.246.99.0/24 maxlen: 24
186.246.101.0/24 maxlen: 24
186.246.102.0/24 maxlen: 24
186.246.105.0/24 maxlen: 24
186.246.106.0/24 maxlen: 24
186.246.107.0/24 maxlen: 24
186.246.108.0/24 maxlen: 24
186.246.109.0/24 maxlen: 24
186.246.110.0/24 maxlen: 24
186.246.111.0/24 maxlen: 24
186.246.112.0/24 maxlen: 24
186.246.113.0/24 maxlen: 24
186.246.114.0/24 maxlen: 24
186.246.115.0/24 maxlen: 24
186.246.116.0/24 maxlen: 24
186.246.117.0/24 maxlen: 24
186.246.118.0/24 maxlen: 24
186.246.119.0/24 maxlen: 24
186.246.120.0/24 maxlen: 24
186.246.121.0/24 maxlen: 24
186.246.122.0/24 maxlen: 24
186.246.126.0/24 maxlen: 24
193.176.20.0/24 maxlen: 24
193.176.22.0/24 maxlen: 24
193.201.9.0/24 maxlen: 24
194.105.158.0/24 maxlen: 24
194.105.159.0/24 maxlen: 24
194.156.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d7:12:69:65:b8:aa:5d:43:96:8f:02:84:3d:77:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 17 19:32:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d02cde9ede233911b8c33b7a2ad77c2a292fed49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:88:31:a1:53:c1:6c:ec:47:8f:0d:1c:f5:
bb:f4:9a:5c:0d:8e:f2:45:40:42:7f:16:84:66:36:
d2:4b:8d:28:65:9f:d6:bc:b3:c6:57:b0:f3:03:1f:
02:82:2a:78:94:de:bc:f0:50:88:74:2e:51:11:ee:
52:66:dc:2c:e2:5c:b7:6e:b8:75:3b:8f:f4:35:92:
c9:11:51:98:b5:fc:1c:c3:2b:f4:08:82:12:34:48:
28:e3:d2:9e:ed:8e:be:01:c5:43:50:8e:6e:98:83:
38:8a:00:1a:9e:fc:fa:da:23:97:a6:d4:e1:00:5a:
d6:82:03:9b:77:a5:75:13:bb:b5:47:bc:c1:7f:f8:
d0:b4:a7:77:fe:71:40:ae:63:6c:b5:c0:89:24:e2:
bd:2e:04:61:d4:7b:29:de:5b:9a:63:de:32:01:96:
64:26:af:d0:6c:9e:eb:c1:a6:82:90:7f:22:95:eb:
4a:6d:4f:5e:e1:b0:9c:19:a2:99:6b:ef:d0:5c:fb:
1f:46:2f:ee:83:40:67:fc:ee:74:d9:89:21:53:a1:
b8:8e:fc:bb:f6:2a:a8:b1:c2:78:a9:cc:f8:ad:fd:
4a:f7:18:15:63:1f:fb:7f:16:ea:61:e0:c4:5a:77:
2e:c6:30:78:9e:f4:2e:3b:7c:d5:a4:4b:96:1d:ae:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:DE:9E:DE:23:39:11:B8:C3:3B:7A:2A:D7:7C:2A:29:2F:ED:49
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/0Czent4jORG4wzt6Ktd8Kikv7Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.239.0/24
80.242.53.0/24
84.252.71.0/24
130.193.26.0/24
146.19.87.0/24
146.19.129.0/24
186.243.129.0-186.243.140.255
186.243.143.0/24
186.243.146.0/24
186.243.148.0/24
186.243.152.0-186.243.154.255
186.243.156.0-186.243.184.255
186.243.187.0-186.243.188.255
186.243.190.0/24
186.243.193.0/24
186.243.195.0-186.243.197.255
186.243.199.0-186.243.227.255
186.243.229.0-186.243.232.255
186.243.236.0/24
186.243.238.0/24
186.243.241.0/24
186.243.243.0-186.243.253.255
186.246.58.0/23
186.246.61.0-186.246.79.255
186.246.81.0-186.246.99.255
186.246.101.0-186.246.102.255
186.246.105.0-186.246.122.255
186.246.126.0/24
193.176.20.0/24
193.176.22.0/24
193.201.9.0/24
194.105.158.0/23
194.156.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9c:e3:dc:5b:b2:98:fd:b4:88:35:4f:de:57:26:ef:a3:28:
c4:e8:00:53:ea:e6:b4:cb:97:b9:fd:ae:e1:3c:34:41:a9:b9:
51:92:5f:7f:d5:fb:9a:30:ea:8d:9a:24:34:9c:a9:80:e1:6f:
a0:b5:f0:c2:f0:4a:6d:a2:90:66:69:9c:9c:5a:18:d7:df:15:
21:f3:b6:ca:24:34:3c:b3:07:ae:b1:66:a0:58:ab:2d:ad:36:
b9:66:9d:e4:54:7e:f4:17:03:77:33:e5:27:51:88:d3:69:79:
11:74:f5:8c:c9:0c:92:95:14:7c:9f:5c:36:65:1f:2c:a6:3e:
d9:a7:d1:c5:5d:e4:11:57:c5:e6:4a:62:99:28:12:1e:f2:87:
cb:6f:ba:44:30:8f:05:9e:b5:94:3e:fa:ee:db:0b:e4:24:d7:
81:d8:24:1a:11:3c:4f:fe:8b:fa:7b:da:f7:f2:22:32:80:70:
24:81:1e:80:a5:02:f3:ec:da:27:37:6a:71:44:5b:57:d1:c3:
e7:cd:68:7c:3b:81:dd:62:52:ef:69:9b:fb:cc:ac:f4:95:70:
71:53:cd:3f:b9:66:67:0c:62:85:3f:15:35:2f:fb:f4:10:b2:
e8:36:e3:ed:18:51:d3:ff:ab:75:85:b7:79:b9:0e:df:47:a0:
46:12:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:22 2026 by rpki-client