Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/rmOk9DtZ3P5jXCuwLsnwIl-OXgI.roa
File: rmOk9DtZ3P5jXCuwLsnwIl-OXgI.roa (raw, json)
Hash identifier: OB9iHm9g4IT8ZLUGt1Ok064fZz8prLyBuLDLYqYKejk=
Subject key identifier: AE:63:A4:F4:3B:59:DC:FE:63:5C:2B:B0:2E:C9:F0:22:5F:8E:5E:02
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019F935516FDE1444F4526E99225407B46C7
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/rmOk9DtZ3P5jXCuwLsnwIl-OXgI.roa
Signing time: Fri 24 Jul 2026 08:54:14 +0000
ROA not before: Fri 24 Jul 2026 08:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207137
IP address blocks: 185.135.45.0/24 maxlen: 24
186.247.163.0/24 maxlen: 24
186.247.191.0/24 maxlen: 24
187.13.0.0/24 maxlen: 24
187.13.1.0/24 maxlen: 24
187.13.7.0/24 maxlen: 24
187.13.8.0/24 maxlen: 24
187.13.9.0/24 maxlen: 24
187.13.132.0/24 maxlen: 24
187.13.133.0/24 maxlen: 24
187.13.184.0/24 maxlen: 24
187.13.185.0/24 maxlen: 24
187.14.81.0/24 maxlen: 24
187.14.82.0/24 maxlen: 24
187.14.83.0/24 maxlen: 24
187.14.84.0/24 maxlen: 24
187.14.85.0/24 maxlen: 24
187.14.99.0/24 maxlen: 24
187.14.100.0/24 maxlen: 24
187.14.101.0/24 maxlen: 24
187.15.123.0/24 maxlen: 24
187.15.126.0/24 maxlen: 24
187.40.49.0/24 maxlen: 24
187.40.53.0/24 maxlen: 24
187.40.54.0/24 maxlen: 24
187.40.55.0/24 maxlen: 24
187.40.56.0/24 maxlen: 24
187.40.57.0/24 maxlen: 24
187.40.58.0/24 maxlen: 24
187.40.61.0/24 maxlen: 24
187.40.62.0/24 maxlen: 24
187.40.63.0/24 maxlen: 24
2a13:240::/48 maxlen: 48
2a13:240:1::/48 maxlen: 48
2a13:240:2::/48 maxlen: 48
2a13:240:3::/48 maxlen: 48
2a13:240:4::/48 maxlen: 48
2a13:240:5::/48 maxlen: 48
2a13:240:6::/48 maxlen: 48
2a13:240:7::/48 maxlen: 48
2a13:240:8::/48 maxlen: 48
2a13:240:9::/48 maxlen: 48
2a13:240:a::/48 maxlen: 48
2a13:240:b::/48 maxlen: 48
2a13:240:c::/48 maxlen: 48
2a13:240:d::/48 maxlen: 48
2a13:240:e::/48 maxlen: 48
2a13:240:f::/48 maxlen: 48
2a13:240:10::/48 maxlen: 48
2a13:240:1b00::/40 maxlen: 40
2a13:240:1c00::/40 maxlen: 40
2a13:240:2400::/40 maxlen: 40
2a13:240:2600::/40 maxlen: 40
2a13:240:2b00::/40 maxlen: 40
2a13:240:3000::/40 maxlen: 40
2a13:240:3500::/40 maxlen: 40
2a13:240:3700::/40 maxlen: 40
2a13:240:3d00::/40 maxlen: 40
2a13:240:4200::/40 maxlen: 40
2a13:240:4300::/40 maxlen: 40
2a13:240:4400::/40 maxlen: 40
2a13:240:4500::/40 maxlen: 40
2a13:240:4600::/40 maxlen: 40
2a13:240:4700::/40 maxlen: 40
2a13:240:4800::/40 maxlen: 40
2a13:240:4900::/40 maxlen: 40
2a13:240:4a00::/40 maxlen: 40
2a13:240:4b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:55:16:fd:e1:44:4f:45:26:e9:92:25:40:7b:46:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jul 24 08:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae63a4f43b59dcfe635c2bb02ec9f0225f8e5e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:11:3a:68:c9:bd:c8:32:f3:96:b9:de:cc:
b2:e8:e5:2f:a0:72:e8:a0:ab:d4:a0:bb:41:dc:13:
cc:32:e1:28:49:d6:a9:90:0f:3a:d3:0c:c5:d2:2a:
c1:cd:e8:30:87:16:5e:9a:3c:b6:8a:f1:d1:ee:50:
8a:4a:44:7e:3d:86:e2:11:92:80:96:5a:b0:20:46:
94:78:30:3b:18:49:d6:38:3d:68:2d:3e:db:b2:50:
71:1d:97:b6:00:d1:8f:f0:44:92:85:f2:ca:9a:32:
86:95:4d:80:8b:88:08:03:1e:32:d8:99:c1:fa:bd:
e6:d8:93:6f:46:d8:e5:13:67:b3:43:20:75:bb:63:
4a:ba:4a:f1:99:85:95:bb:24:68:18:70:55:e9:6f:
73:0e:b9:4e:8c:21:1e:18:11:8e:74:91:85:02:8f:
ee:a5:cc:f5:31:86:1d:b9:41:bb:1d:ec:0b:1d:03:
8d:91:25:84:04:3c:40:ae:c0:40:35:bb:65:75:a4:
2b:5f:85:11:dd:3d:bb:69:9d:34:a3:6e:4e:93:99:
7a:57:56:bd:55:b0:88:a4:11:91:c1:a4:af:08:50:
70:83:20:a0:83:56:da:3f:91:78:26:cc:5b:8e:24:
3e:82:12:7a:c2:15:37:de:73:47:df:35:90:41:6e:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:A4:F4:3B:59:DC:FE:63:5C:2B:B0:2E:C9:F0:22:5F:8E:5E:02
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/rmOk9DtZ3P5jXCuwLsnwIl-OXgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.45.0/24
186.247.163.0/24
186.247.191.0/24
187.13.0.0/23
187.13.7.0-187.13.9.255
187.13.132.0/23
187.13.184.0/23
187.14.81.0-187.14.85.255
187.14.99.0-187.14.101.255
187.15.123.0/24
187.15.126.0/24
187.40.49.0/24
187.40.53.0-187.40.58.255
187.40.61.0-187.40.63.255
IPv6:
2a13:240::-2a13:240:10:ffff:ffff:ffff:ffff:ffff
2a13:240:1b00::-2a13:240:1cff:ffff:ffff:ffff:ffff:ffff
2a13:240:2400::/40
2a13:240:2600::/40
2a13:240:2b00::/40
2a13:240:3000::/40
2a13:240:3500::/40
2a13:240:3700::/40
2a13:240:3d00::/40
2a13:240:4200::-2a13:240:4bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c4:9b:01:51:77:58:38:06:c3:30:72:e3:9b:3e:56:31:aa:f0:
c0:c8:18:67:08:ad:63:1c:9d:af:0e:8c:66:21:17:ee:df:38:
4a:0c:dd:89:15:ac:d3:ff:fa:40:fb:25:c2:c4:03:76:1d:6d:
93:17:5c:0c:05:db:47:e1:d7:1f:56:7e:ec:52:7e:50:68:91:
13:47:9b:f2:6e:a0:3a:fc:8c:c4:85:d0:36:d1:40:a0:22:c1:
fe:10:7a:49:38:9d:31:20:51:aa:90:c4:5f:cf:60:6f:96:b2:
20:8d:0c:ee:e6:b0:18:35:ac:1f:eb:ac:f1:9e:44:46:b7:4b:
34:aa:32:08:80:69:2b:06:93:e2:42:9b:65:f7:50:69:f9:e0:
4f:aa:7e:7b:81:b8:1f:74:de:7d:af:ee:fc:d0:d4:6b:64:37:
83:ea:e7:4c:f1:b7:a0:d9:9b:18:1b:6b:a2:03:c1:9f:c6:18:
79:b6:85:5b:c7:67:d5:f9:fd:ab:b4:6d:db:aa:7b:2a:59:46:
a0:df:49:57:f0:cb:0a:10:66:eb:3c:68:46:78:bd:79:50:bd:
fd:41:33:a6:dc:41:14:a7:5b:4a:03:4c:93:31:a0:32:14:cb:
88:cc:69:93:73:04:54:c0:e3:b7:d1:c9:c7:9d:bf:0d:3f:00:
09:ce:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:17:58 2026 by rpki-client