Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/PujNlKftYzeQaE0MnZm0EPh4AFY.roa
File: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (raw, json)
Hash identifier: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=
Subject key identifier: 3E:E8:CD:94:A7:ED:63:37:90:68:4D:0C:9D:99:B4:10:F8:78:00:56
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019FC89E28E7DFC265A4B19F01103EA2A328
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/PujNlKftYzeQaE0MnZm0EPh4AFY.roa
Signing time: Mon 03 Aug 2026 17:13:55 +0000
ROA not before: Mon 03 Aug 2026 17:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.100.0/24 maxlen: 24
5.182.101.0/24 maxlen: 24
45.14.72.0/24 maxlen: 24
45.84.44.0/24 maxlen: 24
45.84.45.0/24 maxlen: 24
45.84.47.0/24 maxlen: 24
45.157.74.0/23 maxlen: 23
85.8.188.0/24 maxlen: 24
85.8.189.0/24 maxlen: 24
85.8.190.0/23 maxlen: 23
85.209.216.0/24 maxlen: 24
85.209.218.0/23 maxlen: 23
88.218.100.0/24 maxlen: 24
88.218.102.0/23 maxlen: 23
91.201.142.0/23 maxlen: 23
92.119.180.0/24 maxlen: 24
92.119.181.0/24 maxlen: 24
92.119.183.0/24 maxlen: 24
139.28.137.0/24 maxlen: 24
139.28.138.0/23 maxlen: 23
141.98.240.0/24 maxlen: 24
141.98.241.0/24 maxlen: 24
141.98.242.0/23 maxlen: 23
193.31.72.0/24 maxlen: 24
193.31.73.0/24 maxlen: 24
193.31.75.0/24 maxlen: 24
194.5.0.0/22 maxlen: 22
194.124.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:9e:28:e7:df:c2:65:a4:b1:9f:01:10:3e:a2:a3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Aug 3 17:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ee8cd94a7ed633790684d0c9d99b410f8780056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:cd:4f:52:ae:88:b4:1f:3c:76:24:0b:bb:
8e:dd:3f:73:c2:3e:a3:32:fb:d1:d4:41:1f:a7:42:
82:eb:f0:df:48:4d:c7:cb:d5:21:5e:43:a2:bd:35:
0c:74:02:e2:63:6b:6e:96:bc:26:a9:84:96:86:36:
ca:55:a5:ee:98:5b:86:90:ac:a4:45:87:62:9c:5a:
ef:e7:2b:54:e9:55:c6:6f:b6:c9:76:2d:e2:02:a2:
9f:6e:09:15:6e:82:70:7a:6d:35:34:e9:07:80:c1:
b6:a4:24:49:77:06:ed:8e:8a:1b:da:9d:7c:ce:fa:
ed:3a:79:85:d3:0f:aa:67:be:a5:46:3b:23:5b:ae:
28:33:a2:ef:3f:39:e4:fa:22:13:49:61:ad:9d:c2:
d2:b4:68:d9:90:00:08:a1:65:e1:8f:63:44:42:2c:
dd:55:a2:58:7f:7b:29:28:8f:4e:7b:df:59:c2:0c:
c2:75:13:71:7d:5c:00:88:61:26:01:2a:bf:d7:a4:
f7:f7:a0:23:1f:2d:92:c8:0b:b9:f0:bc:19:bb:fd:
8c:bc:5a:7b:00:7d:be:d2:47:57:ee:0b:48:65:0c:
1d:c4:24:35:ba:7c:6e:14:4f:db:d0:aa:04:b6:02:
29:88:35:56:2e:66:c5:ea:b2:3d:90:43:9e:fb:0c:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E8:CD:94:A7:ED:63:37:90:68:4D:0C:9D:99:B4:10:F8:78:00:56
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/PujNlKftYzeQaE0MnZm0EPh4AFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.100.0/23
45.14.72.0/24
45.84.44.0/23
45.84.47.0/24
45.157.74.0/23
85.8.188.0/22
85.209.216.0/24
85.209.218.0/23
88.218.100.0/24
88.218.102.0/23
91.201.142.0/23
92.119.180.0/23
92.119.183.0/24
139.28.137.0-139.28.139.255
141.98.240.0/22
193.31.72.0/23
193.31.75.0/24
194.5.0.0/22
194.124.52.0/22
Signature Algorithm: sha256WithRSAEncryption
39:47:b3:7c:bd:8a:c6:db:5a:f6:1c:94:35:ff:a0:e7:f6:ff:
76:71:43:0b:1a:83:7d:d7:ea:42:de:02:5d:55:b7:bf:78:89:
88:07:97:09:cf:7a:88:b0:27:9f:b5:bc:5c:52:27:f2:bb:08:
3d:86:47:6a:35:d3:b0:52:5c:00:45:51:b5:49:76:33:36:0b:
fa:61:9f:44:61:e5:59:5b:7a:e4:06:c2:d2:8e:61:97:c2:dd:
1e:03:62:7f:cf:1f:2b:9b:4f:3d:43:5e:7b:0c:27:38:26:ac:
ea:9f:17:cc:c2:0a:45:39:ed:2f:3b:e7:a2:36:71:7d:f2:4a:
09:5d:15:7e:ed:12:a3:25:0f:4f:26:a3:47:43:8f:6d:a3:19:
02:5f:56:57:c6:f5:20:4b:48:c5:91:e7:e7:5a:61:92:39:26:
fa:5b:1a:f3:d0:a4:15:ec:45:59:f7:3c:1a:23:9b:d4:56:2f:
92:54:62:17:8d:2d:f7:4a:be:21:23:20:a6:dc:c6:af:89:2e:
ac:f1:da:d7:83:4b:3f:b1:57:82:e1:26:13:f6:c8:96:84:a3:
9c:24:d0:df:d4:e3:dc:cb:82:5a:68:60:7d:af:59:37:83:89:
4d:67:fa:13:84:ff:35:77:b5:8e:5f:2e:b2:a6:7b:3c:f1:77:
5e:d2:6b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:04:00 2026 by rpki-client