Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/e01eDXZOiNQQz8hgZxFiFZTSvo0.roa
File: e01eDXZOiNQQz8hgZxFiFZTSvo0.roa (raw, json)
Hash identifier: teajlIOJyV52Aq3VFzY5Khnxrr+m/5JmbybdAfU7WLg=
Subject key identifier: 7B:4D:5E:0D:76:4E:88:D4:10:CF:C8:60:67:11:62:15:94:D2:BE:8D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A1C6B955667D5690230C688311135FC0AE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/e01eDXZOiNQQz8hgZxFiFZTSvo0.roa
Signing time: Tue 10 Nov 2026 18:29:56 +0000
ROA not before: Tue 10 Nov 2026 18:29:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.84.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.182.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a11:2a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:b9:55:66:7d:56:90:23:0c:68:83:11:13:5f:c0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 10 18:29:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b4d5e0d764e88d410cfc8606711621594d2be8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:4c:5b:21:b2:70:94:3d:c8:e0:5d:c6:c2:
89:60:dc:5b:b0:16:64:d5:71:fc:42:ab:0f:d2:1c:
4a:97:3c:f1:aa:58:f4:97:68:c4:6b:e8:4e:bd:10:
55:1b:82:d0:8d:1f:28:fc:d0:56:79:2e:5e:1b:9e:
33:cc:28:aa:b2:c7:b8:cb:b9:75:00:de:bb:6a:8f:
88:37:2e:df:fa:aa:ff:4f:f9:84:73:9c:98:83:98:
39:c9:69:cd:e2:8f:75:4e:3f:a3:ae:aa:c2:19:29:
10:f6:95:5f:c6:06:5e:5a:60:e8:e4:2a:31:3a:a0:
d7:d6:9d:2d:99:c4:eb:aa:2d:11:32:c3:8d:3d:3d:
4c:6a:92:05:5a:d9:39:d5:fd:f3:81:5f:ed:e6:b5:
b5:34:f8:d0:8d:18:4c:91:27:3e:8a:0e:b5:47:4f:
53:e2:bc:b6:a6:e6:6c:93:20:94:5b:61:56:65:98:
42:54:6f:13:1f:5c:77:08:2a:88:88:8c:f1:ee:c0:
e4:b9:f7:a2:f5:12:b4:fe:4b:16:90:a3:39:bc:dc:
a2:f3:ec:65:a2:e0:fc:d9:5c:76:02:1a:1e:cb:28:
ef:9f:b3:0e:f8:fa:75:c9:a2:14:12:47:fa:7a:99:
37:b0:8c:74:cf:12:e2:61:52:0e:ef:07:8e:e9:37:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4D:5E:0D:76:4E:88:D4:10:CF:C8:60:67:11:62:15:94:D2:BE:8D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/e01eDXZOiNQQz8hgZxFiFZTSvo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
45.9.29.0/24
45.13.189.0/24
45.94.171.0/24
45.138.182.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.92.0/24
195.177.94.0/23
195.211.188.0/23
195.211.191.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a11:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
a7:b9:62:c9:f7:39:de:15:91:13:84:e2:a2:f0:71:7c:03:c3:
de:c8:5d:10:60:7e:ee:f7:c0:99:e5:82:43:ad:72:72:b2:03:
90:4a:66:1f:2b:19:59:5a:d5:be:23:f8:eb:25:f9:3c:3f:69:
1f:e7:a7:f3:d0:c8:b8:22:6e:79:94:e7:76:a0:93:eb:9a:ff:
52:8f:ab:7f:1e:e2:66:d3:32:ad:91:cc:02:88:89:7d:f8:f2:
16:80:a5:99:cd:48:cf:59:39:e7:47:aa:5a:94:98:6e:86:36:
f8:71:b6:00:f3:0c:59:25:68:bb:fe:cc:e2:d6:45:6b:01:d8:
3a:4d:23:07:aa:87:6c:e1:56:f2:57:62:14:5f:0b:e0:d1:c7:
b1:fb:d8:39:3a:7f:8d:ea:c3:6a:33:b7:f9:b5:06:f9:82:4f:
00:6f:6c:2d:87:37:a9:e0:02:7b:cd:ad:11:ce:1a:20:e0:72:
69:c7:b1:f1:3e:96:d7:ed:56:d4:44:b7:f4:a7:1d:ad:bd:76:
21:b9:04:40:7b:6c:b2:50:e5:73:26:0d:2d:ab:7f:03:f8:63:
38:f4:21:57:a2:71:e7:c5:cb:ed:08:61:63:98:8e:7f:11:4f:
88:fc:73:9b:97:3d:fb:dd:2a:10:b9:dd:2f:b5:58:a3:b5:ce:
e1:55:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:07:30 2026 by rpki-client