Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/tW89lp5YxoMGwhuGz5wy8-1b7tA.roa
File: tW89lp5YxoMGwhuGz5wy8-1b7tA.roa (raw, json)
Hash identifier: 3iDgHelXEotGhsC69Iuc1srSTIuH+BgeoUU2gRFP8bQ=
Subject key identifier: B5:6F:3D:96:9E:58:C6:83:06:C2:1B:86:CF:9C:32:F3:ED:5B:EE:D0
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 019F23687DE5BF8E10E58C3C42ACA51FDDE8
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/tW89lp5YxoMGwhuGz5wy8-1b7tA.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12663
IP address blocks: 37.25.128.0/17 maxlen: 24
46.108.0.0/16 maxlen: 24
46.190.128.0/17 maxlen: 24
47.73.0.0/16 maxlen: 24
47.73.1.0/24 maxlen: 24
47.73.8.0/21 maxlen: 21
47.73.8.0/23 maxlen: 23
47.73.10.0/23 maxlen: 23
47.73.12.0/23 maxlen: 23
47.73.15.0/24 maxlen: 24
47.73.36.0/23 maxlen: 23
47.73.37.0/24 maxlen: 24
47.73.40.0/24 maxlen: 24
47.73.42.0/24 maxlen: 24
47.73.44.0/22 maxlen: 22
47.73.44.0/23 maxlen: 23
47.73.46.0/23 maxlen: 23
47.73.56.0/23 maxlen: 23
47.73.63.0/24 maxlen: 24
47.73.67.0/24 maxlen: 24
47.73.68.0/24 maxlen: 24
47.73.73.0/24 maxlen: 24
47.73.75.0/24 maxlen: 24
47.73.77.0/24 maxlen: 24
47.73.78.0/24 maxlen: 24
47.73.79.0/24 maxlen: 24
47.73.88.0/22 maxlen: 22
47.73.88.0/24 maxlen: 24
47.73.89.0/24 maxlen: 24
47.73.90.0/24 maxlen: 24
47.73.91.0/24 maxlen: 24
47.73.93.0/24 maxlen: 24
47.73.94.0/24 maxlen: 24
47.73.96.0/21 maxlen: 21
47.73.104.0/23 maxlen: 23
47.73.104.0/24 maxlen: 24
47.73.105.0/24 maxlen: 24
47.73.106.0/24 maxlen: 24
47.73.108.0/23 maxlen: 23
47.73.108.0/24 maxlen: 24
47.73.109.0/24 maxlen: 24
47.73.110.0/24 maxlen: 24
47.73.120.0/24 maxlen: 24
47.73.121.0/24 maxlen: 24
47.73.123.0/24 maxlen: 24
47.73.124.0/24 maxlen: 24
47.73.125.0/24 maxlen: 24
47.73.141.0/24 maxlen: 24
47.73.212.0/24 maxlen: 24
47.73.218.0/24 maxlen: 24
47.73.220.0/24 maxlen: 24
47.73.224.0/21 maxlen: 21
47.73.248.0/24 maxlen: 24
47.73.252.0/22 maxlen: 22
62.213.128.0/19 maxlen: 19
85.205.0.0/16 maxlen: 24
86.104.216.0/22 maxlen: 22
89.32.48.0/21 maxlen: 21
92.114.8.0/21 maxlen: 21
108.179.64.0/18 maxlen: 24
130.195.32.0/20 maxlen: 20
130.195.64.0/19 maxlen: 19
130.195.96.0/19 maxlen: 19
130.195.128.0/18 maxlen: 24
130.195.200.0/21 maxlen: 21
139.47.160.0/19 maxlen: 24
139.47.192.0/18 maxlen: 24
145.230.0.0/16 maxlen: 24
176.125.0.0/19 maxlen: 24
188.240.84.0/22 maxlen: 22
192.125.128.0/17 maxlen: 24
195.232.128.0/17 maxlen: 24
195.233.0.0/16 maxlen: 24
208.53.128.0/18 maxlen: 18
2a01:818:1000::/44 maxlen: 44
2a01:818:1060::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7d:e5:bf:8e:10:e5:8c:3c:42:ac:a5:1f:dd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b56f3d969e58c68306c21b86cf9c32f3ed5beed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:ae:c4:ad:00:c8:3b:ae:9f:24:b2:96:66:
77:6a:f2:f9:16:13:c1:19:95:13:24:4d:15:fd:16:
2b:80:2d:8a:87:b1:d3:f6:44:34:b1:9a:a8:13:f9:
31:39:fd:bf:e6:22:ad:55:f2:87:79:43:ec:eb:99:
13:76:73:31:a9:04:6c:f3:e2:a1:f2:94:15:04:61:
82:de:91:66:b3:ab:46:48:12:13:b4:13:23:8e:d3:
1f:8d:c0:d7:39:db:95:1b:d0:8e:ef:f0:d8:35:11:
01:30:18:2b:ae:e2:e7:ce:e9:58:e7:54:8f:8b:9e:
be:d7:79:83:00:6b:30:f4:52:53:21:0f:fe:d1:dd:
1b:99:cf:f5:25:a9:d9:18:b9:a9:bc:95:f4:65:f7:
1d:69:9e:ce:a7:e7:2f:3a:ae:12:09:85:cd:f8:c5:
ed:c8:c2:12:f0:96:67:a0:da:15:6d:83:30:4d:7e:
f8:f2:f3:e4:31:ee:a4:21:8c:a1:ab:a5:19:ca:98:
da:20:21:f9:4d:43:38:1f:4f:97:83:df:a8:21:8b:
5b:6a:bd:e7:92:ee:bc:67:0f:78:5c:78:19:a9:fe:
48:b3:aa:17:f3:df:32:b3:97:56:1c:f3:ac:fc:cb:
8a:59:10:de:bb:06:bd:93:1b:81:86:07:64:99:46:
c4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:3D:96:9E:58:C6:83:06:C2:1B:86:CF:9C:32:F3:ED:5B:EE:D0
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/tW89lp5YxoMGwhuGz5wy8-1b7tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.128.0/17
46.108.0.0/16
46.190.128.0/17
47.73.0.0/16
62.213.128.0/19
85.205.0.0/16
86.104.216.0/22
89.32.48.0/21
92.114.8.0/21
108.179.64.0/18
130.195.32.0/20
130.195.64.0-130.195.191.255
130.195.200.0/21
139.47.160.0-139.47.255.255
145.230.0.0/16
176.125.0.0/19
188.240.84.0/22
192.125.128.0/17
195.232.128.0-195.233.255.255
208.53.128.0/18
IPv6:
2a01:818:1000::/44
2a01:818:1060::/44
Signature Algorithm: sha256WithRSAEncryption
82:48:47:59:05:5e:a7:5f:c8:9c:97:f7:14:ca:e8:cc:55:69:
ab:0b:f8:6a:06:f3:fc:8d:d8:17:98:c9:62:da:07:89:1a:2a:
e2:7b:14:6a:69:4d:8a:a4:89:68:2e:2b:c7:3f:25:36:fa:f6:
f2:ae:3d:a9:12:a8:1e:ff:a4:d2:98:c8:2e:f9:46:e0:6c:b2:
53:8e:7f:94:0e:f8:4f:62:f3:c8:9a:5a:68:42:90:fb:93:e9:
1f:42:f6:b0:b6:72:f5:a4:11:ef:d5:d9:0e:be:39:f9:07:4a:
ec:8c:0b:6d:31:cd:ea:1e:94:0d:c1:a1:53:b7:27:d0:38:7a:
bd:09:24:09:0a:ac:93:13:cb:cf:e6:33:a0:76:8a:ad:90:dd:
de:46:90:fb:fe:94:28:1d:77:7e:96:ca:a2:bc:13:14:f5:ca:
df:b8:a1:32:09:f5:27:c0:ae:6c:f5:28:08:f9:0d:55:aa:a9:
a6:d6:1b:2d:c9:e8:a8:df:16:80:cc:59:f2:83:1c:ed:67:f3:
a8:10:33:92:4e:ae:30:3f:1f:62:15:ad:92:58:49:8b:80:0c:
b3:3d:ac:ce:4a:5f:f5:1a:d4:2e:d3:e9:74:63:8d:b9:22:eb:
39:76:e4:6d:5e:f9:4d:97:31:0d:b9:07:5a:e9:cb:91:d2:d3:
77:e3:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:13 2026 by rpki-client