Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Q9TWapz4KpE37NSL6RFucRZCYEw.roa
File: Q9TWapz4KpE37NSL6RFucRZCYEw.roa (raw, json)
Hash identifier: yaXmTTTWsRUiuft1yetl+A/sxREjZxI0Oe0INJld6UU=
Subject key identifier: 43:D4:D6:6A:9C:F8:2A:91:37:EC:D4:8B:E9:11:6E:71:16:42:60:4C
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236947B4C1F30CACB6A389E51E810EAC
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Q9TWapz4KpE37NSL6RFucRZCYEw.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136787
IP address blocks: 37.97.120.0/24 maxlen: 24
64.43.65.0/24 maxlen: 24
64.43.73.0/24 maxlen: 24
64.43.74.0/24 maxlen: 24
64.43.75.0/24 maxlen: 24
64.43.88.0/24 maxlen: 24
64.43.89.0/24 maxlen: 24
64.43.90.0/24 maxlen: 24
64.43.91.0/24 maxlen: 24
64.43.93.0/24 maxlen: 24
64.43.94.0/24 maxlen: 24
64.43.95.0/24 maxlen: 24
64.43.108.0/24 maxlen: 24
64.43.109.0/24 maxlen: 24
64.43.110.0/24 maxlen: 24
64.43.111.0/24 maxlen: 24
64.43.116.0/24 maxlen: 24
64.43.117.0/24 maxlen: 24
64.43.118.0/24 maxlen: 24
64.43.119.0/24 maxlen: 24
64.43.120.0/24 maxlen: 24
64.43.121.0/24 maxlen: 24
64.43.122.0/24 maxlen: 24
64.43.123.0/24 maxlen: 24
77.36.61.0/24 maxlen: 24
77.36.72.0/24 maxlen: 24
77.36.73.0/24 maxlen: 24
77.36.74.0/24 maxlen: 24
77.36.75.0/24 maxlen: 24
77.36.76.0/24 maxlen: 24
77.36.77.0/24 maxlen: 24
77.36.78.0/24 maxlen: 24
77.36.79.0/24 maxlen: 24
81.161.8.0/24 maxlen: 24
81.161.9.0/24 maxlen: 24
81.161.10.0/24 maxlen: 24
81.161.11.0/24 maxlen: 24
91.232.19.0/24 maxlen: 24
91.235.167.0/24 maxlen: 24
91.238.40.0/24 maxlen: 24
91.238.41.0/24 maxlen: 24
91.240.154.0/24 maxlen: 24
91.245.88.0/24 maxlen: 24
91.245.89.0/24 maxlen: 24
91.246.200.0/24 maxlen: 24
93.120.32.0/24 maxlen: 24
93.120.43.0/24 maxlen: 24
93.120.73.0/24 maxlen: 24
109.197.236.0/24 maxlen: 24
109.197.237.0/24 maxlen: 24
109.197.238.0/24 maxlen: 24
109.197.239.0/24 maxlen: 24
176.96.88.0/24 maxlen: 24
176.96.90.0/24 maxlen: 24
176.96.91.0/24 maxlen: 24
176.102.120.0/24 maxlen: 24
176.102.121.0/24 maxlen: 24
176.102.122.0/24 maxlen: 24
176.102.123.0/24 maxlen: 24
176.103.240.0/24 maxlen: 24
176.103.241.0/24 maxlen: 24
176.103.242.0/24 maxlen: 24
176.103.243.0/24 maxlen: 24
176.103.244.0/24 maxlen: 24
176.103.245.0/24 maxlen: 24
176.103.246.0/24 maxlen: 24
176.103.247.0/24 maxlen: 24
193.36.208.0/24 maxlen: 24
193.36.209.0/24 maxlen: 24
193.36.210.0/24 maxlen: 24
193.36.211.0/24 maxlen: 24
193.36.212.0/24 maxlen: 24
193.36.213.0/24 maxlen: 24
193.36.214.0/24 maxlen: 24
193.36.215.0/24 maxlen: 24
193.221.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:47:b4:c1:f3:0c:ac:b6:a3:89:e5:1e:81:0e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43d4d66a9cf82a9137ecd48be9116e711642604c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:35:81:19:d9:c7:2d:0a:5e:a8:4f:88:01:
1b:0a:d9:73:34:c7:a6:72:4f:15:db:78:e7:ac:81:
a8:69:f4:67:43:89:8b:73:cd:ce:8e:9d:ac:63:9a:
96:9d:28:0e:95:68:2a:1c:18:be:dd:72:fe:a3:40:
29:7e:06:42:82:60:72:8f:1f:10:98:96:09:e1:79:
68:fd:d7:34:4b:9a:33:ef:4a:0a:e1:7f:f3:f6:b5:
b4:a7:b4:3d:df:ca:9a:d3:0c:9a:a6:63:85:16:87:
f0:83:79:a7:84:f5:80:ec:b0:85:45:db:9e:46:44:
5e:b7:d0:94:45:78:d3:9a:4d:a8:f1:4e:85:a9:12:
ef:bc:0d:c7:38:90:61:1f:99:0d:ba:53:52:04:d8:
e0:8c:ed:5e:65:11:f7:2d:01:4a:e6:4d:8c:bb:5a:
16:79:21:fa:20:82:00:ea:c5:0e:7a:8b:67:76:58:
94:da:82:a4:3c:f5:df:4c:59:99:9c:c6:9a:db:cc:
fe:a0:68:31:7c:67:b7:f5:0d:c7:65:de:c0:61:7d:
b6:5b:0e:11:d1:da:87:ac:36:e2:30:0f:74:47:b8:
ae:c8:c5:d0:33:23:4c:02:20:9a:25:68:a2:66:8c:
03:3e:33:9d:77:02:0f:5a:33:fa:c0:9d:cc:b4:d5:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D4:D6:6A:9C:F8:2A:91:37:EC:D4:8B:E9:11:6E:71:16:42:60:4C
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Q9TWapz4KpE37NSL6RFucRZCYEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.120.0/24
64.43.65.0/24
64.43.73.0-64.43.75.255
64.43.88.0/22
64.43.93.0-64.43.95.255
64.43.108.0/22
64.43.116.0-64.43.123.255
77.36.61.0/24
77.36.72.0/21
81.161.8.0/22
91.232.19.0/24
91.235.167.0/24
91.238.40.0/23
91.240.154.0/24
91.245.88.0/23
91.246.200.0/24
93.120.32.0/24
93.120.43.0/24
93.120.73.0/24
109.197.236.0/22
176.96.88.0/24
176.96.90.0/23
176.102.120.0/22
176.103.240.0/21
193.36.208.0/21
193.221.83.0/24
Signature Algorithm: sha256WithRSAEncryption
01:39:f3:91:a8:a2:9b:32:2a:c6:0a:b4:f9:b9:c3:e7:c1:bc:
6b:5f:dc:f5:ab:57:67:ee:7d:c9:74:a9:d6:f4:23:c0:dd:a2:
a8:55:77:7b:a7:55:af:70:3f:97:a9:a5:52:9c:f7:08:7e:90:
4c:f3:41:74:c5:21:48:8d:9b:ce:ed:6d:f5:dd:6e:3e:ce:c1:
ef:29:5a:a6:62:0b:9b:96:86:82:d0:e4:82:74:09:5d:c6:51:
fd:f6:b8:2e:46:5c:16:76:31:90:49:e4:4c:8a:30:47:21:0f:
90:0d:b2:77:29:4d:de:0e:59:2f:1b:9b:c3:93:72:d2:2c:87:
ed:85:10:29:ee:2a:ff:d1:20:58:d0:d4:db:88:76:3e:bc:b0:
cd:3e:b2:b4:0d:ab:da:a8:4a:01:c1:1a:b4:63:31:ee:cb:75:
94:3e:73:44:03:bb:2b:e1:25:30:6c:2f:b4:aa:d5:86:29:9f:
5c:2c:1d:2e:97:5c:d0:d2:0e:38:86:5f:ae:0e:15:f4:7e:bd:
b3:55:ad:71:17:b1:5c:6e:10:cd:bd:1d:dd:f6:00:61:25:3f:
f1:4c:64:bf:ab:3a:ef:d2:4a:cf:44:7b:cd:df:2e:74:92:51:
70:f5:84:cd:c0:c1:d3:4e:33:b8:b6:63:27:96:19:a2:0e:e0:
82:47:6e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:44 2026 by rpki-client