Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/7gCiFVTQSKvhRGvzis8PIGDUE3g.roa
File: 7gCiFVTQSKvhRGvzis8PIGDUE3g.roa (raw, json)
Hash identifier: MFlfhcJhwKzEiS9AsYbxYv+F5KPquBJlhamS9VsRq0Q=
Subject key identifier: EE:00:A2:15:54:D0:48:AB:E1:44:6B:F3:8A:CF:0F:20:60:D4:13:78
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 01A0E2BF2AFBD3B285304E387AD4F3DEDEBD
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/7gCiFVTQSKvhRGvzis8PIGDUE3g.roa
Signing time: Sun 27 Sep 2026 12:02:54 +0000
ROA not before: Sun 27 Sep 2026 12:02:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204170
IP address blocks: 5.102.176.0/21 maxlen: 21
5.102.176.0/24 maxlen: 24
5.102.178.0/24 maxlen: 24
5.102.179.0/24 maxlen: 24
5.102.180.0/24 maxlen: 24
5.102.181.0/24 maxlen: 24
5.102.182.0/24 maxlen: 24
5.102.183.0/24 maxlen: 24
78.111.32.0/20 maxlen: 20
78.111.32.0/24 maxlen: 24
78.111.33.0/24 maxlen: 24
78.111.34.0/24 maxlen: 24
78.111.35.0/24 maxlen: 24
78.111.36.0/24 maxlen: 24
78.111.37.0/24 maxlen: 24
78.111.38.0/24 maxlen: 24
78.111.39.0/24 maxlen: 24
78.111.40.0/24 maxlen: 24
78.111.41.0/24 maxlen: 24
78.111.42.0/24 maxlen: 24
78.111.43.0/24 maxlen: 24
78.111.44.0/24 maxlen: 24
78.111.45.0/24 maxlen: 24
78.111.46.0/24 maxlen: 24
78.111.47.0/24 maxlen: 24
84.242.32.0/20 maxlen: 20
84.242.32.0/24 maxlen: 24
84.242.33.0/24 maxlen: 24
84.242.34.0/24 maxlen: 24
84.242.35.0/24 maxlen: 24
84.242.36.0/24 maxlen: 24
84.242.37.0/24 maxlen: 24
84.242.38.0/24 maxlen: 24
84.242.39.0/24 maxlen: 24
84.242.40.0/24 maxlen: 24
84.242.41.0/24 maxlen: 24
84.242.42.0/24 maxlen: 24
84.242.43.0/24 maxlen: 24
84.242.44.0/24 maxlen: 24
84.242.45.0/24 maxlen: 24
84.242.46.0/24 maxlen: 24
84.242.47.0/24 maxlen: 24
94.176.16.0/20 maxlen: 20
94.176.16.0/24 maxlen: 24
94.176.17.0/24 maxlen: 24
94.176.18.0/24 maxlen: 24
94.176.19.0/24 maxlen: 24
94.176.20.0/24 maxlen: 24
94.176.21.0/24 maxlen: 24
94.176.22.0/24 maxlen: 24
94.176.23.0/24 maxlen: 24
94.176.24.0/24 maxlen: 24
94.176.25.0/24 maxlen: 24
94.176.26.0/24 maxlen: 24
94.176.27.0/24 maxlen: 24
94.176.28.0/24 maxlen: 24
94.176.29.0/24 maxlen: 24
94.176.30.0/24 maxlen: 24
94.176.31.0/24 maxlen: 24
96.9.128.0/19 maxlen: 19
96.9.128.0/24 maxlen: 24
96.9.129.0/24 maxlen: 24
96.9.130.0/24 maxlen: 24
96.9.131.0/24 maxlen: 24
96.9.132.0/24 maxlen: 24
96.9.133.0/24 maxlen: 24
96.9.134.0/24 maxlen: 24
96.9.135.0/24 maxlen: 24
96.9.136.0/24 maxlen: 24
96.9.137.0/24 maxlen: 24
96.9.138.0/24 maxlen: 24
96.9.139.0/24 maxlen: 24
96.9.140.0/24 maxlen: 24
96.9.141.0/24 maxlen: 24
96.9.142.0/24 maxlen: 24
96.9.143.0/24 maxlen: 24
96.9.144.0/24 maxlen: 24
96.9.146.0/24 maxlen: 24
96.9.147.0/24 maxlen: 24
96.9.148.0/24 maxlen: 24
96.9.149.0/24 maxlen: 24
96.9.150.0/24 maxlen: 24
96.9.151.0/24 maxlen: 24
96.9.152.0/24 maxlen: 24
96.9.153.0/24 maxlen: 24
96.9.154.0/24 maxlen: 24
96.9.155.0/24 maxlen: 24
96.9.156.0/24 maxlen: 24
96.9.157.0/24 maxlen: 24
96.9.158.0/24 maxlen: 24
96.9.159.0/24 maxlen: 24
141.105.168.0/21 maxlen: 21
141.105.168.0/24 maxlen: 24
141.105.169.0/24 maxlen: 24
141.105.170.0/24 maxlen: 24
141.105.171.0/24 maxlen: 24
141.105.172.0/24 maxlen: 24
141.105.173.0/24 maxlen: 24
141.105.174.0/24 maxlen: 24
141.105.175.0/24 maxlen: 24
178.20.16.0/21 maxlen: 21
178.20.16.0/24 maxlen: 24
178.20.17.0/24 maxlen: 24
178.20.18.0/24 maxlen: 24
178.20.19.0/24 maxlen: 24
178.20.20.0/24 maxlen: 24
178.20.21.0/24 maxlen: 24
178.20.22.0/24 maxlen: 24
178.20.23.0/24 maxlen: 24
185.29.140.0/22 maxlen: 22
185.29.140.0/24 maxlen: 24
185.29.141.0/24 maxlen: 24
185.29.142.0/24 maxlen: 24
185.29.143.0/24 maxlen: 24
185.112.104.0/22 maxlen: 22
185.112.104.0/24 maxlen: 24
185.112.105.0/24 maxlen: 24
185.112.106.0/24 maxlen: 24
185.112.107.0/24 maxlen: 24
199.48.224.0/24 maxlen: 24
206.167.33.0/24 maxlen: 24
2a0a:c740::/32 maxlen: 48
2a0a:c740::/48 maxlen: 48
2a0a:c740:2::/48 maxlen: 48
2a0a:c740:4::/48 maxlen: 48
2a0a:c740:5::/48 maxlen: 48
2a0a:c740:7::/48 maxlen: 48
2a0a:c740:8::/48 maxlen: 48
2a0a:c740:a::/48 maxlen: 48
2a0a:c740:b::/48 maxlen: 48
2a0a:c740:100::/48 maxlen: 48
2a0a:c740:200::/48 maxlen: 48
2a0a:c740:1009::/48 maxlen: 48
2a0a:c740:1063::/48 maxlen: 48
2a0a:c740:1064::/48 maxlen: 48
2a0a:c740:2000::/48 maxlen: 48
2a0a:c740:2009::/48 maxlen: 48
2a0a:c740:2063::/48 maxlen: 48
2a0a:c740:2064::/48 maxlen: 48
2a0a:c740:9998::/48 maxlen: 48
2a0a:c740:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bf:2a:fb:d3:b2:85:30:4e:38:7a:d4:f3:de:de:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Sep 27 12:02:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee00a21554d048abe1446bf38acf0f2060d41378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:cd:5c:7c:47:db:9b:07:0f:59:19:c4:0a:
16:9b:56:d3:b3:ae:1f:2f:68:e9:f2:b8:22:88:9c:
dc:4f:d5:c1:1b:0f:1f:a8:3f:cd:ad:6c:55:4a:b5:
e5:7c:d7:9c:8c:89:24:7a:6e:b0:ce:65:b9:91:b5:
ef:fc:86:69:dd:be:5c:bc:8b:cb:14:b1:7a:bd:86:
c4:fe:0f:88:2c:02:43:d1:01:fb:65:21:13:82:0d:
43:93:1c:18:58:83:aa:23:f8:9b:dc:52:20:ec:ea:
9e:98:6e:09:de:7d:4d:72:66:5e:0a:22:a9:64:b4:
2f:e7:a4:df:df:78:11:18:83:4e:2a:c1:81:71:1c:
ca:1b:1f:2c:fd:f1:d2:d2:36:b6:35:31:c2:f5:19:
80:cc:03:06:c1:64:bb:35:22:ad:84:b4:74:9d:f5:
56:a1:f8:19:a2:03:2d:42:46:a0:f5:6e:f7:7f:ae:
5e:6c:15:d0:e9:46:da:c2:4a:cf:e8:cb:f9:53:44:
7c:11:24:e4:22:12:b4:02:67:f7:5c:41:4e:ed:e2:
f7:13:7d:6a:b5:d7:1b:77:47:17:e8:48:77:b0:b9:
6c:c6:d1:aa:1d:31:7e:f9:cf:32:f2:ca:6c:a4:62:
f3:69:ea:69:75:ab:bc:41:8f:5d:8b:d9:3b:7b:5e:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:00:A2:15:54:D0:48:AB:E1:44:6B:F3:8A:CF:0F:20:60:D4:13:78
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/7gCiFVTQSKvhRGvzis8PIGDUE3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.176.0/21
78.111.32.0/20
84.242.32.0/20
94.176.16.0/20
96.9.128.0/19
141.105.168.0/21
178.20.16.0/21
185.29.140.0/22
185.112.104.0/22
199.48.224.0/24
206.167.33.0/24
IPv6:
2a0a:c740::/32
Signature Algorithm: sha256WithRSAEncryption
2d:46:68:ad:2b:5b:cc:3e:b3:af:b3:d8:fc:b0:82:72:72:54:
e5:08:58:65:3e:88:1b:b9:dc:b5:e7:71:ec:2d:b4:fd:26:ed:
e0:c1:84:95:5b:fa:31:a0:a3:11:73:72:72:34:00:d5:ad:25:
51:ae:e8:f7:c9:1d:11:82:44:60:61:ec:52:d9:70:a9:e6:d9:
65:20:ce:70:68:c5:be:6e:77:39:69:07:80:fc:e9:eb:36:d2:
7a:6f:fe:77:d2:86:b3:b9:81:71:07:40:d0:82:43:5d:2e:00:
64:7e:58:f5:07:90:1d:2c:be:99:9f:aa:d7:8a:5d:65:61:a5:
16:df:2b:ac:eb:c1:dd:92:09:6f:f1:59:df:8d:d5:0e:aa:14:
e1:ad:68:6e:ee:c1:a5:5c:3b:6a:af:19:92:36:26:9b:91:29:
51:00:b1:6a:8a:dd:e3:ca:07:3c:00:98:c3:ed:c3:8a:62:ab:
3a:5d:b8:59:30:5b:b9:a5:76:04:aa:7f:67:f9:24:51:5a:fc:
c3:67:64:0c:8f:b1:ba:47:93:24:fc:76:a1:20:05:bf:89:88:
2e:bb:03:d4:e8:f8:9b:fc:f3:55:f4:7e:a1:32:cf:19:b0:30:
2b:d1:c8:8b:2a:72:a5:40:e1:ec:c2:05:09:7e:34:01:ca:0d:
eb:8f:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:26 2026 by rpki-client