Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/zS9xRe0X6EfvfwuA_mJcxyRPdp0.roa
File: zS9xRe0X6EfvfwuA_mJcxyRPdp0.roa (raw, json)
Hash identifier: xWJs4o1QA2XNJDkwjpgtgc0ICHaHi2yyozpY8c5H7Nw=
Subject key identifier: CD:2F:71:45:ED:17:E8:47:EF:7F:0B:80:FE:62:5C:C7:24:4F:76:9D
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019ED6F34805BD7186F7AAA9370692E5CE23
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/zS9xRe0X6EfvfwuA_mJcxyRPdp0.roa
Signing time: Wed 17 Jun 2026 18:58:48 +0000
ROA not before: Wed 17 Jun 2026 18:58:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 45.15.239.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.132.39.0/24 maxlen: 24
45.135.35.0/24 maxlen: 24
45.138.7.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.212.0/24 maxlen: 24
45.138.215.0/24 maxlen: 24
45.140.65.0/24 maxlen: 24
45.149.130.0/24 maxlen: 24
45.149.131.0/24 maxlen: 24
45.152.118.0/24 maxlen: 24
45.152.119.0/24 maxlen: 24
62.192.136.0/24 maxlen: 24
62.192.139.0/24 maxlen: 24
83.138.51.0/24 maxlen: 24
83.138.52.0/24 maxlen: 24
84.246.82.0/24 maxlen: 24
91.206.69.0/24 maxlen: 24
91.224.140.0/24 maxlen: 24
91.237.104.0/24 maxlen: 24
91.237.105.0/24 maxlen: 24
91.242.225.0/24 maxlen: 24
91.242.240.0/24 maxlen: 24
157.22.69.0/24 maxlen: 24
157.22.119.0/24 maxlen: 24
176.116.2.0/24 maxlen: 24
176.116.5.0/24 maxlen: 24
176.116.9.0/24 maxlen: 24
176.116.20.0/24 maxlen: 24
176.116.23.0/24 maxlen: 24
176.126.109.0/24 maxlen: 24
176.126.112.0/24 maxlen: 24
176.126.115.0/24 maxlen: 24
178.211.140.0/24 maxlen: 24
193.0.245.0/24 maxlen: 24
193.0.246.0/24 maxlen: 24
193.5.1.0/24 maxlen: 24
193.33.67.0/24 maxlen: 24
193.58.171.0/24 maxlen: 24
193.58.178.0/24 maxlen: 24
194.26.216.0/24 maxlen: 24
194.34.251.0/24 maxlen: 24
195.96.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:f3:48:05:bd:71:86:f7:aa:a9:37:06:92:e5:ce:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 17 18:58:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd2f7145ed17e847ef7f0b80fe625cc7244f769d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:57:61:bc:7e:e1:fd:6d:1e:f8:76:5d:bb:
cf:74:8e:dd:fd:c1:b8:3c:15:49:e8:46:ab:1e:f4:
eb:7e:ea:3e:9b:5a:e9:2c:43:ea:55:4c:0e:9f:24:
f8:53:36:38:69:e7:e7:e9:2b:ff:67:27:0d:46:f8:
e5:a5:02:27:cf:fb:01:ad:b4:74:34:44:7c:44:47:
d3:17:8c:7a:80:80:a0:f4:09:84:00:27:59:c6:ea:
17:7c:9a:e1:eb:de:69:70:d8:85:0e:ed:64:af:dc:
46:c9:ac:7b:6c:2b:a3:18:bc:ff:78:c1:9a:17:0a:
85:d6:cd:3e:df:26:26:bd:d3:94:9d:eb:ae:6a:a3:
4b:c4:ee:17:4b:f1:9a:88:7d:87:f1:00:24:9a:c6:
20:bf:3b:98:b0:fa:64:69:ac:81:e8:0f:cc:e1:bb:
d8:67:ed:df:17:c2:a3:e3:9b:a3:8f:ef:d2:da:c8:
84:7f:76:16:04:04:9e:24:1e:e7:df:14:14:30:5c:
82:7b:6d:46:b4:c3:17:51:71:f3:db:ae:f1:5c:7e:
10:87:15:0a:3b:6f:2b:c8:3e:09:08:7c:16:9e:50:
2f:3f:c5:ca:57:e4:bd:99:0e:5b:cd:df:b6:d5:57:
32:9d:84:f2:cf:70:c2:e9:08:fb:58:8c:e6:7b:11:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2F:71:45:ED:17:E8:47:EF:7F:0B:80:FE:62:5C:C7:24:4F:76:9D
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/zS9xRe0X6EfvfwuA_mJcxyRPdp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.239.0/24
45.129.1.0/24
45.132.39.0/24
45.135.35.0/24
45.138.7.0/24
45.138.156.0/24
45.138.212.0/24
45.138.215.0/24
45.140.65.0/24
45.149.130.0/23
45.152.118.0/23
62.192.136.0/24
62.192.139.0/24
83.138.51.0-83.138.52.255
84.246.82.0/24
91.206.69.0/24
91.224.140.0/24
91.237.104.0/23
91.242.225.0/24
91.242.240.0/24
157.22.69.0/24
157.22.119.0/24
176.116.2.0/24
176.116.5.0/24
176.116.9.0/24
176.116.20.0/24
176.116.23.0/24
176.126.109.0/24
176.126.112.0/24
176.126.115.0/24
178.211.140.0/24
193.0.245.0-193.0.246.255
193.5.1.0/24
193.33.67.0/24
193.58.171.0/24
193.58.178.0/24
194.26.216.0/24
194.34.251.0/24
195.96.155.0/24
Signature Algorithm: sha256WithRSAEncryption
55:74:86:aa:16:67:58:5c:3d:a7:93:e0:09:3d:03:01:a3:8d:
82:98:61:a3:cc:50:dc:88:00:dc:04:b3:a9:f7:ea:71:9d:4f:
0c:55:f5:31:5b:a1:a8:6a:41:c0:b7:3d:ac:96:81:a0:c8:bc:
a6:3b:da:d7:fc:12:37:b8:54:ee:aa:84:94:77:20:b0:b7:26:
59:fe:e7:c8:b8:ca:80:46:94:1f:a5:00:9a:27:fd:5c:f9:91:
16:ef:2e:b2:43:ee:51:c6:26:10:a6:a2:0e:29:2c:70:2a:e1:
2d:76:7a:fe:3c:32:4b:12:be:3f:f1:e5:c8:38:d4:27:11:91:
cb:28:9b:ec:0b:99:68:6f:e8:ef:76:d7:2c:c8:4a:4b:68:04:
ce:fa:19:01:b5:21:4f:08:19:72:c2:4b:8e:05:c8:c8:f1:fc:
58:98:2a:18:fe:f2:ab:3c:17:70:e1:ac:c8:b7:4e:83:25:bb:
e6:00:71:d2:07:71:68:6d:9d:dc:2f:4c:d4:de:23:03:f3:7d:
95:41:ae:d6:f5:2c:59:87:7d:37:6e:d4:22:9d:fc:1c:a9:26:
2d:a4:a2:79:10:19:60:30:7d:ad:f5:5a:1d:4a:44:ef:d7:85:
94:ae:ba:cd:59:2b:0a:b9:d4:0d:bf:ad:8b:0c:6d:a1:b3:1f:
c0:be:5a:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 17 23:34:38 2026 by rpki-client