Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cnEi-Ki70Lur37PsrVuxcct_xT8.roa
File: cnEi-Ki70Lur37PsrVuxcct_xT8.roa (raw, json)
Hash identifier: K6Olbamib7IE+QThj/c4k+tC3NLj01l9KIFYAodQG4E=
Subject key identifier: 72:71:22:F8:A8:BB:D0:BB:AB:DF:B3:EC:AD:5B:B1:71:CB:7F:C5:3F
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019FD74F2D711654B4710502AC48275DA7EC
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cnEi-Ki70Lur37PsrVuxcct_xT8.roa
Signing time: Thu 06 Aug 2026 13:41:58 +0000
ROA not before: Thu 06 Aug 2026 13:41:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43939
IP address blocks: 5.57.128.0/18 maxlen: 20
62.69.192.0/18 maxlen: 18
77.87.136.0/21 maxlen: 24
77.88.128.0/18 maxlen: 24
78.9.32.0/21 maxlen: 21
78.11.243.0/24 maxlen: 24
80.238.64.0/19 maxlen: 25
83.142.56.0/21 maxlen: 21
83.143.96.0/21 maxlen: 24
84.38.96.0/20 maxlen: 24
84.234.0.0/20 maxlen: 24
84.234.32.0/20 maxlen: 24
85.202.208.0/20 maxlen: 24
87.99.0.0/18 maxlen: 24
87.99.32.0/19 maxlen: 19
87.239.72.0/21 maxlen: 21
89.187.224.0/19 maxlen: 24
89.200.152.0/21 maxlen: 24
90.156.0.0/17 maxlen: 24
91.142.192.0/20 maxlen: 24
91.145.128.0/18 maxlen: 25
91.146.192.0/18 maxlen: 24
91.150.128.0/19 maxlen: 24
91.195.232.0/23 maxlen: 24
91.202.172.0/22 maxlen: 24
91.215.228.0/22 maxlen: 24
91.220.225.0/24 maxlen: 24
93.181.128.0/18 maxlen: 24
95.155.64.0/18 maxlen: 24
178.214.128.0/19 maxlen: 19
178.252.0.0/18 maxlen: 25
185.2.36.0/22 maxlen: 24
188.114.95.0/24 maxlen: 24
193.19.122.0/23 maxlen: 24
193.58.232.0/24 maxlen: 24
193.105.180.0/24 maxlen: 24
193.107.196.0/22 maxlen: 22
193.138.140.0/22 maxlen: 22
193.151.64.0/22 maxlen: 24
193.151.64.0/23 maxlen: 23
193.238.40.0/22 maxlen: 24
193.239.224.0/23 maxlen: 24
194.6.204.0/22 maxlen: 24
194.33.185.0/24 maxlen: 24
194.146.128.0/22 maxlen: 24
194.150.238.0/23 maxlen: 24
194.187.180.0/22 maxlen: 24
194.242.0.0/23 maxlen: 24
195.74.56.0/22 maxlen: 24
195.128.180.0/23 maxlen: 24
195.222.100.0/22 maxlen: 24
195.225.248.0/22 maxlen: 24
217.197.64.0/20 maxlen: 24
2a00:1d18::/32 maxlen: 32
2a02:2270::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:4f:2d:71:16:54:b4:71:05:02:ac:48:27:5d:a7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Aug 6 13:41:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=727122f8a8bbd0bbabdfb3ecad5bb171cb7fc53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:3c:7d:8e:89:64:38:f3:52:c1:99:8f:03:
03:63:96:44:6b:18:49:42:bf:d0:0e:bb:d9:ca:92:
c2:a3:15:0b:63:b6:59:26:9c:31:2d:69:24:05:02:
86:b4:50:c1:fe:26:8f:45:a6:47:c9:e6:3d:18:de:
f9:05:ce:b6:fb:a0:ba:9d:4f:69:10:dd:bb:a9:c6:
05:d3:e8:d1:a6:26:1b:26:cb:25:a2:75:5e:40:df:
65:2a:6b:d6:9f:b1:74:82:f2:40:7f:92:86:23:54:
d9:77:d8:0c:80:30:d4:75:a5:8f:96:0b:ca:16:9e:
a3:7f:29:19:b7:9d:c3:4f:fa:03:b4:ce:61:8d:c8:
27:75:be:23:57:90:cd:ec:81:89:9f:9c:11:cd:c7:
5d:fe:9a:e6:d1:af:ad:6e:bf:a5:db:50:a7:08:2d:
9e:d3:55:33:9a:76:86:59:62:8b:56:0e:25:b3:9c:
63:47:16:1a:dc:07:5c:c3:ee:27:4a:e8:f5:e5:b0:
2b:3e:54:38:33:1e:cd:fd:31:f0:b8:82:46:dd:88:
bb:11:41:86:f4:0c:5b:77:fd:6a:bd:78:33:3b:d7:
85:e2:81:92:93:54:4d:e5:33:06:97:63:65:e3:3c:
75:48:1d:03:28:13:8a:c4:ee:5a:63:ab:6e:91:7a:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:22:F8:A8:BB:D0:BB:AB:DF:B3:EC:AD:5B:B1:71:CB:7F:C5:3F
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cnEi-Ki70Lur37PsrVuxcct_xT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.128.0/18
62.69.192.0/18
77.87.136.0/21
77.88.128.0/18
78.9.32.0/21
78.11.243.0/24
80.238.64.0/19
83.142.56.0/21
83.143.96.0/21
84.38.96.0/20
84.234.0.0/20
84.234.32.0/20
85.202.208.0/20
87.99.0.0/18
87.239.72.0/21
89.187.224.0/19
89.200.152.0/21
90.156.0.0/17
91.142.192.0/20
91.145.128.0/18
91.146.192.0/18
91.150.128.0/19
91.195.232.0/23
91.202.172.0/22
91.215.228.0/22
91.220.225.0/24
93.181.128.0/18
95.155.64.0/18
178.214.128.0/19
178.252.0.0/18
185.2.36.0/22
188.114.95.0/24
193.19.122.0/23
193.58.232.0/24
193.105.180.0/24
193.107.196.0/22
193.138.140.0/22
193.151.64.0/22
193.238.40.0/22
193.239.224.0/23
194.6.204.0/22
194.33.185.0/24
194.146.128.0/22
194.150.238.0/23
194.187.180.0/22
194.242.0.0/23
195.74.56.0/22
195.128.180.0/23
195.222.100.0/22
195.225.248.0/22
217.197.64.0/20
IPv6:
2a00:1d18::/32
2a02:2270::/32
Signature Algorithm: sha256WithRSAEncryption
75:24:5f:57:7f:77:ed:c2:8f:4b:c6:25:e6:49:93:e3:40:3e:
35:af:fc:c6:eb:f8:f7:39:40:40:c4:bb:05:42:4a:2e:68:e7:
bb:de:f0:d1:00:6f:8a:44:1a:79:8a:78:ab:29:0f:ae:8b:75:
a1:a6:f1:a9:6b:a8:d9:51:88:a7:aa:0d:a6:eb:75:81:a5:35:
b8:14:07:86:61:66:26:14:df:32:a3:02:e8:84:14:e5:9b:e2:
b9:84:74:c0:6d:0b:08:a1:92:99:16:bf:75:e9:3f:fb:94:9b:
0d:d6:96:af:34:2a:2d:4e:04:9b:a5:22:b8:39:ae:36:5a:32:
a7:84:fe:68:92:eb:d8:e7:59:9f:99:8c:98:bc:18:87:5c:b3:
e2:a7:94:95:30:ed:19:66:48:70:10:3c:67:93:a8:a9:af:91:
51:62:29:db:37:81:50:a5:29:25:fb:f5:f8:c9:d7:6c:b7:dd:
4b:93:9b:15:ef:83:de:30:67:25:6f:81:8b:1e:fc:25:18:1c:
2d:78:67:b4:b5:a9:02:e8:7f:df:ee:27:30:aa:66:77:8a:ba:
60:1b:ca:71:75:ac:c9:a2:1d:49:53:63:e2:5f:ec:95:85:26:
7e:62:21:84:7c:cc:4a:c4:6a:53:20:28:aa:1e:c4:b5:df:40:
b8:2e:46:85
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAZ/XTy1xFlS0cQUCrEgnXafsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjYwODA2MTM0MTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjcxMjJmOGE4YmJkMGJiYWJkZmIzZWNhZDViYjE3MWNiN2ZjNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpU8fY6JZDjzUsGZjwMDY5ZEaxhJ
Qr/QDrvZypLCoxULY7ZZJpwxLWkkBQKGtFDB/iaPRaZHyeY9GN75Bc62+6C6nU9p
EN27qcYF0+jRpiYbJsslonVeQN9lKmvWn7F0gvJAf5KGI1TZd9gMgDDUdaWPlgvK
Fp6jfykZt53DT/oDtM5hjcgndb4jV5DN7IGJn5wRzcdd/prm0a+tbr+l21CnCC2e
01UzmnaGWWKLVg4ls5xjRxYa3Adcw+4nSuj15bArPlQ4Mx7N/THwuIJG3Yi7EUGG
9Axbd/1qvXgzO9eF4oGSk1RN5TMGl2Nl4zx1SB0DKBOKxO5aY6tukXqF6QIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFHJxIviou9C7q9+z7K1bsXHLf8U/MB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvY25FaS1LaTcwTHVyMzdQc3JWdXhjY3RfeFQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAToEAgABMIIB
MgMEBgU5gAMEBj5FwAMEA01XiAMEBk1YgAMEA04JIAMEAE4L8wMEBVDuQAMEA1OO
OAMEA1OPYAMEBFQmYAMEBFTqAAMEBFTqIAMEBFXK0AMEBldjAAMEA1fvSAMEBVm7
4AMEA1nImAMEB1qcAAMEBFuOwAMEBluRgAMEBluSwAMEBVuWgAMEAVvD6AMEAlvK
rAMEAlvX5AMEAFvc4QMEBl21gAMEBl+bQAMEBbLWgAMEBrL8AAMEArkCJAMEALxy
XwMEAcETegMEAME66AMEAMFptAMEAsFrxAMEAsGKjAMEAsGXQAMEAsHuKAMEAcHv
4AMEAsIGzAMEAMIhuQMEAsKSgAMEAcKW7gMEAsK7tAMEAcLyAAMEAsNKOAMEAcOA
tAMEAsPeZAMEAsPh+AMEBNnFQDAUBAIAAjAOAwUAKgAdGAMFACoCInAwDQYJKoZI
hvcNAQELBQADggEBAHUkX1d/d+3Cj0vGJeZJk+NAPjWv/Mbr+Pc5QEDEuwVCSi5o
57ve8NEAb4pEGnmKeKspD66LdaGm8alrqNlRiKeqDabrdYGlNbgUB4ZhZiYU3zKj
AuiEFOWb4rmEdMBtCwihkpkWv3XpP/uUmw3Wlq80Ki1OBJulIrg5rjZaMqeE/miS
69jnWZ+ZjJi8GIdcs+KnlJUw7RlmSHAQPGeTqKmvkVFiKds3gVClKSX79fjJ12y3
3UuTmxXvg94wZyVvgYse/CUYHC14Z7S1qQLof9/uJzCqZneKumAbynF1rMmiHUlT
Y+Jf7JWFJn5iIYR8zErEalMgKKoexLXfQLguRoU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:13:40 2026 by rpki-client