Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/NFzJJ4j6wzQfqxhnTBiY1Cn7rYg.roa
File: NFzJJ4j6wzQfqxhnTBiY1Cn7rYg.roa (raw, json)
Hash identifier: 5tZaz3kVj+e7u27N68hInpBHHf3h5dZ15X//Kl1uR3A=
Subject key identifier: 34:5C:C9:27:88:FA:C3:34:1F:AB:18:67:4C:18:98:D4:29:FB:AD:88
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 01A01E96161C18A425974421554E6C923A9E
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/NFzJJ4j6wzQfqxhnTBiY1Cn7rYg.roa
Signing time: Thu 20 Aug 2026 09:52:27 +0000
ROA not before: Thu 20 Aug 2026 09:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48551
IP address blocks: 5.253.225.0/24 maxlen: 24
31.193.186.0/24 maxlen: 24
45.94.252.0/24 maxlen: 24
45.94.254.0/24 maxlen: 24
45.94.255.0/24 maxlen: 24
45.150.150.0/24 maxlen: 24
45.159.196.0/24 maxlen: 24
45.159.197.0/24 maxlen: 24
45.159.198.0/24 maxlen: 24
45.159.199.0/24 maxlen: 24
91.217.177.0/24 maxlen: 24
103.216.60.0/24 maxlen: 24
103.216.61.0/24 maxlen: 24
103.216.62.0/24 maxlen: 24
103.216.63.0/24 maxlen: 24
157.119.188.0/24 maxlen: 24
157.119.190.0/24 maxlen: 24
157.119.191.0/24 maxlen: 24
185.63.114.0/24 maxlen: 24
185.74.221.0/24 maxlen: 24
185.86.180.0/24 maxlen: 24
185.86.181.0/24 maxlen: 24
185.128.40.0/24 maxlen: 24
185.149.192.0/24 maxlen: 24
185.159.189.0/24 maxlen: 24
185.228.58.0/24 maxlen: 24
185.229.135.0/24 maxlen: 24
185.236.36.0/24 maxlen: 24
185.236.37.0/24 maxlen: 24
185.236.38.0/24 maxlen: 24
185.238.143.0/24 maxlen: 24
185.252.84.0/24 maxlen: 24
193.27.9.0/24 maxlen: 24
194.147.212.0/24 maxlen: 24
194.147.222.0/24 maxlen: 24
195.114.4.0/24 maxlen: 24
195.114.5.0/24 maxlen: 24
195.114.8.0/24 maxlen: 24
195.114.9.0/24 maxlen: 24
2a0d:9500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:96:16:1c:18:a4:25:97:44:21:55:4e:6c:92:3a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Aug 20 09:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=345cc92788fac3341fab18674c1898d429fbad88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:e2:7f:83:4a:4d:b0:cc:da:c4:c2:f5:f9:
2f:58:bd:ba:67:5a:3c:b4:84:38:53:be:a4:61:96:
41:16:22:66:73:6c:72:a8:50:bc:a4:0d:cc:46:d3:
45:d7:87:05:7b:80:ac:cd:7a:47:c1:a4:c7:c1:a9:
ea:98:dc:2e:6f:e0:55:5a:43:3c:11:65:56:99:e5:
69:44:66:60:d9:dd:47:87:d6:e5:07:76:c5:ae:d7:
1c:01:90:1f:d8:df:0d:e6:eb:64:42:da:92:3f:91:
ee:54:e6:81:02:8f:26:e4:1c:4c:e8:02:b0:ef:ff:
e7:5e:97:41:f9:c2:51:d6:a3:c2:00:e7:c2:36:e9:
60:d3:23:0c:b5:4e:a0:1b:5a:0c:f4:ef:59:23:fc:
bc:ba:11:44:40:2b:72:90:1a:f9:7b:b4:73:ef:32:
ff:ba:b2:23:d7:b2:3f:15:47:5b:a7:08:56:11:74:
00:23:70:b9:dc:ca:9b:22:1b:47:5d:92:2c:9d:f3:
4e:d9:54:fa:fd:bc:45:68:e2:32:1f:76:29:85:8a:
be:af:a7:7b:70:06:9e:fa:ef:a3:b0:76:43:23:5d:
2b:87:f5:e6:aa:4c:ff:ca:7b:4c:e6:55:86:0c:97:
b6:f3:ef:e7:b7:38:78:db:94:43:a7:8f:4f:fe:dd:
a7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5C:C9:27:88:FA:C3:34:1F:AB:18:67:4C:18:98:D4:29:FB:AD:88
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/NFzJJ4j6wzQfqxhnTBiY1Cn7rYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.225.0/24
31.193.186.0/24
45.94.252.0/24
45.94.254.0/23
45.150.150.0/24
45.159.196.0/22
91.217.177.0/24
103.216.60.0/22
157.119.188.0/24
157.119.190.0/23
185.63.114.0/24
185.74.221.0/24
185.86.180.0/23
185.128.40.0/24
185.149.192.0/24
185.159.189.0/24
185.228.58.0/24
185.229.135.0/24
185.236.36.0-185.236.38.255
185.238.143.0/24
185.252.84.0/24
193.27.9.0/24
194.147.212.0/24
194.147.222.0/24
195.114.4.0/23
195.114.8.0/23
IPv6:
2a0d:9500::/29
Signature Algorithm: sha256WithRSAEncryption
25:45:38:b6:82:37:7f:d0:c7:fb:8b:4b:9c:a4:9e:da:01:7a:
a1:d1:cf:e5:f5:6b:52:e5:85:f4:c6:2b:34:4d:a0:13:71:fd:
76:26:03:64:4b:75:7d:86:e1:af:68:3b:92:ba:65:2a:db:3e:
e7:9f:4e:b3:d6:a2:be:91:d8:e3:00:2b:82:ee:83:f9:fd:01:
3a:f2:f4:59:f0:54:eb:83:aa:d7:6b:c5:4d:3c:4f:ca:b6:27:
07:4b:6c:cd:04:c7:85:c9:6a:f2:b7:7d:dc:e8:da:d8:67:52:
c4:6d:3a:7a:b0:9b:a3:e9:f2:7d:22:92:a7:5e:84:99:0e:8f:
7a:4f:30:c1:e2:a4:53:34:aa:a1:24:b5:24:4a:40:b1:2e:00:
ee:f8:5e:ad:90:e8:8c:45:65:14:0b:c1:fb:93:c9:88:39:f4:
01:5b:98:eb:02:b7:8b:8d:58:04:30:19:eb:ca:e7:0d:c3:b9:
36:37:33:ae:13:a4:df:f2:f5:51:73:22:4d:c0:d6:79:c5:89:
8f:96:fd:6d:9a:03:a8:b8:6b:33:75:55:c5:65:d0:83:6e:fb:
70:93:c9:44:e2:71:ba:d1:2f:ad:e0:46:05:de:c6:97:51:3e:
1d:7f:22:52:ad:d5:7f:de:a6:03:9b:24:9b:e9:1d:19:21:96:
49:95:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:59:36 2026 by rpki-client