Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/6bqSRqlaetgo1X1KRDYznc_MZ38.roa
File: 6bqSRqlaetgo1X1KRDYznc_MZ38.roa (raw, json)
Hash identifier: zST/NbIodPxfGXmqtcoxxPEazruAzM3FsrF4C9qktz0=
Subject key identifier: E9:BA:92:46:A9:5A:7A:D8:28:D5:7D:4A:44:36:33:9D:CF:CC:67:7F
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019FEC5575E2CC391B1FDC03AFAB719BC339
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/6bqSRqlaetgo1X1KRDYznc_MZ38.roa
Signing time: Mon 10 Aug 2026 15:40:51 +0000
ROA not before: Mon 10 Aug 2026 15:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 45.9.72.0/24 maxlen: 24
45.138.73.0/24 maxlen: 24
45.138.74.0/24 maxlen: 24
46.17.105.0/24 maxlen: 24
91.103.252.0/23 maxlen: 23
91.217.76.0/24 maxlen: 24
94.142.136.0/23 maxlen: 23
95.214.9.0/24 maxlen: 24
95.214.10.0/23 maxlen: 23
185.40.7.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.94.164.0/23 maxlen: 23
185.102.136.0/24 maxlen: 24
185.106.93.0/24 maxlen: 24
185.117.116.0/24 maxlen: 24
185.117.119.0/24 maxlen: 24
185.174.136.0/23 maxlen: 23
185.200.190.0/24 maxlen: 24
185.217.197.0/24 maxlen: 24
185.232.170.0/23 maxlen: 23
185.233.80.0/23 maxlen: 23
185.233.82.0/24 maxlen: 24
185.233.202.0/23 maxlen: 23
185.252.144.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.188.0/23 maxlen: 23
193.124.190.0/24 maxlen: 24
194.36.178.0/23 maxlen: 23
2a04:5200:68::/48 maxlen: 48
2a04:5201:2::/48 maxlen: 48
2a04:5201:4::/48 maxlen: 48
2a04:5201:6::/48 maxlen: 48
2a04:5201:7::/48 maxlen: 48
2a04:5201:9::/48 maxlen: 48
2a04:5201:10::/48 maxlen: 48
2a04:5201:8018::/48 maxlen: 48
2a04:5202::/48 maxlen: 48
2a0b:7780::/32 maxlen: 32
2a0b:7781::/32 maxlen: 32
2a0b:7782::/32 maxlen: 32
2a0b:7783::/32 maxlen: 32
2a0c:77c0::/32 maxlen: 32
2a0c:77c1::/32 maxlen: 32
2a0c:77c2::/32 maxlen: 32
2a0c:77c3::/32 maxlen: 32
2a0d:3880::/32 maxlen: 32
2a0d:3881::/32 maxlen: 32
2a0d:3882::/32 maxlen: 32
2a0d:3883::/32 maxlen: 32
2a0e:d604:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:55:75:e2:cc:39:1b:1f:dc:03:af:ab:71:9b:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Aug 10 15:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9ba9246a95a7ad828d57d4a4436339dcfcc677f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:1b:4b:71:96:d0:1f:ff:60:66:86:17:ff:
08:ea:1c:d2:24:75:53:22:aa:0d:ac:23:fd:b1:99:
bf:d8:46:19:4c:66:d3:56:e8:eb:f0:aa:57:12:f3:
35:11:87:fd:78:4e:e9:cb:a0:fd:38:14:2e:91:d2:
ed:02:02:d0:f5:11:55:b9:93:51:a0:d4:be:12:9f:
2a:98:ed:0f:cc:e1:5c:c1:73:da:3f:38:9b:bb:4b:
2e:5a:63:c0:3c:44:51:52:b1:2f:58:0a:a3:f8:9f:
5f:7d:4e:48:83:fa:66:22:57:3a:67:92:13:18:99:
9f:df:95:a3:f8:0b:e0:9f:fe:a9:9c:08:a0:32:dd:
76:59:61:21:48:ac:b1:82:e5:bf:a2:c8:26:29:74:
b5:cc:7b:28:19:c7:b2:61:f2:0e:2d:85:8f:2f:c3:
1f:1d:0c:a9:b5:b9:e4:78:f3:52:46:20:9d:b5:48:
4b:c9:88:0b:b8:77:29:37:91:e6:f1:4b:a0:9e:8d:
97:11:0d:6f:f7:36:5c:58:08:54:d4:1d:f2:e3:60:
22:04:8e:86:b6:e2:2c:16:f4:f5:b3:2b:0a:38:5a:
d6:51:d7:f3:e4:79:2c:d3:fd:88:a6:dc:96:e7:31:
3d:b6:58:08:81:b7:d5:17:5c:7b:91:60:33:f7:59:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BA:92:46:A9:5A:7A:D8:28:D5:7D:4A:44:36:33:9D:CF:CC:67:7F
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/6bqSRqlaetgo1X1KRDYznc_MZ38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.72.0/24
45.138.73.0-45.138.74.255
46.17.105.0/24
91.103.252.0/23
91.217.76.0/24
94.142.136.0/23
95.214.9.0-95.214.11.255
185.40.7.0/24
185.58.204.0/24
185.94.164.0/23
185.102.136.0/24
185.106.93.0/24
185.117.116.0/24
185.117.119.0/24
185.174.136.0/23
185.200.190.0/24
185.217.197.0/24
185.232.170.0/23
185.233.80.0-185.233.82.255
185.233.202.0/23
185.252.144.0/24
193.124.182.0/23
193.124.188.0-193.124.190.255
194.36.178.0/23
IPv6:
2a04:5200:68::/48
2a04:5201:2::/48
2a04:5201:4::/48
2a04:5201:6::/47
2a04:5201:9::/48
2a04:5201:10::/48
2a04:5201:8018::/48
2a04:5202::/48
2a0b:7780::/30
2a0c:77c0::/30
2a0d:3880::/30
2a0e:d604:2::/48
Signature Algorithm: sha256WithRSAEncryption
a1:b6:00:3b:e4:6e:db:a3:2e:37:71:20:fa:69:b6:62:96:1b:
ac:1b:42:1b:60:2c:06:ac:c6:89:be:91:38:aa:12:15:cd:68:
34:6c:49:21:71:04:ee:f7:45:3e:29:65:c5:7e:7e:33:47:93:
01:c6:73:65:47:60:f6:51:50:fb:1a:fb:37:3a:9d:72:14:9e:
e4:bf:55:bf:48:66:1c:9f:6f:0d:0b:a5:05:c6:b1:90:bf:3e:
30:5a:3f:7c:03:c5:73:e8:eb:5b:3f:f4:be:e9:8f:2e:83:d5:
a5:7a:8c:19:ec:78:34:7a:cf:e4:c4:cd:6a:02:e5:93:85:14:
2e:45:ba:28:9f:e2:74:a6:fd:07:e1:16:03:58:3b:2f:bf:19:
ff:6e:a0:ee:7a:d4:4c:d9:14:a9:53:92:f8:bb:75:c8:af:f7:
f0:b7:44:cc:02:d4:41:59:64:21:cc:81:7e:0b:a6:73:85:ba:
74:8f:62:b7:c9:d2:8d:a8:52:bf:c3:58:6a:2d:9f:da:1b:ff:
1a:fc:21:60:a9:f6:9e:b5:e1:8c:a5:19:82:a2:79:e3:3f:dc:
5c:72:dd:4f:66:64:9c:38:74:48:6a:3d:41:b4:6e:b9:5d:68:
75:f1:99:fe:f1:dc:a8:45:f7:93:7a:73:b0:c3:9e:98:6c:a0:
b9:f4:69:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:08:32 2026 by rpki-client