Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/A4o_4n7fujkvq-rD5OQxWBoxwuk.roa
File: A4o_4n7fujkvq-rD5OQxWBoxwuk.roa (raw, json)
Hash identifier: sllddPfSUAys0cNmTIdzs93bBwEXsOth04axZ3WB/hg=
Subject key identifier: 03:8A:3F:E2:7E:DF:BA:39:2F:AB:EA:C3:E4:E4:31:58:1A:31:C2:E9
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368CF06089C2A341A4809FCB52AC336
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/A4o_4n7fujkvq-rD5OQxWBoxwuk.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204339
IP address blocks: 45.9.72.0/24 maxlen: 24
45.138.73.0/24 maxlen: 24
45.138.74.0/24 maxlen: 24
46.17.105.0/24 maxlen: 24
91.217.76.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
185.40.7.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.102.136.0/24 maxlen: 24
185.106.93.0/24 maxlen: 24
185.106.94.0/24 maxlen: 24
185.117.116.0/24 maxlen: 24
185.117.119.0/24 maxlen: 24
185.200.190.0/24 maxlen: 24
185.217.197.0/24 maxlen: 24
185.233.82.0/24 maxlen: 24
185.252.144.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.190.0/24 maxlen: 24
2a04:5200:68::/48 maxlen: 48
2a04:5201:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cf:06:08:9c:2a:34:1a:48:09:fc:b5:2a:c3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=038a3fe27edfba392fabeac3e4e431581a31c2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:ef:98:e4:16:e0:fb:65:ed:e3:a9:fa:6a:
9e:28:14:68:cf:57:2d:f8:5c:49:ec:76:b0:3e:da:
e7:37:2e:fb:2e:51:b7:d4:67:5b:1e:79:bc:69:39:
9b:75:f3:98:5e:d5:68:34:d2:16:b6:f6:58:d4:22:
41:8e:02:87:7e:2b:33:75:30:bf:a8:25:08:2d:49:
38:46:3c:db:f6:69:f6:ae:72:2f:01:0f:be:01:79:
2f:03:d1:24:97:e5:5a:83:df:6b:21:49:17:72:07:
f3:cb:24:aa:d9:38:9a:2d:4b:0a:6c:32:6e:33:5b:
72:a1:cf:eb:55:6b:c2:55:07:38:60:57:c7:cb:bd:
1b:7d:a2:69:9d:35:cb:b5:12:b1:5e:b9:d8:dc:f6:
88:f6:f4:44:b8:29:9e:d2:43:41:a2:63:67:fe:e6:
d5:da:45:92:0e:c8:83:68:30:fe:25:fc:a5:2d:a0:
7a:cf:1d:61:51:22:44:e9:f5:1b:21:3c:07:1f:00:
9b:98:03:3d:60:21:3d:48:f2:7b:84:17:66:7a:a3:
6e:39:5d:71:cf:c1:9e:a6:92:c2:a2:9d:a8:0c:dc:
9a:eb:97:78:c5:35:14:ae:fd:78:47:1e:5e:7c:03:
23:c2:23:67:2f:3d:83:7c:ac:90:2a:87:07:d8:d2:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:3F:E2:7E:DF:BA:39:2F:AB:EA:C3:E4:E4:31:58:1A:31:C2:E9
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/A4o_4n7fujkvq-rD5OQxWBoxwuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.72.0/24
45.138.73.0-45.138.74.255
46.17.105.0/24
91.217.76.0/24
95.214.9.0/24
185.40.7.0/24
185.58.204.0/24
185.102.136.0/24
185.106.93.0-185.106.94.255
185.117.116.0/24
185.117.119.0/24
185.200.190.0/24
185.217.197.0/24
185.233.82.0/24
185.252.144.0/24
193.124.182.0/23
193.124.190.0/24
IPv6:
2a04:5200:68::/48
2a04:5201:2::/48
Signature Algorithm: sha256WithRSAEncryption
5c:74:60:4c:5b:5c:20:1f:0c:41:fc:7e:0a:75:d5:02:c8:c3:
8e:f8:8b:99:df:32:51:29:0c:ec:17:20:0c:82:11:f1:b3:74:
e7:67:1b:e5:9f:4e:b0:35:8e:df:91:bf:f7:b1:52:e7:81:d1:
00:03:d6:28:65:e0:c4:60:c2:ee:76:cd:c7:ce:0a:3c:fc:70:
8a:0f:27:bf:b0:f3:3d:78:98:27:3b:03:11:e4:86:7e:d5:09:
7c:36:10:bd:05:e1:8f:84:12:a0:c7:42:f9:a9:a0:6c:54:1d:
61:2e:9f:39:98:95:b7:eb:67:59:59:48:a8:ca:09:b4:8b:b8:
9f:95:59:5b:63:42:4b:e7:ff:08:08:5c:73:25:b7:dd:ff:4f:
7a:39:2c:cc:72:df:ac:69:a7:f7:2b:0e:90:0a:8b:18:75:d4:
ac:6f:af:b4:6d:1e:36:7a:d5:c6:9a:a7:e6:c4:54:6b:d6:3c:
38:bf:32:5e:93:b6:da:23:14:ee:ee:12:73:d6:33:97:57:5d:
03:d3:c8:35:9b:af:05:a2:94:0a:1d:35:97:b6:f6:d4:9e:5a:
16:ee:38:67:5c:09:a9:c3:df:cd:95:5e:82:2c:ef:be:47:34:
93:89:d3:a8:88:0a:3c:c9:a0:97:6a:5d:41:4d:71:c4:96:bc:
db:5f:ff:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:27 2026 by rpki-client