Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Ij3MuUT1-tIhj9sU81q6_ueIY9g.roa
File: Ij3MuUT1-tIhj9sU81q6_ueIY9g.roa (raw, json)
Hash identifier: UGrCS2v6uim81FWi+uHoeKPGV0nwFbb5MPZ1CqiQspM=
Subject key identifier: 22:3D:CC:B9:44:F5:FA:D2:21:8F:DB:14:F3:5A:BA:FE:E7:88:63:D8
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368CFEA843191AC4848106C583323C3
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Ij3MuUT1-tIhj9sU81q6_ueIY9g.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205090
IP address blocks: 45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
45.132.255.0/24 maxlen: 24
45.142.122.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.40.4.0/24 maxlen: 24
185.102.139.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.104.251.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.102.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
185.221.160.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
185.232.169.0/24 maxlen: 24
185.233.83.0/24 maxlen: 24
185.233.200.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
2a09:5302::/32 maxlen: 32
2a09:5302:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cf:ea:84:31:91:ac:48:48:10:6c:58:33:23:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=223dccb944f5fad2218fdb14f35abafee78863d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:33:f1:17:c2:07:f4:9e:ca:66:65:1b:91:
f1:b6:19:d1:aa:12:e8:1e:02:e6:3e:c2:54:83:8f:
8f:59:d8:2e:b4:c3:5b:ff:8e:dd:78:6c:b6:0e:90:
d1:06:2b:f2:7c:7a:71:c9:4f:69:7b:e4:2c:99:39:
9b:fb:86:44:27:4d:04:f5:b0:73:32:59:fa:97:8d:
19:e2:2d:0b:38:14:b8:52:d7:69:75:1e:4c:7b:23:
0f:c3:e7:c9:ac:8c:47:b2:2e:5f:67:04:51:ac:76:
3b:9f:6e:0f:f4:fe:37:8a:83:e8:73:35:7a:50:0d:
3a:cf:c5:0d:63:3b:bb:68:bf:ff:a6:87:89:28:9c:
87:38:a6:a7:c2:74:98:5d:4e:a5:a0:90:42:73:14:
9b:28:01:42:bf:53:d0:3e:f2:20:2e:c5:eb:5e:d3:
c8:38:14:b6:67:ac:c7:74:73:8a:a8:37:9b:83:a7:
84:82:ec:b7:3c:03:96:32:a8:6d:6b:65:0d:8c:d0:
6f:20:4f:ef:ba:6e:68:76:02:55:46:6b:f7:37:b7:
f2:6d:31:e5:5c:b6:6b:4b:6c:81:fe:74:27:7d:fb:
27:a7:18:2b:b4:81:06:05:65:26:61:ae:3e:71:d7:
06:37:da:e5:02:9a:c4:35:59:19:01:40:16:f5:55:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3D:CC:B9:44:F5:FA:D2:21:8F:DB:14:F3:5A:BA:FE:E7:88:63:D8
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Ij3MuUT1-tIhj9sU81q6_ueIY9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
45.132.255.0/24
45.142.122.0/24
84.252.73.0-84.252.75.255
85.209.2.0/24
185.40.4.0/24
185.102.139.0/24
185.103.109.0/24
185.104.251.0/24
185.112.101.0-185.112.103.255
185.217.198.0/23
185.221.160.0/24
185.221.162.0/24
185.232.169.0/24
185.233.83.0/24
185.233.200.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
Signature Algorithm: sha256WithRSAEncryption
35:ef:93:85:22:f1:10:1e:54:76:3a:11:f9:6f:5b:ad:cf:23:
a1:e0:f4:2f:35:94:16:83:cc:3e:fb:07:6a:39:37:96:35:62:
d1:24:28:c7:e8:08:e5:0c:c0:9b:fc:ee:a4:f7:77:ee:3d:ee:
1a:18:79:e2:c3:0c:5f:b1:8a:f8:bb:a6:9b:f0:3f:ec:f4:79:
08:73:2e:ec:e6:9e:b3:7a:c6:8f:97:0d:c5:b0:5a:ad:3d:04:
ee:9b:d8:f4:a0:d2:69:7c:97:d9:db:48:f3:65:55:b4:6a:60:
6a:ab:cd:19:98:7e:76:7f:87:e5:15:35:f3:d4:a8:da:a4:fb:
c3:00:b7:6d:a8:33:11:b9:1a:fe:e6:30:5e:1d:4a:c8:9c:7b:
f5:6e:14:fd:f1:76:94:13:90:26:e3:ef:8a:39:fa:5b:9d:b4:
70:c0:2c:1a:fa:17:10:37:c5:a1:71:74:d9:22:f8:30:66:84:
c2:2a:77:8b:c9:fb:89:a3:56:2a:f0:ff:a9:44:6c:90:3b:87:
b0:94:8c:ef:6a:9b:b6:e6:f2:29:13:62:48:9e:c1:e7:a1:15:
bc:98:cf:38:60:b9:d9:99:5e:4f:32:fe:73:9b:4f:d7:7e:88:
e9:a2:41:63:eb:c0:cd:17:af:b9:ff:7b:32:5e:07:62:05:66:
5b:f5:2d:be
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAZ8jaM/qhDGRrEhIEGxYMyPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjNkY2NiOTQ0ZjVmYWQyMjE4ZmRiMTRmMzVhYmFmZWU3ODg2M2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u8z8RfCB/SeymZlG5HxthnRqhLo
HgLmPsJUg4+PWdgutMNb/47deGy2DpDRBivyfHpxyU9pe+QsmTmb+4ZEJ00E9bBz
Mln6l40Z4i0LOBS4UtdpdR5MeyMPw+fJrIxHsi5fZwRRrHY7n24P9P43ioPoczV6
UA06z8UNYzu7aL//poeJKJyHOKanwnSYXU6loJBCcxSbKAFCv1PQPvIgLsXrXtPI
OBS2Z6zHdHOKqDebg6eEguy3PAOWMqhta2UNjNBvIE/vum5odgJVRmv3N7fybTHl
XLZrS2yB/nQnffsnpxgrtIEGBWUmYa4+cdcGN9rlAprENVkZAUAW9VW17wIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFCI9zLlE9frSIY/bFPNauv7niGPYMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvSWozTXVVVDEtdEloajlzVTgxcTZfdWVJWTlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBmwQCAAEwgZQDBAAt
CUkDBAAtCUsDBAAtWUEDBAItWtgDBAEtX8oDBAAthP8DBAAtjnowDAMEAFT8SQME
AlT8SAMEAFXRAgMEALkoBAMEALlmiwMEALlnbQMEALlo+zAMAwQAuXBlAwQDuXBg
AwQBudnGAwQAud2gAwQAud2iAwQAueipAwQAuelTAwQAuenIAwQAwaKPAwQAwajj
MA0EAgACMAcDBQAqCVMCMA0GCSqGSIb3DQEBCwUAA4IBAQA175OFIvEQHlR2OhH5
b1utzyOh4PQvNZQWg8w++wdqOTeWNWLRJCjH6AjlDMCb/O6k93fuPe4aGHniwwxf
sYr4u6ab8D/s9HkIcy7s5p6zesaPlw3FsFqtPQTum9j0oNJpfJfZ20jzZVW0amBq
q80ZmH52f4flFTXz1KjapPvDALdtqDMRuRr+5jBeHUrInHv1bhT98XaUE5Am4++K
OfpbnbRwwCwa+hcQN8WhcXTZIvgwZoTCKneLyfuJo1Yq8P+pRGyQO4ewlIzvapu2
5vIpE2JInsHnoRW8mM84YLnZmV5PMv5zm0/XfojpokFj68DNF6+5/3syXgdiBWZb
9S2+
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:23 2026 by rpki-client