Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/SEw5aD8H-bjCYBYIbWDJ_83zjpQ.roa
File: SEw5aD8H-bjCYBYIbWDJ_83zjpQ.roa (raw, json)
Hash identifier: Mpe06vvxQ+nk25r6+nxOOdZI/pnsxHHMvuwAW5Y/PZ0=
Subject key identifier: 48:4C:39:68:3F:07:F9:B8:C2:60:16:08:6D:60:C9:FF:CD:F3:8E:94
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368CF4EABC8D67990FEC3B80D5FF900
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/SEw5aD8H-bjCYBYIbWDJ_83zjpQ.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204997
IP address blocks: 45.144.64.0/24 maxlen: 24
45.144.65.0/24 maxlen: 24
45.144.66.0/24 maxlen: 24
45.144.67.0/24 maxlen: 24
46.17.104.0/24 maxlen: 24
91.217.81.0/24 maxlen: 24
139.28.222.0/24 maxlen: 24
139.28.223.0/24 maxlen: 24
147.78.64.0/24 maxlen: 24
147.78.65.0/24 maxlen: 24
147.78.66.0/24 maxlen: 24
147.78.67.0/24 maxlen: 24
185.17.3.0/24 maxlen: 24
185.40.4.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.104.249.0/24 maxlen: 24
185.139.68.0/24 maxlen: 24
185.139.69.0/24 maxlen: 24
185.139.70.0/24 maxlen: 24
185.139.71.0/24 maxlen: 24
185.174.138.0/24 maxlen: 24
185.180.230.0/24 maxlen: 24
185.180.231.0/24 maxlen: 24
185.188.182.0/24 maxlen: 24
185.188.183.0/24 maxlen: 24
185.189.12.0/22 maxlen: 22
185.189.12.0/24 maxlen: 24
185.189.13.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
185.195.24.0/24 maxlen: 24
185.195.25.0/24 maxlen: 24
185.195.26.0/24 maxlen: 24
185.195.27.0/24 maxlen: 24
185.204.0.0/24 maxlen: 24
185.204.2.0/24 maxlen: 24
185.204.3.0/24 maxlen: 24
185.212.148.0/24 maxlen: 24
185.244.172.0/24 maxlen: 24
185.244.173.0/24 maxlen: 24
185.252.146.0/24 maxlen: 24
185.252.147.0/24 maxlen: 24
185.255.132.0/24 maxlen: 24
185.255.133.0/24 maxlen: 24
185.255.134.0/24 maxlen: 24
185.255.135.0/24 maxlen: 24
193.109.78.0/24 maxlen: 24
193.109.79.0/24 maxlen: 24
195.66.114.0/24 maxlen: 24
2a04:5200:fb01::/48 maxlen: 48
2a04:5200:fb02::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5200:fff2::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff4::/48 maxlen: 48
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5200:fff7::/48 maxlen: 48
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cf:4e:ab:c8:d6:79:90:fe:c3:b8:0d:5f:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=484c39683f07f9b8c26016086d60c9ffcdf38e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:24:d7:c8:25:b5:11:8a:a7:49:94:28:80:
e2:7a:33:cc:94:bc:55:dd:67:c6:02:37:41:b3:14:
c4:22:a4:e1:87:eb:c8:7f:1e:9f:ad:04:80:9c:1b:
26:07:cd:1f:c3:32:6c:2f:93:ba:6f:3a:9b:e9:49:
4d:a8:a7:0b:42:17:94:af:8e:4b:e4:20:bd:52:7e:
a6:95:7c:97:32:85:f4:47:98:9c:3a:4d:d0:a1:41:
3d:5e:63:af:36:4d:34:38:2d:5c:c3:bc:1e:03:ab:
c8:85:79:42:51:5f:a5:cc:4f:b0:13:00:c2:10:8b:
39:56:4c:e0:15:db:c5:06:9b:48:d5:3f:9d:e2:fb:
78:c8:5c:63:28:c2:ba:20:4c:00:0f:a1:ea:c7:f1:
a2:f9:5b:48:48:87:24:ef:f8:f4:c6:0c:6b:8e:24:
5c:d3:df:7e:0a:0a:ff:e3:48:36:66:89:df:71:a2:
b5:34:2d:38:4e:10:1a:24:d1:8b:d2:45:41:6d:f7:
fe:4f:ad:e9:23:d3:9f:6e:80:74:48:95:be:1a:ab:
33:29:2e:70:c3:7e:80:79:2a:f0:21:c2:87:99:1c:
11:ef:52:95:0f:f7:b8:e4:dc:35:65:14:ec:10:6c:
96:7a:f1:9a:a0:24:16:ad:33:5c:f0:00:73:cf:ff:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:39:68:3F:07:F9:B8:C2:60:16:08:6D:60:C9:FF:CD:F3:8E:94
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/SEw5aD8H-bjCYBYIbWDJ_83zjpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.64.0/22
46.17.104.0/24
91.217.81.0/24
139.28.222.0/23
147.78.64.0/22
185.17.3.0/24
185.40.4.0/24
185.104.248.0/23
185.139.68.0/22
185.174.138.0/24
185.180.230.0/23
185.188.182.0/23
185.189.12.0/22
185.195.24.0/22
185.204.0.0/24
185.204.2.0/23
185.212.148.0/24
185.244.172.0/23
185.252.146.0/23
185.255.132.0/22
193.109.78.0/23
195.66.114.0/24
IPv6:
2a04:5200:fb01::-2a04:5200:fb02:ffff:ffff:ffff:ffff:ffff
2a04:5200:ff00::/48
2a04:5200:ff10::/48
2a04:5200:fff1::-2a04:5200:fff9:ffff:ffff:ffff:ffff:ffff
2a04:5200:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
99:1f:15:b6:5a:a6:ad:21:9e:77:1d:f7:06:28:8d:08:d7:b3:
c4:cf:3f:a0:ee:35:e3:dd:96:e8:68:2c:26:5a:4c:a7:b1:32:
79:da:ad:ee:51:7c:30:70:74:a6:b5:ba:14:23:30:7a:87:37:
78:c7:34:67:dc:14:c2:2b:3e:8b:31:09:0e:26:eb:8c:29:f7:
a8:78:a8:43:ee:7e:12:14:74:92:34:49:f0:9f:85:ca:0c:04:
f6:fa:fe:41:b3:02:69:49:a5:7c:22:39:43:22:af:69:28:19:
6a:2d:51:6b:f8:0d:a5:60:5e:c2:d3:82:02:f0:2a:32:e1:35:
56:7d:e0:61:9c:97:99:0c:76:9b:1b:a6:1b:88:ea:2e:c5:45:
46:8d:05:c2:29:13:9e:f3:45:88:da:57:a7:c0:16:80:6c:31:
c6:91:18:5d:9e:d7:9c:77:48:d9:e8:f6:7f:3f:52:ae:8a:05:
d0:3b:af:9e:8a:a8:d8:30:84:81:3b:2e:3d:68:21:20:60:7b:
f8:56:cc:0e:02:d6:fd:bf:49:b9:bd:da:e8:91:d0:8d:95:18:
c6:7c:8a:02:1b:57:21:e7:9d:b0:4a:95:4a:66:2f:0e:e3:82:
d1:73:8d:91:61:b1:a6:df:4f:fa:59:75:23:be:f0:b8:1d:d1:
9f:0e:73:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:40 2026 by rpki-client