Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QM7a3iy_oGW8i5-lMCuKYaZFBz8.roa
File: QM7a3iy_oGW8i5-lMCuKYaZFBz8.roa (raw, json)
Hash identifier: auc95jG9iHNQampKJnWyEExM30+isIylrrZHBdUMT2I=
Subject key identifier: 40:CE:DA:DE:2C:BF:A0:65:BC:8B:9F:A5:30:2B:8A:61:A6:45:07:3F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FB2BFB46774D957BCD71039F8765EAE8F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QM7a3iy_oGW8i5-lMCuKYaZFBz8.roa
Signing time: Thu 30 Jul 2026 11:18:55 +0000
ROA not before: Thu 30 Jul 2026 11:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 5.42.218.0/24 maxlen: 24
31.41.253.0/24 maxlen: 24
45.87.124.0/24 maxlen: 24
45.87.125.0/24 maxlen: 24
45.87.127.0/24 maxlen: 24
45.128.124.0/24 maxlen: 24
45.128.128.0/24 maxlen: 24
45.129.198.0/24 maxlen: 24
45.150.112.0/24 maxlen: 24
62.3.7.0/24 maxlen: 24
62.3.31.0/24 maxlen: 24
77.72.83.0/24 maxlen: 24
77.72.84.0/24 maxlen: 24
84.252.69.0/24 maxlen: 24
88.151.11.0/24 maxlen: 24
88.151.112.0/24 maxlen: 24
88.151.115.0/24 maxlen: 24
88.218.184.0/24 maxlen: 24
88.218.185.0/24 maxlen: 24
88.218.186.0/24 maxlen: 24
88.218.187.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
91.209.31.0/24 maxlen: 24
91.210.68.0/24 maxlen: 24
91.210.69.0/24 maxlen: 24
91.210.71.0/24 maxlen: 24
91.212.169.0/24 maxlen: 24
91.228.215.0/24 maxlen: 24
91.239.212.0/24 maxlen: 24
91.239.213.0/24 maxlen: 24
94.143.230.0/24 maxlen: 24
109.205.62.0/24 maxlen: 24
146.19.51.0/24 maxlen: 24
146.19.111.0/24 maxlen: 24
146.19.120.0/24 maxlen: 24
146.255.186.0/24 maxlen: 24
176.118.38.0/24 maxlen: 24
176.126.98.0/24 maxlen: 24
176.126.102.0/24 maxlen: 24
185.94.67.0/24 maxlen: 24
185.109.236.0/24 maxlen: 24
185.109.237.0/24 maxlen: 24
185.109.238.0/24 maxlen: 24
185.109.239.0/24 maxlen: 24
185.128.41.0/24 maxlen: 24
185.128.42.0/24 maxlen: 24
185.128.43.0/24 maxlen: 24
185.128.224.0/24 maxlen: 24
185.209.50.0/24 maxlen: 24
185.211.168.0/24 maxlen: 24
185.211.169.0/24 maxlen: 24
185.211.171.0/24 maxlen: 24
185.214.164.0/24 maxlen: 24
185.214.165.0/24 maxlen: 24
185.214.167.0/24 maxlen: 24
185.244.161.0/24 maxlen: 24
186.243.128.0/24 maxlen: 24
186.243.141.0/24 maxlen: 24
186.243.142.0/24 maxlen: 24
186.243.144.0/24 maxlen: 24
186.243.145.0/24 maxlen: 24
186.243.147.0/24 maxlen: 24
186.243.149.0/24 maxlen: 24
186.243.150.0/24 maxlen: 24
186.243.151.0/24 maxlen: 24
186.243.155.0/24 maxlen: 24
186.243.185.0/24 maxlen: 24
186.243.186.0/24 maxlen: 24
186.243.189.0/24 maxlen: 24
186.243.191.0/24 maxlen: 24
186.243.192.0/24 maxlen: 24
186.243.194.0/24 maxlen: 24
186.243.198.0/24 maxlen: 24
186.243.228.0/24 maxlen: 24
186.243.233.0/24 maxlen: 24
186.243.234.0/24 maxlen: 24
186.243.235.0/24 maxlen: 24
186.243.237.0/24 maxlen: 24
186.243.239.0/24 maxlen: 24
186.243.240.0/24 maxlen: 24
186.243.242.0/24 maxlen: 24
186.243.254.0/24 maxlen: 24
186.243.255.0/24 maxlen: 24
186.246.56.0/24 maxlen: 24
186.246.57.0/24 maxlen: 24
186.246.60.0/24 maxlen: 24
186.246.80.0/24 maxlen: 24
186.246.100.0/24 maxlen: 24
186.246.103.0/24 maxlen: 24
186.246.104.0/24 maxlen: 24
186.246.123.0/24 maxlen: 24
186.246.124.0/24 maxlen: 24
186.246.125.0/24 maxlen: 24
186.246.127.0/24 maxlen: 24
193.0.62.0/24 maxlen: 24
193.17.65.0/24 maxlen: 24
193.33.188.0/24 maxlen: 24
193.104.177.0/24 maxlen: 24
193.200.61.0/24 maxlen: 24
193.228.129.0/24 maxlen: 24
193.228.131.0/24 maxlen: 24
194.59.222.0/24 maxlen: 24
194.60.76.0/24 maxlen: 24
194.110.251.0/24 maxlen: 24
195.35.105.0/24 maxlen: 24
195.64.103.0/24 maxlen: 24
195.69.161.0/24 maxlen: 24
195.69.162.0/24 maxlen: 24
195.211.164.0/24 maxlen: 24
212.6.36.0/24 maxlen: 24
212.107.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:bf:b4:67:74:d9:57:bc:d7:10:39:f8:76:5e:ae:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 30 11:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40cedade2cbfa065bc8b9fa5302b8a61a645073f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:47:98:c1:99:07:b1:af:62:24:8e:a4:3b:
5a:6e:ed:d7:66:06:80:98:b9:aa:a0:85:9c:08:1b:
d7:6c:22:cb:62:5c:07:c7:7d:48:e6:54:60:c0:73:
ad:a8:70:e7:2e:94:5c:81:87:d8:ce:60:83:63:ea:
52:83:61:1f:21:da:f8:5a:ad:a0:63:8f:f5:89:14:
9d:ed:c3:b0:28:3f:fd:f1:6c:c5:0f:04:f9:6d:67:
fb:12:c2:c1:ff:ec:31:03:cd:a2:7d:7f:26:cd:08:
f9:48:8e:ff:53:59:5f:b9:49:4b:ff:1b:91:d5:fc:
7d:ca:40:7f:02:e1:ed:18:4a:1b:da:1d:48:ee:fa:
87:f8:71:dd:f9:f7:af:fd:4e:bd:20:d1:3e:76:c7:
6a:79:97:00:05:80:8e:9d:b2:44:c2:73:5a:52:39:
25:ec:b7:e3:f0:92:8a:fb:2f:5a:4f:b5:33:c5:d4:
51:a3:ec:50:34:88:f3:53:24:a0:27:8c:36:41:7a:
c7:fe:83:e2:fd:4e:75:e5:e7:c8:16:48:89:b0:22:
3c:72:2a:2b:50:24:3b:c9:62:01:26:57:70:e4:50:
6f:ed:61:89:d7:26:c7:3c:5b:c1:57:15:41:52:ee:
76:23:3e:04:12:55:c0:50:2f:61:d5:0f:da:e9:38:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:DA:DE:2C:BF:A0:65:BC:8B:9F:A5:30:2B:8A:61:A6:45:07:3F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QM7a3iy_oGW8i5-lMCuKYaZFBz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.218.0/24
31.41.253.0/24
45.87.124.0/23
45.87.127.0/24
45.128.124.0/24
45.128.128.0/24
45.129.198.0/24
45.150.112.0/24
62.3.7.0/24
62.3.31.0/24
77.72.83.0-77.72.84.255
84.252.69.0/24
88.151.11.0/24
88.151.112.0/24
88.151.115.0/24
88.218.184.0/22
91.190.158.0/24
91.209.31.0/24
91.210.68.0/23
91.210.71.0/24
91.212.169.0/24
91.228.215.0/24
91.239.212.0/23
94.143.230.0/24
109.205.62.0/24
146.19.51.0/24
146.19.111.0/24
146.19.120.0/24
146.255.186.0/24
176.118.38.0/24
176.126.98.0/24
176.126.102.0/24
185.94.67.0/24
185.109.236.0/22
185.128.41.0-185.128.43.255
185.128.224.0/24
185.209.50.0/24
185.211.168.0/23
185.211.171.0/24
185.214.164.0/23
185.214.167.0/24
185.244.161.0/24
186.243.128.0/24
186.243.141.0-186.243.142.255
186.243.144.0/23
186.243.147.0/24
186.243.149.0-186.243.151.255
186.243.155.0/24
186.243.185.0-186.243.186.255
186.243.189.0/24
186.243.191.0-186.243.192.255
186.243.194.0/24
186.243.198.0/24
186.243.228.0/24
186.243.233.0-186.243.235.255
186.243.237.0/24
186.243.239.0-186.243.240.255
186.243.242.0/24
186.243.254.0/23
186.246.56.0/23
186.246.60.0/24
186.246.80.0/24
186.246.100.0/24
186.246.103.0-186.246.104.255
186.246.123.0-186.246.125.255
186.246.127.0/24
193.0.62.0/24
193.17.65.0/24
193.33.188.0/24
193.104.177.0/24
193.200.61.0/24
193.228.129.0/24
193.228.131.0/24
194.59.222.0/24
194.60.76.0/24
194.110.251.0/24
195.35.105.0/24
195.64.103.0/24
195.69.161.0-195.69.162.255
195.211.164.0/24
212.6.36.0/24
212.107.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6f:5e:5c:ae:64:33:77:2f:c3:08:d6:61:fb:18:01:57:da:
75:a7:fc:1e:71:5d:e5:5b:f8:c3:00:37:93:0e:0e:9a:d6:ca:
c1:1d:1c:03:87:11:26:98:db:00:43:76:95:e4:4b:2c:9d:f9:
9e:9e:2f:f0:60:5d:78:07:89:64:73:d6:f4:75:dc:e5:95:0e:
80:2a:5f:c6:2d:b6:13:97:04:10:99:3c:b9:ed:7f:a3:f9:3d:
2c:9e:2c:a2:af:2e:55:a7:66:ec:4e:96:81:3b:62:25:86:18:
f2:1a:e8:e9:c2:ec:ac:2c:75:36:64:b5:95:69:69:81:cf:3a:
cb:95:55:8e:b4:c2:25:e9:d8:7f:c9:96:60:45:66:a7:aa:0c:
18:12:b4:ee:86:df:d4:eb:6d:e1:22:31:6c:6a:e4:fb:93:8a:
0c:43:fe:84:ba:c3:06:a1:38:6a:0c:2b:de:d8:c4:5e:97:30:
68:0f:f9:1b:18:bc:7d:24:05:20:f3:ef:5b:86:be:3f:2b:b2:
5e:e3:cf:31:69:ba:9d:cd:96:08:1d:06:51:40:26:f2:da:41:
aa:3c:28:68:38:15:b9:03:28:71:bb:f5:93:5d:65:44:99:15:
1c:5f:9b:b9:ba:bf:2e:cf:18:41:6b:6d:7b:0d:45:83:4c:20:
90:3c:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 14:09:47 2026 by rpki-client