Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/caMmT5syTkESjBLCqNK2zx49P30.roa
File: caMmT5syTkESjBLCqNK2zx49P30.roa (raw, json)
Hash identifier: aqggtui5z/uYhUTzWTktZFsRNcvbGLZaDC+gx2yPQDs=
Subject key identifier: 71:A3:26:4F:9B:32:4E:41:12:8C:12:C2:A8:D2:B6:CF:1E:3D:3F:7D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E899787B87CD5986328FAA0206671FE7F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/caMmT5syTkESjBLCqNK2zx49P30.roa
Signing time: Tue 02 Jun 2026 18:27:49 +0000
ROA not before: Tue 02 Jun 2026 18:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213459
IP address blocks: 31.207.5.0/24 maxlen: 24
72.35.246.0/24 maxlen: 24
78.17.0.0/24 maxlen: 24
78.17.1.0/24 maxlen: 24
78.17.3.0/24 maxlen: 24
78.17.4.0/24 maxlen: 24
78.17.5.0/24 maxlen: 24
78.17.7.0/24 maxlen: 24
78.17.11.0/24 maxlen: 24
78.17.12.0/24 maxlen: 24
78.17.17.0/24 maxlen: 24
78.17.18.0/24 maxlen: 24
78.17.27.0/24 maxlen: 24
78.17.28.0/24 maxlen: 24
78.17.29.0/24 maxlen: 24
78.17.33.0/24 maxlen: 24
78.17.34.0/24 maxlen: 24
78.17.35.0/24 maxlen: 24
78.17.39.0/24 maxlen: 24
78.17.40.0/24 maxlen: 24
78.17.46.0/24 maxlen: 24
78.17.47.0/24 maxlen: 24
78.17.54.0/24 maxlen: 24
78.17.55.0/24 maxlen: 24
78.17.64.0/24 maxlen: 24
78.17.65.0/24 maxlen: 24
78.17.66.0/24 maxlen: 24
78.17.67.0/24 maxlen: 24
78.17.76.0/24 maxlen: 24
78.17.84.0/24 maxlen: 24
78.17.85.0/24 maxlen: 24
78.17.86.0/24 maxlen: 24
78.17.96.0/24 maxlen: 24
78.17.99.0/24 maxlen: 24
78.17.100.0/24 maxlen: 24
78.17.101.0/24 maxlen: 24
78.17.103.0/24 maxlen: 24
78.17.110.0/24 maxlen: 24
78.17.111.0/24 maxlen: 24
78.17.112.0/24 maxlen: 24
78.17.113.0/24 maxlen: 24
78.17.116.0/24 maxlen: 24
78.17.134.0/24 maxlen: 24
78.17.216.0/24 maxlen: 24
78.17.240.0/24 maxlen: 24
89.44.76.0/24 maxlen: 24
89.125.24.0/24 maxlen: 24
89.125.26.0/24 maxlen: 24
89.125.32.0/24 maxlen: 24
89.125.39.0/24 maxlen: 24
89.125.52.0/24 maxlen: 24
89.125.57.0/24 maxlen: 24
89.125.59.0/24 maxlen: 24
89.125.72.0/24 maxlen: 24
89.125.74.0/24 maxlen: 24
89.125.75.0/24 maxlen: 24
89.125.81.0/24 maxlen: 24
89.125.86.0/24 maxlen: 24
89.125.87.0/24 maxlen: 24
89.125.114.0/24 maxlen: 24
89.125.115.0/24 maxlen: 24
89.125.116.0/24 maxlen: 24
89.125.117.0/24 maxlen: 24
89.125.118.0/24 maxlen: 24
89.125.196.0/24 maxlen: 24
89.125.198.0/24 maxlen: 24
89.125.199.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
185.141.217.0/24 maxlen: 24
193.124.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:97:87:b8:7c:d5:98:63:28:fa:a0:20:66:71:fe:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 2 18:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71a3264f9b324e41128c12c2a8d2b6cf1e3d3f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:0d:f5:5c:69:9b:e8:29:0b:0d:75:45:94:
e3:b4:25:d5:1f:b3:b4:85:6d:54:8a:b4:08:d0:74:
b5:4c:27:e3:3b:27:5f:b8:7c:10:a4:85:24:31:2f:
99:56:23:17:03:0e:94:43:dc:87:70:22:5f:eb:fb:
18:86:ad:01:31:d6:36:25:89:61:0b:82:e7:ef:a5:
f1:47:ce:cb:0c:2f:55:c6:9b:68:69:26:66:a6:0a:
50:fd:20:b1:80:af:25:65:4e:df:83:52:16:cd:3e:
65:2b:0a:f8:2b:18:57:57:60:13:8e:dc:6e:b0:21:
f5:82:45:86:84:ea:f6:17:ee:50:10:d2:ec:65:44:
4a:5c:30:18:00:dc:2f:7e:69:f8:27:79:47:c3:68:
9c:c7:13:20:d0:50:51:a0:3c:1e:85:40:e6:3e:ab:
48:b0:f0:ee:2c:80:1e:b2:ce:3e:82:a0:d0:6e:72:
f4:81:56:2d:bf:43:5e:87:75:e3:0f:c7:ea:36:f6:
69:9d:31:71:2e:94:d9:12:59:8d:2c:05:96:f7:94:
5a:8b:18:ab:60:da:32:7c:59:ff:dc:83:0c:73:bd:
91:de:c1:da:77:4a:27:be:f2:34:5c:f1:54:a5:2f:
83:89:f5:93:4e:55:0d:7f:2f:3d:21:4e:81:5e:55:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:26:4F:9B:32:4E:41:12:8C:12:C2:A8:D2:B6:CF:1E:3D:3F:7D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/caMmT5syTkESjBLCqNK2zx49P30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.5.0/24
72.35.246.0/24
78.17.0.0/23
78.17.3.0-78.17.5.255
78.17.7.0/24
78.17.11.0-78.17.12.255
78.17.17.0-78.17.18.255
78.17.27.0-78.17.29.255
78.17.33.0-78.17.35.255
78.17.39.0-78.17.40.255
78.17.46.0/23
78.17.54.0/23
78.17.64.0/22
78.17.76.0/24
78.17.84.0-78.17.86.255
78.17.96.0/24
78.17.99.0-78.17.101.255
78.17.103.0/24
78.17.110.0-78.17.113.255
78.17.116.0/24
78.17.134.0/24
78.17.216.0/24
78.17.240.0/24
89.44.76.0/24
89.125.24.0/24
89.125.26.0/24
89.125.32.0/24
89.125.39.0/24
89.125.52.0/24
89.125.57.0/24
89.125.59.0/24
89.125.72.0/24
89.125.74.0/23
89.125.81.0/24
89.125.86.0/23
89.125.114.0-89.125.118.255
89.125.196.0/24
89.125.198.0/23
103.245.229.0/24
185.141.217.0/24
193.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
48:12:0a:b4:66:a2:3e:4f:17:e5:26:4d:86:37:7a:7c:9f:0f:
ef:10:d2:85:db:56:bb:32:f4:3b:80:be:98:af:e1:1d:e6:e3:
3f:1a:67:3e:e5:07:ac:c9:0e:2a:58:1e:c6:11:a4:5c:99:92:
4b:3a:40:d4:cb:54:1d:66:05:4a:89:0e:82:b2:c6:1d:cb:61:
d6:6d:14:a5:9f:d7:06:ab:b3:8c:31:d4:e5:a2:50:b5:e8:94:
ec:ce:a2:db:99:f9:e2:de:95:07:16:3e:85:14:93:f8:cc:5a:
5b:0e:ae:26:aa:b3:81:4e:de:1b:e9:dd:a1:b0:8c:00:f6:3c:
6f:5b:a4:3b:c7:a2:2f:eb:bf:73:6f:50:c9:fc:0f:05:41:7e:
59:3b:3a:1e:01:dc:62:9c:10:8d:db:57:7a:7f:f2:e0:97:b7:
e5:76:1c:d6:94:a9:b4:46:f1:69:04:75:53:93:a6:fa:71:66:
9c:31:2c:32:77:45:87:ed:82:84:3c:68:c2:ee:12:47:04:50:
30:13:07:c9:52:43:a0:b8:a7:70:f5:e4:5f:b7:68:53:6b:89:
51:99:03:11:0f:91:73:47:b1:b2:33:d0:94:1b:54:29:c3:f8:
81:46:56:34:c5:2f:76:2d:56:35:69:6f:b0:f6:09:d8:15:70:
32:3d:3e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:21:08 2026 by rpki-client