Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/7CRp_ZINZa1MK6UaCcab-jG22L0.roa
File: 7CRp_ZINZa1MK6UaCcab-jG22L0.roa (raw, json)
Hash identifier: tZiAJNHi8pyv0ElR7iiN+Sm1KUXzcllOXFLVi9furno=
Subject key identifier: EC:24:69:FD:92:0D:65:AD:4C:2B:A5:1A:09:C6:9B:FA:31:B6:D8:BD
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0679FF66ABF2C201DC84C8F67B18D0ADE
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/7CRp_ZINZa1MK6UaCcab-jG22L0.roa
Signing time: Thu 03 Sep 2026 14:15:31 +0000
ROA not before: Thu 03 Sep 2026 14:15:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 5.183.253.0/24 maxlen: 24
45.10.164.0/24 maxlen: 24
45.10.165.0/24 maxlen: 24
45.10.166.0/24 maxlen: 24
45.132.185.0/24 maxlen: 24
45.138.100.0/24 maxlen: 24
45.138.101.0/24 maxlen: 24
45.138.102.0/24 maxlen: 24
45.138.103.0/24 maxlen: 24
45.148.125.0/24 maxlen: 24
45.148.127.0/24 maxlen: 24
45.151.233.0/24 maxlen: 24
46.21.80.0/24 maxlen: 24
46.21.81.0/24 maxlen: 24
46.21.82.0/24 maxlen: 24
46.21.83.0/24 maxlen: 24
83.171.224.0/24 maxlen: 24
83.171.225.0/24 maxlen: 24
83.171.226.0/24 maxlen: 24
83.171.227.0/24 maxlen: 24
92.118.168.0/24 maxlen: 24
92.118.169.0/24 maxlen: 24
92.118.170.0/24 maxlen: 24
93.177.116.0/24 maxlen: 24
93.177.117.0/24 maxlen: 24
95.81.73.0/24 maxlen: 24
109.122.194.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
141.98.84.0/24 maxlen: 24
141.98.85.0/24 maxlen: 24
141.98.86.0/24 maxlen: 24
141.98.87.0/24 maxlen: 24
147.78.181.0/24 maxlen: 24
185.58.115.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
185.68.185.0/24 maxlen: 24
185.68.246.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
185.77.221.0/24 maxlen: 24
185.79.138.0/24 maxlen: 24
185.79.139.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
185.88.37.0/24 maxlen: 24
185.88.101.0/24 maxlen: 24
185.95.231.0/24 maxlen: 24
185.113.138.0/24 maxlen: 24
185.113.139.0/24 maxlen: 24
193.221.203.0/24 maxlen: 24
194.104.9.0/24 maxlen: 24
194.104.10.0/24 maxlen: 24
213.108.1.0/24 maxlen: 24
213.108.2.0/24 maxlen: 24
213.108.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:9f:f6:6a:bf:2c:20:1d:c8:4c:8f:67:b1:8d:0a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 3 14:15:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec2469fd920d65ad4c2ba51a09c69bfa31b6d8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:46:7b:4b:cd:1c:da:2b:63:47:29:94:da:
87:e1:62:8f:58:f0:e5:13:f7:a8:42:30:0d:d8:d4:
64:e5:16:74:41:29:5f:b9:52:35:e8:43:db:09:d7:
32:a6:75:88:32:99:3e:28:39:d3:6e:e2:d8:2f:d0:
da:37:de:87:cb:6b:86:8b:2d:40:b1:b3:fa:c3:62:
d6:9e:ba:31:04:e9:9c:82:a2:a4:c7:75:ee:4d:ad:
5e:89:8d:0c:1c:c9:c2:13:fb:3e:b9:06:cb:c9:7a:
d4:61:8b:8c:93:e0:83:ba:ab:76:0c:e7:15:a6:61:
be:e7:ea:e5:fd:61:11:53:9e:0a:68:a0:8b:8a:4d:
7f:a2:b0:29:2d:b0:f1:16:40:c9:9c:16:cc:25:56:
47:4e:95:48:7f:83:f0:b7:46:65:0a:8c:f6:df:5e:
42:ec:1f:e4:01:c5:33:48:72:72:ab:ae:f8:76:76:
50:ed:31:a7:36:da:94:ec:db:0c:23:c3:43:1e:67:
3b:ac:17:69:29:d2:c7:dd:fa:ce:27:6b:e4:8a:53:
10:40:c4:d4:b2:d6:fc:52:68:d3:2c:2e:35:92:3d:
bc:a3:d6:02:98:25:d5:86:a9:af:da:1c:9e:25:4d:
6c:32:2e:ed:25:15:83:f9:af:23:b3:cb:a3:a8:1e:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:24:69:FD:92:0D:65:AD:4C:2B:A5:1A:09:C6:9B:FA:31:B6:D8:BD
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/7CRp_ZINZa1MK6UaCcab-jG22L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.253.0/24
45.10.164.0-45.10.166.255
45.132.185.0/24
45.138.100.0/22
45.148.125.0/24
45.148.127.0/24
45.151.233.0/24
46.21.80.0/22
83.171.224.0/22
92.118.168.0-92.118.170.255
93.177.116.0/23
95.81.73.0/24
109.122.194.0/23
141.98.84.0/22
147.78.181.0/24
185.58.115.0/24
185.68.184.0/23
185.68.246.0/23
185.77.221.0/24
185.79.138.0/23
185.88.36.0/23
185.88.101.0/24
185.95.231.0/24
185.113.138.0/23
193.221.203.0/24
194.104.9.0-194.104.10.255
213.108.1.0-213.108.3.255
Signature Algorithm: sha256WithRSAEncryption
34:49:07:6d:b1:79:4d:20:d2:45:23:5e:08:67:d5:4d:a0:84:
20:22:4b:5c:51:06:e7:e6:24:a4:20:ac:74:77:07:cd:9b:0b:
26:38:60:b2:ae:01:44:f8:6d:05:25:96:df:81:b2:51:b0:53:
e5:03:7a:da:aa:a0:e3:c8:4e:2d:af:06:12:90:26:cd:9e:cc:
07:70:28:72:f2:7c:f3:7a:fb:e3:41:1c:90:64:d7:9d:37:76:
a1:85:63:26:d4:6d:b9:23:bc:ed:c5:a2:57:64:33:2b:1e:bc:
1a:0e:37:4d:49:74:5f:ae:a3:05:a9:16:a7:45:f3:0c:e8:57:
14:01:a9:55:4a:14:37:11:ed:de:7e:9f:39:f8:7a:d1:76:39:
35:e0:16:30:4e:6c:15:b4:17:c1:53:56:50:20:81:05:0d:c7:
ed:6c:04:dd:70:fe:a5:8c:7b:d2:15:b3:86:db:3d:a9:a3:69:
42:ed:d4:6a:5d:41:73:97:82:2a:37:73:bd:88:3b:45:ad:75:
64:35:09:b7:cd:c4:ab:9b:d0:88:ac:d4:50:20:8a:b6:2c:8d:
c3:bc:2e:4c:dc:f2:14:4e:67:3e:d0:de:50:23:44:b5:5b:29:
30:22:35:0c:7a:27:e3:5f:90:1d:7a:01:ca:e5:25:b7:67:1b:
c6:56:87:ea
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAaBnn/ZqvywgHchMj2exjQreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjYwOTAzMTQxNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzI0NjlmZDkyMGQ2NWFkNGMyYmE1MWEwOWM2OWJmYTMxYjZkOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWJGe0vNHNorY0cplNqH4WKPWPDl
E/eoQjAN2NRk5RZ0QSlfuVI16EPbCdcypnWIMpk+KDnTbuLYL9DaN96Hy2uGiy1A
sbP6w2LWnroxBOmcgqKkx3XuTa1eiY0MHMnCE/s+uQbLyXrUYYuMk+CDuqt2DOcV
pmG+5+rl/WERU54KaKCLik1/orApLbDxFkDJnBbMJVZHTpVIf4Pwt0ZlCoz2315C
7B/kAcUzSHJyq674dnZQ7TGnNtqU7NsMI8NDHmc7rBdpKdLH3frOJ2vkilMQQMTU
stb8UmjTLC41kj28o9YCmCXVhqmv2hyeJU1sMi7tJRWD+a8js8ujqB5X4QIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFOwkaf2SDWWtTCulGgnGm/oxtti9MB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvN0NScF9aSU5aYTFNSzZVYUNjYWItakcyMkwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCByQQCAAEwgcIDBAAF
t/0wDAMEAi0KpAMEAC0KpgMEAC2EuQMEAi2KZAMEAC2UfQMEAC2UfwMEAC2X6QME
Ai4VUAMEAlOr4DAMAwQDXHaoAwQAXHaqAwQBXbF0AwQAX1FJAwQBbXrCAwQCjWJU
AwQAk061AwQAuTpzAwQBuUS4AwQBuUT2AwQAuU3dAwQBuU+KAwQBuVgkAwQAuVhl
AwQAuV/nAwQBuXGKAwQAwd3LMAwDBADCaAkDBADCaAowDAMEANVsAQMEAtVsADAN
BgkqhkiG9w0BAQsFAAOCAQEANEkHbbF5TSDSRSNeCGfVTaCEICJLXFEG5+YkpCCs
dHcHzZsLJjhgsq4BRPhtBSWW34GyUbBT5QN62qqg48hOLa8GEpAmzZ7MB3AocvJ8
83r740EckGTXnTd2oYVjJtRtuSO87cWiV2QzKx68Gg43TUl0X66jBakWp0XzDOhX
FAGpVUoUNxHt3n6fOfh60XY5NeAWME5sFbQXwVNWUCCBBQ3H7WwE3XD+pYx70hWz
hts9qaNpQu3Ual1Bc5eCKjdzvYg7Ra11ZDUJt83Eq5vQiKzUUCCKtiyNw7wuTNzy
FE5nPtDeUCNEtVspMCI1DHon41+QHXoByuUlt2cbxlaH6g==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:04 2026 by rpki-client