Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/29UYfr5_5v18Af9DbXii6GgIkoU.roa
File: 29UYfr5_5v18Af9DbXii6GgIkoU.roa (raw, json)
Hash identifier: eM2YUDdVXsnw8sDquecy+R4RMk/NFhfSmEv18aSE6AA=
Subject key identifier: DB:D5:18:7E:BE:7F:E6:FD:7C:01:FF:43:6D:78:A2:E8:68:08:92:85
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 019ED633EE77D6422222E48ED1AE921EEF21
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/29UYfr5_5v18Af9DbXii6GgIkoU.roa
Signing time: Wed 17 Jun 2026 15:29:48 +0000
ROA not before: Wed 17 Jun 2026 15:29:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 81.85.72.0/24 maxlen: 24
81.85.74.0/24 maxlen: 24
81.85.75.0/24 maxlen: 24
185.5.75.0/24 maxlen: 24
185.9.24.0/24 maxlen: 24
185.9.25.0/24 maxlen: 24
185.9.26.0/24 maxlen: 24
185.28.172.0/24 maxlen: 24
185.28.173.0/24 maxlen: 24
185.28.174.0/24 maxlen: 24
185.74.44.0/24 maxlen: 24
185.74.45.0/24 maxlen: 24
185.74.46.0/24 maxlen: 24
185.74.47.0/24 maxlen: 24
213.155.9.0/24 maxlen: 24
213.155.10.0/24 maxlen: 24
213.155.11.0/24 maxlen: 24
213.155.12.0/24 maxlen: 24
213.155.14.0/24 maxlen: 24
213.155.15.0/24 maxlen: 24
213.155.28.0/24 maxlen: 24
217.177.32.0/24 maxlen: 24
217.177.33.0/24 maxlen: 24
217.177.34.0/24 maxlen: 24
217.177.44.0/24 maxlen: 24
217.177.45.0/24 maxlen: 24
217.177.46.0/24 maxlen: 24
217.177.47.0/24 maxlen: 24
217.179.48.0/24 maxlen: 24
217.179.49.0/24 maxlen: 24
2a11:2cc0:2::/47 maxlen: 47
2a11:2cc0:4::/47 maxlen: 47
2a11:2cc0:6::/47 maxlen: 47
2a11:2cc0:8::/47 maxlen: 47
2a11:2cc0:10::/47 maxlen: 47
2a11:2cc0:20::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:33:ee:77:d6:42:22:22:e4:8e:d1:ae:92:1e:ef:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Jun 17 15:29:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbd5187ebe7fe6fd7c01ff436d78a2e868089285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:e5:fd:b8:26:50:4c:3e:be:8c:86:92:5b:
cc:9e:a2:0a:48:84:ec:fe:56:f8:ae:d2:e7:94:ef:
3c:c8:78:b8:1a:96:5f:8d:a9:23:92:a7:85:52:7d:
8b:e1:3d:20:4d:3c:d4:16:2f:03:9b:4c:d1:de:44:
ba:2b:8f:e6:b0:b4:26:82:ed:8f:8a:65:ab:58:50:
2d:58:8a:aa:0a:a9:98:55:91:8c:f0:0f:3e:c9:7c:
2a:f2:e2:89:47:34:93:77:8f:cb:60:c4:a3:48:67:
26:b7:e0:c7:2e:4a:8b:6a:b6:98:53:97:b3:83:b7:
46:46:79:0b:9e:70:73:98:f1:43:1b:c8:44:72:a6:
9a:da:e1:d0:fa:93:c8:77:1a:d6:e6:17:79:c1:2d:
98:14:6d:26:b7:6d:5d:77:14:be:d6:f4:c4:f2:5d:
71:0f:ba:c9:f2:06:45:4d:9d:62:33:0e:d1:bf:cb:
c7:6f:50:49:0f:62:fb:9a:5e:87:20:c6:b0:60:39:
c5:ad:aa:fc:20:c0:73:68:eb:61:3f:36:f3:75:33:
b5:b3:a1:6b:49:35:a7:ef:8a:f2:1f:85:fe:66:d6:
c7:73:63:ce:32:16:b4:20:13:c2:41:3b:01:fa:28:
ab:4f:0b:43:8e:b7:3f:58:0b:b8:f3:8c:84:b6:73:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:18:7E:BE:7F:E6:FD:7C:01:FF:43:6D:78:A2:E8:68:08:92:85
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/29UYfr5_5v18Af9DbXii6GgIkoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.72.0/24
81.85.74.0/23
185.5.75.0/24
185.9.24.0-185.9.26.255
185.28.172.0-185.28.174.255
185.74.44.0/22
213.155.9.0-213.155.12.255
213.155.14.0/23
213.155.28.0/24
217.177.32.0-217.177.34.255
217.177.44.0/22
217.179.48.0/23
IPv6:
2a11:2cc0:2::-2a11:2cc0:9:ffff:ffff:ffff:ffff:ffff
2a11:2cc0:10::/47
2a11:2cc0:20::/47
Signature Algorithm: sha256WithRSAEncryption
94:1a:f0:e3:60:b9:29:15:a0:8a:47:a6:47:c1:60:3f:ce:35:
e2:1c:ac:f5:f9:12:33:22:90:b0:10:b5:0b:6e:43:05:70:29:
21:91:bb:a4:fd:bf:28:23:a3:7b:15:ea:17:95:3a:90:9e:36:
5e:72:c8:7f:3a:be:01:ec:a4:07:41:19:e9:2c:75:b4:c7:e5:
59:ad:8f:33:9e:c5:60:c2:e0:6c:f1:0c:f5:5a:15:ca:7e:f7:
07:35:df:c2:ce:42:74:6a:2f:c5:95:1c:17:84:7a:8c:6e:28:
66:32:e8:a7:a9:27:c9:78:19:b3:35:19:8f:0e:30:46:ce:b1:
a7:76:f5:2c:d5:e9:79:f2:03:f9:32:05:9a:52:79:ec:54:c2:
65:78:17:59:31:e9:fe:78:6e:f7:bd:db:36:56:2d:7a:8a:ad:
3e:cb:82:44:81:b4:dd:5f:a8:99:ca:a9:2d:82:b8:cc:e4:bf:
5e:99:9b:6f:5d:67:dd:66:32:53:f9:8b:3e:f3:e3:d0:9d:17:
07:02:72:76:93:f1:f4:f1:87:0e:0e:98:59:83:a4:84:3a:af:
c8:8d:f4:9a:91:85:f8:82:ba:ae:16:2c:b3:ae:08:77:cc:cc:
c9:68:5f:53:d1:34:d0:7f:08:12:44:d9:a1:6a:f8:46:30:f3:
3b:39:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 06:58:28 2026 by rpki-client