Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/dC9BzkpXeigs_xU4kkaBooTSVeA.roa
File: dC9BzkpXeigs_xU4kkaBooTSVeA.roa (raw, json)
Hash identifier: rPXka7+O0kIIPTtLpX+lb9Lrx3WAaQtRiwbgRQZE2gM=
Subject key identifier: 74:2F:41:CE:4A:57:7A:28:2C:FF:15:38:92:46:81:A2:84:D2:55:E0
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01A015BC296B8246FC30FF9E33E99ABFC2EC
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/dC9BzkpXeigs_xU4kkaBooTSVeA.roa
Signing time: Tue 18 Aug 2026 16:37:27 +0000
ROA not before: Tue 18 Aug 2026 16:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43357
IP address blocks: 45.66.129.0/24 maxlen: 32
45.66.131.0/24 maxlen: 32
45.66.219.0/24 maxlen: 32
45.82.76.0/24 maxlen: 32
45.82.77.0/24 maxlen: 32
45.130.20.0/22 maxlen: 32
45.131.155.0/24 maxlen: 32
45.147.50.0/24 maxlen: 32
45.147.51.0/24 maxlen: 32
80.66.197.0/24 maxlen: 32
80.66.198.0/24 maxlen: 32
88.214.21.0/24 maxlen: 32
88.218.193.0/24 maxlen: 32
92.60.40.0/24 maxlen: 32
147.78.240.0/24 maxlen: 32
147.78.241.0/24 maxlen: 32
176.113.68.0/24 maxlen: 32
176.113.69.0/24 maxlen: 32
176.119.150.0/24 maxlen: 32
185.184.220.0/24 maxlen: 32
185.184.222.0/24 maxlen: 32
185.194.52.0/22 maxlen: 32
185.248.85.0/24 maxlen: 32
185.254.75.0/24 maxlen: 32
194.36.25.0/24 maxlen: 32
194.36.27.0/24 maxlen: 32
213.232.112.0/24 maxlen: 32
2a03:d9c0:3000::/48 maxlen: 128
2a03:d9c0:3001::/48 maxlen: 128
2a07:fe00:1::/48 maxlen: 128
2a09:7:2007::/48 maxlen: 48
2a0b:89c1:3::/48 maxlen: 128
2a0c:59c0:18::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:bc:29:6b:82:46:fc:30:ff:9e:33:e9:9a:bf:c2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Aug 18 16:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=742f41ce4a577a282cff1538924681a284d255e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:66:1c:64:20:aa:a3:89:05:24:61:5d:73:74:
a1:96:b8:e9:cf:58:59:b1:0a:1b:2c:e5:15:d8:c6:
e2:fe:4e:d3:ee:c7:be:83:54:58:5d:d6:64:7d:8a:
9b:ee:3d:bd:1c:5e:84:28:9e:0a:af:ea:95:71:67:
75:2d:c4:ed:50:20:9d:db:91:81:5b:2e:8e:da:80:
90:90:26:73:11:6d:72:08:8c:11:8c:02:b0:95:b4:
81:94:93:23:a3:5e:82:6e:3f:db:96:27:ab:8c:c6:
f7:1b:06:ae:9d:db:bd:05:99:e1:f3:ed:1c:6c:79:
82:dc:0a:3a:be:1d:53:3e:24:46:81:c6:a8:6c:4b:
4e:8e:9f:65:7f:07:f4:be:32:1c:2a:89:fe:de:2f:
af:db:ee:60:11:21:8a:13:a3:e1:14:13:97:e0:5f:
74:43:2a:11:7e:7f:fb:63:f5:69:96:da:2a:b8:e5:
e1:fc:28:24:13:13:33:f3:22:63:86:b1:17:a3:bd:
c5:6e:af:2f:df:16:be:4e:77:41:af:22:6d:62:e4:
31:69:36:8d:5c:31:5f:c9:76:3a:91:40:6f:10:98:
c3:3a:bc:62:25:3b:3a:d5:14:0b:b9:26:43:16:be:
6e:1a:40:4e:ce:fd:3a:22:bb:07:46:54:87:8f:77:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:41:CE:4A:57:7A:28:2C:FF:15:38:92:46:81:A2:84:D2:55:E0
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/dC9BzkpXeigs_xU4kkaBooTSVeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.129.0/24
45.66.131.0/24
45.66.219.0/24
45.82.76.0/23
45.130.20.0/22
45.131.155.0/24
45.147.50.0/23
80.66.197.0-80.66.198.255
88.214.21.0/24
88.218.193.0/24
92.60.40.0/24
147.78.240.0/23
176.113.68.0/23
176.119.150.0/24
185.184.220.0/24
185.184.222.0/24
185.194.52.0/22
185.248.85.0/24
185.254.75.0/24
194.36.25.0/24
194.36.27.0/24
213.232.112.0/24
IPv6:
2a03:d9c0:3000::/47
2a07:fe00:1::/48
2a09:7:2007::/48
2a0b:89c1:3::/48
2a0c:59c0:18::/48
Signature Algorithm: sha256WithRSAEncryption
38:cf:50:f4:59:fe:61:e9:53:af:81:8c:6a:23:72:a4:24:38:
9c:ce:ef:9b:51:ea:68:53:6e:4a:9d:da:ae:0f:f7:b7:32:10:
3e:33:75:71:87:e9:1a:18:de:f2:04:87:6d:f6:eb:0e:f1:36:
f9:90:81:11:6b:0e:00:7b:79:6d:68:14:68:ea:c6:43:9f:27:
b9:86:b3:6a:a1:47:66:ad:dc:54:f8:dd:d9:73:32:0d:c8:a3:
7c:c8:a7:ca:ce:e4:22:0f:92:f6:8c:fe:bc:23:53:fa:12:75:
c2:9e:b4:09:95:ad:96:fc:b1:9f:88:b4:32:67:4a:a3:47:5e:
d5:6f:aa:47:43:17:fc:a0:c2:b3:63:00:42:5c:d8:b8:ff:03:
1d:f7:16:cf:81:31:9d:18:27:51:08:e4:e3:b2:25:46:d9:b3:
af:31:a8:d0:df:45:de:07:d3:d8:40:cc:eb:17:b5:9a:da:69:
02:48:a0:5b:7b:85:42:d8:a2:d8:21:d1:8f:10:24:12:00:09:
94:a9:10:b3:4d:de:77:95:30:7d:1f:5b:3c:8a:3f:c6:f7:c5:
2d:be:0a:95:16:2c:49:f4:bf:c0:19:f8:3a:34:31:7c:81:51:
a3:49:7a:50:a7:62:d9:6f:4e:2e:3f:2d:26:d9:98:0d:fa:fb:
37:55:34:c1
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISAaAVvClrgkb8MP+eM+mav8LsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjYwODE4MTYzNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDJmNDFjZTRhNTc3YTI4MmNmZjE1Mzg5MjQ2ODFhMjg0ZDI1NWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mYcZCCqo4kFJGFdc3Shlrjpz1hZ
sQobLOUV2Mbi/k7T7se+g1RYXdZkfYqb7j29HF6EKJ4Kr+qVcWd1LcTtUCCd25GB
Wy6O2oCQkCZzEW1yCIwRjAKwlbSBlJMjo16Cbj/blierjMb3Gwaundu9BZnh8+0c
bHmC3Ao6vh1TPiRGgcaobEtOjp9lfwf0vjIcKon+3i+v2+5gESGKE6PhFBOX4F90
QyoRfn/7Y/VpltoquOXh/CgkExMz8yJjhrEXo73Fbq8v3xa+TndBryJtYuQxaTaN
XDFfyXY6kUBvEJjDOrxiJTs61RQLuSZDFr5uGkBOzv06IrsHRlSHj3fsuQIDAQAB
o4ICyTCCAsUwHQYDVR0OBBYEFHQvQc5KV3ooLP8VOJJGgaKE0lXgMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvZEM5QnprcFhlaWdzX3hVNGtrYUJvb1RTVmVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCBkwQCAAEwgYwDBAAt
QoEDBAAtQoMDBAAtQtsDBAEtUkwDBAItghQDBAAtg5sDBAEtkzIwDAMEAFBCxQME
AFBCxgMEAFjWFQMEAFjawQMEAFw8KAMEAZNO8AMEAbBxRAMEALB3lgMEALm43AME
ALm43gMEArnCNAMEALn4VQMEALn+SwMEAMIkGQMEAMIkGwMEANXocDAzBAIAAjAt
AwcBKgPZwDAAAwcAKgf+AAABAwcAKgkAByAHAwcAKguJwQADAwcAKgxZwAAYMA0G
CSqGSIb3DQEBCwUAA4IBAQA4z1D0Wf5h6VOvgYxqI3KkJDiczu+bUepoU25Kndqu
D/e3MhA+M3Vxh+kaGN7yBIdt9usO8Tb5kIERaw4Ae3ltaBRo6sZDnye5hrNqoUdm
rdxU+N3ZczINyKN8yKfKzuQiD5L2jP68I1P6EnXCnrQJla2W/LGfiLQyZ0qjR17V
b6pHQxf8oMKzYwBCXNi4/wMd9xbPgTGdGCdRCOTjsiVG2bOvMajQ30XeB9PYQMzr
F7Wa2mkCSKBbe4VC2KLYIdGPECQSAAmUqRCzTd53lTB9H1s8ij/G98UtvgqVFixJ
9L/AGfg6NDF8gVGjSXpQp2LZb04uPy0m2ZgN+vs3VTTB
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:55 2026 by rpki-client