Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/sevsmuTE9Cuc1R7YEyZG04d8mNs.roa
File: sevsmuTE9Cuc1R7YEyZG04d8mNs.roa (raw, json)
Hash identifier: 26ykFpxBHzUZwawXfUbDnj5l65bwuSn8DAJhuUluP98=
Subject key identifier: B1:EB:EC:9A:E4:C4:F4:2B:9C:D5:1E:D8:13:26:46:D3:87:7C:98:DB
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019CB3B7B4F579BB9549009D0C29B1CCFC02
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/sevsmuTE9Cuc1R7YEyZG04d8mNs.roa
Signing time: Tue 03 Mar 2026 12:41:26 +0000
ROA not before: Tue 03 Mar 2026 12:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.110.0/23 maxlen: 23
130.49.216.0/24 maxlen: 24
130.49.217.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
193.150.70.0/24 maxlen: 24
194.26.210.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:b7:b4:f5:79:bb:95:49:00:9d:0c:29:b1:cc:fc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Mar 3 12:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1ebec9ae4c4f42b9cd51ed8132646d3877c98db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:4e:7d:72:1a:c5:45:8d:f2:59:31:ca:9a:
5e:0d:7e:8c:f5:86:b1:43:bf:ff:21:e3:9c:07:17:
6b:42:b0:9c:77:21:c1:74:24:91:23:b3:16:67:15:
da:36:2d:54:aa:f6:b9:ab:51:8f:67:8f:12:20:70:
cf:2c:d6:93:4d:6a:c3:14:9a:b7:3e:e2:76:97:68:
c7:61:43:14:a6:e4:d9:09:a3:be:6f:b8:d9:4b:62:
89:d5:af:bf:06:d2:fd:6d:ff:a3:95:e1:39:ba:35:
6c:ea:83:86:8e:d1:da:16:bd:22:2d:7e:30:fe:38:
0a:67:2c:95:91:20:98:23:61:f6:a6:62:77:c5:43:
ec:a9:52:ca:4d:33:84:f5:d9:35:92:8c:69:d7:93:
c3:c0:20:69:ce:0d:2a:ef:e9:94:47:88:e5:ff:cf:
d4:e1:c9:fe:54:aa:7a:01:da:bb:04:6a:bf:27:29:
49:25:37:e3:ce:3c:2e:4e:95:04:6e:45:60:23:00:
b2:a0:61:cf:f2:06:4f:aa:a2:4b:ad:f6:a1:94:87:
ff:24:81:91:16:8d:1c:4c:39:fb:65:9f:2f:02:78:
03:4e:fc:e4:a1:8c:0e:0a:36:20:17:65:eb:49:07:
23:85:6e:e7:2c:16:81:8b:79:0b:b4:b1:8a:f6:27:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EB:EC:9A:E4:C4:F4:2B:9C:D5:1E:D8:13:26:46:D3:87:7C:98:DB
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/sevsmuTE9Cuc1R7YEyZG04d8mNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
81.22.193.0/24
83.171.240.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
130.49.216.0/23
185.42.26.0/24
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
193.150.70.0/24
194.26.210.0/24
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
2e:ad:78:34:5b:1b:e6:2b:36:87:9b:b9:36:a5:b1:da:53:c7:
b0:75:51:ac:25:b8:2b:0f:76:ea:45:55:2a:7c:d8:4c:58:cd:
08:09:a4:05:57:2b:ec:64:fe:d3:d1:db:0d:7a:29:40:9c:ea:
36:bb:67:c2:7c:03:60:52:1a:90:a2:fd:3d:08:bf:f8:45:f4:
07:2f:29:cc:ca:b9:5a:6e:2a:d4:d7:7e:75:00:89:6b:40:23:
ed:aa:30:a6:4b:c7:a7:8a:c4:60:58:d0:5e:f8:3c:08:8e:a9:
3d:27:b2:c4:d7:ac:f6:49:9c:78:8b:65:b7:1e:00:39:93:0e:
7e:b8:de:37:bf:56:4b:15:d5:60:f6:fc:ec:bc:55:06:7e:63:
4f:02:34:83:16:55:ef:8c:c6:7c:d1:fd:eb:81:c3:e6:47:5b:
4c:aa:7e:02:ba:14:7e:58:a9:b7:3a:e7:1b:24:f3:35:b3:d3:
4e:f0:c1:3a:f5:8b:a9:0b:bd:2e:64:ec:f9:3e:2f:4e:cd:2c:
df:d8:d0:c0:cb:64:66:a9:12:6a:a2:6b:87:38:1d:41:41:5b:
6d:66:6a:bb:fe:1e:68:91:b5:f3:6a:67:61:72:e0:27:bd:22:
10:2d:db:8c:2f:c7:5a:42:c1:c5:f3:66:a0:5b:49:0d:88:f4:
e6:a1:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 00:33:20 2026 by rpki-client