Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/URT0EEJBnslT-0WyvEI0zhxE7ao.roa
File: URT0EEJBnslT-0WyvEI0zhxE7ao.roa (raw, json)
Hash identifier: l8gQYKhmIYyk/qnAnSCwTsLP9MGIBmIKOkyQVshPQkY=
Subject key identifier: 51:14:F4:10:42:41:9E:C9:53:FB:45:B2:BC:42:34:CE:1C:44:ED:AA
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019FD76DD5FDEBF17DB6DE763D35FC82EC7F
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/URT0EEJBnslT-0WyvEI0zhxE7ao.roa
Signing time: Thu 06 Aug 2026 14:15:27 +0000
ROA not before: Thu 06 Aug 2026 14:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47232
IP address blocks: 5.39.200.0/22 maxlen: 24
5.39.200.0/23 maxlen: 23
46.29.224.0/21 maxlen: 32
46.29.228.0/23 maxlen: 32
78.111.112.0/20 maxlen: 32
78.111.114.0/23 maxlen: 32
78.111.116.0/23 maxlen: 32
91.192.32.0/22 maxlen: 24
93.91.144.0/20 maxlen: 32
93.91.149.0/24 maxlen: 32
93.91.150.0/23 maxlen: 32
93.91.152.0/24 maxlen: 32
93.91.153.0/24 maxlen: 32
93.91.154.0/24 maxlen: 32
109.235.0.0/21 maxlen: 24
185.15.108.0/22 maxlen: 32
185.52.172.0/24 maxlen: 32
185.64.220.0/22 maxlen: 32
213.108.162.0/23 maxlen: 32
213.109.172.0/22 maxlen: 32
217.75.208.0/20 maxlen: 32
2a02:17a0::/29 maxlen: 48
2a02:17a0:d000::/36 maxlen: 36
2a03:2a80::/29 maxlen: 48
2a03:2a82::/31 maxlen: 48
2a04:7bc0::/29 maxlen: 48
2a04:7bc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:6d:d5:fd:eb:f1:7d:b6:de:76:3d:35:fc:82:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Aug 6 14:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5114f41042419ec953fb45b2bc4234ce1c44edaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:68:c7:55:24:9a:bf:da:3d:f4:9a:a6:c8:
4c:59:b5:aa:9d:5e:dd:e6:e0:81:82:6e:cc:0c:2d:
4c:09:ee:03:b7:d0:f7:51:19:bd:97:81:9c:1c:2c:
a6:d8:c4:55:b1:73:48:5d:06:07:cb:97:35:cb:28:
5c:a3:88:d2:f4:0c:07:2f:fe:b1:f2:89:fb:5f:52:
3e:0e:88:7b:22:e0:31:78:e2:92:af:54:ea:64:b4:
a0:d5:78:70:2d:fe:26:8c:e5:8a:14:ef:46:d2:8c:
f0:6a:47:18:5e:d9:48:9c:fb:bf:f3:a8:17:e0:63:
ee:4c:f8:9d:83:95:91:a6:ea:fa:a3:d2:96:a0:fa:
23:52:6c:9d:f1:ec:3f:c0:9d:7b:1e:44:53:f4:ba:
a6:4d:1b:2f:98:80:6a:df:3c:50:02:ff:4f:3a:b0:
d0:94:a2:b6:fa:f7:d9:46:18:df:4f:2c:64:8f:b1:
8b:ce:83:a8:22:83:ef:a7:7a:73:fc:87:65:ef:79:
1d:f5:6f:8e:41:45:6c:c5:d7:ac:2d:c3:77:cc:05:
b2:67:dc:db:59:49:a9:aa:4a:29:80:45:33:76:7f:
ce:3f:4e:69:8b:84:91:82:ba:5d:7f:6c:27:34:bb:
08:27:12:c0:58:d8:6e:a4:34:d2:b1:bc:77:8d:0a:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:F4:10:42:41:9E:C9:53:FB:45:B2:BC:42:34:CE:1C:44:ED:AA
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/URT0EEJBnslT-0WyvEI0zhxE7ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.200.0/22
46.29.224.0/21
78.111.112.0/20
91.192.32.0/22
93.91.144.0/20
109.235.0.0/21
185.15.108.0/22
185.52.172.0/24
185.64.220.0/22
213.108.162.0/23
213.109.172.0/22
217.75.208.0/20
IPv6:
2a02:17a0::/29
2a03:2a80::/29
2a04:7bc0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:01:ea:8b:2b:be:27:11:5f:cc:6d:2c:cb:59:56:bd:21:a9:
cf:d0:66:ae:ef:3d:ef:42:84:e3:ad:c2:6a:a2:0c:76:f2:79:
4b:5b:61:65:45:b1:98:19:b2:75:35:b9:56:9f:20:98:43:95:
8b:d8:ce:48:1e:1e:c6:78:e6:5a:01:b8:a9:76:6d:8a:e9:75:
61:08:87:cf:91:9e:d4:ef:77:21:c7:d3:e1:c0:e3:9f:ca:ea:
cb:e3:61:ea:60:4d:28:5e:8c:b5:d7:c9:0f:78:93:92:d4:6c:
17:90:1e:63:93:4e:c1:fe:06:64:2a:9f:95:f4:f7:e8:e3:3c:
99:3b:f5:ee:ff:09:94:11:a3:16:1a:82:cf:2f:45:36:6c:24:
99:b3:0d:c0:07:e7:7a:a6:c2:87:9b:85:be:df:37:d5:14:e4:
9f:53:5d:a1:a8:a0:7d:f2:24:c5:44:b6:46:fc:54:e6:70:aa:
40:05:c3:41:bf:f7:de:8d:d7:db:bc:a3:6a:e1:fa:d8:7d:4a:
0d:68:5a:ce:22:8b:48:1e:e6:10:da:7f:17:f2:8f:18:bd:4f:
e2:b8:a5:8d:48:fd:ac:bc:0d:49:91:03:ac:20:a3:4d:5e:5f:
81:71:cd:4b:16:82:2f:39:d3:96:b7:71:4a:ab:3c:a2:10:6d:
7d:42:d1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:51 2026 by rpki-client