Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/XDkpyuTsa2dXmdMU0IZvUIi8Kqw.roa
File: XDkpyuTsa2dXmdMU0IZvUIi8Kqw.roa (raw, json)
Hash identifier: NiUsvK3LHefrtsdv2Hnh9ukqkYgOTh3duZjlWdR5BP4=
Subject key identifier: 5C:39:29:CA:E4:EC:6B:67:57:99:D3:14:D0:86:6F:50:88:BC:2A:AC
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 01A11625500D342B3FC03BC56886E1F8DF84
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/XDkpyuTsa2dXmdMU0IZvUIi8Kqw.roa
Signing time: Wed 07 Oct 2026 11:35:06 +0000
ROA not before: Wed 07 Oct 2026 11:35:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204666
IP address blocks: 37.221.240.0/20 maxlen: 24
45.153.192.0/22 maxlen: 24
45.153.194.0/24 maxlen: 24
45.153.195.0/24 maxlen: 24
85.255.88.0/22 maxlen: 24
185.19.0.0/22 maxlen: 24
185.52.172.0/23 maxlen: 24
185.64.220.0/22 maxlen: 24
185.74.60.0/23 maxlen: 24
185.97.24.0/22 maxlen: 24
185.97.24.0/24 maxlen: 24
185.97.25.0/24 maxlen: 24
185.97.26.0/24 maxlen: 24
185.188.100.0/22 maxlen: 24
185.188.101.0/24 maxlen: 24
185.188.103.0/24 maxlen: 24
195.12.39.0/24 maxlen: 24
213.108.162.0/23 maxlen: 24
213.108.162.0/24 maxlen: 24
2a03:d840::/32 maxlen: 32
2a03:d840:fe02::/48 maxlen: 48
2a04:c740::/29 maxlen: 29
2a04:f940::/29 maxlen: 29
2a06:400::/29 maxlen: 29
2a0a:10c0::/29 maxlen: 29
2a0d:3140::/29 maxlen: 29
2a0f:9300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:25:50:0d:34:2b:3f:c0:3b:c5:68:86:e1:f8:df:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Oct 7 11:35:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c3929cae4ec6b675799d314d0866f5088bc2aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:1d:99:10:1e:3f:15:b5:7c:0c:62:8c:89:
57:f7:79:22:21:5a:9a:37:17:2a:14:0d:d4:7f:dc:
6e:98:23:e6:78:e3:6c:8b:95:59:c3:78:e8:74:7b:
e9:d4:4f:35:ea:7f:98:c9:0e:8f:3f:cf:a6:a0:31:
7b:a5:7c:5b:99:bc:e3:78:57:63:0f:c2:2c:93:78:
3a:3c:6d:45:5b:15:21:2f:76:58:d0:94:21:8e:98:
2a:78:ec:ea:a1:0e:14:4d:da:57:6f:9c:04:30:44:
3a:f3:d1:d2:ab:dd:65:0a:d0:42:55:a1:40:40:c9:
00:35:e7:e9:49:d0:fe:7f:9a:bd:18:cf:cb:be:29:
45:9d:e5:9f:06:cb:a0:9a:1c:97:e2:67:b2:c4:52:
23:a1:b0:fe:e7:4a:7d:97:0b:9e:d2:61:7f:00:6a:
03:fe:66:b7:43:c7:74:1a:9d:91:b5:ca:fd:09:0c:
c7:98:61:37:88:fb:d9:a4:c7:5c:ec:68:eb:c6:c8:
1f:4b:ca:4a:3d:d1:04:37:d0:db:9f:b8:63:9e:46:
c6:e3:73:b3:b1:2c:88:a7:87:12:e5:75:f3:4a:40:
8b:9d:b3:a7:ac:ac:0a:e2:1d:5d:0f:7b:1f:3b:22:
59:81:5b:3c:2d:17:f7:ec:91:5f:d6:23:b8:56:e8:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:29:CA:E4:EC:6B:67:57:99:D3:14:D0:86:6F:50:88:BC:2A:AC
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/XDkpyuTsa2dXmdMU0IZvUIi8Kqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.240.0/20
45.153.192.0/22
85.255.88.0/22
185.19.0.0/22
185.52.172.0/23
185.64.220.0/22
185.74.60.0/23
185.97.24.0/22
185.188.100.0/22
195.12.39.0/24
213.108.162.0/23
IPv6:
2a03:d840::/32
2a04:c740::/29
2a04:f940::/29
2a06:400::/29
2a0a:10c0::/29
2a0d:3140::/29
2a0f:9300::/29
Signature Algorithm: sha256WithRSAEncryption
7c:d8:2a:83:0c:93:96:e0:2d:13:a2:f7:cc:4c:63:18:9a:bd:
0e:8c:df:d4:a7:8c:c5:ae:f4:d5:2b:8c:ca:d4:b9:4e:a9:dd:
1d:a7:d1:a5:71:59:db:4e:cf:7d:32:a6:e4:67:72:c6:01:bc:
a8:13:f6:49:b2:cb:26:39:06:bb:48:9d:75:96:53:55:d3:e6:
f5:c4:35:cd:27:65:26:2f:35:24:66:32:19:70:86:7c:0a:97:
1a:f1:c1:6a:9a:02:e6:a3:ac:e1:33:bf:2b:6f:71:8a:6d:6d:
13:39:f5:6f:f0:ba:3e:a2:a3:9c:cc:78:4c:d1:9e:e8:21:93:
f0:f8:cc:d6:ef:37:51:88:85:ec:68:90:45:e9:b4:3d:d6:97:
aa:4d:33:57:99:09:3a:98:0d:1f:f7:83:35:e8:d6:bb:b0:8d:
ef:4c:6f:46:48:0b:b2:e7:69:ec:b4:64:05:24:5b:61:e6:a6:
5b:48:12:34:da:9b:60:d6:92:2e:fd:b9:30:aa:f2:05:76:f4:
f2:c5:0a:9f:c0:c3:3d:4a:4b:22:df:29:6d:d7:3b:33:5b:42:
7f:f8:58:90:50:b6:4f:f0:c7:43:81:f7:9e:b6:0b:3c:75:ed:
23:23:a3:94:e9:8f:5f:ef:e3:02:71:0a:0f:d4:7b:2f:55:6c:
a9:74:51:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:35 2026 by rpki-client