Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/41cmsgRzkMEAtMMrp5spp52FVg8.roa
File: 41cmsgRzkMEAtMMrp5spp52FVg8.roa (raw, json)
Hash identifier: Ff0GinfXOH8pzG9ZqR8mWA7IRem5juPr037pPQIesBc=
Subject key identifier: E3:57:26:B2:04:73:90:C1:00:B4:C3:2B:A7:9B:29:A7:9D:85:56:0F
Certificate issuer: /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial: 01A159DB6A323A098ED0E54B126E4EB00887
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/41cmsgRzkMEAtMMrp5spp52FVg8.roa
Signing time: Tue 20 Oct 2026 15:08:34 +0000
ROA not before: Tue 20 Oct 2026 15:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47541
IP address blocks: 79.137.139.0/24 maxlen: 24
79.137.164.0/24 maxlen: 24
79.137.180.0/24 maxlen: 24
87.240.128.0/18 maxlen: 18
87.240.166.0/23 maxlen: 24
87.240.166.0/24 maxlen: 24
87.240.167.0/24 maxlen: 24
93.186.224.0/20 maxlen: 20
93.186.224.0/21 maxlen: 21
93.186.232.0/21 maxlen: 21
95.142.192.0/20 maxlen: 20
95.142.192.0/21 maxlen: 21
95.213.0.0/17 maxlen: 17
95.213.0.0/18 maxlen: 18
95.213.44.0/23 maxlen: 23
95.213.44.0/24 maxlen: 24
95.213.45.0/24 maxlen: 24
185.32.248.0/22 maxlen: 22
2a00:bdc0::/29 maxlen: 29
2a00:bdc0::/32 maxlen: 32
2a00:bdc0::/33 maxlen: 33
2a00:bdc0:8000::/34 maxlen: 34
2a00:bdc0:c000::/35 maxlen: 35
2a00:bdc1::/32 maxlen: 32
2a00:bdc2::/31 maxlen: 31
2a00:bdc4::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:db:6a:32:3a:09:8e:d0:e5:4b:12:6e:4e:b0:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Validity
Not Before: Oct 20 15:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e35726b2047390c100b4c32ba79b29a79d85560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:bf:9e:8d:97:53:69:42:9d:7b:5b:a6:f3:
6b:ae:1e:5a:c7:5d:e9:76:b4:fd:e1:7d:8c:9a:77:
8c:6a:32:ac:c4:36:01:5b:01:72:d7:5c:2b:a1:ec:
a1:f4:35:dc:5c:2c:82:72:ae:6e:ce:68:7b:6c:d9:
29:b3:0e:91:8e:60:9f:e1:ec:f8:d4:e0:b1:02:e9:
60:e2:aa:79:56:be:8b:be:5d:a0:c8:c7:af:46:8a:
c1:0d:c6:92:79:6f:31:ba:0a:66:8a:a5:ab:db:46:
d8:19:a5:b5:67:2d:a0:ba:28:71:06:e6:ca:45:4f:
e7:7b:00:39:a1:1e:de:bf:c4:12:9d:bf:00:a2:e8:
de:7d:d8:1d:82:58:4c:d2:82:84:2d:4f:57:8e:c5:
52:fb:4b:af:67:9b:9c:49:b3:56:bb:35:95:6c:45:
a0:7e:b0:5d:55:8e:c7:54:42:65:26:f6:79:ab:c3:
4b:2c:9e:06:ac:1b:a3:d8:13:c2:03:93:00:a1:b5:
e0:df:0e:74:f4:a5:98:7a:02:ba:6f:33:7a:ef:62:
9b:0c:6c:78:67:d0:6a:b0:f0:13:5e:7e:7a:12:7e:
16:d3:f6:f8:bc:0c:ef:5a:b8:6f:52:ef:30:2e:78:
5e:7f:9c:f8:80:c5:e5:cd:80:29:ee:26:39:8d:ee:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:57:26:B2:04:73:90:C1:00:B4:C3:2B:A7:9B:29:A7:9D:85:56:0F
X509v3 Authority Key Identifier:
keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/41cmsgRzkMEAtMMrp5spp52FVg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.139.0/24
79.137.164.0/24
79.137.180.0/24
87.240.128.0/18
93.186.224.0/20
95.142.192.0/20
95.213.0.0/17
185.32.248.0/22
IPv6:
2a00:bdc0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:bd:2e:30:96:c9:dd:24:79:40:aa:a9:c1:83:8c:0f:c7:3f:
c4:eb:6d:a0:78:2f:2e:16:00:bb:02:dc:d4:3d:87:94:ed:b2:
97:67:a1:e5:e9:08:f6:cf:89:06:bf:84:55:36:91:64:74:5c:
87:f5:a8:06:a5:cf:de:5b:9f:08:a9:97:91:87:7b:14:a2:30:
ff:93:5b:9d:74:5c:51:70:7e:8c:84:f9:bc:d0:86:4d:85:29:
e3:21:a3:c3:05:aa:e7:91:3c:15:22:6a:71:a7:59:22:e1:0d:
37:c4:31:f0:ee:2a:15:cd:e4:a4:cb:fc:ee:6a:fb:4d:46:af:
3e:e9:ac:0f:32:66:eb:8a:ec:8e:f8:b0:7f:96:6b:65:56:55:
75:80:3c:8e:ff:a0:f4:f6:35:a1:f9:54:14:0d:8b:5e:cc:46:
42:0b:ab:78:fe:5b:15:5a:d7:89:ed:9b:c7:b0:bd:55:ec:68:
cb:27:27:c7:e8:15:6a:1b:88:94:6c:5a:9f:b8:96:2e:60:4d:
f3:91:de:a4:b5:1f:cb:87:b7:ce:03:38:21:e8:77:b7:29:7c:
38:f4:76:fd:c2:c3:70:b8:43:90:8d:6c:30:e0:7b:0b:ae:b9:
c2:44:a0:11:b2:49:be:2e:09:9a:94:f4:46:1c:fc:81:01:90:
a2:d5:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:15 2026 by rpki-client