Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/76HPTqRNtRVBsElTF3xL0eokmig.roa
File: 76HPTqRNtRVBsElTF3xL0eokmig.roa (raw, json)
Hash identifier: hFwX+sZjWEox4OU/fLZYYuheRU35fiC5Ybcg7UIbY5I=
Subject key identifier: EF:A1:CF:4E:A4:4D:B5:15:41:B0:49:53:17:7C:4B:D1:EA:24:9A:28
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 019E9712764F00D4C5296C6873DDE24F0D0D
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/76HPTqRNtRVBsElTF3xL0eokmig.roa
Signing time: Fri 05 Jun 2026 09:17:10 +0000
ROA not before: Fri 05 Jun 2026 09:17:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63473
IP address blocks: 45.91.92.0/24 maxlen: 24
45.91.93.0/24 maxlen: 24
45.91.94.0/24 maxlen: 24
45.91.95.0/24 maxlen: 24
45.132.74.0/24 maxlen: 24
45.132.75.0/24 maxlen: 24
83.138.53.0/24 maxlen: 24
85.155.176.0/20 maxlen: 24
85.155.176.0/23 maxlen: 23
85.155.178.0/23 maxlen: 23
85.155.180.0/23 maxlen: 23
85.155.182.0/23 maxlen: 23
85.155.184.0/23 maxlen: 23
85.155.186.0/23 maxlen: 23
85.155.188.0/23 maxlen: 23
85.155.190.0/23 maxlen: 23
91.190.155.0/24 maxlen: 24
109.205.61.0/24 maxlen: 24
167.254.240.0/23 maxlen: 23
167.254.242.0/23 maxlen: 23
185.223.207.0/24 maxlen: 24
188.93.140.0/24 maxlen: 24
188.244.117.0/24 maxlen: 24
194.29.100.0/24 maxlen: 24
194.29.101.0/24 maxlen: 24
194.29.186.0/24 maxlen: 24
194.29.187.0/24 maxlen: 24
212.52.0.0/24 maxlen: 24
2a0e:dc0::/30 maxlen: 48
2a0e:dc0:1::/48 maxlen: 48
2a0e:dc0:2::/48 maxlen: 48
2a0e:dc0:3::/48 maxlen: 48
2a0e:dc0:4::/48 maxlen: 48
2a0e:dc0:5::/48 maxlen: 48
2a0e:dc0:6::/48 maxlen: 48
2a0e:dc0:8::/48 maxlen: 48
2a0e:dc0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:12:76:4f:00:d4:c5:29:6c:68:73:dd:e2:4f:0d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Jun 5 09:17:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efa1cf4ea44db51541b04953177c4bd1ea249a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:cb:39:1a:77:f1:0b:3e:af:32:67:06:a5:
c9:84:92:96:91:62:9c:36:d9:f1:9a:cf:c0:75:d7:
15:31:6c:5f:fd:5f:0d:10:d4:bb:3b:f0:4f:8b:7e:
1e:d2:ed:af:fa:1c:88:8a:87:e5:6d:ac:00:0a:9b:
56:59:39:9d:b7:c4:e3:cf:4a:91:24:c3:47:7f:2d:
6f:7b:07:f7:52:9a:7d:1a:d3:9f:1d:d3:63:8b:10:
2d:cf:22:eb:27:a5:d4:e1:b3:37:86:23:93:40:6f:
00:40:13:19:27:9b:4a:3e:34:51:94:6c:ae:68:a2:
65:d3:a4:9d:00:ec:59:a2:a3:61:65:0b:ee:74:bc:
f7:1e:3c:70:55:a0:08:8a:d9:e9:ca:42:1a:04:85:
94:4f:72:f6:b4:8c:62:be:8c:b8:32:ee:0b:bb:41:
a9:6a:b1:9a:b3:17:65:ac:a5:d2:38:8a:6c:7f:ed:
fc:79:0a:b3:e3:76:ea:19:c6:ca:c9:82:94:48:12:
6b:e7:a5:7b:bc:78:9d:04:49:a1:88:8f:73:a0:81:
5e:6c:64:5a:c3:3b:c0:4b:d5:b7:7b:ed:82:90:53:
c2:d3:c6:09:05:a6:1a:07:36:28:6b:f8:9c:6f:b1:
08:02:68:78:36:a3:68:0a:25:43:a9:20:3e:24:bb:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A1:CF:4E:A4:4D:B5:15:41:B0:49:53:17:7C:4B:D1:EA:24:9A:28
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/76HPTqRNtRVBsElTF3xL0eokmig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.92.0/22
45.132.74.0/23
83.138.53.0/24
85.155.176.0/20
91.190.155.0/24
109.205.61.0/24
167.254.240.0/22
185.223.207.0/24
188.93.140.0/24
188.244.117.0/24
194.29.100.0/23
194.29.186.0/23
212.52.0.0/24
IPv6:
2a0e:dc0::/30
Signature Algorithm: sha256WithRSAEncryption
33:32:88:a2:dc:e2:2b:f0:56:49:da:c5:19:90:5d:e3:9a:d7:
cc:3c:7b:ff:73:0d:86:58:c4:b2:12:05:49:1c:53:68:3d:5a:
ff:35:f4:e0:47:26:c3:33:92:a0:4d:36:79:20:7e:32:e8:8a:
6a:dc:e8:d1:7d:b7:e6:f8:fe:db:b1:e1:37:ee:0e:8d:cf:1f:
fe:6a:ae:b6:9e:0a:e6:2c:79:bb:d9:3c:66:18:fe:29:2f:34:
11:bd:2d:44:57:58:d5:3b:1d:1d:9f:45:63:86:24:09:a0:4c:
c8:10:03:76:c5:5e:36:db:e3:48:dc:73:01:db:b1:ba:ea:93:
0f:03:47:58:ab:50:a7:58:34:1e:76:08:34:39:dc:c8:66:fd:
bb:bc:55:cf:20:f9:57:1f:51:ab:5d:2d:1e:04:13:00:3f:63:
d9:49:c4:06:33:a6:fa:63:9c:71:20:e1:ec:b3:ae:24:2f:b6:
d1:e1:5a:ba:33:5c:e7:11:a1:50:19:db:36:62:de:f9:23:16:
fd:06:f9:8b:d8:17:61:f4:e7:f9:fe:12:da:cf:16:b8:84:4d:
44:99:cc:06:79:c2:77:3e:79:fd:c6:2c:a5:fa:ae:a2:ef:3e:
cc:c5:9d:dd:7f:c4:f6:ca:33:14:23:8f:40:a4:17:90:1a:09:
3a:45:c3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:06:24 2026 by rpki-client