Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/0vBnM40tHdnfeoCHXld0Kfz7Kl8.roa
File: 0vBnM40tHdnfeoCHXld0Kfz7Kl8.roa (raw, json)
Hash identifier: SAYTTcrju/BywB/KsCW2xTKzxDX9K1DbPN6bE8OKm9A=
Subject key identifier: D2:F0:67:33:8D:2D:1D:D9:DF:7A:80:87:5E:57:74:29:FC:FB:2A:5F
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019F1E8ECFEF0DEFA311AC3876F75F56934B
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/0vBnM40tHdnfeoCHXld0Kfz7Kl8.roa
Signing time: Wed 01 Jul 2026 16:41:43 +0000
ROA not before: Wed 01 Jul 2026 16:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.174.0/23 maxlen: 23
80.75.215.0/24 maxlen: 24
85.158.108.0/24 maxlen: 24
85.158.109.0/24 maxlen: 24
85.158.110.0/24 maxlen: 24
89.44.80.0/24 maxlen: 24
89.150.40.0/24 maxlen: 24
89.150.45.0/24 maxlen: 24
89.150.48.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
91.220.8.0/24 maxlen: 24
94.126.224.0/24 maxlen: 24
94.126.225.0/24 maxlen: 24
94.126.226.0/24 maxlen: 24
94.126.227.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.221.222.0/24 maxlen: 24
185.221.223.0/24 maxlen: 24
185.223.57.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
185.253.116.0/24 maxlen: 24
185.253.117.0/24 maxlen: 24
185.253.118.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
193.111.208.0/24 maxlen: 24
194.33.28.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
212.2.32.0/24 maxlen: 24
212.2.33.0/24 maxlen: 24
212.2.34.0/24 maxlen: 24
212.2.35.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:15::/48 maxlen: 48
2a01:8640:17::/48 maxlen: 48
2a01:8640:18::/48 maxlen: 48
2a01:8640:1a::/48 maxlen: 48
2a01:8640:1b::/48 maxlen: 48
2a01:8640:1c::/48 maxlen: 48
2a01:8640:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:8e:cf:ef:0d:ef:a3:11:ac:38:76:f7:5f:56:93:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jul 1 16:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2f067338d2d1dd9df7a80875e577429fcfb2a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:a8:2b:2b:61:ea:f1:bf:df:f4:75:3a:17:
15:2c:79:bb:14:e0:33:e6:e7:09:f7:bb:6b:30:ab:
a2:ea:f4:2b:71:d3:7c:e3:63:1b:6f:66:28:4b:ff:
7e:79:fa:42:0c:7e:2b:b6:13:32:b1:c8:d9:ac:59:
fe:60:d7:30:63:10:7e:16:91:dc:b4:a8:f0:58:51:
76:d2:e8:1d:19:b4:93:fb:15:47:f8:ce:32:3a:d1:
c8:f2:d3:f6:d0:9a:82:29:1f:86:22:60:d2:f9:6d:
4d:1c:43:e3:2e:ff:92:91:92:27:33:aa:e2:fe:8c:
ba:a5:17:57:0c:96:66:d5:68:91:b0:b3:5c:96:de:
10:f1:58:b9:ca:f5:2d:25:4f:aa:1a:fa:98:22:d4:
85:03:e7:b8:cf:c4:f5:0e:82:ad:af:b2:bf:6b:0f:
16:7f:a9:50:80:c5:8e:b4:e3:c0:6c:54:a9:db:e6:
80:c3:85:88:dc:43:db:89:9c:92:ec:93:92:fe:be:
81:d1:e4:3d:c3:3e:c2:1b:5a:ef:fc:b3:bf:72:4d:
45:e7:71:9b:38:4b:70:18:fa:7c:76:bc:0f:e7:ff:
53:35:6d:0f:81:4a:66:25:d6:f3:85:44:c9:ed:aa:
f8:8c:f1:c2:c9:3e:e6:6b:02:bc:a6:c7:7a:c5:3d:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F0:67:33:8D:2D:1D:D9:DF:7A:80:87:5E:57:74:29:FC:FB:2A:5F
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/0vBnM40tHdnfeoCHXld0Kfz7Kl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.174.0/23
80.75.215.0/24
85.158.108.0-85.158.110.255
89.44.80.0/24
89.150.40.0/24
89.150.45.0/24
89.150.48.0/24
89.150.57.0/24
91.193.18.0/24
91.220.8.0/24
94.126.224.0/22
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.221.222.0/23
185.223.57.0/24
185.235.137.0-185.235.138.255
185.253.116.0-185.253.118.255
193.42.36.0/24
193.42.39.0/24
193.111.208.0/24
194.33.28.0/24
195.95.155.0/24
212.2.32.0/22
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
2a01:8640:17::-2a01:8640:18:ffff:ffff:ffff:ffff:ffff
2a01:8640:1a::-2a01:8640:1d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
81:4f:43:26:f6:84:9f:c8:3e:0f:03:93:7d:84:6c:a7:e1:43:
f1:19:0d:37:d1:11:a0:00:23:45:38:2f:b1:f0:27:74:fa:f5:
03:18:f2:fd:79:11:ae:2e:1e:53:2a:f3:ed:33:4d:3f:63:e9:
9d:bb:7b:de:3e:b2:3f:e1:ae:a0:e9:1e:32:b2:a0:7b:a1:08:
c4:71:34:af:cf:e7:e1:de:d5:6c:ed:c3:90:59:7e:cf:2f:dd:
77:62:fa:8b:9b:50:12:c4:19:2e:09:34:0c:bf:ee:25:1f:1e:
22:26:7b:3f:32:0a:da:cb:b6:a8:86:18:a2:1b:67:ae:5c:27:
78:63:f5:c4:e1:ad:40:83:98:8c:28:23:00:52:4d:84:d0:a8:
04:a6:58:7d:f4:a8:ed:5f:f1:e1:d8:3c:45:d6:57:6a:45:53:
94:4a:57:32:d6:8f:e3:fa:fa:40:2d:ac:1b:45:6e:a3:ae:b4:
4e:7f:b9:8c:4a:51:8a:17:25:a4:f4:5d:d1:f1:39:b5:db:9e:
19:bc:98:44:a1:27:b1:14:da:d4:c2:17:8f:0b:51:6d:c9:21:
85:ce:f6:da:ec:9a:6d:91:d5:c3:f6:53:10:af:b1:82:f2:86:
ed:46:ec:f6:1c:41:aa:8d:ee:74:7a:bb:90:04:9c:40:f6:84:
45:72:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:54:05 2026 by rpki-client