Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/ndP5FL5P0NgyaX8bGr9alOA9HO0.roa
File: ndP5FL5P0NgyaX8bGr9alOA9HO0.roa (raw, json)
Hash identifier: Q7zGnzRCWrQDq88He7wb77+6qa5kJX5tVhXixyT+fsY=
Subject key identifier: 9D:D3:F9:14:BE:4F:D0:D8:32:69:7F:1B:1A:BF:5A:94:E0:3D:1C:ED
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01A05EF131D877D3114226DF850E0D377C2A
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/ndP5FL5P0NgyaX8bGr9alOA9HO0.roa
Signing time: Tue 01 Sep 2026 21:47:40 +0000
ROA not before: Tue 01 Sep 2026 21:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.174.0/23 maxlen: 23
80.75.215.0/24 maxlen: 24
85.158.108.0/24 maxlen: 24
85.158.109.0/24 maxlen: 24
85.158.110.0/24 maxlen: 24
89.44.80.0/24 maxlen: 24
89.150.40.0/24 maxlen: 24
89.150.45.0/24 maxlen: 24
89.150.48.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
91.220.8.0/24 maxlen: 24
94.126.224.0/24 maxlen: 24
94.126.225.0/24 maxlen: 24
94.126.226.0/24 maxlen: 24
94.126.227.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.221.222.0/24 maxlen: 24
185.221.223.0/24 maxlen: 24
185.223.57.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
185.253.116.0/24 maxlen: 24
185.253.117.0/24 maxlen: 24
185.253.118.0/24 maxlen: 24
193.24.121.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
193.111.208.0/24 maxlen: 24
194.33.28.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
212.2.32.0/24 maxlen: 24
212.2.33.0/24 maxlen: 24
212.2.34.0/24 maxlen: 24
212.2.35.0/24 maxlen: 24
212.2.36.0/24 maxlen: 24
212.2.37.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:15::/48 maxlen: 48
2a01:8640:17::/48 maxlen: 48
2a01:8640:18::/48 maxlen: 48
2a01:8640:1a::/48 maxlen: 48
2a01:8640:1b::/48 maxlen: 48
2a01:8640:1c::/48 maxlen: 48
2a01:8640:1d::/48 maxlen: 48
2a01:8640:25::/48 maxlen: 48
2a01:8640:26::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:f1:31:d8:77:d3:11:42:26:df:85:0e:0d:37:7c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Sep 1 21:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dd3f914be4fd0d832697f1b1abf5a94e03d1ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:1d:88:91:46:94:47:c3:b7:b6:a9:ee:26:
5e:97:f2:9b:84:4e:6e:a4:2e:18:d1:42:86:bb:2c:
7d:28:28:44:72:70:8e:8c:99:1a:21:ec:63:9b:39:
e3:1b:b0:54:13:9e:69:aa:16:29:8f:54:00:cf:ac:
df:86:32:bd:48:55:d5:24:da:9b:4a:47:a6:6a:80:
99:fc:dd:21:a1:70:8b:1a:b5:37:9d:9b:68:db:2a:
a6:08:43:a3:c8:c3:11:67:4e:a8:52:4c:b0:5c:df:
bc:4b:dc:1a:a0:07:4e:5e:b1:55:80:1e:de:d2:0e:
81:b1:b6:e6:2e:9c:dc:08:9c:a5:78:c8:12:1e:37:
e0:73:83:77:61:e5:b6:af:a2:0e:93:e7:51:f7:e1:
ab:21:43:0d:89:87:41:9e:51:6e:65:03:fd:15:f6:
33:eb:48:b2:d9:01:6e:85:d0:86:9f:ed:05:5b:ee:
e2:49:57:dc:45:aa:75:21:0d:0e:9a:12:09:39:9d:
f7:a7:9f:0a:3b:9e:f0:57:0c:d4:96:2f:45:06:7e:
5c:74:ff:1e:93:56:fe:ae:13:1e:b7:1c:e4:77:2e:
44:ff:f5:b2:2e:2e:50:53:32:f3:6a:f2:ef:7f:f4:
b8:4c:d3:36:c9:10:7a:1f:ca:0c:44:2d:83:17:cc:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D3:F9:14:BE:4F:D0:D8:32:69:7F:1B:1A:BF:5A:94:E0:3D:1C:ED
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/ndP5FL5P0NgyaX8bGr9alOA9HO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.174.0/23
80.75.215.0/24
85.158.108.0-85.158.110.255
89.44.80.0/24
89.150.40.0/24
89.150.45.0/24
89.150.48.0/24
89.150.57.0/24
91.193.18.0/24
91.220.8.0/24
94.126.224.0/22
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.221.222.0/23
185.223.57.0/24
185.235.137.0-185.235.138.255
185.253.116.0-185.253.118.255
193.24.121.0/24
193.42.36.0/24
193.42.39.0/24
193.111.208.0/24
194.33.28.0/24
195.95.155.0/24
212.2.32.0-212.2.37.255
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
2a01:8640:17::-2a01:8640:18:ffff:ffff:ffff:ffff:ffff
2a01:8640:1a::-2a01:8640:1d:ffff:ffff:ffff:ffff:ffff
2a01:8640:25::-2a01:8640:26:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:49:14:86:e7:b7:b7:62:4b:51:91:d3:b8:99:ed:d7:06:95:
33:54:97:db:7c:1d:29:5b:65:7c:a9:a9:09:26:16:33:e5:26:
6b:8c:b7:5a:e4:41:f3:30:e5:79:ea:9c:b2:57:ee:e3:aa:04:
e0:73:8e:8a:0c:b1:63:99:2f:3f:c8:3b:74:a7:e1:1e:7e:9d:
51:28:1d:9b:b5:c1:d8:36:5c:f2:69:b5:11:c6:d5:96:20:0a:
c5:82:bc:3c:21:71:29:02:91:fe:c1:24:54:b7:06:d2:39:44:
ac:68:11:94:4b:c9:11:90:f1:74:ef:51:74:3b:d8:b8:6d:8a:
ba:2a:da:53:2b:dd:81:2f:83:d8:a2:ea:b5:75:f7:8a:f2:2b:
df:49:d9:c3:60:7b:4e:5e:9e:fc:ef:b6:fc:f8:75:83:0f:20:
7c:a7:26:ba:65:8c:84:f2:11:fa:f9:8a:f4:a2:4e:1b:bb:84:
9c:3f:57:66:03:86:7d:32:97:74:73:f1:23:6f:4a:cc:17:f1:
c7:22:a0:dd:df:12:0a:45:39:02:29:77:c3:b2:9f:c8:8c:08:
8e:be:2f:75:05:f2:ab:93:0a:1f:c4:a4:28:62:3b:8a:7f:ac:
7a:9d:fc:0a:f1:6f:51:04:d0:88:c9:db:bb:12:e8:ee:b2:83:
82:8b:b0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:30 2026 by rpki-client