Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/pXNasJuntOJO3N3kw1g3qivG7zE.roa
File: pXNasJuntOJO3N3kw1g3qivG7zE.roa (raw, json)
Hash identifier: PUJOhFOIFE0veiyjg18+xEvek2lGrnIE0OMgbz8VFw4=
Subject key identifier: A5:73:5A:B0:9B:A7:B4:E2:4E:DC:DD:E4:C3:58:37:AA:2B:C6:EF:31
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 019F41EF35A4BA43C80D3779720396555F93
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/pXNasJuntOJO3N3kw1g3qivG7zE.roa
Signing time: Wed 08 Jul 2026 13:33:43 +0000
ROA not before: Wed 08 Jul 2026 13:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 45.11.56.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.134.174.0/24 maxlen: 24
45.134.175.0/24 maxlen: 24
85.137.48.0/24 maxlen: 24
85.137.52.0/24 maxlen: 24
85.137.53.0/24 maxlen: 24
85.137.54.0/23 maxlen: 23
85.137.56.0/24 maxlen: 24
85.137.58.0/24 maxlen: 24
85.137.59.0/24 maxlen: 24
85.137.62.0/23 maxlen: 23
91.222.172.0/22 maxlen: 24
91.234.198.0/23 maxlen: 24
91.234.199.0/24 maxlen: 24
176.97.120.0/23 maxlen: 23
176.97.125.0/24 maxlen: 24
176.97.126.0/23 maxlen: 23
176.97.126.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
194.42.196.0/23 maxlen: 23
194.42.198.0/24 maxlen: 24
194.42.199.0/24 maxlen: 24
194.42.206.0/23 maxlen: 24
195.26.86.0/23 maxlen: 24
195.66.212.0/24 maxlen: 24
195.66.213.0/24 maxlen: 24
195.160.220.0/22 maxlen: 24
212.86.120.0/23 maxlen: 23
212.86.125.0/24 maxlen: 24
212.86.126.0/23 maxlen: 23
2a09:2dc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:ef:35:a4:ba:43:c8:0d:37:79:72:03:96:55:5f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jul 8 13:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5735ab09ba7b4e24edcdde4c35837aa2bc6ef31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:d5:bd:52:df:f5:f2:d1:48:8b:95:60:63:
cd:a4:22:19:69:97:06:d2:67:6b:76:48:35:cd:0f:
fc:e9:ad:44:1c:10:87:c9:5a:aa:30:a4:73:27:7b:
40:1b:27:76:7b:e4:9f:57:e1:5c:73:8a:63:5e:4a:
e9:7a:88:6c:10:55:36:02:6d:d1:0d:0f:75:52:69:
55:7c:d1:42:81:02:f8:6c:b3:72:ab:17:62:e6:9a:
5c:6e:64:8e:24:1d:2d:66:22:24:e8:7a:0f:95:37:
a3:f7:38:df:10:c9:8d:d2:c4:f5:d8:b7:70:a1:fa:
76:0d:d6:fb:d2:cc:dc:ea:89:0d:a3:28:f5:f0:cf:
d0:38:db:1b:24:f1:c2:30:14:41:ab:ab:5f:0d:db:
46:e0:0d:08:15:48:a5:a9:0e:e5:13:fc:2f:ba:18:
a3:79:26:aa:c1:5a:2b:b1:08:99:00:8d:4a:d4:40:
a6:70:b2:66:31:5c:a0:ea:85:c4:b2:ab:8f:4c:76:
f4:92:e2:bb:ab:fe:7f:fe:e2:42:d8:98:a1:a9:9d:
f0:c7:54:b3:8f:1f:1c:d7:39:a8:41:ba:f4:a3:50:
26:ce:ab:92:aa:31:c6:d7:62:31:d4:9c:55:e1:c8:
4f:aa:47:20:55:f4:a4:00:5d:91:3f:4d:af:d3:7f:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:73:5A:B0:9B:A7:B4:E2:4E:DC:DD:E4:C3:58:37:AA:2B:C6:EF:31
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/pXNasJuntOJO3N3kw1g3qivG7zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.56.0/24
45.11.59.0/24
45.134.174.0/23
85.137.48.0/24
85.137.52.0-85.137.56.255
85.137.58.0/23
85.137.62.0/23
91.222.172.0/22
91.234.198.0/23
176.97.120.0/23
176.97.125.0-176.97.127.255
185.254.199.0/24
194.42.196.0/22
194.42.206.0/23
195.26.86.0/23
195.66.212.0/23
195.160.220.0/22
212.86.120.0/23
212.86.125.0-212.86.127.255
IPv6:
2a09:2dc1::/32
Signature Algorithm: sha256WithRSAEncryption
9f:6b:d1:9b:13:23:51:56:15:36:07:4e:a5:54:1d:08:a9:78:
c7:db:d0:08:92:5a:81:68:04:7f:c0:17:c0:57:8b:81:d8:d9:
f6:75:aa:a0:d6:03:ad:d7:60:51:f9:f5:a3:cf:66:f1:33:91:
50:6a:d8:e1:57:07:8c:65:05:fb:0b:b0:0f:0f:85:8e:1d:12:
29:d1:df:09:ad:72:f2:e8:b9:fb:03:a5:b3:7f:f4:04:5a:c9:
65:f8:87:6a:86:4b:8f:c9:23:58:b3:01:63:b7:91:ac:2b:d7:
db:bc:17:f1:92:e5:02:b4:c9:11:89:f2:4d:19:de:64:e2:07:
46:c1:f3:7e:c3:55:18:b1:39:4b:76:35:7a:36:ed:0d:34:20:
85:87:7c:46:9b:e6:36:88:d8:29:d9:2b:74:20:45:8c:b2:e4:
68:f8:9b:97:ed:76:f3:95:e6:5f:b3:1d:ee:81:37:f8:0b:c1:
33:2e:eb:a3:10:31:3f:5b:a5:8c:78:ca:5e:37:c4:c7:f0:ca:
80:5e:22:01:7e:85:3c:d1:67:75:b0:04:a4:29:a6:78:25:e1:
8a:74:0d:16:bb:0a:8b:af:e5:2b:48:c9:4e:2f:12:e0:14:c8:
3a:d0:8d:6a:dc:92:5b:27:c9:8a:76:2e:cb:50:fa:c0:8f:18:
0e:ca:99:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:56 2026 by rpki-client