Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/zH07H7zQmk0_BI3n--kBX2rTXZk.roa
File: zH07H7zQmk0_BI3n--kBX2rTXZk.roa (raw, json)
Hash identifier: mqYZEsIkcJHMyWUH+Ig2HfzxxSYtrbeLFsv8Je8AY40=
Subject key identifier: CC:7D:3B:1F:BC:D0:9A:4D:3F:04:8D:E7:FB:E9:01:5F:6A:D3:5D:99
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 019FB22F34952D054F9CAE8B91B1DAF3AA46
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/zH07H7zQmk0_BI3n--kBX2rTXZk.roa
Signing time: Thu 30 Jul 2026 08:41:05 +0000
ROA not before: Thu 30 Jul 2026 08:41:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 45.11.56.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.134.174.0/24 maxlen: 24
45.134.175.0/24 maxlen: 24
85.137.48.0/24 maxlen: 24
85.137.52.0/24 maxlen: 24
85.137.53.0/24 maxlen: 24
85.137.54.0/23 maxlen: 23
85.137.56.0/24 maxlen: 24
85.137.58.0/24 maxlen: 24
85.137.59.0/24 maxlen: 24
85.137.61.0/24 maxlen: 24
85.137.62.0/23 maxlen: 23
91.222.172.0/22 maxlen: 24
91.234.198.0/23 maxlen: 24
91.234.199.0/24 maxlen: 24
176.97.120.0/23 maxlen: 23
176.97.125.0/24 maxlen: 24
176.97.126.0/23 maxlen: 23
176.97.126.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
194.42.196.0/23 maxlen: 23
194.42.198.0/24 maxlen: 24
194.42.199.0/24 maxlen: 24
194.42.206.0/23 maxlen: 24
195.26.86.0/23 maxlen: 24
195.66.212.0/24 maxlen: 24
195.66.213.0/24 maxlen: 24
195.160.220.0/22 maxlen: 24
212.86.120.0/23 maxlen: 23
212.86.125.0/24 maxlen: 24
212.86.126.0/23 maxlen: 23
2a09:2dc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:2f:34:95:2d:05:4f:9c:ae:8b:91:b1:da:f3:aa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jul 30 08:41:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc7d3b1fbcd09a4d3f048de7fbe9015f6ad35d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:20:d6:27:22:eb:06:53:f8:1e:a9:fe:ce:
fb:37:1c:ec:4e:d0:e4:a2:27:f1:6f:14:cf:8e:48:
e5:b7:13:02:80:ab:c8:08:ff:95:ae:1a:24:05:4c:
74:fb:97:79:d3:76:90:61:38:d2:35:a4:b9:58:cd:
db:16:43:2b:f6:90:9e:4f:85:86:fa:b1:af:a5:07:
be:93:c3:ef:76:49:65:b7:2e:95:d0:54:85:14:be:
ab:3a:59:d5:57:ef:82:9b:00:bf:90:98:00:c7:72:
b2:db:00:18:d4:7c:49:f8:ad:3b:43:75:16:17:33:
c4:73:d3:84:66:09:54:ea:18:ef:89:bb:a0:86:11:
d8:35:9d:47:0c:ea:95:bb:3a:83:95:64:fb:d1:6a:
68:fa:56:c1:9b:f3:95:a2:c8:8e:8d:1d:0d:fa:e9:
32:f0:ee:15:b7:c1:0f:28:6e:af:6f:0d:1c:53:64:
9a:18:27:7b:66:7f:92:8e:6b:56:9e:aa:05:0a:c6:
4e:f3:c3:bc:f2:db:9d:f5:d9:cb:4c:70:88:58:e5:
6b:94:be:31:30:66:09:05:e0:45:c1:80:a6:ce:d3:
99:87:fb:72:b7:f5:b6:e3:5b:bb:3a:a5:89:f0:9b:
b8:ec:1a:c7:2f:f5:8e:15:c7:a1:73:86:bd:5e:a8:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7D:3B:1F:BC:D0:9A:4D:3F:04:8D:E7:FB:E9:01:5F:6A:D3:5D:99
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/zH07H7zQmk0_BI3n--kBX2rTXZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.56.0/24
45.11.59.0/24
45.134.174.0/23
85.137.48.0/24
85.137.52.0-85.137.56.255
85.137.58.0/23
85.137.61.0-85.137.63.255
91.222.172.0/22
91.234.198.0/23
176.97.120.0/23
176.97.125.0-176.97.127.255
185.254.199.0/24
194.42.196.0/22
194.42.206.0/23
195.26.86.0/23
195.66.212.0/23
195.160.220.0/22
212.86.120.0/23
212.86.125.0-212.86.127.255
IPv6:
2a09:2dc1::/32
Signature Algorithm: sha256WithRSAEncryption
2b:40:d7:a5:1d:e2:e1:76:5e:72:4f:73:64:a7:cc:5f:03:c4:
fb:b0:63:26:83:77:3c:54:83:47:70:19:fb:4e:4f:23:3f:6f:
14:51:93:ae:c1:1e:15:d7:6b:db:d9:2b:3b:45:87:79:7a:ae:
a5:00:4a:68:f1:f3:b2:35:ae:a8:93:86:cd:a1:dd:4b:50:01:
57:d6:0c:af:5a:8a:39:78:ef:fe:5d:f2:75:25:a8:4c:68:aa:
19:ee:a4:f3:bf:49:cb:75:7e:05:54:0d:f0:52:59:2a:af:fe:
cb:54:e8:53:79:35:08:54:d3:f7:aa:9c:6f:15:42:06:21:c3:
25:6a:a3:19:97:d6:a6:70:b1:67:a7:d9:e1:62:5f:15:82:58:
f6:40:bf:f7:bd:22:b8:2f:14:67:69:75:74:61:73:ff:ca:42:
cb:f6:cb:f8:0b:89:49:b4:b8:ac:57:78:8b:3c:ea:e7:c1:b2:
7f:9f:71:12:b3:2e:bb:b5:9c:9e:ff:b7:49:e8:3a:c5:0f:49:
b2:c0:f9:68:62:5c:4c:ea:35:f4:bf:64:0f:63:0c:0d:45:c0:
8b:ad:e2:88:ce:11:82:88:4e:81:a9:56:bf:af:42:e2:4b:35:
5e:23:6e:9b:f2:76:ce:c0:dd:fc:ac:b4:41:1f:9f:fd:95:94:
62:65:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:48 2026 by rpki-client