Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Nh7kAaMAhsVVDxADxYsGWPSJfcc.roa
File: Nh7kAaMAhsVVDxADxYsGWPSJfcc.roa (raw, json)
Hash identifier: B8bx/9FHCXuOtZw4wbUe31zVTA9KiIa57TcrpvHawlg=
Subject key identifier: 36:1E:E4:01:A3:00:86:C5:55:0F:10:03:C5:8B:06:58:F4:89:7D:C7
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01A0234AF9D777B24B197E39CEC3CC05D57C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Nh7kAaMAhsVVDxADxYsGWPSJfcc.roa
Signing time: Fri 21 Aug 2026 07:48:31 +0000
ROA not before: Fri 21 Aug 2026 07:48:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201776
IP address blocks: 2.63.144.0/20 maxlen: 20
2.63.158.0/24 maxlen: 24
2.63.159.0/24 maxlen: 24
2.63.176.0/20 maxlen: 20
2.63.176.0/24 maxlen: 24
2.63.180.0/22 maxlen: 22
2.63.184.0/24 maxlen: 24
2.63.224.0/20 maxlen: 20
2.63.225.0/24 maxlen: 24
2.63.231.0/24 maxlen: 24
2.63.232.0/24 maxlen: 24
46.61.150.0/24 maxlen: 24
46.61.245.0/24 maxlen: 24
78.31.216.0/24 maxlen: 24
78.31.217.0/24 maxlen: 24
78.31.218.0/24 maxlen: 24
78.31.219.0/24 maxlen: 24
78.31.220.0/24 maxlen: 24
78.31.221.0/24 maxlen: 24
78.31.222.0/24 maxlen: 24
78.31.223.0/24 maxlen: 24
84.42.92.0/24 maxlen: 24
84.42.93.0/24 maxlen: 24
84.42.94.0/24 maxlen: 24
84.42.95.0/24 maxlen: 24
85.174.144.0/20 maxlen: 24
92.50.204.0/23 maxlen: 23
92.50.204.0/24 maxlen: 24
92.50.205.0/24 maxlen: 24
94.25.87.0/24 maxlen: 24
176.119.169.0/24 maxlen: 24
176.119.170.0/24 maxlen: 24
176.119.171.0/24 maxlen: 24
176.119.172.0/24 maxlen: 24
176.208.74.0/24 maxlen: 24
176.211.120.0/22 maxlen: 22
188.128.76.0/23 maxlen: 24
188.128.76.0/24 maxlen: 24
188.128.77.0/24 maxlen: 24
188.254.122.0/23 maxlen: 24
188.254.122.0/24 maxlen: 24
188.254.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:4a:f9:d7:77:b2:4b:19:7e:39:ce:c3:cc:05:d5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 21 07:48:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=361ee401a30086c5550f1003c58b0658f4897dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:33:73:f4:9e:e3:77:e5:33:ad:05:23:ac:
21:1f:8e:c8:d7:ee:3e:aa:11:6d:34:95:2b:08:32:
23:8d:48:2d:14:63:57:b6:dd:fe:20:3b:f5:e1:76:
75:35:78:47:0e:98:71:05:42:ca:3f:18:e4:b2:b2:
80:5a:49:98:0b:70:59:53:03:43:db:78:1c:81:a3:
75:59:b2:06:f1:de:69:90:8a:02:b5:5d:54:c0:dc:
d0:d1:18:3b:de:75:93:c5:1a:3f:ba:03:b2:e2:fc:
96:4a:d2:f2:f1:b2:16:80:b3:9e:86:2d:8b:dc:de:
86:30:c4:36:95:d4:4f:c5:69:16:e5:4a:f2:00:cd:
db:84:16:29:2d:f4:6c:f6:0e:67:a0:c0:32:7c:96:
23:05:5e:5f:79:b9:01:fe:4e:6e:05:99:5b:d1:65:
b6:a2:82:3b:a2:2d:f9:a2:b4:75:9f:8a:97:20:11:
9a:29:33:b6:07:99:6d:90:16:33:9f:c0:bf:e4:b4:
10:2e:07:19:7a:41:fe:61:c3:1e:28:24:51:ce:7e:
e0:fc:1d:c9:9e:36:02:55:35:fc:e9:ae:bb:a0:3d:
3f:4e:32:1f:80:ff:94:ac:c6:d2:de:b2:bc:ea:80:
84:07:1d:1b:15:50:5d:ed:c6:78:3a:47:43:13:c4:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:E4:01:A3:00:86:C5:55:0F:10:03:C5:8B:06:58:F4:89:7D:C7
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Nh7kAaMAhsVVDxADxYsGWPSJfcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.63.144.0/20
2.63.176.0/20
2.63.224.0/20
46.61.150.0/24
46.61.245.0/24
78.31.216.0/21
84.42.92.0/22
85.174.144.0/20
92.50.204.0/23
94.25.87.0/24
176.119.169.0-176.119.172.255
176.208.74.0/24
176.211.120.0/22
188.128.76.0/23
188.254.122.0/23
Signature Algorithm: sha256WithRSAEncryption
48:82:19:1c:e6:ed:b6:1c:11:c1:6c:01:3d:58:71:9e:d8:1b:
16:d5:08:48:43:1e:a2:56:6d:48:e7:9b:f3:ed:79:d1:80:e2:
81:f1:5c:97:25:91:38:50:f9:91:22:ea:e1:3d:e5:59:ec:60:
dd:ae:30:68:07:96:1a:7d:bd:a7:c6:b8:6d:a2:28:66:a8:95:
04:23:c7:73:36:c9:c8:57:bc:14:10:3b:4e:bd:54:ef:5a:33:
62:c5:2b:30:1b:67:00:5a:ed:a3:b0:2e:54:7a:11:3b:70:92:
1b:18:4a:34:f7:46:87:84:77:c2:d4:c1:dd:e7:b5:52:fc:2f:
f5:e5:8b:2a:ff:61:63:94:d4:23:91:75:ca:c0:61:6c:79:56:
60:43:f1:33:49:76:bf:4e:68:2b:9f:c8:4a:9a:0e:b8:16:d9:
20:75:a0:15:c7:99:d1:8d:35:27:d5:e5:8d:91:aa:e7:58:8d:
f8:8c:f6:83:52:fb:8b:98:c2:da:a9:9d:9f:1c:39:60:43:b6:
78:cf:90:7f:fd:97:a5:76:dc:55:27:3e:3e:a9:8b:03:d2:c1:
2b:0a:1c:7c:fb:5c:b3:7e:9b:18:93:33:75:5a:e3:ed:ad:8f:
58:f6:00:b4:fd:4d:60:fb:6e:44:97:47:42:3c:e1:2e:0d:69:
a1:0d:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:59:34 2026 by rpki-client