Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/Yeq657xhQdSGU8ozMoBAHWz1c7o.roa
File: Yeq657xhQdSGU8ozMoBAHWz1c7o.roa (raw, json)
Hash identifier: R/IQB+JYvEApcpK9ekXgPiUzLmKHajFNMuKejVzFsKs=
Subject key identifier: 61:EA:BA:E7:BC:61:41:D4:86:53:CA:33:32:80:40:1D:6C:F5:73:BA
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 019F8A5C06716F1BFE0927F3ED18C1BB94C4
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/Yeq657xhQdSGU8ozMoBAHWz1c7o.roa
Signing time: Wed 22 Jul 2026 15:05:14 +0000
ROA not before: Wed 22 Jul 2026 15:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34177
IP address blocks: 5.133.68.0/22 maxlen: 22
62.193.32.0/19 maxlen: 19
62.244.84.0/22 maxlen: 22
62.244.86.0/23 maxlen: 23
62.244.88.0/23 maxlen: 23
62.244.89.0/24 maxlen: 24
62.244.96.0/22 maxlen: 22
62.244.112.0/22 maxlen: 22
62.244.117.0/24 maxlen: 24
62.244.119.0/24 maxlen: 24
78.31.40.0/21 maxlen: 21
78.109.240.0/20 maxlen: 20
79.98.16.0/21 maxlen: 24
80.74.64.0/20 maxlen: 24
80.245.16.0/20 maxlen: 20
82.210.0.0/19 maxlen: 19
82.210.32.0/19 maxlen: 19
83.118.192.0/19 maxlen: 19
83.142.144.0/21 maxlen: 21
84.239.64.0/19 maxlen: 19
84.239.96.0/22 maxlen: 22
91.90.96.0/21 maxlen: 21
94.228.176.0/20 maxlen: 20
95.141.96.0/20 maxlen: 20
141.101.56.0/22 maxlen: 24
141.101.60.0/22 maxlen: 24
159.180.224.0/19 maxlen: 19
176.57.32.0/21 maxlen: 21
178.16.160.0/20 maxlen: 20
185.4.44.0/22 maxlen: 24
185.5.108.0/22 maxlen: 22
185.10.176.0/22 maxlen: 24
185.18.208.0/22 maxlen: 22
185.19.48.0/22 maxlen: 24
185.41.4.0/22 maxlen: 22
185.47.240.0/22 maxlen: 24
185.81.52.0/22 maxlen: 22
185.132.116.0/22 maxlen: 22
185.137.254.0/23 maxlen: 24
185.156.80.0/22 maxlen: 22
185.163.28.0/22 maxlen: 22
185.171.156.0/22 maxlen: 22
185.180.244.0/22 maxlen: 22
185.191.92.0/22 maxlen: 22
185.211.24.0/22 maxlen: 22
185.213.160.0/22 maxlen: 22
185.218.248.0/22 maxlen: 22
185.249.28.0/22 maxlen: 22
194.213.124.0/23 maxlen: 23
195.15.128.0/18 maxlen: 18
195.49.132.0/22 maxlen: 22
195.200.160.0/19 maxlen: 19
212.106.96.0/19 maxlen: 19
2001:ab8::/29 maxlen: 32
2a00:6900::/29 maxlen: 48
2a01:4e00::/32 maxlen: 32
2a03:5d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:5c:06:71:6f:1b:fe:09:27:f3:ed:18:c1:bb:94:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jul 22 15:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61eabae7bc6141d48653ca333280401d6cf573ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:60:49:bc:6c:a9:4d:b4:f1:c4:b8:2c:21:
c0:bd:9d:8a:9f:fd:85:46:01:c8:dc:61:46:f1:13:
87:73:e3:b9:e2:11:26:df:37:7c:33:8e:af:9a:ef:
2f:66:33:3a:9f:94:3c:9f:cb:a2:70:33:b1:8d:64:
be:94:c2:cc:c7:34:fd:81:59:db:62:84:84:bf:f8:
18:56:29:16:63:20:d7:7b:8b:d1:b9:65:9e:64:21:
77:c6:54:c5:b6:cc:92:d9:49:84:45:60:88:e4:47:
7e:3c:c9:ac:ce:d7:f9:e1:1f:88:05:88:d6:13:d6:
2c:7d:1c:a4:fa:5b:8e:89:f2:61:3d:8a:0c:cc:89:
a6:bb:60:63:42:00:64:06:8f:6e:c5:0a:16:76:20:
c2:75:ec:73:73:2c:ec:ca:37:e3:9b:7f:43:03:af:
71:94:08:df:1d:c4:7f:8f:47:3f:50:ff:4f:d0:0c:
a7:40:41:fe:80:0d:9d:31:bf:e8:c9:34:c1:af:a6:
79:25:14:27:ca:3f:25:48:c4:38:af:ff:a2:c9:a0:
94:22:b0:a6:17:eb:7b:11:d2:6e:dc:d3:85:0c:5d:
f6:2b:01:24:3a:8e:48:45:30:5f:d6:d2:08:6c:dc:
cb:6a:a4:1a:fe:6a:98:f6:81:2e:73:b3:a0:a3:6c:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EA:BA:E7:BC:61:41:D4:86:53:CA:33:32:80:40:1D:6C:F5:73:BA
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/Yeq657xhQdSGU8ozMoBAHWz1c7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.68.0/22
62.193.32.0/19
62.244.84.0-62.244.89.255
62.244.96.0/22
62.244.112.0/22
62.244.117.0/24
62.244.119.0/24
78.31.40.0/21
78.109.240.0/20
79.98.16.0/21
80.74.64.0/20
80.245.16.0/20
82.210.0.0/18
83.118.192.0/19
83.142.144.0/21
84.239.64.0-84.239.99.255
91.90.96.0/21
94.228.176.0/20
95.141.96.0/20
141.101.56.0/21
159.180.224.0/19
176.57.32.0/21
178.16.160.0/20
185.4.44.0/22
185.5.108.0/22
185.10.176.0/22
185.18.208.0/22
185.19.48.0/22
185.41.4.0/22
185.47.240.0/22
185.81.52.0/22
185.132.116.0/22
185.137.254.0/23
185.156.80.0/22
185.163.28.0/22
185.171.156.0/22
185.180.244.0/22
185.191.92.0/22
185.211.24.0/22
185.213.160.0/22
185.218.248.0/22
185.249.28.0/22
194.213.124.0/23
195.15.128.0/18
195.49.132.0/22
195.200.160.0/19
212.106.96.0/19
IPv6:
2001:ab8::/29
2a00:6900::/29
2a01:4e00::/32
2a03:5d40::/32
Signature Algorithm: sha256WithRSAEncryption
09:90:49:8b:08:4b:a9:82:77:f6:7a:7f:4b:4c:29:ff:3a:9b:
a9:c3:e1:d0:37:85:8c:f3:96:81:ae:cf:89:61:86:cc:84:44:
2e:ca:9d:78:5e:45:32:8e:50:35:12:0c:e2:50:f5:75:08:fd:
54:f3:14:ab:b7:9e:db:4c:b1:2d:af:61:68:21:04:88:88:40:
fa:88:ca:44:44:cb:4b:e1:c2:87:31:cf:00:8c:d3:d5:c1:1a:
9f:8f:cc:e0:a4:eb:69:33:7c:6a:fa:32:0f:74:b7:03:2d:fa:
c1:8e:b2:55:ac:77:4e:a2:f3:71:64:1b:e2:f1:c4:26:1c:35:
c1:85:8a:8e:5b:da:93:63:c9:b7:75:0b:26:51:b5:c9:2f:e4:
72:27:0c:b6:1f:a6:8f:1f:ec:f7:d2:8c:95:8b:63:5a:87:04:
08:32:f6:d6:84:5c:15:dd:ea:28:c1:16:c1:d7:da:bb:0e:7c:
c1:ee:2e:48:23:52:a4:4b:1d:4b:77:53:1b:3d:43:4f:d9:57:
37:fc:57:75:b4:16:05:74:35:a3:f5:d1:8e:41:a2:7c:61:fd:
b9:5b:f9:1c:3d:13:5d:f4:d6:2a:ad:2b:0f:f7:1c:b9:00:3a:
9a:15:3f:f4:d6:54:cb:7c:bc:7b:5d:c4:49:1c:52:6d:f3:db:
e1:de:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:14 2026 by rpki-client