Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/b2nTUV7ZuCK2rild5XPhqkI-UYo.roa
File: b2nTUV7ZuCK2rild5XPhqkI-UYo.roa (raw, json)
Hash identifier: Biz40bimpdapkicPfWXqW+lFK/9MGyp+sjY7DbeP6RE=
Subject key identifier: 6F:69:D3:51:5E:D9:B8:22:B6:AE:29:5D:E5:73:E1:AA:42:3E:51:8A
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019EDA4A62993D10AA9071D3338F92A4E300
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/b2nTUV7ZuCK2rild5XPhqkI-UYo.roa
Signing time: Thu 18 Jun 2026 10:32:48 +0000
ROA not before: Thu 18 Jun 2026 10:32:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12716
IP address blocks: 37.63.0.0/20 maxlen: 20
37.63.16.0/22 maxlen: 22
37.63.20.0/22 maxlen: 24
37.63.24.0/22 maxlen: 22
37.63.28.0/22 maxlen: 24
37.63.32.0/22 maxlen: 24
37.63.96.0/22 maxlen: 22
62.204.154.0/23 maxlen: 23
78.90.18.0/23 maxlen: 23
78.90.44.0/23 maxlen: 23
78.90.62.0/24 maxlen: 24
78.90.73.0/24 maxlen: 24
78.90.124.0/24 maxlen: 24
78.90.188.0/22 maxlen: 22
78.90.218.0/23 maxlen: 23
83.97.30.0/24 maxlen: 24
84.252.40.0/23 maxlen: 23
85.118.64.0/22 maxlen: 22
85.118.68.0/23 maxlen: 24
85.118.70.0/24 maxlen: 24
85.118.71.0/24 maxlen: 24
85.118.72.0/23 maxlen: 23
85.118.74.0/24 maxlen: 24
85.118.76.0/22 maxlen: 22
85.118.80.0/22 maxlen: 22
85.118.84.0/24 maxlen: 24
85.118.92.0/24 maxlen: 24
85.118.93.0/24 maxlen: 24
89.215.62.0/23 maxlen: 23
151.251.44.0/22 maxlen: 22
151.251.68.0/22 maxlen: 22
151.251.121.0/24 maxlen: 24
151.251.126.0/23 maxlen: 23
151.251.192.0/22 maxlen: 22
151.251.196.0/24 maxlen: 24
151.251.200.0/22 maxlen: 22
151.251.204.0/22 maxlen: 22
151.251.238.0/24 maxlen: 24
151.251.239.0/24 maxlen: 24
151.251.240.0/20 maxlen: 20
176.222.0.0/20 maxlen: 24
185.151.156.0/22 maxlen: 22
185.224.160.0/23 maxlen: 23
212.104.116.0/22 maxlen: 24
213.226.17.0/24 maxlen: 24
213.226.19.0/24 maxlen: 24
213.226.36.0/24 maxlen: 24
213.226.40.0/24 maxlen: 24
213.226.51.0/24 maxlen: 24
213.226.56.0/24 maxlen: 24
213.226.57.0/24 maxlen: 24
213.226.59.0/24 maxlen: 24
2001:1ac8:1::/48 maxlen: 48
2001:1ac8:2800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:4a:62:99:3d:10:aa:90:71:d3:33:8f:92:a4:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jun 18 10:32:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f69d3515ed9b822b6ae295de573e1aa423e518a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:d5:35:f8:e1:ae:68:2b:82:01:73:2e:b3:
57:c1:d3:c9:21:44:cf:9a:32:ce:22:27:8a:fd:7a:
a5:9b:fe:9d:0c:2f:6a:10:b9:61:1f:55:a7:3b:6b:
ca:58:c2:01:39:30:07:84:6e:d8:68:2b:e3:48:f1:
82:ac:0b:3d:6e:56:bb:40:32:2e:31:f1:eb:f1:97:
65:71:b5:e3:46:93:b1:bf:da:c0:2f:49:73:0e:2d:
a7:bc:4b:2f:a5:e0:a5:05:6a:56:ef:00:69:7c:1b:
62:2e:4b:f7:00:b5:b0:5f:07:d4:e5:c8:09:f7:1b:
77:38:37:20:56:5e:91:88:21:b4:a5:aa:26:ab:2d:
53:75:3b:e4:b1:b3:bc:f3:90:48:df:0f:ba:92:0c:
4a:dd:84:bb:f1:0b:9b:8b:1c:a1:7a:c1:cb:bb:68:
ea:7e:ac:d7:b8:91:36:a8:b8:b9:f6:3e:51:3b:39:
93:8e:20:89:6b:05:be:87:49:b5:12:24:01:04:7e:
0b:68:60:50:33:90:e4:b8:6b:da:25:95:90:f4:a0:
fd:4a:43:d8:e6:b7:dd:0f:2b:c9:ad:a6:3b:fe:f6:
25:df:e4:7a:7b:50:14:31:62:13:bd:47:fa:c7:c2:
86:3b:c2:6b:c6:6d:ea:ba:07:57:02:63:a2:47:bf:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:D3:51:5E:D9:B8:22:B6:AE:29:5D:E5:73:E1:AA:42:3E:51:8A
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/b2nTUV7ZuCK2rild5XPhqkI-UYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.63.0.0-37.63.35.255
37.63.96.0/22
62.204.154.0/23
78.90.18.0/23
78.90.44.0/23
78.90.62.0/24
78.90.73.0/24
78.90.124.0/24
78.90.188.0/22
78.90.218.0/23
83.97.30.0/24
84.252.40.0/23
85.118.64.0-85.118.74.255
85.118.76.0-85.118.84.255
85.118.92.0/23
89.215.62.0/23
151.251.44.0/22
151.251.68.0/22
151.251.121.0/24
151.251.126.0/23
151.251.192.0-151.251.196.255
151.251.200.0/21
151.251.238.0-151.251.255.255
176.222.0.0/20
185.151.156.0/22
185.224.160.0/23
212.104.116.0/22
213.226.17.0/24
213.226.19.0/24
213.226.36.0/24
213.226.40.0/24
213.226.51.0/24
213.226.56.0/23
213.226.59.0/24
IPv6:
2001:1ac8:1::/48
2001:1ac8:2800::/40
Signature Algorithm: sha256WithRSAEncryption
07:74:c0:f5:1d:b5:75:21:cc:69:72:4a:54:3a:4d:28:06:fd:
e9:78:d9:ea:b2:c5:34:40:98:a1:50:67:a0:04:eb:52:42:7e:
c3:74:db:97:fe:cd:6d:9b:65:9a:86:51:b6:e3:1e:df:d0:98:
87:96:cb:c7:27:4a:7b:c8:9c:aa:a1:c2:35:56:d4:44:c5:07:
14:3b:00:92:e7:3b:9e:b9:74:1f:40:c5:1a:da:86:a4:f7:50:
ed:ed:18:0a:b2:a8:5c:fc:8f:cd:55:ad:6b:41:7f:25:25:1a:
d0:2a:32:42:40:59:fb:5e:3c:2b:7b:e9:ba:cb:b5:46:8b:ab:
14:1a:8b:a4:a2:79:b2:8d:db:67:21:d2:59:58:03:e9:9e:e3:
ff:fc:ef:76:61:55:62:e0:c7:8c:3d:e8:b8:76:89:06:c5:3d:
e4:63:fd:56:1a:79:94:08:4b:80:63:96:20:17:a6:27:a9:cb:
91:92:76:3d:fd:bb:13:e7:f7:9f:9a:50:43:27:e8:60:eb:18:
3f:d4:bb:ea:70:a2:ec:89:e0:1d:11:9f:4c:33:f2:36:d8:0d:
ac:e2:f3:a2:68:d8:5c:db:ed:8e:14:cc:ad:d6:0e:b7:ba:75:
8b:a3:b6:db:d8:7a:94:22:ed:53:69:33:4e:c9:ef:6b:7f:de:
2a:ad:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:07 2026 by rpki-client