Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/XScAxNwKUaAJUtKLyaW7C3MFmfs.roa
File: XScAxNwKUaAJUtKLyaW7C3MFmfs.roa (raw, json)
Hash identifier: WbntIWBy66YdFhoqeNhnoXOGz9JQ2rpOYcoWITM0SaM=
Subject key identifier: 5D:27:00:C4:DC:0A:51:A0:09:52:D2:8B:C9:A5:BB:0B:73:05:99:FB
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 019E07AC0F84BC9CD177C338550242D549C7
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/XScAxNwKUaAJUtKLyaW7C3MFmfs.roa
Signing time: Fri 08 May 2026 12:59:37 +0000
ROA not before: Fri 08 May 2026 12:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
5.182.48.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
45.90.147.0/24 maxlen: 24
45.140.220.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/24 maxlen: 24
85.202.162.0/24 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.186.66.0/24 maxlen: 24
185.227.69.0/24 maxlen: 24
185.227.71.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.29.0/24 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
194.56.227.0/24 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b86:100::/40 maxlen: 48
2a0b:b86:fff0::/44 maxlen: 44
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffc0::/44 maxlen: 44
2a0b:b87:ffd2::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0b:7086:fff0::/44 maxlen: 44
2a0b:7087:fff0::/44 maxlen: 44
2a0d:77c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:ac:0f:84:bc:9c:d1:77:c3:38:55:02:42:d5:49:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: May 8 12:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d2700c4dc0a51a00952d28bc9a5bb0b730599fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:df:e5:5f:7a:7e:e9:d3:f5:e0:42:d8:cf:
e1:30:f9:a9:1f:b7:0b:8a:fb:6a:ab:fd:1d:27:95:
70:cb:99:60:e9:14:96:94:b8:86:12:04:f0:33:b7:
ae:48:0a:f9:01:12:a6:22:af:4c:10:09:14:b4:a7:
5a:b6:44:29:38:ff:f1:ff:ad:cf:04:56:19:85:bd:
41:55:28:d6:5e:e8:63:04:cd:7b:eb:31:c4:14:ba:
15:55:6b:d2:d7:7b:dd:00:98:72:55:1a:30:a0:de:
94:97:d9:4f:e9:1b:57:40:12:bf:c9:0d:b2:34:6c:
2e:6c:1f:47:d1:82:97:bb:6d:87:f9:db:1e:35:88:
d9:bc:62:86:ad:2f:04:05:ef:88:de:89:71:a5:99:
2d:6d:a4:99:34:b6:fd:54:af:5a:03:a7:54:3b:12:
ff:c4:28:5a:a7:77:d8:24:cd:34:db:51:ef:2d:7c:
81:30:fd:fe:d7:52:66:e1:59:fa:69:57:1a:f4:6f:
75:e4:4b:4b:51:c5:89:47:bc:fc:a0:8e:b2:1b:1e:
c5:50:fd:10:f0:a3:d2:36:24:ed:fc:00:ea:a1:55:
10:6e:f7:81:d1:7c:9e:ed:e9:56:ad:b7:7a:9d:3c:
05:a7:e3:7a:46:59:2b:79:e0:cf:0b:bf:38:96:4e:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:00:C4:DC:0A:51:A0:09:52:D2:8B:C9:A5:BB:0B:73:05:99:FB
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/XScAxNwKUaAJUtKLyaW7C3MFmfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/24
45.81.20.0/22
45.90.147.0/24
45.140.220.0/22
77.83.240.0/22
78.108.217.0/24
83.143.116.0/24
85.202.162.0/24
89.190.156.0/22
178.218.144.0/22
185.186.64.0/22
185.227.69.0/24
185.227.71.0/24
185.234.72.0/22
185.242.224.0/22
193.31.29.0-193.31.30.255
193.34.76.0/22
193.221.192.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:1ff:ffff:ffff:ffff:ffff:ffff
2a0b:b86:fff0::/44
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffc0::/44
2a0b:b87:ffd2::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0b:7086:fff0::/44
2a0b:7087:fff0::/44
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
90:a1:99:0b:3e:53:c9:d4:6b:4e:75:01:8b:ff:28:a1:88:70:
5d:b9:02:c9:b4:a5:c6:1e:2d:c1:e5:8f:f3:29:e2:23:fd:42:
d5:df:4e:36:6d:b4:08:d9:73:aa:97:c9:c3:49:ba:94:c6:d7:
7e:42:95:f0:1e:69:5f:e6:09:6e:a6:26:44:2f:a7:f1:f5:14:
69:b0:56:9a:5e:d5:f5:e3:e7:db:61:fc:20:93:60:ae:a9:4a:
e4:c5:2b:9c:2c:91:d9:5e:ac:46:ab:16:f1:85:bc:f7:18:25:
b7:f6:8c:e8:27:21:01:1c:09:6d:1c:6e:f9:a4:39:d7:a5:c4:
cf:0a:5c:4e:24:16:44:70:3f:3f:08:c2:06:18:ff:3d:cc:d1:
c6:aa:13:43:21:45:e6:3a:e2:e7:30:04:bb:08:93:c4:dd:5a:
68:35:9c:ae:2f:08:fa:d2:22:4a:83:39:eb:c7:8f:7c:0d:65:
03:0e:5e:c5:a5:d5:d7:c7:9d:bd:6d:ff:1a:f7:90:6c:5d:ae:
8f:7b:c9:dc:4e:81:72:13:db:7f:78:1f:3b:02:7f:3b:2e:5f:
6f:0c:56:4e:3e:b5:e3:41:21:22:d1:3b:67:56:ee:cc:8c:fe:
57:24:5e:9b:64:ff:06:6d:96:07:f6:24:12:c6:99:3f:57:58:
62:4a:8f:27
-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgISAZ4HrA+EvJzRd8M4VQJC1UnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjYwNTA4MTI1OTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDI3MDBjNGRjMGE1MWEwMDk1MmQyOGJjOWE1YmIwYjczMDU5OWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzTf5V96funT9eBC2M/hMPmpH7cL
ivtqq/0dJ5Vwy5lg6RSWlLiGEgTwM7euSAr5ARKmIq9MEAkUtKdatkQpOP/x/63P
BFYZhb1BVSjWXuhjBM176zHEFLoVVWvS13vdAJhyVRowoN6Ul9lP6RtXQBK/yQ2y
NGwubB9H0YKXu22H+dseNYjZvGKGrS8EBe+I3olxpZktbaSZNLb9VK9aA6dUOxL/
xChap3fYJM0021HvLXyBMP3+11Jm4Vn6aVca9G915EtLUcWJR7z8oI6yGx7FUP0Q
8KPSNiTt/ADqoVUQbveB0Xye7elWrbd6nTwFp+N6RlkreeDPC784lk6KbwIDAQAB
o4IDMDCCAywwHQYDVR0OBBYEFF0nAMTcClGgCVLSi8mluwtzBZn7MB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvWFNjQXhOd0tVYUFKVXRLTHlhVzdDM01GbWZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRAYIKwYBBQUHAQcBAf8EggEzMIIBLzCBkwQCAAEwgYwD
BAICOKQDBAAFtjADBAItURQDBAAtWpMDBAItjNwDBAJNU/ADBABObNkDBABTj3QD
BABVyqIDBAJZvpwDBAKy2pADBAK5ukADBAC540UDBAC540cDBAK56kgDBAK58uAw
DAMEAMEfHQMEAMEfHgMEAsEiTAMEAsHdwAMEAsIyEAMEAsI44AMEAtRrDDCBlgQC
AAIwgY8DBwQqCwuCAAAwDwMFAioLC4QDBgEqCwuGAAMHBCoLC4b/8AMHACoLC4f/
EgMHACoLC4f/tAMHBCoLC4f/wAMHACoLC4f/0gMHACoLC4f/2gMHACoLC4f/7AMH
BCoLC4f/8DASAwcEKgtwgAAQAwcGKgtwgAAAAwcEKgtwhv/wAwcEKgtwh//wAwUD
Kg13wDANBgkqhkiG9w0BAQsFAAOCAQEAkKGZCz5TydRrTnUBi/8ooYhwXbkCybSl
xh4tweWP8yniI/1C1d9ONm20CNlzqpfJw0m6lMbXfkKV8B5pX+YJbqYmRC+n8fUU
abBWml7V9ePn22H8IJNgrqlK5MUrnCyR2V6sRqsW8YW89xglt/aM6CchARwJbRxu
+aQ516XEzwpcTiQWRHA/PwjCBhj/PczRxqoTQyFF5jri5zAEuwiTxN1aaDWcri8I
+tIiSoM568ePfA1lAw5exaXV18edvW3/GveQbF2uj3vJ3E6BchPbf3gfOwJ/Oy5f
bwxWTj6140EhItE7Z1buzIz+VyRem2T/Bm2WB/YkEsaZP1dYYkqPJw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:27:30 2026 by rpki-client