Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/pPf2iGyWiaY4dfpnvK3V2vJT6bk.roa
File: pPf2iGyWiaY4dfpnvK3V2vJT6bk.roa (raw, json)
Hash identifier: qTzf/5Qr4fJ14UNUZwfxNKju8Q8irY6182qreKazzbk=
Subject key identifier: A4:F7:F6:88:6C:96:89:A6:38:75:FA:67:BC:AD:D5:DA:F2:53:E9:B9
Certificate issuer: /CN=deceda98c164c705cc46a8bab74510164a4e5443
Certificate serial: 019F2368B54E51109B5F512A290BB8EE191A
Authority key identifier: DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/pPf2iGyWiaY4dfpnvK3V2vJT6bk.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15895
IP address blocks: 5.248.0.0/16 maxlen: 18
37.115.0.0/16 maxlen: 16
37.229.0.0/16 maxlen: 16
46.118.0.0/15 maxlen: 15
46.185.0.0/17 maxlen: 17
46.211.0.0/16 maxlen: 18
62.64.64.0/18 maxlen: 18
77.247.216.0/21 maxlen: 21
81.23.16.0/20 maxlen: 20
81.23.16.0/24 maxlen: 24
83.170.192.0/18 maxlen: 18
85.223.128.0/17 maxlen: 17
89.162.128.0/17 maxlen: 17
94.27.0.0/17 maxlen: 17
94.153.0.0/16 maxlen: 16
94.153.114.0/23 maxlen: 23
94.153.164.0/22 maxlen: 22
109.162.0.0/17 maxlen: 17
134.249.0.0/16 maxlen: 16
176.8.0.0/16 maxlen: 16
178.137.0.0/16 maxlen: 18
188.163.0.0/16 maxlen: 16
188.163.0.0/17 maxlen: 19
193.41.60.0/22 maxlen: 22
193.41.60.0/23 maxlen: 23
193.41.62.0/23 maxlen: 23
193.239.128.0/23 maxlen: 23
212.82.192.0/19 maxlen: 19
212.109.32.0/19 maxlen: 19
2a02:8a8::/32 maxlen: 32
2a02:2378::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b5:4e:51:10:9b:5f:51:2a:29:0b:b8:ee:19:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deceda98c164c705cc46a8bab74510164a4e5443
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4f7f6886c9689a63875fa67bcadd5daf253e9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:80:90:c7:ab:ac:67:c8:48:42:b6:8a:b0:
3c:62:45:e3:77:f5:42:91:2b:44:b7:fd:d6:14:f5:
00:d3:18:75:fd:21:bc:14:ae:10:95:45:2c:1d:19:
84:4b:d8:c5:67:6b:b9:fa:1d:61:5a:27:fd:fc:55:
28:d5:ef:91:86:33:93:0c:97:74:1a:2e:b4:cc:a0:
78:1c:49:09:6a:c4:54:df:56:50:1d:61:cc:a3:93:
a5:7f:ae:26:1a:7d:3d:06:27:c2:5b:d9:9c:88:c2:
86:dd:21:c1:17:ec:ff:bc:4d:4f:38:52:b8:af:e9:
75:cb:76:2f:c8:36:db:81:92:e2:63:1c:7d:b8:7b:
74:fa:83:65:30:f4:4b:50:74:20:65:e2:82:08:8a:
b9:5e:c6:8e:c9:bd:a0:dd:83:a4:bf:c6:85:e7:41:
50:68:a3:e2:25:e9:77:d3:1c:14:aa:e1:f6:60:b1:
b3:81:dc:8d:05:ea:71:a0:ae:1b:e7:11:fa:f9:a0:
88:41:1c:3e:8d:91:59:ed:e4:fa:10:5e:9a:c2:09:
ff:01:bb:b8:8c:af:62:4b:ac:d2:2c:ff:37:cd:ad:
43:38:14:7e:34:34:88:21:73:10:bd:7b:4f:b7:e9:
08:6f:d8:7d:7a:57:6d:35:49:7c:77:4b:3b:c0:50:
c8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F7:F6:88:6C:96:89:A6:38:75:FA:67:BC:AD:D5:DA:F2:53:E9:B9
X509v3 Authority Key Identifier:
keyid:DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/pPf2iGyWiaY4dfpnvK3V2vJT6bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.248.0.0/16
37.115.0.0/16
37.229.0.0/16
46.118.0.0/15
46.185.0.0/17
46.211.0.0/16
62.64.64.0/18
77.247.216.0/21
81.23.16.0/20
83.170.192.0/18
85.223.128.0/17
89.162.128.0/17
94.27.0.0/17
94.153.0.0/16
109.162.0.0/17
134.249.0.0/16
176.8.0.0/16
178.137.0.0/16
188.163.0.0/16
193.41.60.0/22
193.239.128.0/23
212.82.192.0/19
212.109.32.0/19
IPv6:
2a02:8a8::/32
2a02:2378::/32
Signature Algorithm: sha256WithRSAEncryption
95:45:8f:08:13:a3:b1:13:a0:74:a6:12:03:5d:48:7e:0f:07:
8b:c5:31:bc:60:c8:2d:27:31:b9:af:de:22:df:5d:c9:7e:22:
10:0b:c2:80:10:a2:54:26:60:97:1e:01:6d:ac:cb:a0:1e:5d:
1b:5e:1e:b3:bf:43:d8:a1:ad:59:2a:9e:17:c3:d1:30:7e:17:
a4:68:97:4f:89:b0:d4:81:1b:66:cb:8b:9d:5a:41:47:4c:01:
69:78:d6:79:50:45:d3:84:2b:66:59:cf:65:b7:6c:57:8e:71:
28:7e:59:a1:98:d5:ad:f0:b1:23:b0:28:be:32:ac:00:9e:d3:
24:ec:64:3e:fd:71:08:d1:b3:be:b4:25:5e:e5:7f:ad:8a:6f:
f3:3b:2e:53:58:05:d3:05:c8:9e:98:5a:9a:16:01:01:ff:18:
fc:58:31:52:75:85:87:32:e0:43:e1:ba:51:57:33:53:d2:56:
e8:e7:34:da:86:b1:61:6b:c6:31:b8:7b:13:d4:83:4d:5e:2f:
82:8a:c5:7e:0e:fe:59:ff:32:89:18:0a:89:0e:74:25:2d:08:
e8:99:0a:dd:e7:34:b1:c1:01:46:20:a1:bf:35:34:ee:68:45:
ce:37:73:40:72:c7:78:91:b1:fc:28:58:ad:32:d3:75:11:8f:
23:df:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:14 2026 by rpki-client