Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/8s9uSzf6TvkzP7AMAwk-J-bBoaI.roa
File: 8s9uSzf6TvkzP7AMAwk-J-bBoaI.roa (raw, json)
Hash identifier: HhHYyz7/gaXYnl+eOQvtBscobpbKRyobYY7K5LG1gFs=
Subject key identifier: F2:CF:6E:4B:37:FA:4E:F9:33:3F:B0:0C:03:09:3E:27:E6:C1:A1:A2
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019F31ED4F702081C410A482EBD61E57A842
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/8s9uSzf6TvkzP7AMAwk-J-bBoaI.roa
Signing time: Sun 05 Jul 2026 10:57:43 +0000
ROA not before: Sun 05 Jul 2026 10:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44208
IP address blocks: 31.170.48.0/23 maxlen: 23
31.170.50.0/23 maxlen: 23
31.170.52.0/23 maxlen: 23
31.170.54.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
31.170.56.0/23 maxlen: 23
31.170.58.0/23 maxlen: 23
31.170.60.0/22 maxlen: 22
37.49.148.0/24 maxlen: 24
94.74.128.0/23 maxlen: 23
94.74.128.0/24 maxlen: 24
94.74.129.0/24 maxlen: 24
94.74.130.0/23 maxlen: 23
94.74.132.0/22 maxlen: 22
94.74.136.0/23 maxlen: 23
94.74.136.0/24 maxlen: 24
94.74.138.0/23 maxlen: 23
94.74.141.0/24 maxlen: 24
94.74.142.0/23 maxlen: 23
94.74.144.0/24 maxlen: 24
94.74.146.0/24 maxlen: 24
94.74.148.0/23 maxlen: 23
94.74.150.0/23 maxlen: 23
94.74.152.0/22 maxlen: 22
94.74.160.0/22 maxlen: 22
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
94.74.168.0/23 maxlen: 24
94.74.170.0/24 maxlen: 24
94.74.172.0/24 maxlen: 24
94.74.174.0/23 maxlen: 23
94.74.176.0/22 maxlen: 22
94.74.180.0/23 maxlen: 23
94.74.182.0/23 maxlen: 23
94.74.186.0/23 maxlen: 23
94.74.187.0/24 maxlen: 24
94.74.188.0/23 maxlen: 23
94.74.190.0/23 maxlen: 23
94.74.191.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.138.0/23 maxlen: 23
176.46.141.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/23 maxlen: 23
176.46.152.0/22 maxlen: 22
176.46.156.0/23 maxlen: 23
176.46.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:ed:4f:70:20:81:c4:10:a4:82:eb:d6:1e:57:a8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 5 10:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2cf6e4b37fa4ef9333fb00c03093e27e6c1a1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:9e:76:23:f2:5c:c1:26:5c:49:8e:f8:09:
c2:b6:d9:9b:f2:2d:22:dd:3d:80:d3:45:12:06:a3:
e1:b8:1c:cc:0d:7c:39:5a:64:ac:8b:33:2d:71:4f:
72:fc:c1:5f:ad:20:ed:2e:fe:5a:de:df:5c:5b:36:
77:f9:36:25:e1:a7:b6:66:c4:60:65:d2:f1:e3:bc:
53:7c:6b:99:12:03:cd:c1:a1:13:85:12:96:91:ab:
a9:5c:0e:65:50:b9:43:e9:a2:2f:22:2e:23:71:d7:
75:0a:dd:96:de:c3:de:a0:ca:1f:fc:51:d8:3a:b1:
9e:a4:00:c6:80:2c:7a:dd:94:61:fa:7a:81:8c:30:
70:ab:f4:b9:f1:e3:c1:72:e9:b3:72:39:8a:91:29:
41:92:ea:2f:11:3e:c5:44:79:e0:c8:9d:81:bb:cd:
e2:90:5a:39:c5:9b:27:69:55:d8:74:b6:a6:81:3e:
ed:9c:80:5c:c4:87:6e:a6:42:a2:a3:7b:70:31:2a:
92:2e:ac:1b:28:c0:22:f4:6f:89:b2:2b:05:ad:d3:
ba:1e:e2:e5:0a:ec:1b:30:7a:37:9a:62:5c:06:5b:
67:80:55:72:3f:32:35:da:bc:22:e1:c2:9f:98:85:
8e:23:58:01:29:15:fa:be:24:6d:7f:4b:c4:13:a3:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:6E:4B:37:FA:4E:F9:33:3F:B0:0C:03:09:3E:27:E6:C1:A1:A2
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/8s9uSzf6TvkzP7AMAwk-J-bBoaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
37.49.148.0/24
94.74.128.0-94.74.139.255
94.74.141.0-94.74.144.255
94.74.146.0/24
94.74.148.0-94.74.155.255
94.74.160.0/22
94.74.165.0-94.74.170.255
94.74.172.0/24
94.74.174.0-94.74.183.255
94.74.186.0-94.74.191.255
176.46.134.0/24
176.46.138.0/23
176.46.141.0/24
176.46.144.0/24
176.46.147.0-176.46.149.255
176.46.152.0-176.46.158.255
Signature Algorithm: sha256WithRSAEncryption
9b:83:03:65:1b:41:18:d6:74:f4:8a:8f:24:68:6e:d0:ae:51:
26:01:89:56:2d:79:85:5b:e1:f5:35:d6:89:ea:d7:08:a4:eb:
76:2b:52:d1:1a:11:98:47:dc:6c:a6:dc:e7:97:93:a8:3f:ad:
94:db:01:3b:a5:1b:e7:05:03:35:b0:78:e7:96:29:76:e3:f6:
c8:b7:5e:28:83:93:d2:0d:44:b6:37:7b:7c:63:c2:1d:c0:70:
9a:0b:2d:18:9e:40:48:65:c0:e3:72:5e:3e:19:21:c7:33:11:
09:3d:f8:db:e1:3f:1d:ac:cf:3b:d8:a0:b6:a0:3c:69:24:97:
04:09:92:83:45:10:f1:21:56:cc:31:d3:b4:a7:32:15:4d:3e:
49:c6:97:6b:bd:0f:cb:16:61:00:c3:45:4c:17:09:51:cd:27:
0c:d2:bc:87:bb:76:f2:e9:83:2b:5f:07:66:cc:7c:23:b3:b5:
6b:f5:f7:1b:34:c0:54:2c:e8:aa:53:19:75:8f:6c:f2:33:4f:
f7:43:8a:4c:9e:76:9d:2b:ce:e8:e7:fd:d5:4d:4b:49:33:86:
dc:bd:fd:3d:60:41:88:c4:53:31:87:64:05:e1:cd:1c:f7:34:
cb:ac:c8:a1:ac:a3:4f:1c:c6:fd:e3:0f:01:e9:73:09:50:cf:
82:10:1a:e5
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZ8x7U9wIIHEEKSC69YeV6hCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjYwNzA1MTA1NzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmNmNmU0YjM3ZmE0ZWY5MzMzZmIwMGMwMzA5M2UyN2U2YzFhMWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyyediPyXMEmXEmO+AnCttmb8i0i
3T2A00USBqPhuBzMDXw5WmSsizMtcU9y/MFfrSDtLv5a3t9cWzZ3+TYl4ae2ZsRg
ZdLx47xTfGuZEgPNwaEThRKWkaupXA5lULlD6aIvIi4jcdd1Ct2W3sPeoMof/FHY
OrGepADGgCx63ZRh+nqBjDBwq/S58ePBcumzcjmKkSlBkuovET7FRHngyJ2Bu83i
kFo5xZsnaVXYdLamgT7tnIBcxIdupkKio3twMSqSLqwbKMAi9G+JsisFrdO6HuLl
CuwbMHo3mmJcBltngFVyPzI12rwi4cKfmIWOI1gBKRX6viRtf0vEE6PFqQIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFPLPbks3+k75Mz+wDAMJPifmwaGiMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvOHM5dVN6ZjZUdmt6UDdBTUF3ay1KLWJCb2FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBAQf
qjADBAAlMZQwDAMEB15KgAMEAl5KiDAMAwQAXkqNAwQAXkqQAwQAXkqSMAwDBAJe
SpQDBAJeSpgDBAJeSqAwDAMEAF5KpQMEAF5KqgMEAF5KrDAMAwQBXkquAwQDXkqw
MAwDBAFeSroDBAZeSoADBACwLoYDBAGwLooDBACwLo0DBACwLpAwDAMEALAukwME
AbAulDAMAwQDsC6YAwQAsC6eMA0GCSqGSIb3DQEBCwUAA4IBAQCbgwNlG0EY1nT0
io8kaG7QrlEmAYlWLXmFW+H1NdaJ6tcIpOt2K1LRGhGYR9xsptznl5OoP62U2wE7
pRvnBQM1sHjnlil24/bIt14og5PSDUS2N3t8Y8IdwHCaCy0YnkBIZcDjcl4+GSHH
MxEJPfjb4T8drM872KC2oDxpJJcECZKDRRDxIVbMMdO0pzIVTT5JxpdrvQ/LFmEA
w0VMFwlRzScM0ryHu3by6YMrXwdmzHwjs7Vr9fcbNMBULOiqUxl1j2zyM0/3Q4pM
nnadK87o5/3VTUtJM4bcvf09YEGIxFMxh2QF4c0c9zTLrMihrKNPHMb94w8B6XMJ
UM+CEBrl
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:52 2026 by rpki-client