Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/a4RVALqt3vHeDDskNW3A5CdGc-U.roa
File: a4RVALqt3vHeDDskNW3A5CdGc-U.roa (raw, json)
Hash identifier: TGxk49hSl+fpcglkMzdXiM6aB3O9APTDcKaAiPFnS+M=
Subject key identifier: 6B:84:55:00:BA:AD:DE:F1:DE:0C:3B:24:35:6D:C0:E4:27:46:73:E5
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019EF39424DF6B657BB1D4828719E2C85141
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/a4RVALqt3vHeDDskNW3A5CdGc-U.roa
Signing time: Tue 23 Jun 2026 08:23:52 +0000
ROA not before: Tue 23 Jun 2026 08:23:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3292
IP address blocks: 2.104.0.0/14 maxlen: 14
2.108.0.0/15 maxlen: 15
2.111.0.0/16 maxlen: 16
62.135.128.0/17 maxlen: 17
62.242.0.0/15 maxlen: 15
80.62.0.0/15 maxlen: 15
80.160.0.0/13 maxlen: 13
80.196.0.0/14 maxlen: 14
81.31.80.0/20 maxlen: 20
83.88.0.0/14 maxlen: 14
83.92.0.0/15 maxlen: 15
83.94.0.0/18 maxlen: 18
83.94.96.0/19 maxlen: 19
83.94.128.0/17 maxlen: 17
83.95.0.0/16 maxlen: 16
85.129.0.0/17 maxlen: 17
87.48.0.0/13 maxlen: 13
87.56.32.0/19 maxlen: 19
87.56.128.0/17 maxlen: 17
87.57.0.0/16 maxlen: 16
87.58.32.0/19 maxlen: 19
87.58.160.0/19 maxlen: 19
87.58.224.0/19 maxlen: 19
87.59.0.0/16 maxlen: 16
87.60.0.0/16 maxlen: 16
87.61.0.0/17 maxlen: 17
87.61.128.0/18 maxlen: 18
87.61.224.0/19 maxlen: 19
87.62.0.0/15 maxlen: 15
93.160.0.0/14 maxlen: 14
93.164.0.0/17 maxlen: 17
93.164.160.0/19 maxlen: 19
93.164.192.0/18 maxlen: 18
93.165.0.0/18 maxlen: 18
93.165.96.0/19 maxlen: 19
93.165.128.0/17 maxlen: 17
93.166.0.0/15 maxlen: 15
93.178.128.0/18 maxlen: 18
94.189.0.0/17 maxlen: 17
95.166.64.0/18 maxlen: 18
95.166.128.0/17 maxlen: 17
128.76.0.0/18 maxlen: 18
128.76.128.0/17 maxlen: 17
128.77.128.0/17 maxlen: 17
131.164.0.0/16 maxlen: 16
176.20.0.0/17 maxlen: 17
176.20.224.0/19 maxlen: 19
176.21.0.0/16 maxlen: 16
176.22.0.0/17 maxlen: 17
176.22.160.0/19 maxlen: 19
176.22.192.0/18 maxlen: 18
176.23.0.0/17 maxlen: 17
176.23.160.0/19 maxlen: 19
176.23.192.0/18 maxlen: 18
188.176.0.0/13 maxlen: 13
192.66.25.0/24 maxlen: 24
192.66.33.0/24 maxlen: 24
192.66.36.0/24 maxlen: 24
192.66.38.0/24 maxlen: 24
192.66.175.0/24 maxlen: 24
192.66.180.0/24 maxlen: 24
192.66.181.0/24 maxlen: 24
193.3.130.0/23 maxlen: 23
193.3.140.0/24 maxlen: 24
193.3.141.0/24 maxlen: 24
193.3.142.0/24 maxlen: 24
193.3.224.0/22 maxlen: 22
193.39.139.0/24 maxlen: 24
193.88.0.0/15 maxlen: 15
193.162.32.0/23 maxlen: 23
193.162.98.0/23 maxlen: 23
193.162.145.0/24 maxlen: 24
193.162.146.0/24 maxlen: 24
193.162.152.0/21 maxlen: 21
193.163.10.0/24 maxlen: 24
193.163.24.0/22 maxlen: 22
193.163.158.0/23 maxlen: 23
193.163.160.0/21 maxlen: 21
194.182.128.0/20 maxlen: 20
194.182.144.0/21 maxlen: 21
194.182.232.0/21 maxlen: 21
194.182.240.0/20 maxlen: 20
194.192.0.0/16 maxlen: 16
194.239.0.0/16 maxlen: 16
194.247.188.0/23 maxlen: 23
195.41.0.0/16 maxlen: 16
195.95.181.0/24 maxlen: 24
195.97.128.0/18 maxlen: 18
195.184.32.0/19 maxlen: 19
195.215.0.0/16 maxlen: 16
195.249.0.0/16 maxlen: 16
212.130.0.0/16 maxlen: 16
2001:6c8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:94:24:df:6b:65:7b:b1:d4:82:87:19:e2:c8:51:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jun 23 08:23:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b845500baaddef1de0c3b24356dc0e4274673e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:55:22:2c:3e:15:3e:78:a5:c4:84:55:a4:
57:b1:58:e8:f5:84:d6:3f:50:8f:8b:62:be:e6:73:
e9:2f:ff:64:db:c6:fb:7e:16:01:2a:03:ed:76:2d:
da:e0:6e:d7:17:4e:01:31:1d:6e:6c:00:37:db:ea:
c4:0c:35:51:e5:e4:ee:d8:1c:22:36:6c:bd:e4:77:
c9:47:49:21:47:d4:85:bf:1c:9c:c5:d1:2d:b4:bd:
7b:73:ca:78:d2:d3:12:d2:fd:7b:a0:fe:7b:a0:cf:
ec:91:87:53:be:e9:e6:b7:71:81:39:99:f7:a7:00:
29:9e:bc:b4:3a:48:18:49:ef:6a:80:50:fe:91:ac:
7a:f4:0a:31:7b:d0:d6:4e:cc:37:71:d0:48:46:b4:
01:cf:3e:87:45:57:5f:4f:b0:54:03:0f:8a:84:84:
29:a9:dc:d6:70:b5:01:a5:72:69:cd:dd:32:e8:2c:
1a:44:96:3d:a0:90:4e:51:95:c2:d3:0d:8f:2a:b9:
3a:40:13:ce:96:e6:22:42:5f:10:20:8c:b4:ff:95:
e9:05:4a:cd:ef:03:13:fa:b5:b9:b5:ee:31:fc:48:
90:60:18:45:b8:07:dd:56:b8:1d:f9:ad:d1:50:dd:
ae:91:77:15:2d:02:fb:f0:92:24:9b:f9:17:0d:8d:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:84:55:00:BA:AD:DE:F1:DE:0C:3B:24:35:6D:C0:E4:27:46:73:E5
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/a4RVALqt3vHeDDskNW3A5CdGc-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.104.0.0-2.109.255.255
2.111.0.0/16
62.135.128.0/17
62.242.0.0/15
80.62.0.0/15
80.160.0.0/13
80.196.0.0/14
81.31.80.0/20
83.88.0.0-83.94.63.255
83.94.96.0-83.95.255.255
85.129.0.0/17
87.48.0.0/13
87.56.32.0/19
87.56.128.0-87.57.255.255
87.58.32.0/19
87.58.160.0/19
87.58.224.0-87.61.191.255
87.61.224.0-87.63.255.255
93.160.0.0-93.164.127.255
93.164.160.0-93.165.63.255
93.165.96.0-93.167.255.255
93.178.128.0/18
94.189.0.0/17
95.166.64.0-95.166.255.255
128.76.0.0/18
128.76.128.0/17
128.77.128.0/17
131.164.0.0/16
176.20.0.0/17
176.20.224.0-176.22.127.255
176.22.160.0-176.23.127.255
176.23.160.0-176.23.255.255
188.176.0.0/13
192.66.25.0/24
192.66.33.0/24
192.66.36.0/24
192.66.38.0/24
192.66.175.0/24
192.66.180.0/23
193.3.130.0/23
193.3.140.0-193.3.142.255
193.3.224.0/22
193.39.139.0/24
193.88.0.0/15
193.162.32.0/23
193.162.98.0/23
193.162.145.0-193.162.146.255
193.162.152.0/21
193.163.10.0/24
193.163.24.0/22
193.163.158.0-193.163.167.255
194.182.128.0-194.182.151.255
194.182.232.0-194.182.255.255
194.192.0.0/16
194.239.0.0/16
194.247.188.0/23
195.41.0.0/16
195.95.181.0/24
195.97.128.0/18
195.184.32.0/19
195.215.0.0/16
195.249.0.0/16
212.130.0.0/16
IPv6:
2001:6c8::/29
Signature Algorithm: sha256WithRSAEncryption
0e:ba:3c:37:16:be:b8:ea:19:b2:18:f6:14:46:76:e5:f3:54:
de:48:c7:00:8d:04:ef:6f:eb:08:18:93:57:a2:50:f0:4d:58:
90:82:4e:e2:d1:9e:a6:dd:e7:a7:b8:97:10:2b:2c:04:1d:de:
b1:48:ce:9c:7f:69:48:76:17:b2:23:87:ac:a2:22:3e:49:26:
be:0c:a8:2c:ba:b9:63:71:72:40:d5:64:88:87:db:13:69:cb:
f4:c0:9c:06:f3:23:ce:c7:4f:23:7d:60:27:6f:21:71:1a:03:
1a:2c:72:32:ba:be:d9:b4:df:eb:25:7d:9b:b1:ed:14:96:fe:
25:23:6e:e3:60:44:17:7f:32:48:84:09:56:fa:f4:62:a9:b6:
30:52:a2:cc:d9:b2:81:b1:9f:c7:44:fe:ee:5a:7c:d1:12:1d:
47:fe:97:8f:eb:44:06:e7:f4:ed:7f:20:ac:1f:c2:68:b0:2e:
f9:1d:4e:f4:1f:04:58:31:5a:18:9e:02:e5:02:96:cc:26:c7:
f0:47:e6:b3:46:24:22:6e:1f:47:01:2d:1a:d5:04:90:9d:19:
5d:04:00:31:b4:74:1d:d1:4f:97:85:c6:94:42:8f:10:c2:21:
57:5c:f0:37:c5:aa:98:6e:a2:16:65:c2:ed:11:28:0b:92:b9:
8d:24:1c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:45 2026 by rpki-client