Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/r6UENQfHPYPsytR3ZmZk92OeJYw.roa
File: r6UENQfHPYPsytR3ZmZk92OeJYw.roa (raw, json)
Hash identifier: cC+pFefGw9rN2/Aqknuk+KBy4ay7V4pHstE2Pj94BJA=
Subject key identifier: AF:A5:04:35:07:C7:3D:83:EC:CA:D4:77:66:66:64:F7:63:9E:25:8C
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 019F4734B1C4CB5A06FD94B0ED294FCAFCC8
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/r6UENQfHPYPsytR3ZmZk92OeJYw.roa
Signing time: Thu 09 Jul 2026 14:07:43 +0000
ROA not before: Thu 09 Jul 2026 14:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60404
IP address blocks: 5.2.64.0/20 maxlen: 20
5.2.67.0/24 maxlen: 24
5.2.70.0/24 maxlen: 24
5.2.71.0/24 maxlen: 24
5.255.96.0/19 maxlen: 19
88.214.28.0/24 maxlen: 24
88.214.29.0/24 maxlen: 24
88.214.30.0/24 maxlen: 24
88.214.31.0/24 maxlen: 24
103.251.164.0/22 maxlen: 22
103.251.164.0/24 maxlen: 24
103.251.165.0/24 maxlen: 24
103.251.166.0/24 maxlen: 24
103.251.167.0/24 maxlen: 24
150.129.8.0/22 maxlen: 22
150.129.8.0/24 maxlen: 24
150.129.9.0/24 maxlen: 24
150.129.10.0/24 maxlen: 24
185.31.172.0/22 maxlen: 24
192.76.150.0/24 maxlen: 24
192.76.153.0/24 maxlen: 24
192.76.160.0/24 maxlen: 24
192.76.163.0/24 maxlen: 24
2a01:6340::/29 maxlen: 29
2a04:52c0::/32 maxlen: 32
2a04:52c0:1::/48 maxlen: 64
2a04:52c0:138::/48 maxlen: 64
2a04:52c0:139::/48 maxlen: 64
2a04:52c0:140::/48 maxlen: 64
2a04:52c0:141::/48 maxlen: 64
2a04:52c0:142::/48 maxlen: 64
2a04:52c0:1000::/48 maxlen: 64
2a04:52c0:1674::/48 maxlen: 64
2a04:52c0:5001::/48 maxlen: 64
2a04:52c0:6000::/36 maxlen: 64
2a04:52c0:7000::/36 maxlen: 64
2a0f:6bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:34:b1:c4:cb:5a:06:fd:94:b0:ed:29:4f:ca:fc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Jul 9 14:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afa5043507c73d83eccad477666664f7639e258c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:9c:78:a6:6d:fb:4b:aa:a0:c5:3a:32:25:
9b:dc:f1:d9:28:ca:b0:49:70:2b:a7:db:6a:85:bf:
9a:13:bd:47:84:25:a5:53:8f:cc:ab:5d:93:bf:cc:
19:9c:af:d7:65:aa:47:50:be:7f:69:c2:e7:e7:12:
37:d8:85:de:c7:d6:7b:2a:b7:94:74:7f:e3:da:a8:
e1:c7:ae:71:06:25:2d:3a:33:a0:ea:df:8c:71:99:
fb:a4:14:f4:84:ea:65:0f:e7:48:16:d1:dd:af:46:
98:93:59:15:51:5b:6d:6e:43:32:94:56:5e:85:53:
62:26:72:4d:04:81:c8:2b:da:b3:c3:b8:d7:95:e2:
2a:ad:8a:57:98:43:97:68:8e:bc:15:b9:ef:2c:4e:
12:04:7f:c1:1c:85:f3:6b:11:1b:f3:dc:9a:a6:8b:
3f:f6:af:99:1d:05:f6:95:0b:2b:61:16:12:f5:e1:
6e:57:e6:5e:de:34:74:59:3b:eb:f4:83:52:96:41:
55:07:2c:42:72:5a:cd:fa:3e:52:64:8f:c5:c2:2d:
59:29:e7:b7:b1:e2:28:c9:9e:6f:3a:51:1b:38:48:
b3:a6:97:22:2a:3c:63:18:ff:b0:17:82:d1:d6:be:
34:c0:d4:7d:85:fe:1e:2b:e1:30:12:2c:7b:72:37:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:04:35:07:C7:3D:83:EC:CA:D4:77:66:66:64:F7:63:9E:25:8C
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/r6UENQfHPYPsytR3ZmZk92OeJYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.64.0/20
5.255.96.0/19
88.214.28.0/22
103.251.164.0/22
150.129.8.0/22
185.31.172.0/22
192.76.150.0/24
192.76.153.0/24
192.76.160.0/24
192.76.163.0/24
IPv6:
2a01:6340::/29
2a04:52c0::/32
2a0f:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:eb:01:43:14:9a:1b:f7:b6:45:8b:01:62:10:36:8e:25:a6:
3c:22:6a:0d:2c:65:8b:19:6e:fd:84:fa:14:5b:cc:ed:d3:5b:
d5:97:d8:9f:15:a8:fa:4f:da:30:ae:a6:0d:6e:25:5e:ff:4e:
f8:e7:fb:92:6b:21:54:47:4f:78:80:5b:60:f1:d3:fd:29:01:
ac:59:75:02:0d:01:7c:09:40:cd:b0:ef:52:22:f0:9d:ed:75:
de:7f:a7:8e:be:40:6e:37:39:98:6b:75:cb:2d:82:b6:54:b3:
f8:3e:64:97:12:0b:58:fe:36:42:39:db:47:73:ef:c2:29:ab:
af:bd:f0:4d:84:fe:f8:c5:b0:c3:1a:52:0d:1e:44:e2:ab:74:
64:e4:9c:9e:e4:1f:e3:6c:1d:1f:f6:ef:57:c3:d4:f4:8b:c3:
06:5b:52:b9:74:36:7a:92:50:2e:05:da:b6:76:31:bf:b6:9b:
00:8e:11:42:d0:0b:8a:f2:d8:b0:ad:3c:10:49:98:a1:67:1a:
ad:d7:63:36:11:9a:3e:42:89:cf:63:3d:93:f8:db:02:c9:29:
eb:2b:4d:02:c7:59:15:cf:d9:57:da:5b:02:72:c9:dc:07:62:
cf:33:73:3b:aa:0b:b4:6e:c1:22:06:63:95:2b:ac:86:7e:fd:
1d:74:f4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 15:13:20 2026 by rpki-client