Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/2CWCfCy9K4Vi9k3gQcjDl2NrNEM.roa
File: 2CWCfCy9K4Vi9k3gQcjDl2NrNEM.roa (raw, json)
Hash identifier: 9rqgytTtMM+w+XpSLnW26DVZMUTWIVNTb8QB8FjrNS4=
Subject key identifier: D8:25:82:7C:2C:BD:2B:85:62:F6:4D:E0:41:C8:C3:97:63:6B:34:43
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A1D4EDC0E533871E68A253D46D0AA63BCA
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/2CWCfCy9K4Vi9k3gQcjDl2NrNEM.roa
Signing time: Fri 13 Nov 2026 12:41:53 +0000
ROA not before: Fri 13 Nov 2026 12:41:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34471
IP address blocks: 2.59.108.0/22 maxlen: 24
2.59.108.0/24 maxlen: 24
2.59.109.0/24 maxlen: 24
2.59.110.0/24 maxlen: 24
2.59.111.0/24 maxlen: 24
5.134.32.0/20 maxlen: 20
31.25.176.0/21 maxlen: 24
37.122.216.0/22 maxlen: 24
37.122.219.0/24 maxlen: 24
45.92.132.0/22 maxlen: 24
45.92.132.0/23 maxlen: 23
46.28.160.0/21 maxlen: 24
46.28.163.0/24 maxlen: 24
46.28.166.0/23 maxlen: 23
89.40.84.0/22 maxlen: 24
89.44.36.0/22 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
176.56.64.0/19 maxlen: 24
176.56.78.0/23 maxlen: 23
176.56.80.0/22 maxlen: 22
176.56.84.0/24 maxlen: 24
176.56.85.0/24 maxlen: 24
176.56.86.0/23 maxlen: 23
176.56.88.0/23 maxlen: 23
176.56.88.0/24 maxlen: 24
176.56.92.0/24 maxlen: 24
176.56.94.0/24 maxlen: 24
185.4.32.0/22 maxlen: 24
185.5.84.0/22 maxlen: 24
185.70.152.0/22 maxlen: 24
185.84.204.0/22 maxlen: 22
185.84.206.0/24 maxlen: 24
185.85.255.0/24 maxlen: 24
185.98.32.0/22 maxlen: 22
185.102.204.0/22 maxlen: 24
185.103.148.0/22 maxlen: 24
185.110.212.0/22 maxlen: 24
185.111.0.0/22 maxlen: 22
185.111.0.0/24 maxlen: 24
185.111.1.0/24 maxlen: 24
185.111.2.0/24 maxlen: 24
185.111.3.0/24 maxlen: 24
185.142.44.0/22 maxlen: 24
185.153.16.0/22 maxlen: 24
185.157.4.0/22 maxlen: 22
185.157.4.0/24 maxlen: 24
185.157.7.0/24 maxlen: 24
185.176.104.0/22 maxlen: 22
185.176.104.0/24 maxlen: 24
185.176.105.0/24 maxlen: 24
185.176.106.0/24 maxlen: 24
185.176.107.0/24 maxlen: 24
185.205.252.0/22 maxlen: 22
185.205.252.0/24 maxlen: 24
185.205.253.0/24 maxlen: 24
185.205.254.0/24 maxlen: 24
185.205.255.0/24 maxlen: 24
185.212.136.0/22 maxlen: 24
185.223.216.0/22 maxlen: 22
185.223.216.0/24 maxlen: 24
185.228.124.0/22 maxlen: 24
185.228.124.0/24 maxlen: 24
185.228.125.0/24 maxlen: 24
185.228.126.0/24 maxlen: 24
185.228.127.0/24 maxlen: 24
185.239.160.0/22 maxlen: 22
185.239.160.0/24 maxlen: 24
185.239.161.0/24 maxlen: 24
185.239.162.0/23 maxlen: 23
185.243.136.0/22 maxlen: 24
193.108.206.0/23 maxlen: 24
193.108.206.0/24 maxlen: 24
193.108.230.0/23 maxlen: 24
193.246.156.0/23 maxlen: 24
194.156.72.0/22 maxlen: 24
194.156.72.0/24 maxlen: 24
194.156.73.0/24 maxlen: 24
194.156.75.0/24 maxlen: 24
2a02:5dc0::/32 maxlen: 32
2a02:5fc0::/32 maxlen: 48
2a03:440::/32 maxlen: 32
2a05:9b00::/29 maxlen: 29
2a05:a800::/29 maxlen: 29
2a06:3c00::/29 maxlen: 29
2a09:eac0::/29 maxlen: 29
2a0a:1280::/29 maxlen: 29
2a0b:c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:ed:c0:e5:33:87:1e:68:a2:53:d4:6d:0a:a6:3b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Nov 13 12:41:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d825827c2cbd2b8562f64de041c8c397636b3443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:5c:19:27:4b:17:e0:48:e7:83:03:62:bd:
c8:72:48:2e:18:60:61:dc:d2:0e:30:6f:12:c8:59:
bd:ca:a0:7b:64:6e:68:7b:ad:34:27:f8:3d:d4:4f:
dc:66:e2:2b:f7:3c:5a:a3:53:b1:bf:b0:7a:dd:56:
2e:35:2d:76:e4:db:f9:b6:d4:11:d9:06:d3:51:0a:
8a:a1:b4:49:e8:b1:6a:bd:01:46:0f:e7:bb:64:23:
a0:80:74:ab:d9:ab:b4:39:de:64:d6:40:f8:7d:7c:
be:1c:32:a4:2e:20:e6:6c:e1:71:e7:fe:88:ee:c9:
72:b0:1d:b7:3c:8b:f9:83:9c:89:58:53:90:a3:70:
2d:e6:1d:d6:cf:63:a8:3b:c4:25:67:f0:82:c6:6d:
63:37:b6:ce:16:b0:d8:de:52:b0:dd:c2:30:8d:76:
34:1d:f8:44:ea:07:4a:ad:48:e4:b7:7b:9b:d9:c9:
22:44:85:4f:85:ec:50:fb:a5:1a:09:0f:82:25:f2:
c7:30:01:92:53:22:84:f3:75:89:f0:9b:68:81:cc:
d6:de:47:18:8a:36:ff:64:39:a8:6b:99:02:f7:b8:
19:11:a9:74:7f:4e:77:6f:a9:05:22:6d:80:0e:31:
6f:21:4b:01:d0:c7:a8:0c:dd:e9:91:9a:42:ff:dd:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:82:7C:2C:BD:2B:85:62:F6:4D:E0:41:C8:C3:97:63:6B:34:43
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/2CWCfCy9K4Vi9k3gQcjDl2NrNEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
5.134.32.0/20
31.25.176.0/21
37.122.216.0/22
45.92.132.0/22
46.28.160.0/21
89.40.84.0/22
89.44.36.0/22
91.242.148.0/22
109.235.16.0/21
176.56.64.0/19
185.4.32.0/22
185.5.84.0/22
185.70.152.0/22
185.84.204.0/22
185.85.255.0/24
185.98.32.0/22
185.102.204.0/22
185.103.148.0/22
185.110.212.0/22
185.111.0.0/22
185.142.44.0/22
185.153.16.0/22
185.157.4.0/22
185.176.104.0/22
185.205.252.0/22
185.212.136.0/22
185.223.216.0/22
185.228.124.0/22
185.239.160.0/22
185.243.136.0/22
193.108.206.0/23
193.108.230.0/23
193.246.156.0/23
194.156.72.0/22
IPv6:
2a02:5dc0::/32
2a02:5fc0::/32
2a03:440::/32
2a05:9b00::/29
2a05:a800::/29
2a06:3c00::/29
2a09:eac0::/29
2a0a:1280::/29
2a0b:c40::/29
Signature Algorithm: sha256WithRSAEncryption
8b:77:ca:5e:0d:93:95:9f:fb:2b:d2:71:ad:d9:14:c0:db:a4:
10:34:ed:60:a6:a7:61:e9:d2:bb:09:2c:41:57:21:c0:60:fe:
6e:a1:f6:a0:a5:75:52:59:52:d0:b8:b2:1d:23:af:42:47:37:
27:2e:37:3e:fa:2c:c7:54:0b:ce:45:f3:42:24:a7:b8:0c:6c:
18:73:57:ad:85:34:43:a9:2b:f4:16:48:e7:fa:0d:a4:44:f8:
75:58:62:82:83:66:a2:0a:e9:1e:93:a1:8e:fa:18:8d:9f:5b:
d2:6e:76:57:85:2a:d3:50:49:54:32:5f:90:4f:a5:0d:ee:69:
b3:f4:23:9c:4e:1e:ef:b3:6a:0c:a3:30:4c:63:a2:57:a5:08:
bf:69:f1:2e:44:8a:b3:c0:1d:4e:90:76:84:c2:31:6a:a9:4e:
58:75:a4:2d:c1:bc:e5:9a:38:0b:fb:32:f7:63:7c:07:b1:c0:
14:89:56:a9:c4:bd:84:3e:7a:f3:38:27:a0:82:4a:85:d7:d6:
a5:54:e4:85:43:63:90:67:f3:7a:8c:02:f5:d8:16:62:d9:e2:
27:f1:c7:be:18:5c:fa:35:9d:27:5c:42:04:96:df:69:fd:c8:
fa:5d:b0:b9:37:26:72:f7:f8:06:27:9d:49:7f:d2:d6:2e:20:
19:37:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:05:08 2026 by rpki-client