Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/Sq9wGfvIXX44Fkr3lUW2I0R4bBk.roa
File: Sq9wGfvIXX44Fkr3lUW2I0R4bBk.roa (raw, json)
Hash identifier: IuqSt8hYCmt5WFSywk25kD+Qpj3FWEZCmOzvf0HCdPw=
Subject key identifier: 4A:AF:70:19:FB:C8:5D:7E:38:16:4A:F7:95:45:B6:23:44:78:6C:19
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 019F4A8F75D66FB70D59994FDD1C930A185E
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/Sq9wGfvIXX44Fkr3lUW2I0R4bBk.roa
Signing time: Fri 10 Jul 2026 05:45:43 +0000
ROA not before: Fri 10 Jul 2026 05:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30722
IP address blocks: 2.32.0.0/16 maxlen: 20
2.33.0.0/17 maxlen: 17
2.33.128.0/17 maxlen: 17
2.33.176.0/20 maxlen: 20
2.34.0.0/15 maxlen: 20
2.36.0.0/14 maxlen: 18
2.40.0.0/16 maxlen: 20
2.41.0.0/16 maxlen: 16
2.42.0.0/16 maxlen: 20
2.43.0.0/16 maxlen: 16
2.44.0.0/16 maxlen: 19
2.45.0.0/16 maxlen: 20
2.46.0.0/15 maxlen: 20
5.88.0.0/13 maxlen: 20
31.26.0.0/16 maxlen: 16
31.27.0.0/18 maxlen: 18
31.27.96.0/20 maxlen: 20
31.27.128.0/17 maxlen: 19
31.27.192.0/19 maxlen: 19
31.27.224.0/19 maxlen: 19
31.156.0.0/14 maxlen: 19
37.116.0.0/16 maxlen: 19
37.117.0.0/16 maxlen: 19
37.118.0.0/16 maxlen: 16
37.119.0.0/17 maxlen: 19
37.119.128.0/17 maxlen: 20
37.159.0.0/17 maxlen: 17
37.159.128.0/17 maxlen: 20
37.176.0.0/13 maxlen: 20
47.53.0.0/16 maxlen: 16
47.53.32.0/19 maxlen: 19
47.53.64.0/19 maxlen: 19
47.53.128.0/19 maxlen: 19
47.53.160.0/19 maxlen: 19
47.53.208.0/20 maxlen: 20
83.224.64.0/20 maxlen: 20
83.224.80.0/24 maxlen: 24
83.224.81.0/24 maxlen: 24
83.224.86.0/23 maxlen: 23
83.224.128.0/17 maxlen: 17
83.225.0.0/16 maxlen: 16
91.80.0.0/19 maxlen: 19
91.80.32.0/21 maxlen: 21
91.80.46.0/24 maxlen: 24
91.80.48.0/20 maxlen: 24
91.80.64.0/18 maxlen: 18
91.80.128.0/17 maxlen: 17
91.81.0.0/17 maxlen: 19
91.81.128.0/17 maxlen: 24
93.64.0.0/16 maxlen: 18
93.65.0.0/16 maxlen: 18
93.66.0.0/15 maxlen: 17
93.68.0.0/16 maxlen: 16
93.69.0.0/16 maxlen: 16
93.70.0.0/16 maxlen: 18
93.71.0.0/16 maxlen: 18
93.144.0.0/16 maxlen: 20
93.145.0.0/16 maxlen: 20
93.146.0.0/16 maxlen: 20
93.147.0.0/16 maxlen: 20
93.148.0.0/16 maxlen: 20
93.149.0.0/16 maxlen: 20
93.150.0.0/16 maxlen: 20
93.151.0.0/17 maxlen: 17
93.151.128.0/17 maxlen: 20
109.112.0.0/15 maxlen: 15
109.114.0.0/15 maxlen: 19
109.115.96.0/19 maxlen: 19
109.115.192.0/19 maxlen: 19
109.115.224.0/19 maxlen: 19
109.116.0.0/15 maxlen: 20
109.118.0.0/16 maxlen: 16
109.119.0.0/16 maxlen: 16
130.0.128.0/18 maxlen: 21
130.25.0.0/16 maxlen: 18
176.242.0.0/15 maxlen: 15
176.244.0.0/14 maxlen: 14
188.152.0.0/17 maxlen: 20
188.152.128.0/17 maxlen: 20
188.153.0.0/16 maxlen: 20
188.216.0.0/15 maxlen: 17
188.218.0.0/15 maxlen: 18
2a01:820::/32 maxlen: 32
2a01:827::/32 maxlen: 32
2a01:8d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:8f:75:d6:6f:b7:0d:59:99:4f:dd:1c:93:0a:18:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Jul 10 05:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4aaf7019fbc85d7e38164af79545b62344786c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:39:81:a5:d8:01:89:df:2e:ac:e7:cd:b7:
34:cb:c6:26:aa:d1:1c:e2:3d:56:be:77:12:5b:9b:
80:43:17:0d:a8:ab:78:24:f8:9a:be:06:10:32:b0:
41:49:f9:dc:73:8a:61:d0:93:98:fd:65:66:dd:e0:
40:59:89:b8:43:6f:e9:75:37:2c:05:af:87:da:6f:
fa:44:29:d5:cd:a8:26:24:b9:ad:8e:2b:e8:97:9b:
e2:cc:1a:77:37:e2:1c:04:41:9a:27:3f:cb:de:8d:
0d:0b:e5:3f:02:29:8d:68:7e:36:fe:63:50:d5:ad:
c8:53:90:16:37:1a:dd:f2:c9:5e:2d:82:83:23:c9:
2a:de:7d:9a:cd:a9:2b:03:31:75:eb:a8:0b:ea:c6:
da:92:da:8a:99:3a:da:e0:32:c2:80:7d:69:09:48:
ba:e1:aa:10:07:1e:6c:6c:7a:83:9f:e9:0f:a7:a5:
d5:d8:a4:82:8a:a8:40:d1:ff:d9:0e:c5:5a:50:41:
da:49:8a:85:5d:be:25:47:df:1a:14:3c:81:20:54:
96:91:33:6f:75:29:10:98:55:ef:ae:3e:d0:04:c1:
74:f1:49:b9:11:20:cb:fc:db:0c:3e:d6:9d:9f:e9:
51:d0:a2:79:ea:98:38:9e:aa:15:82:95:96:bd:52:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AF:70:19:FB:C8:5D:7E:38:16:4A:F7:95:45:B6:23:44:78:6C:19
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/Sq9wGfvIXX44Fkr3lUW2I0R4bBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.32.0.0/12
5.88.0.0/13
31.26.0.0-31.27.63.255
31.27.96.0/20
31.27.128.0/17
31.156.0.0/14
37.116.0.0/14
37.159.0.0/16
37.176.0.0/13
47.53.0.0/16
83.224.64.0-83.224.81.255
83.224.86.0/23
83.224.128.0-83.225.255.255
91.80.0.0-91.80.39.255
91.80.46.0/24
91.80.48.0-91.81.255.255
93.64.0.0/13
93.144.0.0/13
109.112.0.0/13
130.0.128.0/18
130.25.0.0/16
176.242.0.0-176.247.255.255
188.152.0.0/15
188.216.0.0/14
IPv6:
2a01:820::/32
2a01:827::/32
2a01:8d0::/32
Signature Algorithm: sha256WithRSAEncryption
c9:3a:32:d5:38:04:79:04:e2:fd:5a:af:d8:b3:bc:3e:45:cb:
d0:c1:22:71:f1:7b:3c:4c:0e:ff:ff:a6:fe:18:ba:c2:d7:2c:
26:b7:4d:51:a3:8c:31:d1:16:f1:d1:cd:6a:1e:3b:ad:d9:00:
66:32:e7:30:ed:13:ca:9c:47:6c:67:b7:a4:8b:46:49:35:de:
9e:80:c4:22:34:eb:cb:51:9d:92:50:d3:49:cf:b3:58:ec:9a:
3e:86:04:29:f0:47:43:4c:9f:ad:54:62:48:91:a0:68:83:7d:
3e:d6:98:be:b6:9b:c0:8c:03:30:7c:42:cf:b6:3d:16:3e:f5:
cb:6e:0b:2f:4a:2e:bf:62:f4:6c:0e:00:c1:a4:f7:8e:69:bf:
e9:ec:f7:b9:2c:98:25:05:76:c2:63:23:28:24:96:aa:86:02:
a6:0a:c7:83:e6:11:b0:fb:07:93:fd:b0:38:af:c3:74:83:a4:
7a:90:bf:ed:c8:34:45:11:92:c9:03:a3:35:35:c2:c4:b7:5c:
a3:87:eb:96:0d:3c:4e:82:5d:4f:b3:1c:46:8e:9a:4e:b5:2e:
dc:82:e1:75:87:d2:90:a4:dd:25:47:1c:a5:da:d6:78:e0:20:
07:27:51:86:fe:04:3d:34:c4:88:26:6a:ea:e6:c3:e9:5a:81:
fa:ed:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:17 2026 by rpki-client