Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/RFfxQlgpEPrKePaKGQadR6EJSqs.roa
File: RFfxQlgpEPrKePaKGQadR6EJSqs.roa (raw, json)
Hash identifier: oi8mU13gbqdkE5qYPVo/94WYOHiVBIqcRLFc6Pbaf40=
Subject key identifier: 44:57:F1:42:58:29:10:FA:CA:78:F6:8A:19:06:9D:47:A1:09:4A:AB
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019DB9A0591D2C15792EB552CB108252F511
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/RFfxQlgpEPrKePaKGQadR6EJSqs.roa
Signing time: Thu 23 Apr 2026 09:16:26 +0000
ROA not before: Thu 23 Apr 2026 09:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21021
IP address blocks: 31.6.128.0/18 maxlen: 18
31.6.192.0/19 maxlen: 19
31.42.16.0/20 maxlen: 20
37.131.128.0/19 maxlen: 19
37.190.128.0/17 maxlen: 17
46.186.0.0/17 maxlen: 17
46.186.102.0/24 maxlen: 24
46.231.56.0/21 maxlen: 21
62.61.32.0/19 maxlen: 19
62.141.192.0/18 maxlen: 18
80.244.128.0/19 maxlen: 19
80.245.176.0/20 maxlen: 20
81.190.0.0/16 maxlen: 16
82.115.64.0/19 maxlen: 19
83.68.64.0/19 maxlen: 19
84.38.80.0/20 maxlen: 20
85.117.0.0/19 maxlen: 19
87.116.192.0/18 maxlen: 18
89.17.224.0/19 maxlen: 19
89.228.0.0/16 maxlen: 16
89.229.0.0/16 maxlen: 16
89.229.64.0/19 maxlen: 19
89.230.0.0/16 maxlen: 16
89.231.0.0/16 maxlen: 16
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
94.78.128.0/18 maxlen: 18
94.251.128.0/17 maxlen: 17
95.129.224.0/21 maxlen: 21
95.174.32.0/19 maxlen: 19
176.107.112.0/21 maxlen: 21
176.221.96.0/19 maxlen: 19
185.31.184.0/22 maxlen: 22
193.43.240.0/22 maxlen: 22
193.43.242.0/24 maxlen: 24
193.43.243.0/24 maxlen: 24
193.106.76.0/22 maxlen: 22
193.200.118.0/23 maxlen: 23
194.116.132.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
195.93.134.0/23 maxlen: 23
195.93.222.0/23 maxlen: 23
213.136.224.0/19 maxlen: 19
217.70.48.0/20 maxlen: 20
217.75.48.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
217.172.224.0/19 maxlen: 19
2a00:1c00::/32 maxlen: 32
2a00:bde0::/34 maxlen: 34
2a00:bde0:4000::/34 maxlen: 34
2a00:bde0:8000::/34 maxlen: 34
2a00:bde0:c000::/34 maxlen: 34
2a02:2a40::/32 maxlen: 32
2a02:2a40::/34 maxlen: 34
2a02:2a40:4000::/34 maxlen: 34
2a02:2a40:8000::/34 maxlen: 34
2a02:2a40:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:a0:59:1d:2c:15:79:2e:b5:52:cb:10:82:52:f5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Apr 23 09:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4457f142582910faca78f68a19069d47a1094aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:d5:d2:fb:62:aa:7d:a0:d4:fc:2e:10:6d:
6e:41:dc:2b:39:81:d6:78:0d:9e:bd:a9:36:d0:9e:
ab:d1:26:d1:47:a1:1f:d4:f4:f8:d2:ab:ea:0d:cd:
7d:f8:2f:bb:6b:e5:aa:fc:cb:88:ad:b5:7c:cf:79:
32:87:05:31:fc:ca:c9:af:08:3f:2b:f4:f1:8a:b9:
8a:e1:4c:a5:50:b7:92:39:10:22:f7:e9:cd:3b:1d:
7a:10:70:ee:a8:3b:6a:a5:42:6f:02:30:e6:01:49:
32:04:f3:fc:36:61:ab:f5:4e:f0:d6:88:ab:cc:d5:
c3:1a:fa:98:ab:3d:70:1a:95:75:04:4a:dc:e8:18:
8e:a1:12:de:0e:d5:ba:23:f4:74:5f:db:4d:05:f0:
16:ff:95:20:cd:09:1a:38:6c:c3:37:11:f2:1d:53:
28:cd:f6:34:ed:09:b9:af:6f:ae:8d:d4:82:74:ac:
f8:c3:fa:25:11:ea:47:31:6a:ad:0f:ce:bb:5b:41:
06:77:0e:1b:7e:15:70:a5:d9:5a:4d:1f:43:dc:9f:
ea:7b:d3:db:69:cc:25:fb:7a:48:e1:7e:07:64:48:
e7:ec:92:4c:55:71:de:cf:2b:19:81:54:bf:c7:0a:
d5:6f:71:9f:ab:de:c9:93:c4:8a:e4:e6:5b:b1:89:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:F1:42:58:29:10:FA:CA:78:F6:8A:19:06:9D:47:A1:09:4A:AB
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/RFfxQlgpEPrKePaKGQadR6EJSqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
IPv6:
2a00:1c00::/32
2a00:bde0::/32
2a02:2a40::/32
Signature Algorithm: sha256WithRSAEncryption
9c:1a:06:94:db:3d:12:fa:37:1e:a5:fa:8b:ce:f2:f7:af:37:
e1:e4:13:76:2f:29:65:b4:d7:d8:aa:fa:86:f1:e9:86:74:3a:
52:08:ec:20:6a:e2:3d:25:93:67:4a:64:b3:29:1b:87:5e:ac:
e0:eb:b1:b7:ed:69:85:b5:ab:f8:17:93:d4:82:da:be:19:da:
d2:97:c1:78:e8:02:1c:89:e1:6d:ae:2b:e3:37:ab:d1:2d:3d:
01:42:42:84:46:66:e2:0b:66:fc:75:fb:da:b5:65:60:3a:11:
02:bf:97:fa:fa:ba:d5:19:e1:a0:c5:e3:fe:b2:f9:37:ab:2e:
d2:f7:1e:95:22:25:3f:c3:eb:bb:5b:55:70:80:b7:0e:f0:6a:
31:78:a8:ba:a7:42:27:22:e2:0a:e9:5e:85:0a:24:8d:da:f7:
53:e6:fb:b7:c4:1c:77:cf:c5:4b:0e:29:f8:0a:73:48:ac:4c:
38:e7:0f:b9:fa:4d:40:48:83:61:93:7a:e9:3b:b4:45:4e:59:
a9:7f:80:8b:ee:d9:04:48:ed:fb:72:05:da:a0:9c:84:6c:c1:
a0:ee:d9:f2:5b:4e:d7:33:34:18:af:1f:ea:d7:d3:b2:8e:6a:
53:01:e6:de:c8:c9:57:f8:e6:f6:0a:f3:00:21:59:6f:1a:b1:
b4:6e:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:19 2026 by rpki-client