Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/x3AkqqWCM_jT5RY8dyci5qYm37o.roa
File: x3AkqqWCM_jT5RY8dyci5qYm37o.roa (raw, json)
Hash identifier: 6wh4k7uKUw5+QRgS1jkmB585ZTOG6T4LIDLdP+mMWWQ=
Subject key identifier: C7:70:24:AA:A5:82:33:F8:D3:E5:16:3C:77:27:22:E6:A6:26:DF:BA
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368A878C33FC14B0CEC49A75C8CF7F5
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/x3AkqqWCM_jT5RY8dyci5qYm37o.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3302
IP address blocks: 5.150.128.0/20 maxlen: 20
31.10.48.0/21 maxlen: 21
46.228.240.0/20 maxlen: 20
62.94.0.0/16 maxlen: 24
62.173.160.0/19 maxlen: 19
62.196.0.0/16 maxlen: 16
77.43.0.0/17 maxlen: 17
77.94.68.0/22 maxlen: 22
77.94.72.0/21 maxlen: 21
77.94.80.0/20 maxlen: 20
77.246.0.0/20 maxlen: 20
80.74.176.0/20 maxlen: 20
81.27.176.0/20 maxlen: 20
81.92.32.0/20 maxlen: 20
82.193.0.0/19 maxlen: 19
83.211.0.0/16 maxlen: 24
84.253.128.0/18 maxlen: 18
88.86.160.0/19 maxlen: 19
94.138.32.0/19 maxlen: 19
128.65.112.0/20 maxlen: 20
185.53.0.0/22 maxlen: 22
185.58.44.0/22 maxlen: 22
185.82.0.0/22 maxlen: 22
185.168.24.0/22 maxlen: 24
194.20.0.0/16 maxlen: 24
194.21.0.0/18 maxlen: 24
194.153.192.0/20 maxlen: 24
194.153.208.0/22 maxlen: 24
194.242.192.0/19 maxlen: 19
194.244.0.0/16 maxlen: 16
195.62.224.0/19 maxlen: 24
195.78.192.0/19 maxlen: 19
195.110.128.0/19 maxlen: 24
212.90.0.0/19 maxlen: 24
212.110.0.0/19 maxlen: 24
213.21.128.0/18 maxlen: 18
213.136.128.0/18 maxlen: 24
213.149.192.0/19 maxlen: 19
213.183.128.0/19 maxlen: 19
213.198.128.0/18 maxlen: 24
213.203.128.0/18 maxlen: 24
217.11.80.0/20 maxlen: 20
217.12.176.0/20 maxlen: 20
217.15.208.0/20 maxlen: 24
217.26.80.0/20 maxlen: 20
217.29.160.0/20 maxlen: 20
2001:750::/29 maxlen: 32
2a02:7d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:78:c3:3f:c1:4b:0c:ec:49:a7:5c:8c:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c77024aaa58233f8d3e5163c772722e6a626dfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:93:07:14:14:23:b3:ec:97:bb:1b:b3:7b:
d9:6c:49:4d:21:28:c4:57:a1:0c:79:89:f9:4d:63:
61:52:8c:10:e8:ce:c3:cf:f3:37:4c:f9:be:a1:69:
5f:dc:de:bb:9e:0f:74:b1:24:59:28:e0:e7:48:e2:
27:49:a9:1d:43:4c:0b:dc:ae:aa:a9:b1:d4:dc:94:
e4:a0:e0:e1:95:c1:71:b7:55:3e:c8:e9:7f:ae:34:
34:0f:98:f3:45:8f:c4:fc:1e:ce:85:86:08:35:bf:
e4:b1:e4:5e:f1:83:02:61:62:5f:11:f5:a9:02:13:
26:38:4c:fd:17:a5:38:07:44:21:b0:26:da:97:38:
b5:2f:22:8d:f8:56:e8:d9:76:ad:fb:23:07:76:db:
2c:21:e3:84:34:59:73:c3:09:ab:36:59:1f:33:e1:
09:b8:28:a5:38:74:c8:a4:43:53:dc:11:ff:a4:07:
cc:78:c0:25:f1:84:78:4a:c9:9b:e8:50:ba:ca:31:
bc:9c:b5:1a:4a:1f:e6:05:6e:8f:fa:2b:ed:9a:cd:
27:a5:f9:13:86:7b:ef:c5:f2:e8:6f:fe:01:f9:9a:
83:3c:c0:db:ad:29:36:59:48:a3:f1:92:77:bc:47:
d4:00:da:80:b4:ca:d1:db:e8:fc:5e:49:3c:c1:c5:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:24:AA:A5:82:33:F8:D3:E5:16:3C:77:27:22:E6:A6:26:DF:BA
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/x3AkqqWCM_jT5RY8dyci5qYm37o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.128.0/20
31.10.48.0/21
46.228.240.0/20
62.94.0.0/16
62.173.160.0/19
62.196.0.0/16
77.43.0.0/17
77.94.68.0-77.94.95.255
77.246.0.0/20
80.74.176.0/20
81.27.176.0/20
81.92.32.0/20
82.193.0.0/19
83.211.0.0/16
84.253.128.0/18
88.86.160.0/19
94.138.32.0/19
128.65.112.0/20
185.53.0.0/22
185.58.44.0/22
185.82.0.0/22
185.168.24.0/22
194.20.0.0-194.21.63.255
194.153.192.0-194.153.211.255
194.242.192.0/19
194.244.0.0/16
195.62.224.0/19
195.78.192.0/19
195.110.128.0/19
212.90.0.0/19
212.110.0.0/19
213.21.128.0/18
213.136.128.0/18
213.149.192.0/19
213.183.128.0/19
213.198.128.0/18
213.203.128.0/18
217.11.80.0/20
217.12.176.0/20
217.15.208.0/20
217.26.80.0/20
217.29.160.0/20
IPv6:
2001:750::/29
2a02:7d8::/32
Signature Algorithm: sha256WithRSAEncryption
3a:c9:04:a0:aa:64:5d:f1:a9:de:66:5b:e7:1b:e2:4e:ad:60:
50:bb:71:7f:c4:e2:b1:65:4e:16:f6:11:10:97:38:fd:c5:cb:
8c:2a:58:b8:09:2d:9a:ba:be:5a:86:69:f4:41:2c:1d:ae:38:
5a:6b:6c:22:08:f5:47:9a:84:df:28:c2:9e:5f:f2:1d:af:f3:
19:c7:d8:cf:13:e9:0f:81:05:a3:9f:25:d0:4f:57:07:eb:46:
59:25:40:d0:8d:59:d7:fa:49:53:82:5d:6e:83:b7:00:f8:87:
7f:d0:38:80:35:99:4c:12:d9:01:20:3f:f4:c2:a9:34:c1:9f:
cf:92:ae:e0:2b:fa:bf:aa:dc:dd:38:d2:d3:19:50:b2:31:e3:
35:f1:35:9e:7f:95:b2:7d:8b:de:d8:9b:58:ba:d5:2a:ff:1c:
9b:e9:a2:14:61:47:8e:e3:97:c8:20:33:08:b4:d4:46:94:d6:
ca:cd:7a:28:d6:ca:04:6f:7f:f9:39:da:50:3c:4d:14:d3:3f:
3e:64:1c:f9:09:96:26:24:f2:0c:3c:de:7f:c5:4f:f4:1a:02:
47:73:35:1f:d4:a5:7f:2f:d9:3b:9f:2d:80:65:f5:e8:4c:aa:
a6:5e:3d:a9:56:c8:f2:05:f1:8d:08:b7:79:3d:6a:d4:5e:9e:
73:41:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:33 2026 by rpki-client