Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/rsi9SiVfPr4XDT3nTGY3fOm65v0.roa
File: rsi9SiVfPr4XDT3nTGY3fOm65v0.roa (raw, json)
Hash identifier: HDyLtmZ1Ihc2Ti2eQkm0z61Dk4Ghxa1LuzsOJJpJ/kU=
Subject key identifier: AE:C8:BD:4A:25:5F:3E:BE:17:0D:3D:E7:4C:66:37:7C:E9:BA:E6:FD
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 019F6A56E20A5EBF594F7DD74EC2D2A4479F
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/rsi9SiVfPr4XDT3nTGY3fOm65v0.roa
Signing time: Thu 16 Jul 2026 09:51:46 +0000
ROA not before: Thu 16 Jul 2026 09:51:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5482
IP address blocks: 31.22.12.0/22 maxlen: 24
37.48.224.0/24 maxlen: 24
37.48.229.0/24 maxlen: 24
37.48.230.0/24 maxlen: 24
45.89.4.0/22 maxlen: 24
51.179.192.0/18 maxlen: 24
51.179.192.0/21 maxlen: 24
51.179.200.0/21 maxlen: 24
51.179.208.0/21 maxlen: 24
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
62.64.144.0/20 maxlen: 24
141.195.128.0/18 maxlen: 24
141.195.136.0/21 maxlen: 24
141.195.144.0/21 maxlen: 24
141.195.152.0/21 maxlen: 24
185.102.148.0/22 maxlen: 24
188.74.64.0/19 maxlen: 24
193.17.86.0/23 maxlen: 24
193.17.176.0/23 maxlen: 24
212.132.160.0/19 maxlen: 24
217.142.64.0/18 maxlen: 24
217.168.248.0/21 maxlen: 24
2a04:c880::/32 maxlen: 48
2a05:87c0::/29 maxlen: 48
2a05:87c3:1000::/36 maxlen: 36
2a05:87c3:2000::/36 maxlen: 36
2a05:87c3:7000::/36 maxlen: 36
2a05:87c3:8000::/36 maxlen: 36
2a05:87c5:1000::/36 maxlen: 36
2a05:87c5:2000::/36 maxlen: 36
2a05:87c7:1000::/36 maxlen: 36
2a05:87c7:2000::/36 maxlen: 36
2a05:87c7:7000::/36 maxlen: 36
2a05:87c7:8000::/36 maxlen: 36
2a0a:5580::/29 maxlen: 48
2a0a:5583::/32 maxlen: 48
2a0f:9d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:56:e2:0a:5e:bf:59:4f:7d:d7:4e:c2:d2:a4:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Jul 16 09:51:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aec8bd4a255f3ebe170d3de74c66377ce9bae6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:93:fa:82:4a:73:07:a9:61:67:8d:83:a0:
dd:78:1b:57:38:88:49:a0:1f:03:82:96:32:a5:1f:
70:00:66:ef:aa:d2:95:4c:ed:1b:fc:95:ab:24:1c:
ef:0e:01:f7:00:64:af:3a:e8:80:59:f7:d6:1d:70:
5b:46:5e:7f:53:82:ac:bf:c4:73:c4:fa:f3:ed:f9:
a4:d0:6d:46:d3:0e:0f:7f:f8:86:7b:65:9e:e3:1f:
0a:e8:0d:75:d2:4b:58:01:f1:48:8b:b4:c7:9b:ed:
25:a2:62:fe:f0:e9:b9:b6:7f:59:62:80:eb:21:3b:
25:0f:aa:c6:50:2c:60:96:b8:4f:48:f1:3a:44:57:
cf:31:11:fe:ca:51:31:90:5e:57:dc:7b:e5:97:7c:
6a:e6:32:a7:c4:8a:24:a3:9a:24:0c:bd:ce:29:ee:
12:3a:ad:91:1e:54:5c:0b:63:49:6b:1b:5d:13:53:
71:ae:7a:b2:6f:2a:e4:a8:31:04:68:9b:c6:43:ce:
41:b6:62:21:e6:ea:65:ef:7a:7e:fa:22:0e:24:50:
9d:af:84:64:6b:30:f3:ff:fd:27:54:53:d1:9f:a0:
ea:df:32:92:01:12:65:98:9d:21:da:00:14:e7:a5:
df:86:c3:ef:8a:58:6c:c2:e2:f6:a0:23:7a:a2:8f:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C8:BD:4A:25:5F:3E:BE:17:0D:3D:E7:4C:66:37:7C:E9:BA:E6:FD
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/rsi9SiVfPr4XDT3nTGY3fOm65v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.12.0/22
37.48.224.0/24
37.48.229.0-37.48.230.255
45.89.4.0/22
51.179.192.0/18
62.64.128.0-62.64.139.255
62.64.144.0/20
141.195.128.0/18
185.102.148.0/22
188.74.64.0/19
193.17.86.0/23
193.17.176.0/23
212.132.160.0/19
217.142.64.0/18
217.168.248.0/21
IPv6:
2a04:c880::/32
2a05:87c0::/29
2a0a:5580::/29
2a0f:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
c8:7e:b3:d1:53:16:9a:61:68:a3:c4:fc:87:31:fa:a6:e5:44:
3e:5f:33:9c:47:cb:a3:be:0f:b9:c1:6c:de:de:f9:4e:2a:09:
d8:ad:86:8e:54:d6:98:e1:b9:2f:1a:01:db:38:0f:f6:f9:a6:
d9:a3:90:d8:36:8f:6a:61:4f:ea:12:0e:3f:84:11:7a:ed:84:
f7:8f:65:82:a5:e6:9e:c6:57:fe:e5:f4:69:09:98:ff:22:df:
43:3f:5f:20:f5:9b:26:48:5e:47:d4:4f:80:79:73:0f:96:13:
ff:72:a9:e6:3d:ad:bd:53:de:3c:a4:74:f6:31:88:e6:fd:72:
7b:70:f4:49:e5:f0:9e:e8:37:67:47:5e:9f:1b:f1:95:23:02:
d8:86:8e:17:cc:fe:71:c6:45:a4:31:ee:ee:d3:9f:66:db:2f:
f1:c9:7d:36:89:e9:4d:70:4f:a9:7e:19:5c:3a:2b:5d:c3:fa:
76:74:34:8b:82:3b:55:f7:b8:9f:b5:3d:c7:0b:c0:97:10:b3:
32:e7:41:4b:ea:99:8f:4f:1e:0f:e0:71:9d:1f:cc:20:ae:f3:
04:82:5d:bd:a9:2d:84:c6:1c:5f:f5:52:b0:3a:87:20:e9:8e:
e4:10:76:86:26:69:43:47:8e:78:ff:c0:f0:21:d9:b9:b4:87:
26:70:79:f0
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZ9qVuIKXr9ZT33XTsLSpEefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTg2YTU2ZWE4NGMxM2M2Mjc2OGE5ZDE3YmFlMTMzY2Vk
ZjEwNDUwHhcNMjYwNzE2MDk1MTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWM4YmQ0YTI1NWYzZWJlMTcwZDNkZTc0YzY2Mzc3Y2U5YmFlNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki+T+oJKcwepYWeNg6DdeBtXOIhJ
oB8DgpYypR9wAGbvqtKVTO0b/JWrJBzvDgH3AGSvOuiAWffWHXBbRl5/U4Ksv8Rz
xPrz7fmk0G1G0w4Pf/iGe2We4x8K6A110ktYAfFIi7THm+0lomL+8Om5tn9ZYoDr
ITslD6rGUCxglrhPSPE6RFfPMRH+ylExkF5X3Hvll3xq5jKnxIoko5okDL3OKe4S
Oq2RHlRcC2NJaxtdE1NxrnqybyrkqDEEaJvGQ85BtmIh5upl73p++iIOJFCdr4Rk
azDz//0nVFPRn6Dq3zKSARJlmJ0h2gAU56XfhsPvilhswuL2oCN6oo92NQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFK7IvUolXz6+Fw0950xmN3zpuub9MB8GA1UdIwQY
MBaAFIwYalbqhME8YnaKnRe64TPO3xBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2Qt
MjA5MmFmNjQ3MDcwLzEvcnNpOVNpVmZQcjRYRFQzblRHWTNmT202NXYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2QtMjA5MmFmNjQ3MDcw
LzEvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljBwBAIAATBqAwQCHxYM
AwQAJTDgMAwDBAAlMOUDBAAlMOYDBAItWQQDBAYzs8AwDAMEBz5AgAMEAj5AiAME
BD5AkAMEBo3DgAMEArlmlAMEBbxKQAMEAcERVgMEAcERsAMEBdSEoAMEBtmOQAME
A9mo+DAiBAIAAjAcAwUAKgTIgAMFAyoFh8ADBQMqClWAAwUAKg+dgDANBgkqhkiG
9w0BAQsFAAOCAQEAyH6z0VMWmmFoo8T8hzH6puVEPl8znEfLo74PucFs3t75TioJ
2K2GjlTWmOG5LxoB2zgP9vmm2aOQ2DaPamFP6hIOP4QReu2E949lgqXmnsZX/uX0
aQmY/yLfQz9fIPWbJkheR9RPgHlzD5YT/3Kp5j2tvVPePKR09jGI5v1ye3D0SeXw
nug3Z0denxvxlSMC2IaOF8z+ccZFpDHu7tOfZtsv8cl9NonpTXBPqX4ZXDorXcP6
dnQ0i4I7Vfe4n7U9xwvAlxCzMudBS+qZj08eD+BxnR/MIK7zBIJdvakthMYcX/VS
sDqHIOmO5BB2hiZpQ0eOeP/A8CHZubSHJnB58A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:12 2026 by rpki-client