Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/lW5tXnmiAinsdK9h1XIuum-FVuE.roa
File: lW5tXnmiAinsdK9h1XIuum-FVuE.roa (raw, json)
Hash identifier: 7Jr3RZaibheg/cyjoK04Xkxt0rpCWVon3cyjKs3wDiA=
Subject key identifier: 95:6E:6D:5E:79:A2:02:29:EC:74:AF:61:D5:72:2E:BA:6F:85:56:E1
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019F8D74DF49AD51A1E9D6C0B67118C952FD
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/lW5tXnmiAinsdK9h1XIuum-FVuE.roa
Signing time: Thu 23 Jul 2026 05:31:14 +0000
ROA not before: Thu 23 Jul 2026 05:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215148
IP address blocks: 31.170.249.0/24 maxlen: 24
31.171.108.0/24 maxlen: 24
31.171.109.0/24 maxlen: 24
31.171.111.0/24 maxlen: 24
31.171.119.0/24 maxlen: 24
31.171.124.0/24 maxlen: 24
62.212.224.0/24 maxlen: 24
62.212.225.0/24 maxlen: 24
62.212.226.0/24 maxlen: 24
62.212.227.0/24 maxlen: 24
62.212.228.0/24 maxlen: 24
62.212.233.0/24 maxlen: 24
62.212.234.0/24 maxlen: 24
62.212.236.0/24 maxlen: 24
62.212.244.0/24 maxlen: 24
62.212.245.0/24 maxlen: 24
77.81.56.0/24 maxlen: 24
85.132.1.0/24 maxlen: 24
85.132.3.0/24 maxlen: 24
85.132.12.0/24 maxlen: 24
85.132.17.0/24 maxlen: 24
85.132.18.0/24 maxlen: 24
85.132.43.0/24 maxlen: 24
85.132.44.0/24 maxlen: 24
85.132.46.0/24 maxlen: 24
85.132.47.0/24 maxlen: 24
85.132.48.0/24 maxlen: 24
85.132.49.0/24 maxlen: 24
85.132.52.0/24 maxlen: 24
85.132.53.0/24 maxlen: 24
85.132.54.0/24 maxlen: 24
85.132.55.0/24 maxlen: 24
85.132.57.0/24 maxlen: 24
85.132.61.0/24 maxlen: 24
85.132.67.0/24 maxlen: 24
85.132.69.0/24 maxlen: 24
85.132.71.0/24 maxlen: 24
85.132.72.0/24 maxlen: 24
85.132.75.0/24 maxlen: 24
85.132.76.0/24 maxlen: 24
85.132.78.0/24 maxlen: 24
85.132.79.0/24 maxlen: 24
85.132.81.0/24 maxlen: 24
85.132.84.0/24 maxlen: 24
85.132.85.0/24 maxlen: 24
85.132.88.0/24 maxlen: 24
85.132.89.0/24 maxlen: 24
85.132.91.0/24 maxlen: 24
85.132.95.0/24 maxlen: 24
85.132.96.0/24 maxlen: 24
85.132.99.0/24 maxlen: 24
85.132.100.0/24 maxlen: 24
85.132.101.0/24 maxlen: 24
85.132.107.0/24 maxlen: 24
85.132.109.0/24 maxlen: 24
85.132.111.0/24 maxlen: 24
85.132.115.0/24 maxlen: 24
85.132.116.0/24 maxlen: 24
85.132.123.0/24 maxlen: 24
85.132.124.0/24 maxlen: 24
94.20.16.0/24 maxlen: 24
94.20.20.0/24 maxlen: 24
94.20.21.0/24 maxlen: 24
94.20.30.0/24 maxlen: 24
94.20.40.0/24 maxlen: 24
94.20.45.0/24 maxlen: 24
94.20.47.0/24 maxlen: 24
94.20.49.0/24 maxlen: 24
94.20.60.0/24 maxlen: 24
94.20.62.0/24 maxlen: 24
94.20.64.0/24 maxlen: 24
94.20.65.0/24 maxlen: 24
94.20.68.0/24 maxlen: 24
94.20.71.0/24 maxlen: 24
94.20.72.0/24 maxlen: 24
94.20.74.0/24 maxlen: 24
94.20.77.0/24 maxlen: 24
94.20.81.0/24 maxlen: 24
94.20.84.0/24 maxlen: 24
94.20.85.0/24 maxlen: 24
94.20.94.0/24 maxlen: 24
94.20.95.0/24 maxlen: 24
94.20.105.0/24 maxlen: 24
94.20.137.0/24 maxlen: 24
94.20.138.0/24 maxlen: 24
94.20.142.0/24 maxlen: 24
94.20.147.0/24 maxlen: 24
94.20.178.0/24 maxlen: 24
94.20.179.0/24 maxlen: 24
94.20.216.0/24 maxlen: 24
94.20.217.0/24 maxlen: 24
94.20.225.0/24 maxlen: 24
94.20.229.0/24 maxlen: 24
94.20.230.0/24 maxlen: 24
94.20.239.0/24 maxlen: 24
94.20.246.0/24 maxlen: 24
94.20.248.0/24 maxlen: 24
2a01:6480:40::/48 maxlen: 48
2a01:6480:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:74:df:49:ad:51:a1:e9:d6:c0:b6:71:18:c9:52:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Jul 23 05:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=956e6d5e79a20229ec74af61d5722eba6f8556e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:aa:af:cd:71:07:9e:48:fd:36:fe:9a:79:
58:8f:cc:73:c5:1a:b9:86:07:7b:69:d5:ee:9f:df:
61:0b:fc:d5:ad:cf:f1:af:44:70:81:fb:ae:fa:c0:
19:fe:53:1d:85:91:cc:1e:52:5f:9d:97:e4:e1:6a:
7b:bf:ca:fe:bf:41:8e:bf:29:76:5d:5e:95:19:94:
29:60:2e:3f:48:41:63:3a:11:31:f8:91:3f:be:07:
e5:cd:b0:83:41:4e:62:a3:e2:10:80:8c:6e:88:fa:
c0:8b:2d:d5:a1:9e:6d:4e:02:1c:ac:78:c8:c1:51:
a3:e2:01:1f:5c:5d:3f:24:f9:a9:d5:d5:e7:0c:bd:
c3:57:51:b0:af:ab:44:86:da:71:60:c5:f6:cd:0e:
99:af:85:f4:89:4f:13:83:ff:55:62:36:80:19:e7:
45:47:fe:ec:84:ac:a4:b1:69:71:a1:01:52:5b:ae:
ca:7a:af:0a:cd:b2:87:c0:ac:19:bb:6a:de:80:7c:
db:c1:89:9a:c5:46:fe:32:f3:e9:7d:cc:34:64:aa:
a3:89:54:3f:8d:7b:10:2c:0b:82:7a:ef:98:d6:e6:
69:8a:1c:e3:ab:6a:76:9c:45:3d:8e:6d:64:d9:9f:
cc:d2:03:a2:ba:01:1b:37:02:66:64:a6:2e:9b:2b:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:6D:5E:79:A2:02:29:EC:74:AF:61:D5:72:2E:BA:6F:85:56:E1
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/lW5tXnmiAinsdK9h1XIuum-FVuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.249.0/24
31.171.108.0/23
31.171.111.0/24
31.171.119.0/24
31.171.124.0/24
62.212.224.0-62.212.228.255
62.212.233.0-62.212.234.255
62.212.236.0/24
62.212.244.0/23
77.81.56.0/24
85.132.1.0/24
85.132.3.0/24
85.132.12.0/24
85.132.17.0-85.132.18.255
85.132.43.0-85.132.44.255
85.132.46.0-85.132.49.255
85.132.52.0/22
85.132.57.0/24
85.132.61.0/24
85.132.67.0/24
85.132.69.0/24
85.132.71.0-85.132.72.255
85.132.75.0-85.132.76.255
85.132.78.0/23
85.132.81.0/24
85.132.84.0/23
85.132.88.0/23
85.132.91.0/24
85.132.95.0-85.132.96.255
85.132.99.0-85.132.101.255
85.132.107.0/24
85.132.109.0/24
85.132.111.0/24
85.132.115.0-85.132.116.255
85.132.123.0-85.132.124.255
94.20.16.0/24
94.20.20.0/23
94.20.30.0/24
94.20.40.0/24
94.20.45.0/24
94.20.47.0/24
94.20.49.0/24
94.20.60.0/24
94.20.62.0/24
94.20.64.0/23
94.20.68.0/24
94.20.71.0-94.20.72.255
94.20.74.0/24
94.20.77.0/24
94.20.81.0/24
94.20.84.0/23
94.20.94.0/23
94.20.105.0/24
94.20.137.0-94.20.138.255
94.20.142.0/24
94.20.147.0/24
94.20.178.0/23
94.20.216.0/23
94.20.225.0/24
94.20.229.0-94.20.230.255
94.20.239.0/24
94.20.246.0/24
94.20.248.0/24
IPv6:
2a01:6480:40::/47
Signature Algorithm: sha256WithRSAEncryption
63:2a:a2:a8:4c:8c:5e:cf:7e:d0:a4:ba:eb:c2:cc:93:3b:16:
1d:cc:23:a3:f2:4b:b6:f7:c5:fa:61:27:21:8a:5d:8f:91:87:
28:50:20:d3:34:71:f4:ab:e0:3a:2c:6d:78:54:20:ae:4b:2b:
a8:af:24:67:0a:70:21:e8:72:a8:d2:2a:23:ba:3d:70:d6:29:
89:98:98:23:12:ab:6f:4b:b9:e5:05:49:25:2d:4d:43:b4:ff:
61:57:e6:e5:ed:77:4f:d5:f7:04:6a:95:59:ff:8d:3f:41:64:
8a:b2:36:12:46:af:35:d1:36:e8:07:c7:14:16:8b:2a:96:dd:
84:69:c2:c6:c5:07:a5:67:fe:68:bf:db:c7:ca:94:51:84:27:
ac:71:5d:95:d8:42:9c:a1:81:23:46:70:32:e5:c7:72:3b:42:
db:7e:df:b8:82:b9:16:0c:10:7a:03:93:3c:62:4d:08:8d:6e:
35:d4:b5:cd:26:88:1c:52:de:4f:ac:9a:f2:3f:7d:6f:d5:f2:
35:24:6d:ac:02:3e:b7:68:45:da:61:e1:b3:f1:d2:8a:6a:99:
34:f8:05:a6:a5:f2:21:98:77:7a:fc:9e:87:e3:12:a6:6e:f8:
03:80:e9:b8:bc:3b:17:fa:50:de:2c:a8:54:58:92:1c:3e:0d:
9f:1b:60:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:06 2026 by rpki-client