Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/xe0mJqcIV898b0tufHLPZOgeW_I.roa
File: xe0mJqcIV898b0tufHLPZOgeW_I.roa (raw, json)
Hash identifier: GXwtaIYJZuMGwVyUoyuKVjob63EB8Hi+rvlhaXQZE9w=
Subject key identifier: C5:ED:26:26:A7:08:57:CF:7C:6F:4B:6E:7C:72:CF:64:E8:1E:5B:F2
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 019DF353CF6FAE26782B4118467B02A66D67
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/xe0mJqcIV898b0tufHLPZOgeW_I.roa
Signing time: Mon 04 May 2026 14:10:49 +0000
ROA not before: Mon 04 May 2026 14:10:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 62.197.45.0/24 maxlen: 24
82.117.242.0/23 maxlen: 23
85.90.208.0/24 maxlen: 24
85.90.209.0/24 maxlen: 24
89.187.73.0/24 maxlen: 24
89.187.77.0/24 maxlen: 24
92.42.1.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
148.222.185.0/24 maxlen: 24
148.222.186.0/24 maxlen: 24
176.98.40.0/24 maxlen: 24
185.93.104.0/24 maxlen: 24
185.93.105.0/24 maxlen: 24
185.93.106.0/24 maxlen: 24
185.93.107.0/24 maxlen: 24
185.109.48.0/24 maxlen: 24
185.115.32.0/24 maxlen: 24
185.115.35.0/24 maxlen: 24
185.192.20.0/24 maxlen: 24
185.192.21.0/24 maxlen: 24
185.192.23.0/24 maxlen: 24
185.200.197.0/24 maxlen: 24
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0e:a7c2::/32 maxlen: 32
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:53:cf:6f:ae:26:78:2b:41:18:46:7b:02:a6:6d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: May 4 14:10:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5ed2626a70857cf7c6f4b6e7c72cf64e81e5bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:35:73:f5:ce:19:a0:8d:86:76:22:e9:4c:
0f:e8:21:25:97:6b:53:a8:4b:d7:58:45:0c:c0:70:
10:73:2a:8c:16:31:35:e4:b6:2f:b5:6f:de:c2:2f:
36:79:11:1c:2f:91:c5:dd:fe:33:f3:04:7f:44:50:
46:09:93:d8:77:fa:4b:a9:74:75:c7:04:e3:ef:0b:
3b:83:04:5e:b4:62:9b:41:1e:1e:bd:ed:c3:7c:ef:
0c:27:d0:f9:18:57:3d:08:d2:60:1a:9b:e4:3d:bc:
0b:56:03:f3:53:bc:7b:5b:4e:de:26:92:44:e5:e5:
09:a6:12:1f:14:7b:f4:1a:aa:87:70:90:4e:10:13:
d4:e4:3e:db:f3:88:ca:27:ca:b2:ac:a2:15:02:54:
3d:b0:f5:d7:f5:72:7a:02:e6:af:96:b6:a9:be:7a:
a0:7b:5f:2a:cc:4d:7d:a7:35:cf:35:1d:1a:de:91:
ac:dc:07:3e:c8:5d:5b:d7:95:9d:7d:96:07:e6:51:
5b:04:22:45:12:47:81:3d:c9:9c:d7:4f:e9:2a:d7:
3f:d6:68:0b:c8:e6:1e:de:2d:65:34:7a:a9:cb:c4:
f3:dd:2d:56:1e:21:e1:1f:22:f6:76:73:03:77:b1:
40:a1:70:9a:16:a5:bc:0e:3a:b1:87:c6:b3:aa:af:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:26:26:A7:08:57:CF:7C:6F:4B:6E:7C:72:CF:64:E8:1E:5B:F2
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/xe0mJqcIV898b0tufHLPZOgeW_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.45.0/24
82.117.242.0/23
85.90.208.0/23
89.187.73.0/24
89.187.77.0/24
92.42.1.0/24
92.63.224.0/24
148.222.185.0-148.222.186.255
176.98.40.0/24
185.93.104.0/22
185.109.48.0/24
185.115.32.0/24
185.115.35.0/24
185.192.20.0/23
185.192.23.0/24
185.200.197.0/24
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
53:2a:b8:fb:c8:84:11:3e:73:39:de:89:a0:8f:e9:0d:f4:62:
3b:70:17:f8:c7:6a:7b:0a:11:6a:5e:8a:a8:9b:7f:19:2c:97:
9b:7d:83:55:97:c0:e1:66:48:32:09:38:b4:21:11:ca:13:99:
15:9d:1a:0b:fa:dc:71:85:12:62:13:73:c4:e6:f0:14:00:b3:
ce:fb:a0:dd:9e:08:4a:ef:7f:1d:36:80:bf:3b:2e:0d:01:ce:
4c:19:68:1d:58:74:77:8d:93:52:e9:0a:35:b5:5f:b9:8b:b8:
a0:f7:cc:9a:5c:6a:f1:eb:fa:8a:e9:5c:2f:98:0f:36:c5:b9:
cb:c4:61:fa:7b:c8:82:94:0b:83:29:90:4d:b7:59:27:80:54:
39:06:d6:74:11:b8:a2:77:c4:82:ed:c2:93:c7:85:d4:6a:e0:
dd:a5:95:7b:66:c9:87:90:6b:70:ad:41:4d:8e:c9:b9:2e:b1:
ac:f2:1f:5b:64:dd:c7:c5:16:01:c7:f0:59:72:68:2f:ab:26:
2a:40:c9:1e:6e:9a:02:32:f6:86:e5:33:9f:d1:4b:a9:86:d6:
17:95:a9:12:e1:76:c7:cc:28:42:ac:02:10:e0:55:c9:8f:29:
0f:54:88:e1:c0:8c:46:51:32:16:1e:a6:a0:0f:0e:99:3f:ea:
8c:26:9c:a2
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISAZ3zU89vriZ4K0EYRnsCpm1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjYwNTA0MTQxMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWVkMjYyNmE3MDg1N2NmN2M2ZjRiNmU3YzcyY2Y2NGU4MWU1YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD81c/XOGaCNhnYi6UwP6CEll2tT
qEvXWEUMwHAQcyqMFjE15LYvtW/ewi82eREcL5HF3f4z8wR/RFBGCZPYd/pLqXR1
xwTj7ws7gwRetGKbQR4eve3DfO8MJ9D5GFc9CNJgGpvkPbwLVgPzU7x7W07eJpJE
5eUJphIfFHv0GqqHcJBOEBPU5D7b84jKJ8qyrKIVAlQ9sPXX9XJ6Auavlrapvnqg
e18qzE19pzXPNR0a3pGs3Ac+yF1b15WdfZYH5lFbBCJFEkeBPcmc10/pKtc/1mgL
yOYe3i1lNHqpy8Tz3S1WHiHhHyL2dnMDd7FAoXCaFqW8Djqxh8azqq+97wIDAQAB
o4IC6jCCAuYwHQYDVR0OBBYEFMXtJianCFfPfG9Lbnxyz2ToHlvyMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEveGUwbUpxY0lWODk4YjB0dWZITFBaT2dlV19JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH/BggrBgEFBQcBBwEB/wSB7zCB7DBuBAIAATBoAwQAPsUt
AwQBUnXyAwQBVVrQAwQAWbtJAwQAWbtNAwQAXCoBAwQAXD/gMAwDBACU3rkDBACU
3roDBACwYigDBAK5XWgDBAC5bTADBAC5cyADBAC5cyMDBAG5wBQDBAC5wBcDBAC5
yMUwegQCAAIwdAMHASoCxsEAAgMHACoCxsEADgMHACoCxsEAEDASAwcAKgLGwQFB
AwcAKgLGwQFCMBIDBwAqAsbBAVEDBwAqAsbBAVYDBQEqAsbCAwUAKgLGxwMFAyoM
Z0ADBQMqDpLAAwUDKg6aQAMFAyoOp8ADBQMqD0tAMA0GCSqGSIb3DQEBCwUAA4IB
AQBTKrj7yIQRPnM53omgj+kN9GI7cBf4x2p7ChFqXoqom38ZLJebfYNVl8DhZkgy
CTi0IRHKE5kVnRoL+txxhRJiE3PE5vAUALPO+6DdnghK738dNoC/Oy4NAc5MGWgd
WHR3jZNS6Qo1tV+5i7ig98yaXGrx6/qK6VwvmA82xbnLxGH6e8iClAuDKZBNt1kn
gFQ5BtZ0Ebiid8SC7cKTx4XUauDdpZV7ZsmHkGtwrUFNjsm5LrGs8h9bZN3HxRYB
x/BZcmgvqyYqQMkebpoCMvaG5TOf0UuphtYXlakS4XbHzChCrAIQ4FXJjykPVIjh
wIxGUTIWHqagDw6ZP+qMJpyi
-----END CERTIFICATE-----
Generated at Wed May 13 08:24:16 2026 by rpki-client