Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/tL4b25zMj6wRdpwgTTYHdF9t4Uk.roa
File: tL4b25zMj6wRdpwgTTYHdF9t4Uk.roa (raw, json)
Hash identifier: UpH6SRZNnW0R8ahn4MRnqsFRfwo0pvGLoWtik7wjde0=
Subject key identifier: B4:BE:1B:DB:9C:CC:8F:AC:11:76:9C:20:4D:36:07:74:5F:6D:E1:49
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 019F21E158511C502D0F75AC6D7D4127B27E
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/tL4b25zMj6wRdpwgTTYHdF9t4Uk.roa
Signing time: Thu 02 Jul 2026 08:10:44 +0000
ROA not before: Thu 02 Jul 2026 08:10:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48635
IP address blocks: 2.57.57.0/24 maxlen: 24
5.157.80.0/21 maxlen: 24
31.25.96.0/21 maxlen: 24
31.25.98.0/24 maxlen: 24
31.186.168.0/21 maxlen: 24
46.17.0.0/21 maxlen: 24
62.84.240.0/21 maxlen: 24
62.221.248.0/21 maxlen: 24
62.221.250.0/24 maxlen: 24
77.94.248.0/21 maxlen: 24
79.99.128.0/21 maxlen: 24
91.198.106.0/24 maxlen: 24
91.238.176.0/23 maxlen: 24
92.63.168.0/21 maxlen: 24
92.63.168.0/24 maxlen: 24
92.63.169.0/24 maxlen: 24
93.180.64.0/21 maxlen: 24
93.180.65.0/24 maxlen: 24
93.187.220.0/22 maxlen: 24
109.70.0.0/21 maxlen: 24
109.72.80.0/20 maxlen: 24
109.106.160.0/20 maxlen: 24
109.106.176.0/21 maxlen: 24
128.140.216.0/21 maxlen: 24
145.131.0.0/20 maxlen: 24
145.131.16.0/20 maxlen: 24
145.131.32.0/20 maxlen: 24
176.117.58.0/23 maxlen: 24
185.27.140.0/22 maxlen: 24
185.27.172.0/22 maxlen: 22
185.28.56.0/22 maxlen: 24
185.37.68.0/22 maxlen: 24
185.56.144.0/22 maxlen: 24
185.66.248.0/22 maxlen: 24
185.89.4.0/22 maxlen: 24
185.94.228.0/24 maxlen: 24
185.94.230.0/23 maxlen: 24
185.95.31.0/24 maxlen: 24
185.103.156.0/22 maxlen: 24
185.103.240.0/22 maxlen: 24
185.103.242.0/23 maxlen: 24
185.107.212.0/22 maxlen: 24
185.107.224.0/23 maxlen: 24
185.109.216.0/22 maxlen: 24
185.159.240.0/22 maxlen: 24
185.175.200.0/22 maxlen: 24
185.182.56.0/22 maxlen: 24
185.182.56.0/24 maxlen: 24
185.187.12.0/22 maxlen: 24
185.223.32.0/22 maxlen: 24
185.224.88.0/22 maxlen: 24
185.231.200.0/22 maxlen: 24
185.232.248.0/22 maxlen: 24
193.23.143.0/24 maxlen: 24
193.164.192.0/23 maxlen: 24
194.247.30.0/23 maxlen: 24
195.20.8.0/22 maxlen: 24
195.238.74.0/23 maxlen: 24
2001:678:76c::/48 maxlen: 48
2001:67c:28fc::/48 maxlen: 48
2a00:f10::/29 maxlen: 48
2a00:f60::/32 maxlen: 48
2a00:9b60::/40 maxlen: 48
2a01:b940::/29 maxlen: 48
2a02:2968::/29 maxlen: 48
2a02:40c1::/32 maxlen: 48
2a03:3060::/29 maxlen: 48
2a04:6bc0::/36 maxlen: 48
2a05:1500::/29 maxlen: 48
2a05:1500:600::/40 maxlen: 48
2a06:4040::/29 maxlen: 48
2a0b:7280::/29 maxlen: 48
2a0b:8f80::/29 maxlen: 48
2a0c:84c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:e1:58:51:1c:50:2d:0f:75:ac:6d:7d:41:27:b2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jul 2 08:10:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4be1bdb9ccc8fac11769c204d3607745f6de149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5c:7e:c6:d9:fc:b8:f1:1c:11:7e:f6:91:8f:
c7:e8:f7:7b:c6:c5:9d:29:87:c4:fe:dc:5a:10:4d:
7d:00:5e:10:0f:e2:1a:0c:b1:76:d2:9e:a3:17:2b:
65:1b:78:17:ec:1c:ac:8b:34:ff:1a:dd:82:68:bc:
c2:2e:ba:1e:2d:e3:f9:44:96:d8:dd:92:0a:36:54:
ca:d8:c8:3a:bf:13:87:3f:fc:40:93:88:eb:74:a1:
f4:9c:fe:9d:8a:ad:9d:b4:7a:5f:b7:50:e3:50:84:
41:36:a7:87:a4:a3:8f:1d:6d:2e:75:80:52:9b:93:
f0:01:95:15:a0:c1:5c:6f:67:47:55:fb:d5:9b:6b:
5c:f4:a2:f6:e1:6c:6c:af:e2:ff:67:ee:23:b6:0e:
b8:ac:e7:12:ab:de:9a:99:ac:0f:b0:ac:66:92:a9:
11:2a:94:1a:59:ec:df:1e:31:84:29:16:53:d7:62:
78:85:e5:ca:bc:06:4d:be:9b:56:32:fe:46:30:4f:
d5:63:11:f9:0b:f3:a3:d5:09:67:27:85:a8:c9:3b:
db:87:2c:99:85:9c:24:ca:33:bf:7c:64:bd:4a:21:
31:c9:a0:07:e3:bd:80:58:ad:31:69:ac:60:22:e2:
fb:f0:fc:04:bf:f2:c1:58:6b:7c:b2:3f:14:d9:c5:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BE:1B:DB:9C:CC:8F:AC:11:76:9C:20:4D:36:07:74:5F:6D:E1:49
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/tL4b25zMj6wRdpwgTTYHdF9t4Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.57.0/24
5.157.80.0/21
31.25.96.0/21
31.186.168.0/21
46.17.0.0/21
62.84.240.0/21
62.221.248.0/21
77.94.248.0/21
79.99.128.0/21
91.198.106.0/24
91.238.176.0/23
92.63.168.0/21
93.180.64.0/21
93.187.220.0/22
109.70.0.0/21
109.72.80.0/20
109.106.160.0-109.106.183.255
128.140.216.0/21
145.131.0.0-145.131.47.255
176.117.58.0/23
185.27.140.0/22
185.27.172.0/22
185.28.56.0/22
185.37.68.0/22
185.56.144.0/22
185.66.248.0/22
185.89.4.0/22
185.94.228.0/24
185.94.230.0/23
185.95.31.0/24
185.103.156.0/22
185.103.240.0/22
185.107.212.0/22
185.107.224.0/23
185.109.216.0/22
185.159.240.0/22
185.175.200.0/22
185.182.56.0/22
185.187.12.0/22
185.223.32.0/22
185.224.88.0/22
185.231.200.0/22
185.232.248.0/22
193.23.143.0/24
193.164.192.0/23
194.247.30.0/23
195.20.8.0/22
195.238.74.0/23
IPv6:
2001:678:76c::/48
2001:67c:28fc::/48
2a00:f10::/29
2a00:f60::/32
2a00:9b60::/40
2a01:b940::/29
2a02:2968::/29
2a02:40c1::/32
2a03:3060::/29
2a04:6bc0::/36
2a05:1500::/29
2a06:4040::/29
2a0b:7280::/29
2a0b:8f80::/29
2a0c:84c0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:97:50:e4:fc:00:5b:c8:6a:0f:49:9f:ec:1b:b3:61:48:88:
35:4d:9a:68:39:99:ca:a1:e7:6e:e9:da:75:43:9d:96:18:ad:
6b:64:7f:9c:3f:45:2a:c7:75:f6:0d:66:67:a4:47:ee:4d:c4:
2a:4a:c9:0a:8c:c5:68:2d:45:d7:b6:de:ea:8d:30:02:07:d0:
e9:50:15:23:88:fd:50:07:e5:d2:df:03:f4:a3:da:0c:01:e3:
fa:b0:a8:b1:64:16:f2:e2:82:25:09:11:d2:bc:f4:4c:65:ab:
97:b1:9e:c7:a4:22:96:01:5f:a1:39:35:63:8f:f6:d7:03:da:
ac:ff:14:02:3f:02:73:70:53:29:5d:7d:68:e7:95:b5:8b:dc:
b3:85:ea:ee:68:14:fe:32:45:3a:b8:cd:ce:81:bc:0b:9a:78:
ec:8d:34:76:f5:76:00:c3:d6:40:73:b8:4e:d2:16:29:a9:7e:
e4:84:07:2a:b9:98:dd:94:ee:83:91:d0:51:07:9d:94:76:ab:
05:2b:71:c7:59:95:bf:39:32:00:01:dc:5d:53:b9:31:58:40:
c1:b3:0c:29:1b:e9:d4:a7:9b:a5:3f:14:5e:ab:ca:93:e6:9d:
29:c8:da:d5:c3:c1:7b:1d:72:4a:ff:0a:6a:53:77:22:59:07:
e2:b9:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:45 2026 by rpki-client