Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/bSIf0T0EwRvYabxLmjmKKkxKJuc.roa
File: bSIf0T0EwRvYabxLmjmKKkxKJuc.roa (raw, json)
Hash identifier: QjhZut+rcecUKTU/gefSSs0Q8mSl4Rg0xTqiyiwiuWQ=
Subject key identifier: 6D:22:1F:D1:3D:04:C1:1B:D8:69:BC:4B:9A:39:8A:2A:4C:4A:26:E7
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019F8EDBDE52662982453F15D19F66F7CB1B
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/bSIf0T0EwRvYabxLmjmKKkxKJuc.roa
Signing time: Thu 23 Jul 2026 12:03:21 +0000
ROA not before: Thu 23 Jul 2026 12:03:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49685
IP address blocks: 31.3.8.0/21 maxlen: 24
31.223.160.0/20 maxlen: 24
37.17.208.0/20 maxlen: 24
46.226.56.0/21 maxlen: 24
78.108.128.0/20 maxlen: 24
80.84.224.0/19 maxlen: 24
80.246.192.0/20 maxlen: 24
80.255.240.0/20 maxlen: 24
81.4.64.0/20 maxlen: 24
81.4.80.0/22 maxlen: 24
81.4.88.0/21 maxlen: 24
81.4.96.0/22 maxlen: 24
81.4.112.0/21 maxlen: 24
81.21.136.0/21 maxlen: 24
81.30.32.0/20 maxlen: 24
83.96.128.0/18 maxlen: 24
83.96.192.0/21 maxlen: 24
83.96.208.0/22 maxlen: 24
83.96.224.0/21 maxlen: 24
83.96.232.0/22 maxlen: 24
83.96.248.0/22 maxlen: 24
85.10.160.0/21 maxlen: 24
85.10.168.0/22 maxlen: 24
85.10.172.0/22 maxlen: 24
85.158.248.0/22 maxlen: 24
85.158.252.0/23 maxlen: 24
91.142.240.0/21 maxlen: 24
91.142.252.0/23 maxlen: 24
91.189.208.0/22 maxlen: 24
91.205.32.0/22 maxlen: 24
94.142.208.0/21 maxlen: 24
141.255.176.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
171.33.128.0/21 maxlen: 24
176.74.224.0/19 maxlen: 24
185.15.248.0/22 maxlen: 24
185.65.52.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.89.152.0/22 maxlen: 24
185.95.68.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
193.242.119.0/24 maxlen: 24
217.21.240.0/20 maxlen: 24
217.149.128.0/20 maxlen: 24
2001:828::/32 maxlen: 48
2001:4cb8::/29 maxlen: 48
2a00:c080::/32 maxlen: 48
2a03:4f00::/32 maxlen: 48
2a03:5700::/32 maxlen: 48
2a05:2500::/32 maxlen: 48
2a05:a282::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:db:de:52:66:29:82:45:3f:15:d1:9f:66:f7:cb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jul 23 12:03:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d221fd13d04c11bd869bc4b9a398a2a4c4a26e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:66:1e:67:ae:ae:bd:cd:1a:57:b1:f5:9d:
39:dd:0f:da:35:3f:dc:b3:7c:b6:00:4e:87:90:08:
e1:f8:5e:9f:d0:62:28:14:f2:e8:ca:76:b5:86:17:
e7:0e:e4:3c:ac:62:fd:d3:6a:69:79:d1:19:21:3a:
67:d7:59:9e:3e:7f:54:15:5e:29:51:73:4b:48:47:
58:38:07:6e:d7:9f:c0:83:2c:7c:ea:43:dc:22:ec:
ba:43:fa:d0:bf:a5:e8:9d:c0:8a:71:50:71:7c:b8:
92:93:6e:da:21:6f:ef:29:8e:8c:ac:71:04:84:4f:
e1:5c:90:42:07:8b:a5:4a:dd:11:be:65:62:4d:be:
db:ad:03:b1:cb:9e:0e:42:de:cc:4f:a7:65:4a:08:
10:73:a9:a2:3e:ce:37:12:e9:f8:3d:61:cd:76:0a:
ec:0e:16:7f:05:95:2a:03:56:2e:7d:a9:57:9c:85:
00:7a:26:59:7d:fc:45:92:13:7c:8a:e4:8d:a9:fd:
5e:bf:f6:41:77:06:74:74:d5:ec:b5:9a:99:ef:7b:
95:a6:63:c9:e4:29:d3:e0:c3:6e:44:ce:e4:7a:2c:
61:d6:24:64:a4:35:c1:06:ea:66:1e:99:e4:13:51:
84:e6:68:34:8d:0b:16:7c:62:1b:da:e2:4d:8a:db:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:22:1F:D1:3D:04:C1:1B:D8:69:BC:4B:9A:39:8A:2A:4C:4A:26:E7
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/bSIf0T0EwRvYabxLmjmKKkxKJuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.8.0/21
31.223.160.0/20
37.17.208.0/20
46.226.56.0/21
78.108.128.0/20
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.83.255
81.4.88.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0-83.96.199.255
83.96.208.0/22
83.96.224.0-83.96.235.255
83.96.248.0/22
85.10.160.0/20
85.158.248.0-85.158.253.255
91.142.240.0/21
91.142.252.0/23
91.189.208.0/22
91.205.32.0/22
94.142.208.0/21
141.255.176.0/21
171.33.128.0/21
176.74.224.0/19
185.15.248.0/22
185.65.52.0/22
185.69.232.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.105.204.0/22
185.105.216.0/22
193.93.172.0/22
193.242.119.0/24
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
04:27:ad:20:9a:96:b1:df:d3:26:45:68:93:45:e5:67:94:ef:
09:56:cc:f4:21:d7:cf:58:c3:ec:63:96:6c:3e:9c:09:bf:ec:
5c:3d:b6:7d:58:56:7e:8f:7d:31:dc:63:be:28:32:02:40:b5:
72:6c:3a:c2:eb:49:b1:97:85:b9:d2:31:2f:71:9d:e7:84:d7:
95:84:ad:90:71:96:9d:9a:e3:f1:b7:40:f5:d2:78:19:a6:c2:
1a:2e:c2:2a:59:6c:2a:38:ef:4a:2a:4e:ac:dc:5a:0c:7b:17:
de:62:2b:10:81:af:5c:2f:9b:4a:ab:b5:e9:9c:0d:c0:1d:d6:
fa:b0:6b:0b:df:76:f1:85:1e:1e:13:34:59:df:4f:25:5b:3b:
2b:f1:1b:06:7b:15:33:f4:c0:c0:02:72:14:2b:2b:0a:e0:e0:
85:36:af:ba:ce:28:0e:c1:e4:ca:e8:d8:f7:59:6a:b9:04:b1:
14:f7:92:6a:02:c8:a1:ee:8b:89:4f:30:8d:b2:f7:b9:5c:b6:
3b:ce:75:38:d4:c2:b2:ad:2d:25:ac:a6:8b:4a:91:19:04:a3:
03:93:2b:dc:9a:54:70:b1:ff:15:f9:a3:3d:19:73:a1:f4:27:
5c:de:b3:8c:8c:8d:6b:49:e8:0a:43:dd:f8:b0:9b:18:82:6d:
e3:67:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:45 2026 by rpki-client