Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa
File: k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa (raw, json)
Hash identifier: lMxKbbsuVDDpKDp0TZpDMbjhyk3buYEiXF/UkdpZabc=
Subject key identifier: 93:E6:11:92:58:8C:45:5A:17:4A:14:3C:3D:B5:B2:FB:D3:7B:4A:34
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019F8EDBDD87A0A02DB7A9ED59EFBA153733
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa
Signing time: Thu 23 Jul 2026 12:03:21 +0000
ROA not before: Thu 23 Jul 2026 12:03:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39700
IP address blocks: 31.223.160.0/20 maxlen: 24
37.17.208.0/20 maxlen: 24
78.108.128.0/20 maxlen: 24
80.246.192.0/20 maxlen: 24
80.255.240.0/20 maxlen: 24
81.21.136.0/21 maxlen: 24
81.30.32.0/20 maxlen: 24
85.10.160.0/21 maxlen: 24
85.10.168.0/22 maxlen: 24
91.142.240.0/21 maxlen: 24
91.142.248.0/22 maxlen: 24
141.255.176.0/22 maxlen: 24
171.33.128.0/21 maxlen: 24
176.74.224.0/19 maxlen: 24
185.15.248.0/22 maxlen: 24
217.21.240.0/20 maxlen: 24
217.149.128.0/20 maxlen: 24
2001:4cb8::/29 maxlen: 48
2a00:c080:101c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:db:dd:87:a0:a0:2d:b7:a9:ed:59:ef:ba:15:37:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jul 23 12:03:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93e61192588c455a174a143c3db5b2fbd37b4a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:d8:22:21:5a:8a:34:dd:51:66:68:1b:6c:
bb:e2:21:2c:58:d3:eb:f8:74:58:45:17:23:fd:fd:
b0:27:b7:ab:7e:25:44:c2:28:ae:87:5f:d2:84:20:
f3:e8:f2:bc:20:ed:44:9a:5c:91:79:d7:db:8b:25:
43:19:ae:45:50:21:76:54:a8:41:f4:b2:ce:09:2d:
fb:28:7b:ce:81:71:2f:d6:1a:5d:48:e6:26:4f:dc:
14:cd:eb:73:99:82:c5:55:c1:51:e3:a5:11:08:12:
08:e2:c4:ad:22:ff:7e:3d:7c:85:86:ba:b1:ba:1a:
2d:b7:c6:ec:86:45:5f:7d:16:22:70:5a:43:7b:12:
d3:d6:9c:6a:ee:92:f0:d4:0d:fd:45:ea:ab:52:2d:
77:4d:d3:7b:4e:0f:48:50:61:77:75:56:f6:9a:df:
7d:bf:fd:68:36:91:1f:a4:e0:6e:7d:1c:4d:e8:29:
81:3a:ce:9c:7d:fd:5a:10:56:b4:99:07:e6:de:51:
8e:1a:8c:d2:b2:4d:22:2a:55:86:5e:33:25:a0:ce:
9e:83:ce:d1:c3:97:18:d6:eb:c0:39:09:e0:1f:76:
35:7b:36:1f:a4:94:07:51:31:49:2e:ae:ac:b3:0f:
8f:e7:5f:c8:98:ba:72:79:e8:88:df:99:10:7d:97:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E6:11:92:58:8C:45:5A:17:4A:14:3C:3D:B5:B2:FB:D3:7B:4A:34
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.160.0/20
37.17.208.0/20
78.108.128.0/20
80.246.192.0/20
80.255.240.0/20
81.21.136.0/21
81.30.32.0/20
85.10.160.0-85.10.171.255
91.142.240.0-91.142.251.255
141.255.176.0/22
171.33.128.0/21
176.74.224.0/19
185.15.248.0/22
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:4cb8::/29
2a00:c080:101c::/48
Signature Algorithm: sha256WithRSAEncryption
24:fd:5e:18:6d:04:dd:7b:97:29:28:0a:2f:d5:03:7a:9d:ec:
c9:10:0d:19:ee:fc:f5:a5:23:8d:f0:6d:98:91:05:5e:62:66:
dd:f5:bc:6f:e6:5d:85:81:03:b1:51:5f:b0:9b:b0:ed:2c:e6:
1b:43:ea:fc:bf:38:83:68:c0:ec:6f:7e:b6:1a:53:dc:49:41:
2b:78:33:ea:36:b1:bd:ab:a6:85:8e:17:8f:27:7d:8c:ba:3a:
fb:c8:bd:9d:bb:b6:e1:e8:42:90:07:26:ae:7d:83:19:cc:4d:
b1:d7:5e:5b:2a:db:dc:9d:a9:de:92:da:a8:54:da:ca:e6:b2:
4c:7e:cf:59:2e:b3:b0:19:18:b2:e0:7e:17:d2:d7:34:34:78:
ce:76:d9:7b:36:6e:a6:f4:0f:f2:c2:8c:6e:12:fe:e8:c4:94:
4a:80:3c:cf:a5:45:ce:35:38:88:6f:1c:05:3a:d4:94:8b:5b:
4f:dd:f7:d6:ef:8f:cb:ae:a5:37:ad:3b:1a:38:da:2b:de:6d:
72:a5:f7:f1:0d:8d:22:4e:2d:8f:4a:9e:40:65:67:6c:11:f1:
55:91:26:46:79:ca:7c:f8:11:6c:e6:93:0d:e6:36:0c:9d:e3:
1d:86:5b:b5:2d:86:14:33:12:74:f7:ed:ff:d4:de:2e:db:43:
3d:6d:b6:c1
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZ+O292HoKAtt6ntWe+6FTczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjYwNzIzMTIwMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2U2MTE5MjU4OGM0NTVhMTc0YTE0M2MzZGI1YjJmYmQzN2I0YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvbYIiFaijTdUWZoG2y74iEsWNPr
+HRYRRcj/f2wJ7erfiVEwiiuh1/ShCDz6PK8IO1EmlyRedfbiyVDGa5FUCF2VKhB
9LLOCS37KHvOgXEv1hpdSOYmT9wUzetzmYLFVcFR46URCBII4sStIv9+PXyFhrqx
uhott8bshkVffRYicFpDexLT1pxq7pLw1A39ReqrUi13TdN7Tg9IUGF3dVb2mt99
v/1oNpEfpOBufRxN6CmBOs6cff1aEFa0mQfm3lGOGozSsk0iKlWGXjMloM6eg87R
w5cY1uvAOQngH3Y1ezYfpJQHUTFJLq6ssw+P51/ImLpyeeiI35kQfZeTNwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFJPmEZJYjEVaF0oUPD21svvTe0o0MB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvay1ZUmtsaU1SVm9YU2hROFBiV3ktOU43U2pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijBwBAIAATBqAwQEH9+g
AwQEJRHQAwQETmyAAwQEUPbAAwQEUP/wAwQDURWIAwQEUR4gMAwDBAVVCqADBAJV
CqgwDAMEBFuO8AMEAluO+AMEAo3/sAMEA6shgAMEBbBK4AMEArkP+AMEBNkV8AME
BNmVgDAWBAIAAjAQAwUDIAFMuAMHACoAwIAQHDANBgkqhkiG9w0BAQsFAAOCAQEA
JP1eGG0E3XuXKSgKL9UDep3syRANGe789aUjjfBtmJEFXmJm3fW8b+ZdhYEDsVFf
sJuw7SzmG0Pq/L84g2jA7G9+thpT3ElBK3gz6jaxvaumhY4Xjyd9jLo6+8i9nbu2
4ehCkAcmrn2DGcxNsddeWyrb3J2p3pLaqFTayuayTH7PWS6zsBkYsuB+F9LXNDR4
znbZezZupvQP8sKMbhL+6MSUSoA8z6VFzjU4iG8cBTrUlItbT9331u+Py66lN607
GjjaK95tcqX38Q2NIk4tj0qeQGVnbBHxVZEmRnnKfPgRbOaTDeY2DJ3jHYZbtS2G
FDMSdPft/9TeLttDPW22wQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:47 2026 by rpki-client