Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/J858U9M3Pu6Cp06GzOrCZktlpEU.roa
File: J858U9M3Pu6Cp06GzOrCZktlpEU.roa (raw, json)
Hash identifier: /2LUChah4azSZ6Ix+z1gFSt47yg5myoIj13SluIuDYE=
Subject key identifier: 27:CE:7C:53:D3:37:3E:EE:82:A7:4E:86:CC:EA:C2:66:4B:65:A4:45
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 019F65C969CEAD7173B5E3A11A346D959FC1
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/J858U9M3Pu6Cp06GzOrCZktlpEU.roa
Signing time: Wed 15 Jul 2026 12:38:46 +0000
ROA not before: Wed 15 Jul 2026 12:38:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9002
IP address blocks: 2.58.98.0/24 maxlen: 24
31.128.32.0/22 maxlen: 24
37.233.82.0/23 maxlen: 24
37.233.84.0/23 maxlen: 24
37.233.86.0/24 maxlen: 24
45.11.94.0/24 maxlen: 24
45.92.174.0/24 maxlen: 24
45.130.212.0/22 maxlen: 24
45.137.188.0/24 maxlen: 24
45.145.5.0/24 maxlen: 24
45.145.6.0/24 maxlen: 24
45.145.163.0/24 maxlen: 24
45.145.168.0/24 maxlen: 24
45.152.86.0/24 maxlen: 24
45.152.87.0/24 maxlen: 24
45.156.20.0/24 maxlen: 24
46.173.20.0/24 maxlen: 24
77.73.233.0/24 maxlen: 24
77.73.235.0/24 maxlen: 24
77.73.238.0/24 maxlen: 24
83.222.20.0/23 maxlen: 24
89.40.204.0/24 maxlen: 24
90.156.254.0/23 maxlen: 24
91.193.25.0/24 maxlen: 24
91.218.142.0/23 maxlen: 24
155.212.224.0/21 maxlen: 24
185.77.231.0/24 maxlen: 24
193.22.244.0/24 maxlen: 24
193.23.3.0/24 maxlen: 24
193.28.186.0/24 maxlen: 24
193.43.72.0/24 maxlen: 24
193.56.188.0/24 maxlen: 24
193.56.190.0/24 maxlen: 24
193.242.106.0/24 maxlen: 24
193.242.109.0/24 maxlen: 24
194.36.208.0/24 maxlen: 24
194.113.209.0/24 maxlen: 24
212.74.231.0/24 maxlen: 24
213.139.229.0/24 maxlen: 24
2a04:bac1::/36 maxlen: 36
2a04:bac1:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:c9:69:ce:ad:71:73:b5:e3:a1:1a:34:6d:95:9f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Jul 15 12:38:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27ce7c53d3373eee82a74e86cceac2664b65a445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:9b:5b:3e:80:d7:dc:eb:09:62:bc:49:65:
29:69:26:43:44:ff:ce:55:2e:dc:89:7e:84:49:69:
66:99:bf:a9:8e:0d:ee:16:89:f7:68:8f:8d:3d:fa:
83:dc:63:04:b6:68:d2:eb:9a:48:92:9f:b1:dc:d2:
7b:59:e0:0b:42:c5:45:53:b3:61:be:df:11:67:63:
a5:a0:71:84:21:83:7b:69:8a:f4:50:69:24:86:9c:
54:fa:1f:13:1c:26:1b:60:59:72:06:88:e2:71:d8:
f1:59:ee:1a:8d:83:e7:b9:1f:0e:06:94:1d:04:a8:
9c:5f:0a:c1:77:8d:56:f5:4a:71:5a:ab:63:0c:0d:
ca:50:27:7d:dd:52:ff:f1:98:ca:ad:67:e0:ae:12:
93:14:8c:1c:ff:97:98:27:f5:b4:ee:2d:b0:74:4e:
7f:95:d6:fa:80:54:1a:3b:23:a8:6b:83:aa:37:b7:
24:cf:4c:ab:4d:3f:a6:1d:5d:42:e3:07:28:b9:72:
87:48:45:10:da:2a:50:5b:8e:34:87:84:cf:b3:06:
4f:cf:21:72:93:12:5b:eb:ae:7c:00:15:8f:b1:f9:
33:ae:8c:63:6c:e3:ed:fa:6e:1d:00:aa:95:43:7c:
c6:76:52:ec:cc:86:b6:cf:07:79:e7:42:05:4f:b8:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CE:7C:53:D3:37:3E:EE:82:A7:4E:86:CC:EA:C2:66:4B:65:A4:45
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/J858U9M3Pu6Cp06GzOrCZktlpEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.98.0/24
31.128.32.0/22
37.233.82.0-37.233.86.255
45.11.94.0/24
45.92.174.0/24
45.130.212.0/22
45.137.188.0/24
45.145.5.0-45.145.6.255
45.145.163.0/24
45.145.168.0/24
45.152.86.0/23
45.156.20.0/24
46.173.20.0/24
77.73.233.0/24
77.73.235.0/24
77.73.238.0/24
83.222.20.0/23
89.40.204.0/24
90.156.254.0/23
91.193.25.0/24
91.218.142.0/23
155.212.224.0/21
185.77.231.0/24
193.22.244.0/24
193.23.3.0/24
193.28.186.0/24
193.43.72.0/24
193.56.188.0/24
193.56.190.0/24
193.242.106.0/24
193.242.109.0/24
194.36.208.0/24
194.113.209.0/24
212.74.231.0/24
213.139.229.0/24
IPv6:
2a04:bac1::/35
Signature Algorithm: sha256WithRSAEncryption
01:39:60:f5:57:3c:90:4d:83:12:6f:cc:ba:9b:c6:89:14:ec:
cf:0d:7c:43:5e:2f:ec:3a:45:8d:7c:45:0d:2b:0d:31:61:3e:
46:3d:89:e0:92:0f:88:f8:7e:4a:50:5a:0e:a5:91:5a:1a:1f:
14:77:ec:13:8a:0b:8c:ed:11:e7:40:5a:45:d9:51:3b:bb:a1:
e0:dc:55:7e:4e:7a:04:09:ad:c8:58:9c:cd:34:d8:43:43:ba:
6f:b6:7c:d3:18:32:c5:49:54:02:27:f4:d0:bc:41:1d:1f:f7:
8c:ea:c3:5c:28:01:7a:69:b1:86:50:c7:39:34:89:d0:75:2e:
99:e4:d3:a2:48:59:80:93:01:69:a1:d7:6f:5c:9f:23:c7:42:
9f:e0:b8:4a:49:43:ef:c3:32:d6:0c:93:5e:68:db:bf:86:84:
13:57:04:f1:be:7d:a3:97:75:c9:a2:50:f9:a3:3b:60:64:4f:
99:1f:72:dd:68:5a:be:c4:55:23:a7:4e:55:d7:6b:3e:8d:26:
45:bd:ce:02:01:62:9b:30:16:c4:80:fe:f0:97:f2:08:c9:db:
77:4e:00:07:a9:3e:f7:a3:fd:41:bd:92:74:15:38:55:8a:e9:
1a:2d:af:52:51:56:b2:c3:a1:49:3e:62:9c:d9:33:61:4e:7b:
49:76:c6:60
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISAZ9lyWnOrXFzteOhGjRtlZ/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1
ZmQxNmEwHhcNMjYwNzE1MTIzODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2NlN2M1M2QzMzczZWVlODJhNzRlODZjY2VhYzI2NjRiNjVhNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh2bWz6A19zrCWK8SWUpaSZDRP/O
VS7ciX6ESWlmmb+pjg3uFon3aI+NPfqD3GMEtmjS65pIkp+x3NJ7WeALQsVFU7Nh
vt8RZ2OloHGEIYN7aYr0UGkkhpxU+h8THCYbYFlyBojicdjxWe4ajYPnuR8OBpQd
BKicXwrBd41W9UpxWqtjDA3KUCd93VL/8ZjKrWfgrhKTFIwc/5eYJ/W07i2wdE5/
ldb6gFQaOyOoa4OqN7ckz0yrTT+mHV1C4wcouXKHSEUQ2ipQW440h4TPswZPzyFy
kxJb6658ABWPsfkzroxjbOPt+m4dAKqVQ3zGdlLszIa2zwd550IFT7iFIQIDAQAB
o4IC+zCCAvcwHQYDVR0OBBYEFCfOfFPTNz7ugqdOhszqwmZLZaRFMB8GA1UdIwQY
MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt
ZDgzZWQxNDBkMjhkLzEvSjg1OFU5TTNQdTZDcDA2R3pPckNaa3RscEVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk
LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDwYIKwYBBQUHAQcBAf8Egf8wgfwwgekEAgABMIHiAwQA
AjpiAwQCH4AgMAwDBAEl6VIDBAAl6VYDBAAtC14DBAAtXK4DBAItgtQDBAAtibww
DAMEAC2RBQMEAC2RBgMEAC2RowMEAC2RqAMEAS2YVgMEAC2cFAMEAC6tFAMEAE1J
6QMEAE1J6wMEAE1J7gMEAVPeFAMEAFkozAMEAVqc/gMEAFvBGQMEAVvajgMEA5vU
4AMEALlN5wMEAMEW9AMEAMEXAwMEAMEcugMEAMErSAMEAME4vAMEAME4vgMEAMHy
agMEAMHybQMEAMIk0AMEAMJx0QMEANRK5wMEANWL5TAOBAIAAjAIAwYFKgS6wQAw
DQYJKoZIhvcNAQELBQADggEBAAE5YPVXPJBNgxJvzLqbxokU7M8NfENeL+w6RY18
RQ0rDTFhPkY9ieCSD4j4fkpQWg6lkVoaHxR37BOKC4ztEedAWkXZUTu7oeDcVX5O
egQJrchYnM002ENDum+2fNMYMsVJVAIn9NC8QR0f94zqw1woAXppsYZQxzk0idB1
Lpnk06JIWYCTAWmh129cnyPHQp/guEpJQ+/DMtYMk15o27+GhBNXBPG+faOXdcmi
UPmjO2BkT5kfct1oWr7EVSOnTlXXaz6NJkW9zgIBYpswFsSA/vCX8gjJ23dOAAep
Pvej/UG9knQVOFWK6Rotr1JRVrLDoUk+YpzZM2FOe0l2xmA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:39 2026 by rpki-client