Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/XmnG0MqLIgeN6LB3ZvX_EHKUPUs.roa
File: XmnG0MqLIgeN6LB3ZvX_EHKUPUs.roa (raw, json)
Hash identifier: w3yL18W2ynzjIg8bQ2zeCSOfCkrmB+prpT+GDS84ZrE=
Subject key identifier: 5E:69:C6:D0:CA:8B:22:07:8D:E8:B0:77:66:F5:FF:10:72:94:3D:4B
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 01A0C453AF56BABDB85D6C18C157567B5B31
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/XmnG0MqLIgeN6LB3ZvX_EHKUPUs.roa
Signing time: Mon 21 Sep 2026 14:16:53 +0000
ROA not before: Mon 21 Sep 2026 14:16:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56630
IP address blocks: 5.182.228.0/22 maxlen: 24
5.188.172.0/24 maxlen: 24
5.188.173.0/24 maxlen: 24
5.188.180.0/22 maxlen: 24
31.40.216.0/22 maxlen: 24
45.135.120.0/22 maxlen: 24
45.141.8.0/22 maxlen: 24
45.150.232.0/22 maxlen: 24
46.21.84.0/22 maxlen: 24
77.72.16.0/23 maxlen: 24
77.72.18.0/23 maxlen: 24
77.72.20.0/23 maxlen: 24
77.72.22.0/23 maxlen: 24
88.210.38.0/24 maxlen: 24
88.210.39.0/24 maxlen: 24
88.218.240.0/22 maxlen: 24
89.34.238.0/24 maxlen: 24
89.36.160.0/24 maxlen: 24
89.36.161.0/24 maxlen: 24
91.192.80.0/24 maxlen: 24
91.192.83.0/24 maxlen: 24
91.201.64.0/22 maxlen: 24
92.119.88.0/22 maxlen: 24
93.189.56.0/24 maxlen: 24
93.189.57.0/24 maxlen: 24
93.189.58.0/24 maxlen: 24
93.189.60.0/24 maxlen: 24
93.189.61.0/24 maxlen: 24
93.189.62.0/24 maxlen: 24
93.189.63.0/24 maxlen: 24
95.81.64.0/22 maxlen: 24
95.81.68.0/23 maxlen: 24
95.81.70.0/24 maxlen: 24
95.81.71.0/24 maxlen: 24
95.81.80.0/23 maxlen: 24
95.81.82.0/24 maxlen: 24
95.81.83.0/24 maxlen: 24
95.81.84.0/24 maxlen: 24
95.81.87.0/24 maxlen: 24
95.81.104.0/23 maxlen: 24
95.81.106.0/24 maxlen: 24
95.81.108.0/23 maxlen: 24
95.81.111.0/24 maxlen: 24
103.82.100.0/23 maxlen: 24
103.97.88.0/24 maxlen: 24
103.97.89.0/24 maxlen: 24
103.97.90.0/24 maxlen: 24
103.253.37.0/24 maxlen: 24
109.122.202.0/23 maxlen: 24
109.122.204.0/23 maxlen: 24
185.6.12.0/23 maxlen: 24
185.6.14.0/23 maxlen: 24
185.35.220.0/23 maxlen: 24
185.110.216.0/23 maxlen: 24
185.120.136.0/24 maxlen: 24
185.120.137.0/24 maxlen: 24
185.120.138.0/24 maxlen: 24
185.120.139.0/24 maxlen: 24
185.131.64.0/24 maxlen: 24
185.131.65.0/24 maxlen: 24
185.131.66.0/24 maxlen: 24
185.131.67.0/24 maxlen: 24
185.135.84.0/22 maxlen: 24
185.140.12.0/22 maxlen: 24
185.140.208.0/24 maxlen: 24
185.140.209.0/24 maxlen: 24
185.224.248.0/24 maxlen: 24
185.224.250.0/24 maxlen: 24
185.234.146.0/23 maxlen: 24
185.246.152.0/24 maxlen: 24
185.246.153.0/24 maxlen: 24
185.246.154.0/24 maxlen: 24
185.246.155.0/24 maxlen: 24
192.77.240.0/22 maxlen: 24
192.77.244.0/22 maxlen: 24
192.77.249.0/24 maxlen: 24
192.77.250.0/24 maxlen: 24
192.77.252.0/22 maxlen: 24
194.59.46.0/24 maxlen: 24
194.59.59.0/24 maxlen: 24
194.59.142.0/24 maxlen: 24
194.59.155.0/24 maxlen: 24
195.238.124.0/22 maxlen: 24
212.23.200.0/24 maxlen: 24
213.111.128.0/23 maxlen: 24
213.111.132.0/23 maxlen: 24
213.111.136.0/23 maxlen: 24
213.111.138.0/23 maxlen: 24
213.111.143.0/24 maxlen: 24
213.173.32.0/22 maxlen: 24
213.183.32.0/24 maxlen: 24
213.183.33.0/24 maxlen: 24
213.183.36.0/24 maxlen: 24
213.183.37.0/24 maxlen: 24
213.183.38.0/24 maxlen: 24
213.183.39.0/24 maxlen: 24
213.183.40.0/24 maxlen: 24
213.183.41.0/24 maxlen: 24
213.183.42.0/24 maxlen: 24
213.183.43.0/24 maxlen: 24
213.183.44.0/24 maxlen: 24
213.183.45.0/24 maxlen: 24
213.183.46.0/24 maxlen: 24
213.183.47.0/24 maxlen: 24
213.183.48.0/24 maxlen: 24
213.183.49.0/24 maxlen: 24
213.183.50.0/24 maxlen: 24
213.183.51.0/24 maxlen: 24
213.183.52.0/24 maxlen: 24
213.183.53.0/24 maxlen: 24
213.183.58.0/24 maxlen: 24
213.183.59.0/24 maxlen: 24
213.183.60.0/24 maxlen: 24
213.183.61.0/24 maxlen: 24
213.183.62.0/24 maxlen: 24
213.183.63.0/24 maxlen: 24
213.226.68.0/22 maxlen: 24
217.30.8.0/22 maxlen: 24
2a06:f900::/36 maxlen: 36
2a06:f900:4000::/36 maxlen: 36
2a06:f901::/36 maxlen: 36
2a06:f902::/36 maxlen: 36
2a06:f902:c000::/36 maxlen: 36
2a06:f903::/36 maxlen: 36
2a06:f904::/36 maxlen: 36
2a06:f905::/36 maxlen: 36
2a06:f906::/36 maxlen: 36
2a06:f907::/36 maxlen: 36
2a06:f907:4000::/36 maxlen: 36
2a0d:8400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:53:af:56:ba:bd:b8:5d:6c:18:c1:57:56:7b:5b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Sep 21 14:16:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e69c6d0ca8b22078de8b07766f5ff1072943d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:b3:9e:b5:d5:30:f6:73:c7:10:73:30:d0:
33:16:cf:df:d3:82:7f:a8:48:59:03:0a:ee:e8:e1:
cf:21:19:eb:5e:6c:6c:cc:fa:d1:b7:53:44:96:36:
df:1a:25:62:0b:d1:3a:be:fb:84:83:47:bd:4b:b7:
d4:df:48:58:52:5d:d5:37:68:b0:65:72:c2:cb:8d:
8e:af:96:ad:d7:02:84:16:9e:8a:af:34:2a:0d:74:
45:25:3e:cf:7b:98:da:63:da:0a:73:f4:4b:41:67:
c8:07:09:84:cc:9e:3e:4c:a3:0a:e7:32:42:07:4a:
2f:9d:14:03:00:88:8b:48:de:31:8d:37:a9:c9:10:
80:06:4e:68:e2:1c:e3:c0:23:10:7a:6a:32:4f:07:
0e:4f:53:22:bd:40:1b:31:b5:00:5a:33:3e:38:a6:
fb:71:b7:f5:53:18:90:8b:c0:29:5b:d4:39:a7:2d:
48:03:f0:d0:0c:40:bb:28:7a:e8:1a:27:7e:a0:51:
c3:9d:c3:67:68:29:52:07:f5:76:20:9e:9f:2c:18:
82:2a:46:96:eb:44:2c:03:ea:65:22:98:29:6c:30:
0c:7b:4c:2b:db:74:bc:1f:d3:a1:71:06:5d:e7:0b:
23:4c:95:84:5a:31:bb:5d:a6:4f:7d:8a:49:e4:7e:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:C6:D0:CA:8B:22:07:8D:E8:B0:77:66:F5:FF:10:72:94:3D:4B
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/XmnG0MqLIgeN6LB3ZvX_EHKUPUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.228.0/22
5.188.172.0/23
5.188.180.0/22
31.40.216.0/22
45.135.120.0/22
45.141.8.0/22
45.150.232.0/22
46.21.84.0/22
77.72.16.0/21
88.210.38.0/23
88.218.240.0/22
89.34.238.0/24
89.36.160.0/23
91.192.80.0/24
91.192.83.0/24
91.201.64.0/22
92.119.88.0/22
93.189.56.0-93.189.58.255
93.189.60.0/22
95.81.64.0/21
95.81.80.0-95.81.84.255
95.81.87.0/24
95.81.104.0-95.81.106.255
95.81.108.0/23
95.81.111.0/24
103.82.100.0/23
103.97.88.0-103.97.90.255
103.253.37.0/24
109.122.202.0-109.122.205.255
185.6.12.0/22
185.35.220.0/23
185.110.216.0/23
185.120.136.0/22
185.131.64.0/22
185.135.84.0/22
185.140.12.0/22
185.140.208.0/23
185.224.248.0/24
185.224.250.0/24
185.234.146.0/23
185.246.152.0/22
192.77.240.0/21
192.77.249.0-192.77.250.255
192.77.252.0/22
194.59.46.0/24
194.59.59.0/24
194.59.142.0/24
194.59.155.0/24
195.238.124.0/22
212.23.200.0/24
213.111.128.0/23
213.111.132.0/23
213.111.136.0/22
213.111.143.0/24
213.173.32.0/22
213.183.32.0/23
213.183.36.0-213.183.53.255
213.183.58.0-213.183.63.255
213.226.68.0/22
217.30.8.0/22
IPv6:
2a06:f900::/36
2a06:f900:4000::/36
2a06:f901::/36
2a06:f902::/36
2a06:f902:c000::/36
2a06:f903::/36
2a06:f904::/36
2a06:f905::/36
2a06:f906::/36
2a06:f907::/36
2a06:f907:4000::/36
2a0d:8400::/32
Signature Algorithm: sha256WithRSAEncryption
2e:d4:6b:12:5e:6d:29:f3:12:5f:7b:52:35:bc:d5:4f:0b:4b:
f4:eb:4a:9b:85:54:4a:ba:f9:6d:fb:4b:5e:06:6a:4e:89:82:
ae:bc:09:1e:23:1b:49:53:89:cb:92:41:a4:84:68:74:31:cd:
6c:01:e7:d0:d0:18:6c:c2:b5:be:c0:2b:9a:21:9a:11:17:20:
6e:1a:da:73:5d:b3:d8:d7:87:d0:6d:88:19:ec:09:04:5d:18:
15:67:27:78:78:95:0d:3c:b3:53:a8:9b:1a:b6:23:10:1a:a0:
79:67:73:fd:96:91:51:a7:41:73:31:fa:14:fe:3d:28:72:a7:
db:5a:08:79:9c:b0:18:d7:fc:d0:57:d9:d0:d1:d2:56:ce:8c:
da:3d:66:00:99:e1:b0:4c:a9:84:dd:81:16:48:0e:9f:73:ca:
d9:f8:74:90:c8:43:0f:d8:2e:55:41:79:91:f9:15:4c:2f:24:
e6:22:a5:ed:3b:8b:eb:e2:7a:3d:74:7b:40:a4:89:4c:8d:73:
aa:ae:b6:19:7c:54:49:db:67:ba:19:35:a0:51:10:da:fe:ef:
f2:99:4f:66:bc:09:22:59:79:00:d2:40:c7:1b:ba:52:98:ce:
6d:4e:7a:f0:f0:7a:ef:35:10:93:d2:8d:35:d4:69:3a:05:87:
9b:80:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:20:20 2026 by rpki-client