Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/KxVm34lNwlkrW5qrAU5Pjsony_E.roa
File: KxVm34lNwlkrW5qrAU5Pjsony_E.roa (raw, json)
Hash identifier: Cv1CrCyZqmGqKdKvIPVNc1SNxI2ozAn85+sLNV8uOnE=
Subject key identifier: 2B:15:66:DF:89:4D:C2:59:2B:5B:9A:AB:01:4E:4F:8E:CA:27:CB:F1
Certificate issuer: /CN=34b31f69fcd4ed5131a139417ceb7203573b747b
Certificate serial: 019F23692B5341144806909BF170A8B7DC1E
Authority key identifier: 34:B3:1F:69:FC:D4:ED:51:31:A1:39:41:7C:EB:72:03:57:3B:74:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/KxVm34lNwlkrW5qrAU5Pjsony_E.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9063
IP address blocks: 31.220.32.0/22 maxlen: 22
37.230.0.0/19 maxlen: 19
91.184.160.0/19 maxlen: 19
93.186.0.0/20 maxlen: 20
109.75.80.0/20 maxlen: 20
147.93.216.0/21 maxlen: 21
169.40.16.0/20 maxlen: 20
176.126.64.0/23 maxlen: 23
176.126.68.0/23 maxlen: 23
176.126.71.0/24 maxlen: 24
176.126.72.0/23 maxlen: 23
176.126.75.0/24 maxlen: 24
176.126.76.0/24 maxlen: 24
176.126.79.0/24 maxlen: 24
176.126.80.0/23 maxlen: 23
176.126.82.0/24 maxlen: 24
185.35.109.0/24 maxlen: 24
185.35.110.0/23 maxlen: 23
185.161.200.0/23 maxlen: 23
185.166.189.0/24 maxlen: 24
185.166.190.0/23 maxlen: 23
185.168.8.0/24 maxlen: 24
185.168.11.0/24 maxlen: 24
185.186.144.0/23 maxlen: 23
185.194.151.0/24 maxlen: 24
185.203.123.0/24 maxlen: 24
185.222.139.0/24 maxlen: 24
185.231.252.0/22 maxlen: 22
194.35.184.0/23 maxlen: 23
194.35.188.0/23 maxlen: 23
212.82.48.0/20 maxlen: 20
212.88.128.0/19 maxlen: 19
217.24.224.0/20 maxlen: 20
2a02:5a0::/29 maxlen: 29
2a02:5a0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2b:53:41:14:48:06:90:9b:f1:70:a8:b7:dc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b31f69fcd4ed5131a139417ceb7203573b747b
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b1566df894dc2592b5b9aab014e4f8eca27cbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:f1:f6:d4:7e:9e:0f:97:49:4d:d5:e2:90:
36:1b:04:7b:82:bd:bc:9f:16:8b:4d:4a:23:b0:bc:
64:c0:4f:80:66:42:08:66:38:2a:a4:1a:ea:86:14:
3b:1c:fd:d6:03:00:d8:5a:3a:a4:d5:83:93:3e:e5:
46:73:3c:18:e2:31:59:bf:02:45:b8:03:5b:22:21:
71:ec:79:3d:73:81:9d:e9:04:fb:81:81:25:80:2d:
af:b6:62:a7:b8:d0:53:4e:30:c5:3e:ea:5e:b7:b4:
c6:8f:58:35:41:eb:59:42:a6:db:f5:bc:69:61:a4:
35:50:aa:da:94:34:6f:d7:52:c2:4f:90:2e:68:88:
fe:41:36:38:0d:3a:bb:70:39:49:bc:86:d6:cd:b9:
a5:1e:a2:1a:6f:dd:42:3d:4a:2a:4c:2f:44:e6:9b:
5e:29:b9:d8:6d:d9:9c:f3:9a:92:e1:bb:d8:d1:5d:
86:6b:2e:b6:84:9d:dc:86:0b:e6:80:92:93:e5:75:
70:06:d5:50:32:8c:2b:d9:ce:20:7b:7d:f5:b4:25:
63:8f:1c:f3:3f:b3:d9:21:26:28:0f:9f:03:40:3c:
b2:e7:e6:e9:f7:82:e5:ea:fe:09:3a:fe:46:a2:6a:
b3:41:53:01:ac:5a:12:9c:cc:bd:8f:16:a6:50:e3:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:15:66:DF:89:4D:C2:59:2B:5B:9A:AB:01:4E:4F:8E:CA:27:CB:F1
X509v3 Authority Key Identifier:
keyid:34:B3:1F:69:FC:D4:ED:51:31:A1:39:41:7C:EB:72:03:57:3B:74:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/KxVm34lNwlkrW5qrAU5Pjsony_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.32.0/22
37.230.0.0/19
91.184.160.0/19
93.186.0.0/20
109.75.80.0/20
147.93.216.0/21
169.40.16.0/20
176.126.64.0/23
176.126.68.0/23
176.126.71.0-176.126.73.255
176.126.75.0-176.126.76.255
176.126.79.0-176.126.82.255
185.35.109.0-185.35.111.255
185.161.200.0/23
185.166.189.0-185.166.191.255
185.168.8.0/24
185.168.11.0/24
185.186.144.0/23
185.194.151.0/24
185.203.123.0/24
185.222.139.0/24
185.231.252.0/22
194.35.184.0/23
194.35.188.0/23
212.82.48.0/20
212.88.128.0/19
217.24.224.0/20
IPv6:
2a02:5a0::/29
Signature Algorithm: sha256WithRSAEncryption
35:ec:7b:87:f7:71:6f:d1:66:54:ab:b1:97:30:7b:04:2e:8f:
7b:03:50:d0:74:ad:85:d5:0f:93:70:4c:69:36:69:72:3e:6e:
77:f0:da:70:28:39:70:c1:9f:2a:63:aa:7f:e9:e0:b9:20:cb:
59:56:9a:cf:b7:43:e3:37:bf:67:57:64:c7:8b:e1:6a:ed:84:
aa:fc:13:60:11:0a:26:54:c4:01:46:a3:6f:9d:3e:f9:41:af:
fb:b7:23:55:5e:e3:b2:35:00:04:7d:e6:c5:2a:8e:d9:ea:71:
1d:06:d5:fd:b1:3a:be:c6:78:09:d3:80:57:65:99:a5:ef:ef:
97:33:9f:25:75:c8:77:af:9a:57:ff:b5:60:80:ed:d6:37:34:
e1:f1:f1:92:59:8a:ea:11:47:63:35:29:64:d4:e1:5c:85:43:
67:b9:f4:2c:3b:59:f2:e1:16:80:5b:57:9b:14:4b:9d:c7:d7:
a1:fa:02:87:94:24:3f:58:50:a8:3d:57:4d:89:f0:e2:1b:06:
73:a8:3c:c9:0c:53:2d:b5:7f:cf:ef:fc:11:38:8e:bd:c3:b3:
98:ee:53:9a:cf:68:fa:5f:00:b9:b2:37:8d:0e:25:49:9e:52:
39:7c:ac:57:df:0c:53:47:b6:fd:ff:97:c6:e5:75:ab:42:d7:
e9:9a:21:4f
-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgISAZ8jaStTQRRIBpCb8XCot9weMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjMxZjY5ZmNkNGVkNTEzMWExMzk0MTdjZWI3MjAzNTcz
Yjc0N2IwHhcNMjYwNzAyMTUxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjE1NjZkZjg5NGRjMjU5MmI1YjlhYWIwMTRlNGY4ZWNhMjdjYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eLx9tR+ng+XSU3V4pA2GwR7gr28
nxaLTUojsLxkwE+AZkIIZjgqpBrqhhQ7HP3WAwDYWjqk1YOTPuVGczwY4jFZvwJF
uANbIiFx7Hk9c4Gd6QT7gYElgC2vtmKnuNBTTjDFPupet7TGj1g1QetZQqbb9bxp
YaQ1UKralDRv11LCT5AuaIj+QTY4DTq7cDlJvIbWzbmlHqIab91CPUoqTC9E5pte
KbnYbdmc85qS4bvY0V2Gay62hJ3chgvmgJKT5XVwBtVQMowr2c4ge331tCVjjxzz
P7PZISYoD58DQDyy5+bp94Ll6v4JOv5GomqzQVMBrFoSnMy9jxamUONvHwIDAQAB
o4IC4TCCAt0wHQYDVR0OBBYEFCsVZt+JTcJZK1uaqwFOT47KJ8vxMB8GA1UdIwQY
MBaAFDSzH2n81O1RMaE5QXzrcgNXO3R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxNZmFmelU3VkV4b1RsQmZPdHlBMWM3ZEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAt
NzI1NjhmMDZmZTEwLzEvS3hWbTM0bE53bGtyVzVxckFVNVBqc29ueV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAtNzI1NjhmMDZmZTEw
LzEvTkxNZmFmelU3VkV4b1RsQmZPdHlBMWM3ZEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH2BggrBgEFBQcBBwEB/wSB5jCB4zCB0QQCAAEwgcoDBAIf
3CADBAUl5gADBAVbuKADBARdugADBARtS1ADBAOTXdgDBASpKBADBAGwfkADBAGw
fkQwDAMEALB+RwMEAbB+SDAMAwQAsH5LAwQAsH5MMAwDBACwfk8DBACwflIwDAME
ALkjbQMEBLkjYAMEAbmhyDAMAwQAuaa9AwQGuaaAAwQAuagIAwQAuagLAwQBubqQ
AwQAucKXAwQAuct7AwQAud6LAwQCuef8AwQBwiO4AwQBwiO8AwQE1FIwAwQF1FiA
AwQE2RjgMA0EAgACMAcDBQMqAgWgMA0GCSqGSIb3DQEBCwUAA4IBAQA17HuH93Fv
0WZUq7GXMHsELo97A1DQdK2F1Q+TcExpNmlyPm538NpwKDlwwZ8qY6p/6eC5IMtZ
VprPt0PjN79nV2THi+Fq7YSq/BNgEQomVMQBRqNvnT75Qa/7tyNVXuOyNQAEfebF
Ko7Z6nEdBtX9sTq+xngJ04BXZZml7++XM58ldch3r5pX/7VggO3WNzTh8fGSWYrq
EUdjNSlk1OFchUNnufQsO1ny4RaAW1ebFEudx9eh+gKHlCQ/WFCoPVdNifDiGwZz
qDzJDFMttX/P7/wROI69w7OY7lOaz2j6XwC5sjeNDiVJnlI5fKxX3wxTR7b9/5fG
5XWrQtfpmiFP
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:54 2026 by rpki-client