Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/xhbUbHJfWuIcC58a_mlqpEgQiTA.roa
File: xhbUbHJfWuIcC58a_mlqpEgQiTA.roa (raw, json)
Hash identifier: 7RamenGY9nZYZ3O4Ws9uXcb/b++6NDmV6mvSM+ZRA6Q=
Subject key identifier: C6:16:D4:6C:72:5F:5A:E2:1C:0B:9F:1A:FE:69:6A:A4:48:10:89:30
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 019CE71922D53640BD7ABBC938F9328CC0D1
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/xhbUbHJfWuIcC58a_mlqpEgQiTA.roa
Signing time: Fri 13 Mar 2026 12:08:30 +0000
ROA not before: Fri 13 Mar 2026 12:08:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33915
IP address blocks: 24.132.0.0/16 maxlen: 16
24.132.0.0/17 maxlen: 17
24.132.128.0/17 maxlen: 17
31.151.0.0/16 maxlen: 16
31.151.0.0/17 maxlen: 17
31.151.128.0/17 maxlen: 17
46.129.0.0/16 maxlen: 16
46.129.0.0/17 maxlen: 17
46.129.128.0/17 maxlen: 17
62.100.0.0/18 maxlen: 18
62.108.0.0/19 maxlen: 19
62.108.0.0/20 maxlen: 20
62.108.16.0/20 maxlen: 20
62.163.0.0/16 maxlen: 16
62.163.0.0/17 maxlen: 17
62.163.128.0/17 maxlen: 17
62.194.0.0/15 maxlen: 15
62.194.0.0/16 maxlen: 16
62.195.0.0/16 maxlen: 16
77.248.0.0/14 maxlen: 14
77.248.0.0/15 maxlen: 15
77.250.0.0/15 maxlen: 15
80.56.0.0/15 maxlen: 15
80.56.0.0/16 maxlen: 16
80.57.0.0/16 maxlen: 16
80.85.32.0/20 maxlen: 20
80.113.0.0/16 maxlen: 16
80.113.0.0/17 maxlen: 17
80.113.128.0/17 maxlen: 17
80.248.32.0/20 maxlen: 20
80.248.32.0/21 maxlen: 21
80.248.40.0/21 maxlen: 21
81.175.64.0/18 maxlen: 18
81.175.64.0/19 maxlen: 19
81.175.96.0/19 maxlen: 19
84.41.128.0/17 maxlen: 17
88.211.128.0/18 maxlen: 18
89.98.0.0/15 maxlen: 15
89.98.0.0/16 maxlen: 16
89.99.0.0/16 maxlen: 16
89.220.0.0/17 maxlen: 17
92.108.0.0/14 maxlen: 14
92.108.0.0/15 maxlen: 15
92.110.0.0/15 maxlen: 15
95.96.0.0/15 maxlen: 15
95.96.0.0/16 maxlen: 16
95.97.0.0/16 maxlen: 16
178.84.0.0/15 maxlen: 15
178.84.0.0/16 maxlen: 16
178.85.0.0/16 maxlen: 16
185.94.92.0/22 maxlen: 22
185.137.200.0/22 maxlen: 22
185.137.200.0/23 maxlen: 23
185.137.202.0/23 maxlen: 23
195.18.64.0/18 maxlen: 18
212.67.160.0/19 maxlen: 19
212.83.64.0/19 maxlen: 19
212.83.64.0/20 maxlen: 20
212.83.80.0/20 maxlen: 20
212.178.32.0/19 maxlen: 19
212.178.32.0/20 maxlen: 20
212.178.48.0/20 maxlen: 20
212.187.0.0/17 maxlen: 17
212.187.0.0/18 maxlen: 18
212.187.64.0/18 maxlen: 18
213.34.0.0/19 maxlen: 19
213.34.0.0/20 maxlen: 20
213.34.16.0/20 maxlen: 20
213.46.0.0/16 maxlen: 16
213.46.0.0/17 maxlen: 17
213.46.128.0/17 maxlen: 17
213.93.0.0/16 maxlen: 16
213.93.0.0/17 maxlen: 17
213.93.128.0/17 maxlen: 17
213.124.160.0/19 maxlen: 19
213.124.160.0/20 maxlen: 20
213.124.176.0/20 maxlen: 20
213.124.192.0/18 maxlen: 18
213.124.192.0/19 maxlen: 19
213.124.224.0/19 maxlen: 19
213.126.128.0/17 maxlen: 17
213.126.128.0/18 maxlen: 18
213.126.192.0/18 maxlen: 18
213.127.0.0/16 maxlen: 16
213.127.0.0/17 maxlen: 17
213.127.128.0/17 maxlen: 17
213.160.192.0/19 maxlen: 19
213.160.192.0/20 maxlen: 20
213.160.208.0/20 maxlen: 20
213.160.248.0/21 maxlen: 21
213.160.248.0/22 maxlen: 22
213.160.252.0/22 maxlen: 22
217.17.128.0/20 maxlen: 20
217.63.128.0/18 maxlen: 18
217.63.128.0/19 maxlen: 19
217.63.160.0/19 maxlen: 19
217.102.0.0/17 maxlen: 17
217.102.0.0/18 maxlen: 18
217.102.64.0/18 maxlen: 18
217.103.0.0/16 maxlen: 16
217.103.0.0/17 maxlen: 17
217.103.128.0/17 maxlen: 17
217.104.128.0/17 maxlen: 17
217.104.128.0/18 maxlen: 18
217.104.192.0/18 maxlen: 18
217.105.0.0/18 maxlen: 18
217.105.0.0/19 maxlen: 19
217.105.32.0/19 maxlen: 19
217.105.224.0/19 maxlen: 19
217.105.224.0/20 maxlen: 20
217.105.240.0/20 maxlen: 20
217.112.112.0/20 maxlen: 20
2a02:938::/29 maxlen: 29
2a02:a200::/27 maxlen: 27
2a02:a200::/28 maxlen: 28
2a02:a210::/28 maxlen: 28
2a03:4aa0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:19:22:d5:36:40:bd:7a:bb:c9:38:f9:32:8c:c0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Mar 13 12:08:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c616d46c725f5ae21c0b9f1afe696aa448108930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:f4:2b:29:fd:ff:1a:74:17:9f:04:9d:f4:
35:f2:5f:20:3f:09:43:9a:e0:54:86:81:74:56:79:
a8:bd:66:2c:18:f3:5b:b6:67:ca:41:27:4f:a7:96:
77:06:c5:a2:1f:f6:3b:42:6a:3d:a3:c8:35:19:fb:
1e:fe:37:73:d4:be:fa:18:a9:69:08:81:c9:c1:c7:
82:62:df:8b:de:89:f0:05:8c:7c:57:24:ba:ba:19:
d2:90:cd:21:fa:d5:5a:92:55:80:bd:1b:02:a1:d1:
e7:cd:c3:d9:72:37:f5:29:c7:b9:50:4d:4e:31:f6:
25:74:78:3f:46:89:8f:10:21:53:5c:8d:5f:9a:5a:
77:00:98:4a:7b:59:d4:b7:46:0c:fb:7e:f2:ef:72:
d5:42:a2:48:15:22:bc:29:cf:3f:f5:3a:05:60:f8:
df:7f:13:e6:fa:ed:e1:4d:0c:ed:ee:1b:df:42:f8:
e8:d9:e0:83:b3:9e:d9:b2:35:37:3b:89:60:a4:de:
44:82:83:13:27:fd:83:97:52:27:09:a1:3f:5d:e5:
35:ac:1a:dc:fa:e7:4d:3b:0d:b6:46:24:24:a0:a9:
8e:68:a3:84:9c:b2:a6:ba:7a:8d:d9:ab:e6:83:14:
93:1e:5e:1e:f0:1e:b3:5d:79:43:b3:3e:38:e2:ef:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:16:D4:6C:72:5F:5A:E2:1C:0B:9F:1A:FE:69:6A:A4:48:10:89:30
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/xhbUbHJfWuIcC58a_mlqpEgQiTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.132.0.0/16
31.151.0.0/16
46.129.0.0/16
62.100.0.0/18
62.108.0.0/19
62.163.0.0/16
62.194.0.0/15
77.248.0.0/14
80.56.0.0/15
80.85.32.0/20
80.113.0.0/16
80.248.32.0/20
81.175.64.0/18
84.41.128.0/17
88.211.128.0/18
89.98.0.0/15
89.220.0.0/17
92.108.0.0/14
95.96.0.0/15
178.84.0.0/15
185.94.92.0/22
185.137.200.0/22
195.18.64.0/18
212.67.160.0/19
212.83.64.0/19
212.178.32.0/19
212.187.0.0/17
213.34.0.0/19
213.46.0.0/16
213.93.0.0/16
213.124.160.0-213.124.255.255
213.126.128.0-213.127.255.255
213.160.192.0/19
213.160.248.0/21
217.17.128.0/20
217.63.128.0/18
217.102.0.0/17
217.103.0.0/16
217.104.128.0-217.105.63.255
217.105.224.0/19
217.112.112.0/20
IPv6:
2a02:938::/29
2a02:a200::/27
2a03:4aa0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:47:3c:c9:b4:2e:d6:27:b1:51:b8:5a:ce:7b:3e:d3:a2:5d:
76:c1:f4:d2:12:c0:a8:22:fa:6d:aa:bd:d2:2c:fc:34:ad:94:
13:8a:19:b5:60:2f:9b:2c:1f:25:44:a2:dd:22:ce:a9:6b:e4:
83:db:67:cc:d3:69:bd:ec:cc:b2:45:e3:10:ce:e7:a6:62:62:
c4:ac:ac:5e:30:21:17:a2:96:bb:2f:44:ae:0e:4b:0c:35:36:
3d:15:9c:17:1a:61:48:02:4c:c0:30:65:c4:15:3c:d1:0c:6b:
a0:b7:d5:52:36:9e:09:89:00:ce:ff:3a:b9:b3:8d:c8:d9:2a:
8f:93:04:af:55:22:9d:88:34:1b:b0:c8:b3:49:17:6f:8b:f4:
70:b3:99:5e:9d:b7:66:69:69:34:2b:f0:90:aa:cf:8f:6c:2c:
ff:b9:c3:35:37:e5:97:f9:e7:cd:62:e5:b6:5f:ef:52:b9:a7:
24:76:85:f5:85:6b:9a:3e:ff:ac:30:96:23:eb:d6:f2:86:0b:
95:36:7b:58:3e:56:36:04:ed:fd:a3:ec:72:7f:23:17:6e:5a:
51:91:35:4b:6a:68:92:8e:ec:d5:a0:85:ac:89:40:de:31:59:
dc:ce:b6:35:07:9a:7f:3f:1d:80:04:88:28:2f:50:2a:c9:d6:
09:e4:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:19 2026 by rpki-client