Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/cv4Cs8DaCPOEr7XZp50WAfCUcpg.roa
File: cv4Cs8DaCPOEr7XZp50WAfCUcpg.roa (raw, json)
Hash identifier: cs5Ky6akeTvG5KK7sDCjf8pbC4RQG38T4pA5RDdI7FM=
Subject key identifier: 72:FE:02:B3:C0:DA:08:F3:84:AF:B5:D9:A7:9D:16:01:F0:94:72:98
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019F22A0AFFBC2ED554C5B20E5040BCCA643
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/cv4Cs8DaCPOEr7XZp50WAfCUcpg.roa
Signing time: Thu 02 Jul 2026 11:39:43 +0000
ROA not before: Thu 02 Jul 2026 11:39:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 37.251.0.0/17 maxlen: 17
46.227.232.0/21 maxlen: 21
62.131.0.0/16 maxlen: 16
62.216.0.0/19 maxlen: 19
62.251.0.0/17 maxlen: 17
77.160.0.0/13 maxlen: 13
77.168.0.0/14 maxlen: 14
77.172.0.0/16 maxlen: 16
77.173.0.0/16 maxlen: 16
77.174.0.0/16 maxlen: 16
77.175.0.0/16 maxlen: 16
77.175.0.0/17 maxlen: 17
77.175.128.0/17 maxlen: 17
80.60.0.0/15 maxlen: 15
80.100.0.0/15 maxlen: 15
81.204.0.0/14 maxlen: 14
82.92.0.0/14 maxlen: 15
82.136.192.0/18 maxlen: 18
82.161.0.0/16 maxlen: 16
82.168.0.0/15 maxlen: 15
82.170.0.0/16 maxlen: 16
83.68.0.0/19 maxlen: 19
84.39.0.0/19 maxlen: 19
84.80.0.0/16 maxlen: 16
84.82.0.0/15 maxlen: 15
84.84.0.0/14 maxlen: 14
85.113.224.0/19 maxlen: 19
86.80.0.0/13 maxlen: 13
86.88.0.0/15 maxlen: 15
86.90.0.0/16 maxlen: 16
86.92.0.0/14 maxlen: 14
88.159.0.0/16 maxlen: 16
109.72.32.0/20 maxlen: 20
128.127.32.0/20 maxlen: 20
188.142.0.0/17 maxlen: 17
194.109.0.0/16 maxlen: 16
195.64.64.0/19 maxlen: 19
195.121.0.0/16 maxlen: 16
195.240.0.0/16 maxlen: 16
195.240.0.0/17 maxlen: 17
195.240.128.0/18 maxlen: 18
195.240.192.0/18 maxlen: 18
195.241.0.0/16 maxlen: 16
212.123.128.0/18 maxlen: 18
212.182.128.0/18 maxlen: 18
212.238.0.0/16 maxlen: 16
213.10.0.0/16 maxlen: 16
213.75.0.0/16 maxlen: 16
213.84.0.0/16 maxlen: 16
213.148.224.0/19 maxlen: 19
213.197.0.0/18 maxlen: 18
213.222.0.0/19 maxlen: 19
2001:888::/29 maxlen: 29
2001:980::/29 maxlen: 29
2a02:a400::/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:a0:af:fb:c2:ed:55:4c:5b:20:e5:04:0b:cc:a6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jul 2 11:39:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72fe02b3c0da08f384afb5d9a79d1601f0947298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:2e:92:1c:6d:af:43:63:69:15:e9:d2:3c:
20:11:fe:75:5e:d6:47:4e:71:07:39:d8:cf:13:cb:
15:3f:c8:ae:b3:3d:1d:fe:9d:af:9f:38:b7:e6:d2:
94:af:c8:32:de:f7:74:ed:22:7a:25:41:79:58:10:
62:05:60:54:b3:73:60:02:a1:87:45:e6:9d:53:22:
e6:47:95:c9:e4:0d:51:92:9d:38:ed:09:0f:4f:8f:
5b:71:7c:3a:ff:50:b7:8f:eb:f7:5c:09:b7:55:85:
5c:8d:15:c4:ee:61:0a:10:25:f9:99:b0:e1:97:4e:
44:03:2a:ac:fc:68:43:85:d5:e9:28:1c:83:38:58:
00:58:05:ae:35:72:94:f2:5f:81:aa:d0:7a:bf:45:
74:7d:49:02:36:1a:2a:b1:92:6d:de:92:be:d0:1b:
04:ca:41:47:56:9b:c8:91:2d:ac:ba:b8:9a:62:e0:
dc:38:d4:59:5e:0d:35:d3:cb:35:dd:d4:7e:77:2f:
37:4c:18:8f:19:11:2a:7a:25:1b:30:9b:a5:80:a9:
48:ae:40:45:a5:6f:f3:e2:13:1e:04:1b:99:ef:14:
d0:0f:dd:49:73:61:4f:2d:fa:65:d9:a1:a7:c2:f0:
f7:de:fc:a3:3a:2e:fb:13:52:09:3c:ef:10:79:2e:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FE:02:B3:C0:DA:08:F3:84:AF:B5:D9:A7:9D:16:01:F0:94:72:98
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/cv4Cs8DaCPOEr7XZp50WAfCUcpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.0.0/17
46.227.232.0/21
62.131.0.0/16
62.216.0.0/19
62.251.0.0/17
77.160.0.0/12
80.60.0.0/15
80.100.0.0/15
81.204.0.0/14
82.92.0.0/14
82.136.192.0/18
82.161.0.0/16
82.168.0.0-82.170.255.255
83.68.0.0/19
84.39.0.0/19
84.80.0.0/16
84.82.0.0-84.87.255.255
85.113.224.0/19
86.80.0.0-86.90.255.255
86.92.0.0/14
88.159.0.0/16
109.72.32.0/20
128.127.32.0/20
188.142.0.0/17
194.109.0.0/16
195.64.64.0/19
195.121.0.0/16
195.240.0.0/15
212.123.128.0/18
212.182.128.0/18
212.238.0.0/16
213.10.0.0/16
213.75.0.0/16
213.84.0.0/16
213.148.224.0/19
213.197.0.0/18
213.222.0.0/19
IPv6:
2001:888::/29
2001:980::/29
2a02:a400::/25
Signature Algorithm: sha256WithRSAEncryption
4f:c3:ac:f6:50:c6:99:25:fa:e6:03:5e:66:aa:1c:33:f1:5e:
c5:7b:e4:1f:cb:f2:53:10:a8:a6:eb:87:83:ce:81:4e:05:a0:
06:ee:d1:3c:ea:61:58:0d:34:7a:b2:c8:1c:bb:fe:73:1a:9a:
54:0f:c0:f0:a1:59:92:40:6d:d9:31:41:3c:f1:3f:0b:17:ed:
bd:b4:47:fe:ab:96:eb:fd:21:91:ae:6a:a2:2e:a5:61:d0:0a:
1e:3c:0c:04:8e:4e:98:99:87:d6:65:be:6a:d5:07:e9:18:24:
60:53:12:34:11:c1:fc:ac:d6:37:32:1e:74:14:27:ed:05:8e:
4b:19:19:a3:76:43:e3:5b:b5:fd:40:bb:6a:b5:75:e8:70:5b:
41:86:6b:cf:88:03:94:17:a5:94:8c:3e:32:83:a8:9f:91:28:
6c:8e:98:3a:b1:5b:77:0b:4c:1d:85:4f:f5:77:18:93:e2:9a:
79:4d:e8:51:50:1c:b5:29:ff:4a:54:93:34:6e:c1:3e:c9:db:
d0:a1:c5:fa:49:6a:19:3a:97:60:cb:f8:3a:7c:93:af:ff:15:
ce:6a:ad:28:d5:1d:fa:f2:a2:93:6b:da:f1:87:45:64:dd:18:
d5:6c:f0:46:c8:56:aa:09:89:ed:05:8f:96:ff:9d:a8:a2:86:
1f:ee:8d:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:14 2026 by rpki-client