Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/sgSvFZT7cMQ6O7meaSYCsiAvpIQ.roa
File: sgSvFZT7cMQ6O7meaSYCsiAvpIQ.roa (raw, json)
Hash identifier: b1OuAlU0+cSQfcjeLb3gpe1ABMzAcbi57g2ciFKHZfA=
Subject key identifier: B2:04:AF:15:94:FB:70:C4:3A:3B:B9:9E:69:26:02:B2:20:2F:A4:84
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019ED08A7AAB08DE7939B6B31D7A739708F8
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/sgSvFZT7cMQ6O7meaSYCsiAvpIQ.roa
Signing time: Tue 16 Jun 2026 13:06:36 +0000
ROA not before: Tue 16 Jun 2026 13:06:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48715
IP address blocks: 78.110.120.0/22 maxlen: 24
80.71.149.0/24 maxlen: 24
80.249.114.0/24 maxlen: 24
88.135.36.0/22 maxlen: 22
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
91.247.171.0/24 maxlen: 24
130.193.77.0/24 maxlen: 24
152.89.44.0/22 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.36.228.0/24 maxlen: 24
185.51.200.0/22 maxlen: 22
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.58.240.0/22 maxlen: 24
185.112.149.0/24 maxlen: 24
185.112.150.0/23 maxlen: 23
185.112.150.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.121.130.0/23 maxlen: 23
185.121.130.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.128.136.0/22 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.141.104.0/22 maxlen: 22
185.141.104.0/24 maxlen: 24
185.141.105.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.141.107.0/24 maxlen: 24
185.141.132.0/22 maxlen: 22
185.141.132.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.170.8.0/24 maxlen: 24
185.173.129.0/24 maxlen: 24
185.173.130.0/24 maxlen: 24
185.206.231.0/24 maxlen: 24
185.213.195.0/24 maxlen: 24
185.234.14.0/24 maxlen: 24
185.235.245.0/24 maxlen: 24
185.252.200.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
188.209.152.0/24 maxlen: 24
188.209.153.0/24 maxlen: 24
195.110.38.0/23 maxlen: 23
195.211.44.0/22 maxlen: 22
195.211.44.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
195.211.47.0/24 maxlen: 24
213.109.199.0/24 maxlen: 24
2a0a:5e80::/29 maxlen: 29
2a0a:5e80::/48 maxlen: 48
2a0a:5e80::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:8a:7a:ab:08:de:79:39:b6:b3:1d:7a:73:97:08:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jun 16 13:06:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b204af1594fb70c43a3bb99e692602b2202fa484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:29:d4:94:85:1d:09:c6:6e:bd:d6:5e:68:
3f:27:19:cc:3c:85:7c:9a:af:b0:db:29:cb:16:2c:
a2:5e:e5:5b:2e:d2:c6:1e:18:7a:51:0d:ad:89:33:
13:cb:09:c3:8d:89:be:93:51:d0:53:ad:b7:0f:58:
cb:3a:a8:de:22:06:61:cd:c0:49:0d:32:3f:d8:68:
9c:59:00:5b:9d:af:79:9b:07:00:bc:ea:d0:aa:6f:
4b:ae:3e:6f:d4:a1:2a:7d:8f:94:ec:73:d6:58:a3:
ec:bd:f5:9a:3e:0d:a0:cf:c1:c1:92:df:66:54:9b:
0b:06:3c:4e:a8:7d:f2:0c:66:e7:d6:e8:c0:67:c4:
af:61:d6:20:f3:3f:8a:27:7d:e8:10:6a:6b:30:f5:
34:b5:9a:0b:e1:b1:f4:ae:38:27:07:f6:e4:68:b4:
d9:04:dd:f3:4a:d6:31:ba:8e:b5:cc:8d:3b:99:5b:
27:8c:fd:09:1b:a3:bf:ef:7e:50:f5:a5:26:c9:50:
3b:10:f1:42:46:fa:c8:99:5c:4c:e9:bd:0a:4c:17:
4b:94:c5:65:ab:ad:42:7f:1a:54:ef:32:fa:e7:62:
b8:b6:c2:8e:16:3b:99:da:05:3f:23:17:0d:99:4b:
b7:a2:2a:5c:b5:10:27:5c:26:dd:77:fa:b1:83:0a:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:04:AF:15:94:FB:70:C4:3A:3B:B9:9E:69:26:02:B2:20:2F:A4:84
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/sgSvFZT7cMQ6O7meaSYCsiAvpIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.120.0/22
80.71.149.0/24
80.249.114.0/24
88.135.36.0/22
91.236.168.0/23
91.247.171.0/24
130.193.77.0/24
152.89.44.0/22
185.18.212.0/22
185.36.228.0/24
185.51.200.0/22
185.58.240.0/22
185.112.149.0-185.112.151.255
185.121.130.0/23
185.128.136.0/22
185.141.104.0/22
185.141.132.0/22
185.170.8.0/24
185.173.129.0-185.173.130.255
185.206.231.0/24
185.213.195.0/24
185.234.14.0/24
185.235.245.0/24
185.252.200.0/24
188.209.152.0/23
195.110.38.0/23
195.211.44.0/22
213.109.199.0/24
IPv6:
2a0a:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
44:dd:85:a5:8c:cd:d6:bc:4c:c5:4f:da:c6:de:26:b9:71:9c:
05:8b:5b:81:45:47:d5:9e:b6:da:9a:72:7d:45:25:0c:db:39:
01:68:ff:70:c6:75:c6:e2:60:da:6b:b3:3f:3b:a7:b8:7d:6b:
01:fb:d0:bc:af:85:cf:3a:ff:85:9a:74:6f:b0:54:6d:d0:63:
fd:aa:2a:6e:be:3b:63:85:41:5d:8f:8f:33:72:42:a8:db:40:
8b:60:75:f8:89:3d:34:d3:bf:a0:97:c8:1c:f8:8e:24:b2:1c:
46:38:fd:31:bd:a7:60:85:f2:f9:9b:34:3e:6c:50:30:31:5d:
20:f9:a6:3a:aa:2b:20:97:a5:b4:19:d0:52:a2:51:99:f8:7a:
1c:73:23:b5:34:0c:18:72:14:76:98:f1:b6:03:15:30:64:a7:
97:6e:de:bd:6e:dc:11:14:ae:66:8f:67:06:54:7c:b2:39:19:
50:0d:70:9c:e3:88:b4:6a:94:6f:cf:68:99:40:dd:bc:e5:b6:
85:05:76:9d:0e:35:5e:d4:0a:60:59:5a:65:b5:f7:af:4d:a0:
6e:fb:18:ad:72:d7:a1:4d:86:1d:bb:83:80:0b:e6:68:7a:b4:
f6:98:8c:b5:99:01:39:97:f8:4b:25:a6:85:a9:e3:ff:c8:2e:
de:e9:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:08 2026 by rpki-client