Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/z1mVxakT6RmXHyYd9lxAJiYvjwY.roa
File: z1mVxakT6RmXHyYd9lxAJiYvjwY.roa (raw, json)
Hash identifier: 45rutSVaZllg9+fPFLxe5PXqfATwp8srKfDgKgeoioY=
Subject key identifier: CF:59:95:C5:A9:13:E9:19:97:1F:26:1D:F6:5C:40:26:26:2F:8F:06
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019F654BF26E8FFEC0CD9BCA7C3A0FAA6BD5
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/z1mVxakT6RmXHyYd9lxAJiYvjwY.roa
Signing time: Wed 15 Jul 2026 10:21:43 +0000
ROA not before: Wed 15 Jul 2026 10:21:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200350
IP address blocks: 31.44.8.0/21 maxlen: 32
37.230.168.0/23 maxlen: 32
37.230.172.0/22 maxlen: 32
37.230.188.0/22 maxlen: 32
45.133.96.0/22 maxlen: 32
45.159.136.0/22 maxlen: 32
45.159.136.0/24 maxlen: 32
45.159.137.0/24 maxlen: 32
45.159.138.0/24 maxlen: 32
46.21.244.0/22 maxlen: 32
46.243.209.0/24 maxlen: 32
46.243.210.0/23 maxlen: 32
46.243.212.0/24 maxlen: 32
51.250.0.0/17 maxlen: 32
62.84.112.0/20 maxlen: 32
81.26.176.0/20 maxlen: 32
84.201.128.0/18 maxlen: 32
84.252.128.0/20 maxlen: 32
89.104.112.0/23 maxlen: 32
89.169.128.0/18 maxlen: 32
89.232.188.0/22 maxlen: 32
92.255.1.0/24 maxlen: 32
92.255.3.0/24 maxlen: 32
92.255.13.0/24 maxlen: 32
92.255.15.0/24 maxlen: 32
93.77.160.0/19 maxlen: 32
103.76.52.0/22 maxlen: 32
111.88.144.0/20 maxlen: 32
111.88.240.0/20 maxlen: 32
130.193.32.0/19 maxlen: 32
153.51.32.0/19 maxlen: 32
153.51.96.0/19 maxlen: 32
158.160.0.0/16 maxlen: 32
178.154.192.0/18 maxlen: 32
185.206.164.0/22 maxlen: 32
185.216.194.0/23 maxlen: 32
193.32.216.0/22 maxlen: 32
194.247.51.0/24 maxlen: 32
213.130.80.0/21 maxlen: 32
213.165.192.0/19 maxlen: 32
213.165.200.0/21 maxlen: 32
217.28.224.0/20 maxlen: 32
217.198.168.0/21 maxlen: 32
2a0d:d6c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:4b:f2:6e:8f:fe:c0:cd:9b:ca:7c:3a:0f:aa:6b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jul 15 10:21:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf5995c5a913e919971f261df65c4026262f8f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:95:54:0c:95:dc:68:51:41:e4:1e:6c:f7:
c6:ab:9d:48:36:21:6f:59:0b:3c:77:47:57:af:88:
ed:ba:58:eb:65:5a:ad:33:c3:84:62:e5:48:b9:33:
d6:1c:9c:58:4e:d9:1e:ce:79:0a:fb:c5:4b:34:8b:
71:e5:d9:9d:bb:e8:1b:4a:14:a7:4b:28:aa:5a:ba:
6f:dd:fa:74:4c:b0:1a:11:13:ab:9e:c1:75:2f:1f:
4f:a1:d2:a6:fa:9b:36:d3:f8:c0:64:77:4e:85:a7:
d2:29:0b:bd:51:54:d5:23:ed:6f:86:a0:ff:fe:3f:
18:3b:98:97:31:af:7e:40:e8:ac:67:ae:c5:ce:0c:
f9:94:09:4e:af:9d:0f:55:bd:ce:b8:bf:e9:0d:06:
d8:b0:6a:02:72:08:3e:22:2c:3a:e7:5e:2e:9c:a9:
f7:85:f1:6d:c3:91:3a:82:bc:7a:57:34:ae:2f:f3:
47:78:89:5c:c9:a9:d8:93:3e:7a:19:07:c3:80:9c:
5f:14:b6:3e:c0:1d:e5:45:21:4e:9e:15:17:7a:98:
49:df:bf:4e:f9:c5:bc:e3:5a:08:c9:1c:a9:5f:dd:
cf:8f:3f:6d:67:e2:cb:73:df:58:c0:88:56:8b:46:
2f:91:d4:d9:e8:4b:91:43:20:ca:dc:8a:6a:53:18:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:59:95:C5:A9:13:E9:19:97:1F:26:1D:F6:5C:40:26:26:2F:8F:06
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/z1mVxakT6RmXHyYd9lxAJiYvjwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.8.0/21
37.230.168.0/23
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
45.159.136.0/22
46.21.244.0/22
46.243.209.0-46.243.212.255
51.250.0.0/17
62.84.112.0/20
81.26.176.0/20
84.201.128.0/18
84.252.128.0/20
89.104.112.0/23
89.169.128.0/18
89.232.188.0/22
92.255.1.0/24
92.255.3.0/24
92.255.13.0/24
92.255.15.0/24
93.77.160.0/19
103.76.52.0/22
111.88.144.0/20
111.88.240.0/20
130.193.32.0/19
153.51.32.0/19
153.51.96.0/19
158.160.0.0/16
178.154.192.0/18
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
194.247.51.0/24
213.130.80.0/21
213.165.192.0/19
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:21:2d:d1:75:e9:61:52:a8:b7:4f:40:5b:1a:35:7b:4f:e1:
96:47:6a:f6:da:de:a6:d8:58:5f:c1:e9:27:d0:f8:4b:8d:d5:
e4:29:24:12:69:60:73:61:45:14:2a:d9:95:94:f2:90:3f:0d:
2e:3f:a8:b9:63:c3:41:4e:54:ba:5f:eb:d3:93:18:e5:05:ae:
e2:83:9c:b6:b7:cc:b6:83:f3:9b:7c:d2:6a:18:07:eb:28:61:
e4:ba:14:14:38:76:d6:39:57:27:26:2e:e3:08:30:9f:7e:dd:
b9:b3:95:a2:2f:0b:1e:e8:1c:83:f1:6f:8a:72:06:31:82:4d:
f5:e7:a6:07:2b:5f:86:49:38:d6:d4:5d:3c:63:84:5b:c6:5d:
b0:0a:e3:70:06:ab:37:d8:e0:58:73:8b:d5:23:2a:11:f7:e2:
12:41:7b:88:cf:52:a8:39:d7:48:a0:e6:b1:40:85:10:31:a9:
16:73:17:08:86:63:2f:71:b8:58:c4:3b:20:2c:1e:10:cb:38:
da:38:e5:e4:89:cb:77:6b:b9:68:c4:f4:aa:8b:cb:26:20:e5:
35:75:1a:a5:6d:69:89:b5:c9:c1:37:d8:a6:34:23:1c:90:66:
a5:29:e9:86:5d:83:de:04:ce:a1:17:b2:e9:13:1c:07:da:d2:
b6:f0:bb:d6
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAZ9lS/Juj/7AzZvKfDoPqmvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl
ZTQzYzAwHhcNMjYwNzE1MTAyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjU5OTVjNWE5MTNlOTE5OTcxZjI2MWRmNjVjNDAyNjI2MmY4ZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XaVVAyV3GhRQeQebPfGq51INiFv
WQs8d0dXr4jtuljrZVqtM8OEYuVIuTPWHJxYTtkeznkK+8VLNItx5dmdu+gbShSn
SyiqWrpv3fp0TLAaEROrnsF1Lx9PodKm+ps20/jAZHdOhafSKQu9UVTVI+1vhqD/
/j8YO5iXMa9+QOisZ67Fzgz5lAlOr50PVb3OuL/pDQbYsGoCcgg+Iiw6514unKn3
hfFtw5E6grx6VzSuL/NHeIlcyanYkz56GQfDgJxfFLY+wB3lRSFOnhUXephJ379O
+cW841oIyRypX93Pjz9tZ+LLc99YwIhWi0YvkdTZ6EuRQyDK3IpqUxiRYQIDAQAB
o4IC/jCCAvowHQYDVR0OBBYEFM9ZlcWpE+kZlx8mHfZcQCYmL48GMB8GA1UdIwQY
MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt
OWM4ZTU5YzI3NzFjLzEvejFtVnhha1Q2Um1YSHlZZDlseEFKaVl2andZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj
LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIHsBAIAATCB5QME
Ax8sCAMEASXmqAMEAiXmrAMEAiXmvAMEAi2FYAMEAi2fiAMEAi4V9DAMAwQALvPR
AwQALvPUAwQHM/oAAwQEPlRwAwQEURqwAwQGVMmAAwQEVPyAAwQBWWhwAwQGWamA
AwQCWei8AwQAXP8BAwQAXP8DAwQAXP8NAwQAXP8PAwQFXU2gAwQCZ0w0AwQEb1iQ
AwQEb1jwAwQFgsEgAwQFmTMgAwQFmTNgAwMAnqADBAaymsADBAK5zqQDBAG52MID
BALBINgDBADC9zMDBAPVglADBAXVpcADBATZHOADBAPZxqgwDQQCAAIwBwMFAyoN
1sAwDQYJKoZIhvcNAQELBQADggEBAGIhLdF16WFSqLdPQFsaNXtP4ZZHavba3qbY
WF/B6SfQ+EuN1eQpJBJpYHNhRRQq2ZWU8pA/DS4/qLljw0FOVLpf69OTGOUFruKD
nLa3zLaD85t80moYB+soYeS6FBQ4dtY5VycmLuMIMJ9+3bmzlaIvCx7oHIPxb4py
BjGCTfXnpgcrX4ZJONbUXTxjhFvGXbAK43AGqzfY4Fhzi9UjKhH34hJBe4jPUqg5
10ig5rFAhRAxqRZzFwiGYy9xuFjEOyAsHhDLONo45eSJy3druWjE9KqLyyYg5TV1
GqVtaYm1ycE32KY0IxyQZqUp6YZdg94EzqEXsukTHAfa0rbwu9Y=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:51:19 2026 by rpki-client