Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/ANEEmBZB5WpO2fGbBX39O6VZa64.roa
File: ANEEmBZB5WpO2fGbBX39O6VZa64.roa (raw, json)
Hash identifier: X0b8Rqf2KqgwdgXm6y/7Ts5gnbsPkdwfUsOSvkfm9fU=
Subject key identifier: 00:D1:04:98:16:41:E5:6A:4E:D9:F1:9B:05:7D:FD:3B:A5:59:6B:AE
Certificate issuer: /CN=d75e5d507257475f7281230654b39870fa4969dc
Certificate serial: 019F2368A4407731E27DA2B681B75DAB5E75
Authority key identifier: D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/ANEEmBZB5WpO2fGbBX39O6VZa64.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25255
IP address blocks: 46.220.0.0/16 maxlen: 16
77.116.0.0/14 maxlen: 14
77.116.0.0/17 maxlen: 17
77.116.128.0/17 maxlen: 17
77.117.0.0/17 maxlen: 17
77.119.16.0/20 maxlen: 20
77.119.128.0/20 maxlen: 20
77.119.128.0/22 maxlen: 22
77.119.160.0/20 maxlen: 20
77.119.176.0/20 maxlen: 20
77.119.192.0/19 maxlen: 19
77.119.224.0/19 maxlen: 19
81.3.192.0/18 maxlen: 18
81.3.192.0/24 maxlen: 24
81.3.201.0/24 maxlen: 24
81.3.204.0/23 maxlen: 23
81.3.206.0/23 maxlen: 23
81.3.210.0/24 maxlen: 24
81.3.211.0/24 maxlen: 24
91.141.0.0/17 maxlen: 17
91.141.0.0/20 maxlen: 20
91.141.0.0/22 maxlen: 22
91.141.32.0/19 maxlen: 19
91.141.64.0/20 maxlen: 20
91.141.96.0/20 maxlen: 20
91.141.112.0/20 maxlen: 20
94.245.192.0/18 maxlen: 18
94.245.192.0/24 maxlen: 24
109.126.64.0/18 maxlen: 18
178.112.0.0/14 maxlen: 14
178.112.0.0/17 maxlen: 17
178.112.128.0/17 maxlen: 17
178.113.0.0/17 maxlen: 17
178.115.32.0/19 maxlen: 19
178.115.64.0/20 maxlen: 20
178.115.80.0/20 maxlen: 20
178.115.128.0/20 maxlen: 20
178.115.128.0/22 maxlen: 22
178.115.144.0/20 maxlen: 20
178.115.224.0/19 maxlen: 19
178.165.128.0/17 maxlen: 17
178.165.128.0/20 maxlen: 20
178.165.128.0/22 maxlen: 22
178.165.160.0/19 maxlen: 19
178.165.192.0/20 maxlen: 20
178.165.224.0/20 maxlen: 20
178.165.240.0/20 maxlen: 20
194.24.128.0/19 maxlen: 19
194.24.158.0/24 maxlen: 24
194.24.159.0/24 maxlen: 24
213.94.64.0/18 maxlen: 18
213.94.64.0/21 maxlen: 21
213.94.76.0/24 maxlen: 24
213.94.77.0/24 maxlen: 24
213.94.78.0/24 maxlen: 24
213.94.79.0/24 maxlen: 24
213.94.80.0/22 maxlen: 22
213.94.95.0/24 maxlen: 24
213.94.96.0/21 maxlen: 21
2a02:2861::/32 maxlen: 32
2a02:2861:d::/48 maxlen: 48
2a02:2861:e::/48 maxlen: 48
2a02:2864::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.mft
rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a4:40:77:31:e2:7d:a2:b6:81:b7:5d:ab:5e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75e5d507257475f7281230654b39870fa4969dc
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00d104981641e56a4ed9f19b057dfd3ba5596bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:cd:16:3c:31:25:6a:26:46:26:3c:92:ed:
1a:5b:e2:85:03:6a:e7:4d:b6:2a:5c:8f:85:ac:16:
27:b2:3d:de:dc:0d:71:87:83:af:e2:39:e2:0d:9f:
7d:6b:a1:b9:27:ec:b2:e0:74:a9:67:1b:ca:7a:4c:
60:46:e4:35:bb:68:75:86:fc:ed:6d:41:d9:b3:f1:
dc:f7:84:70:8a:e8:ee:6d:14:a4:52:e0:be:16:f3:
52:3f:c5:4e:9e:1e:a8:a2:cc:30:7c:d6:14:92:ef:
3d:52:1b:df:f9:cf:f9:25:d7:3e:b6:d5:9c:00:00:
72:cb:c0:e4:7f:5d:30:4e:fe:d1:0d:f3:75:b5:33:
46:f2:aa:ac:75:53:9b:43:6e:65:b0:bf:37:55:7c:
89:bd:8b:be:e2:e9:e0:24:81:af:59:40:a3:ee:94:
49:0c:1b:df:45:7c:83:5f:77:c6:37:b1:0d:a8:5e:
fa:28:dc:c2:24:29:04:d1:2e:e2:5e:2e:3a:4f:cb:
a2:73:85:03:2d:f1:54:f9:b6:c2:7b:34:31:f7:07:
e1:8a:e0:ef:f8:c2:70:8d:5c:3b:cb:81:d3:f3:01:
42:bc:bb:2d:6d:29:53:23:b2:7f:7d:53:98:9a:bc:
82:3a:4f:b6:09:91:62:da:6a:86:12:a5:c7:a1:db:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D1:04:98:16:41:E5:6A:4E:D9:F1:9B:05:7D:FD:3B:A5:59:6B:AE
X509v3 Authority Key Identifier:
keyid:D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/ANEEmBZB5WpO2fGbBX39O6VZa64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.220.0.0/16
77.116.0.0/14
81.3.192.0/18
91.141.0.0/17
94.245.192.0/18
109.126.64.0/18
178.112.0.0/14
178.165.128.0/17
194.24.128.0/19
213.94.64.0/18
IPv6:
2a02:2861::/32
2a02:2864::/30
Signature Algorithm: sha256WithRSAEncryption
cc:41:a4:49:cf:3d:d2:1c:c4:d7:cd:4d:8c:70:4e:e3:47:6d:
06:17:8a:d2:83:df:e3:50:2c:ad:c6:71:a1:8e:27:ee:e0:85:
f4:18:48:73:5c:c9:b9:c6:fd:a4:92:4b:bb:3b:b2:fc:2c:29:
c4:5f:20:65:1f:84:01:78:bc:88:01:2c:03:55:84:fc:27:02:
74:36:1c:49:cd:d8:bb:3d:63:27:0b:06:85:2d:3b:ce:03:9b:
67:2f:89:c3:44:7b:9a:90:55:63:90:3c:c9:fb:f7:d5:cd:63:
f2:60:e6:4a:67:e5:2f:92:a7:01:78:52:c4:bb:90:82:9d:0a:
11:49:38:46:42:ef:ca:ba:2a:44:df:04:15:6c:89:9b:f3:ed:
fb:9f:a4:77:87:23:74:ad:89:4f:c8:8c:8b:8f:9c:54:7b:d2:
37:eb:75:dc:34:34:1c:12:3e:5a:04:1e:40:5b:92:69:df:76:
34:99:47:34:57:67:b8:88:6b:58:60:34:4a:03:e0:6c:7d:9a:
30:06:9f:ca:ab:21:97:3e:30:4a:cd:99:0b:90:6e:01:40:eb:
ad:9a:df:7b:82:a5:8c:80:4c:8b:16:87:d6:d6:b7:54:54:4b:
7a:af:03:20:46:b8:2d:d6:ee:e5:53:ac:44:da:32:0b:7a:d8:
2b:67:3d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:27 2026 by rpki-client