Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/SInBdKPTOXk0wp91e_uLGwkZlPc.roa
File: SInBdKPTOXk0wp91e_uLGwkZlPc.roa (raw, json)
Hash identifier: mCWjzW4jA5/GkCROqCsHaTMu9Y+gjKYJmIB2cmxywcA=
Subject key identifier: 48:89:C1:74:A3:D3:39:79:34:C2:9F:75:7B:FB:8B:1B:09:19:94:F7
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 019F7EC87623C768BBC44BD9F19CEAC6D363
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/SInBdKPTOXk0wp91e_uLGwkZlPc.roa
Signing time: Mon 20 Jul 2026 09:08:14 +0000
ROA not before: Mon 20 Jul 2026 09:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6876
IP address blocks: 31.31.96.0/19 maxlen: 20
37.203.0.0/19 maxlen: 20
45.130.0.0/22 maxlen: 22
45.140.120.0/22 maxlen: 22
45.156.36.0/22 maxlen: 22
62.16.0.0/19 maxlen: 20
79.140.0.0/20 maxlen: 21
85.238.96.0/19 maxlen: 20
88.214.8.0/22 maxlen: 22
95.214.40.0/22 maxlen: 22
130.0.32.0/19 maxlen: 20
176.119.64.0/18 maxlen: 19
185.21.51.0/24 maxlen: 24
185.23.104.0/22 maxlen: 22
185.145.104.0/22 maxlen: 22
185.166.220.0/22 maxlen: 22
185.177.240.0/22 maxlen: 22
185.184.168.0/22 maxlen: 22
185.206.36.0/22 maxlen: 22
185.226.112.0/22 maxlen: 22
185.228.104.0/22 maxlen: 23
185.247.20.0/22 maxlen: 22
188.115.128.0/18 maxlen: 19
193.163.196.0/24 maxlen: 24
193.178.48.0/22 maxlen: 22
195.138.64.0/19 maxlen: 20
212.24.112.0/24 maxlen: 24
212.90.124.0/22 maxlen: 22
212.178.0.0/19 maxlen: 20
2a04:2c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:c8:76:23:c7:68:bb:c4:4b:d9:f1:9c:ea:c6:d3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Jul 20 09:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4889c174a3d3397934c29f757bfb8b1b091994f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:1d:9d:7b:38:92:71:64:93:33:3e:57:55:
0d:01:47:3d:8e:18:c6:07:16:37:95:ce:83:cc:98:
64:94:2e:76:85:e6:eb:3d:8c:db:a5:2c:5a:31:ad:
08:eb:e3:77:b8:67:90:f7:f1:2a:37:21:b3:9c:bb:
10:f3:31:8a:0f:bc:9d:0e:8f:eb:ff:bd:a4:a1:8f:
df:98:8a:8c:e9:cf:16:6e:32:9d:99:97:f3:60:b4:
ac:c9:3f:f4:67:b1:c8:93:81:53:f0:2c:e5:a0:18:
7f:e0:91:8e:b5:44:42:4d:c5:59:80:b8:2f:8b:be:
f1:52:e1:f3:94:8c:85:fc:1a:7a:e1:73:0d:d8:4b:
86:ee:58:c4:b4:e4:11:2e:7e:a7:11:86:f8:a3:6f:
6e:ef:ca:12:13:94:75:9d:1c:69:13:91:cf:ec:fe:
4a:fe:96:1f:d9:04:9e:a4:5c:ae:66:a0:2a:d1:30:
de:64:2b:10:f2:78:f1:b4:df:5b:50:38:f7:8d:ae:
db:91:2a:e6:2c:e5:cf:19:c9:d8:60:68:69:78:31:
be:71:57:2f:2f:e0:f9:ab:47:02:f8:50:d1:ca:0b:
78:35:25:84:b5:d9:2e:d1:09:8a:1d:10:52:f4:d7:
90:89:d4:80:c5:92:b8:5c:70:46:07:05:71:f1:50:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:C1:74:A3:D3:39:79:34:C2:9F:75:7B:FB:8B:1B:09:19:94:F7
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/SInBdKPTOXk0wp91e_uLGwkZlPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.96.0/19
37.203.0.0/19
45.130.0.0/22
45.140.120.0/22
45.156.36.0/22
62.16.0.0/19
79.140.0.0/20
85.238.96.0/19
88.214.8.0/22
95.214.40.0/22
130.0.32.0/19
176.119.64.0/18
185.21.51.0/24
185.23.104.0/22
185.145.104.0/22
185.166.220.0/22
185.177.240.0/22
185.184.168.0/22
185.206.36.0/22
185.226.112.0/22
185.228.104.0/22
185.247.20.0/22
188.115.128.0/18
193.163.196.0/24
193.178.48.0/22
195.138.64.0/19
212.24.112.0/24
212.90.124.0/22
212.178.0.0/19
IPv6:
2a04:2c00::/29
Signature Algorithm: sha256WithRSAEncryption
04:2f:73:9e:62:44:29:83:42:d7:aa:f3:91:8f:d9:40:e6:bc:
60:77:1e:4c:fa:fd:16:5d:6d:a7:57:99:fa:a9:22:eb:80:79:
d0:ef:93:c7:b1:3e:2a:54:27:72:91:72:c3:f4:56:9d:6e:4e:
54:b7:6f:0e:47:b8:a2:9f:1d:5b:32:64:4f:24:eb:3a:13:c4:
e6:20:b0:dc:6b:1f:e8:6b:12:fc:89:b0:59:e7:be:d6:3b:65:
4d:f0:fd:5e:b1:2a:08:35:a2:e1:68:f1:dc:16:78:25:85:4c:
3e:52:9d:2f:1c:cd:34:a0:76:a9:ab:88:45:3f:8e:c6:3b:66:
b2:45:35:4f:c3:4a:11:f8:42:4b:4c:63:1f:77:2e:b1:03:8d:
ed:fe:5f:bc:c5:41:0e:e8:f2:88:cb:1d:60:77:2d:ae:28:30:
a1:2b:12:4f:93:1f:23:48:f8:06:c1:df:b4:b6:86:97:a1:f7:
94:58:45:29:c6:e5:a8:06:1c:d4:94:4b:81:fe:b2:82:df:68:
df:26:99:70:df:70:29:97:14:35:e7:9a:98:45:e9:d8:99:08:
2a:95:97:02:65:87:00:14:15:82:29:d2:a5:79:e9:aa:ab:31:
1e:67:bf:a1:41:13:6f:6f:18:5f:6b:fc:a7:ea:04:08:1b:4b:
4a:08:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:43 2026 by rpki-client