Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/2daq-4BIuiR37wuIB2bR3muYTb4.roa
File: 2daq-4BIuiR37wuIB2bR3muYTb4.roa (raw, json)
Hash identifier: pGm9rXTpFTAtVuzbFiDH7vsn9sRBlhuM7O7WmqIWJBc=
Subject key identifier: D9:D6:AA:FB:80:48:BA:24:77:EF:0B:88:07:66:D1:DE:6B:98:4D:BE
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019F8B9E493C9CA4D45FCB7E453A2F9C3B76
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/2daq-4BIuiR37wuIB2bR3muYTb4.roa
Signing time: Wed 22 Jul 2026 20:57:14 +0000
ROA not before: Wed 22 Jul 2026 20:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16003
IP address blocks: 31.172.74.0/24 maxlen: 32
31.172.78.0/24 maxlen: 32
79.132.137.0/24 maxlen: 24
79.132.139.0/24 maxlen: 24
81.85.76.0/24 maxlen: 24
89.127.195.0/24 maxlen: 24
89.127.202.0/24 maxlen: 24
89.127.205.0/24 maxlen: 24
89.127.206.0/24 maxlen: 24
89.127.211.0/24 maxlen: 24
89.127.214.0/24 maxlen: 24
89.127.216.0/24 maxlen: 24
89.127.219.0/24 maxlen: 24
89.127.221.0/24 maxlen: 24
89.127.223.0/24 maxlen: 24
103.75.125.0/24 maxlen: 24
103.75.126.0/24 maxlen: 32
130.17.5.0/24 maxlen: 24
130.17.7.0/24 maxlen: 24
130.17.9.0/24 maxlen: 24
130.17.18.0/24 maxlen: 32
130.17.19.0/24 maxlen: 32
162.248.161.0/24 maxlen: 24
185.18.52.0/22 maxlen: 22
185.18.52.0/24 maxlen: 24
185.21.9.0/24 maxlen: 24
185.21.10.0/24 maxlen: 24
194.154.26.0/24 maxlen: 24
213.193.199.0/24 maxlen: 32
213.239.157.0/24 maxlen: 24
213.239.159.0/24 maxlen: 24
217.177.11.0/24 maxlen: 24
217.177.73.0/24 maxlen: 24
217.194.148.0/24 maxlen: 24
2a02:6b40:8002::/48 maxlen: 48
2a02:6b40:8003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:9e:49:3c:9c:a4:d4:5f:cb:7e:45:3a:2f:9c:3b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jul 22 20:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9d6aafb8048ba2477ef0b880766d1de6b984dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:27:d2:b6:2c:10:e7:3b:e8:82:cf:77:fd:
38:8b:06:92:3a:46:89:ef:66:28:29:5a:f0:89:92:
9d:43:be:6d:4d:92:c2:3d:1f:21:af:0c:63:85:a9:
5a:d7:be:57:43:12:7e:77:e3:e5:8e:d4:55:af:f2:
b0:79:fe:52:5b:96:f1:1c:0e:3e:06:58:c2:f1:08:
f3:06:76:71:02:74:20:66:9d:e7:c0:40:a0:5a:6b:
e8:68:b6:4b:e5:98:d6:98:98:e0:42:f6:71:3c:f2:
53:ad:f3:17:ee:85:ea:81:60:ed:d3:b5:0d:d2:b8:
4b:3b:8b:1a:a3:fd:07:f4:f9:3d:82:a5:7a:fe:9d:
a8:94:d2:7d:ab:b0:eb:20:f2:6f:48:90:4a:aa:c7:
e1:87:34:6e:38:89:de:f7:8a:7b:20:66:c2:ab:d7:
12:eb:5c:48:7c:74:86:0a:82:dd:ef:e8:6d:3c:45:
f4:2a:81:62:85:e9:2d:73:df:24:dd:2c:be:40:09:
2f:ab:d8:91:dd:76:27:61:a9:9b:03:a8:04:71:0a:
45:cc:24:93:b0:97:e3:07:ff:27:4a:36:4e:b4:8a:
85:46:73:94:f7:05:41:81:e8:03:91:6d:e2:25:54:
1d:3b:12:d5:3e:2b:d0:b5:d7:d3:9d:1f:24:bd:a1:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D6:AA:FB:80:48:BA:24:77:EF:0B:88:07:66:D1:DE:6B:98:4D:BE
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/2daq-4BIuiR37wuIB2bR3muYTb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.74.0/24
31.172.78.0/24
79.132.137.0/24
79.132.139.0/24
81.85.76.0/24
89.127.195.0/24
89.127.202.0/24
89.127.205.0-89.127.206.255
89.127.211.0/24
89.127.214.0/24
89.127.216.0/24
89.127.219.0/24
89.127.221.0/24
89.127.223.0/24
103.75.125.0-103.75.126.255
130.17.5.0/24
130.17.7.0/24
130.17.9.0/24
130.17.18.0/23
162.248.161.0/24
185.18.52.0/22
185.21.9.0-185.21.10.255
194.154.26.0/24
213.193.199.0/24
213.239.157.0/24
213.239.159.0/24
217.177.11.0/24
217.177.73.0/24
217.194.148.0/24
IPv6:
2a02:6b40:8002::/47
Signature Algorithm: sha256WithRSAEncryption
25:8e:ef:a6:8d:41:1f:9a:e3:7e:7e:74:dd:4e:75:7a:f0:91:
c1:88:fc:c8:25:a1:f7:c2:7f:a6:b0:a8:ec:43:34:4c:2b:f2:
58:a6:92:0b:01:07:af:1e:7f:ff:91:d0:a1:07:07:35:29:52:
99:d3:a4:24:5f:a6:6c:e1:1b:b4:fc:c3:05:eb:97:f6:7e:6e:
8a:0d:8e:a9:8e:37:77:6a:9a:a1:02:08:98:66:56:46:7c:9a:
41:2a:ee:d5:86:a3:32:a6:be:69:7d:9c:62:dd:2e:35:ef:be:
62:2f:5a:21:49:be:58:05:f6:6b:32:16:6d:5c:8d:dc:4b:2f:
3f:fb:b7:06:9f:77:2f:57:53:f5:a8:07:69:e9:77:e8:90:e8:
e8:62:b2:49:10:83:25:1e:60:12:90:97:f3:d7:1b:d5:77:9c:
db:f3:aa:b1:2d:96:5a:fa:12:e6:b1:1f:14:55:d3:e5:4e:6f:
79:24:ab:99:d3:9d:66:61:04:56:99:5f:d3:2e:ed:85:50:84:
5b:08:60:f5:e0:94:e1:ea:7f:98:89:42:a5:54:1a:34:7d:c1:
8f:16:ed:99:6a:4d:64:86:71:5c:b7:00:f5:fc:8c:5c:82:95:
cf:f7:fa:8e:c1:59:c5:70:a5:3d:c0:1d:ba:f2:23:64:7c:17:
ee:7e:3a:79
-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgISAZ+Lnkk8nKTUX8t+RTovnDt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYwNzIyMjA1NzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWQ2YWFmYjgwNDhiYTI0NzdlZjBiODgwNzY2ZDFkZTZiOTg0ZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsAn0rYsEOc76ILPd/04iwaSOkaJ
72YoKVrwiZKdQ75tTZLCPR8hrwxjhala175XQxJ+d+PljtRVr/Kwef5SW5bxHA4+
BljC8QjzBnZxAnQgZp3nwECgWmvoaLZL5ZjWmJjgQvZxPPJTrfMX7oXqgWDt07UN
0rhLO4sao/0H9Pk9gqV6/p2olNJ9q7DrIPJvSJBKqsfhhzRuOIne94p7IGbCq9cS
61xIfHSGCoLd7+htPEX0KoFihektc98k3Sy+QAkvq9iR3XYnYambA6gEcQpFzCST
sJfjB/8nSjZOtIqFRnOU9wVBgegDkW3iJVQdOxLVPivQtdfTnR8kvaF3mQIDAQAB
o4IC3zCCAtswHQYDVR0OBBYEFNnWqvuASLokd+8LiAdm0d5rmE2+MB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvMmRhcS00Qkl1aVIzN3d1SUIyYlIzbXVZVGI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH0BggrBgEFBQcBBwEB/wSB5DCB4TCBzQQCAAEwgcYDBAAf
rEoDBAAfrE4DBABPhIkDBABPhIsDBABRVUwDBABZf8MDBABZf8owDAMEAFl/zQME
AFl/zgMEAFl/0wMEAFl/1gMEAFl/2AMEAFl/2wMEAFl/3QMEAFl/3zAMAwQAZ0t9
AwQAZ0t+AwQAghEFAwQAghEHAwQAghEJAwQBghESAwQAovihAwQCuRI0MAwDBAC5
FQkDBAC5FQoDBADCmhoDBADVwccDBADV750DBADV758DBADZsQsDBADZsUkDBADZ
wpQwDwQCAAIwCQMHASoCa0CAAjANBgkqhkiG9w0BAQsFAAOCAQEAJY7vpo1BH5rj
fn503U51evCRwYj8yCWh98J/prCo7EM0TCvyWKaSCwEHrx5//5HQoQcHNSlSmdOk
JF+mbOEbtPzDBeuX9n5uig2OqY43d2qaoQIImGZWRnyaQSru1YajMqa+aX2cYt0u
Ne++Yi9aIUm+WAX2azIWbVyN3EsvP/u3Bp93L1dT9agHael36JDo6GKySRCDJR5g
EpCX89cb1Xec2/OqsS2WWvoS5rEfFFXT5U5veSSrmdOdZmEEVplf0y7thVCEWwhg
9eCU4ep/mIlCpVQaNH3BjxbtmWpNZIZxXLcA9fyMXIKVz/f6jsFZxXClPcAduvIj
ZHwX7n46eQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:34 2026 by rpki-client