Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/RictIJiNm4HzaxWWQLcjKNm8Z6Q.roa
File: RictIJiNm4HzaxWWQLcjKNm8Z6Q.roa (raw, json)
Hash identifier: l4b8O+8M+F7DVW9vUX2gSDdyeznYSEcBhU7LYVawSRg=
Subject key identifier: 46:27:2D:20:98:8D:9B:81:F3:6B:15:96:40:B7:23:28:D9:BC:67:A4
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019F8B9B8A3ED2E17296A672517FF3C0DE1A
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/RictIJiNm4HzaxWWQLcjKNm8Z6Q.roa
Signing time: Wed 22 Jul 2026 20:54:14 +0000
ROA not before: Wed 22 Jul 2026 20:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44051
IP address blocks: 2.58.64.0/24 maxlen: 24
2.58.65.0/24 maxlen: 32
2.58.66.0/24 maxlen: 24
2.58.67.0/24 maxlen: 24
5.187.0.0/24 maxlen: 24
5.187.1.0/24 maxlen: 24
5.187.2.0/24 maxlen: 24
5.187.3.0/24 maxlen: 24
5.187.4.0/24 maxlen: 24
5.187.5.0/24 maxlen: 24
5.187.6.0/24 maxlen: 24
5.187.7.0/24 maxlen: 24
31.172.68.0/24 maxlen: 24
31.172.70.0/24 maxlen: 32
31.172.71.0/24 maxlen: 24
31.172.72.0/24 maxlen: 24
31.172.73.0/24 maxlen: 24
31.172.75.0/24 maxlen: 24
31.172.77.0/24 maxlen: 32
79.132.136.0/24 maxlen: 24
79.132.138.0/24 maxlen: 24
79.132.140.0/24 maxlen: 24
79.132.142.0/24 maxlen: 32
79.132.143.0/24 maxlen: 32
89.127.192.0/24 maxlen: 24
89.127.194.0/24 maxlen: 24
89.127.198.0/24 maxlen: 24
89.127.200.0/24 maxlen: 24
89.127.203.0/24 maxlen: 24
89.127.208.0/24 maxlen: 24
89.127.210.0/24 maxlen: 24
89.127.213.0/24 maxlen: 32
89.127.215.0/24 maxlen: 24
89.127.218.0/24 maxlen: 24
89.127.220.0/24 maxlen: 32
91.228.152.0/22 maxlen: 22
91.228.152.0/24 maxlen: 24
91.228.153.0/24 maxlen: 24
91.228.154.0/24 maxlen: 24
91.228.155.0/24 maxlen: 32
103.75.124.0/24 maxlen: 24
103.75.127.0/24 maxlen: 24
103.228.168.0/24 maxlen: 24
103.228.169.0/24 maxlen: 24
103.228.170.0/24 maxlen: 24
103.228.171.0/24 maxlen: 24
130.17.0.0/24 maxlen: 24
130.17.4.0/24 maxlen: 24
130.17.6.0/24 maxlen: 24
130.17.10.0/24 maxlen: 24
130.17.12.0/24 maxlen: 24
130.17.13.0/24 maxlen: 32
130.17.15.0/24 maxlen: 32
130.17.17.0/24 maxlen: 32
130.17.20.0/24 maxlen: 32
130.17.21.0/24 maxlen: 32
162.248.160.0/24 maxlen: 24
162.248.164.0/24 maxlen: 32
162.248.165.0/24 maxlen: 24
162.248.166.0/24 maxlen: 24
162.248.167.0/24 maxlen: 32
185.21.8.0/24 maxlen: 32
185.44.206.0/24 maxlen: 24
185.44.207.0/24 maxlen: 24
194.154.24.0/24 maxlen: 32
194.154.30.0/24 maxlen: 24
195.26.237.0/24 maxlen: 32
212.2.234.0/24 maxlen: 24
212.2.235.0/24 maxlen: 24
213.193.196.0/24 maxlen: 32
213.239.156.0/24 maxlen: 24
217.177.10.0/24 maxlen: 24
217.177.72.0/24 maxlen: 32
2a02:6b40::/32 maxlen: 32
2a02:6b40::/48 maxlen: 48
2a02:6b40:1::/48 maxlen: 48
2a02:6b40:1000::/48 maxlen: 48
2a02:6b40:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:9b:8a:3e:d2:e1:72:96:a6:72:51:7f:f3:c0:de:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jul 22 20:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46272d20988d9b81f36b159640b72328d9bc67a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:10:0d:77:49:73:ec:9a:73:35:89:14:b4:
30:a9:34:71:0c:45:49:bb:67:47:d6:2c:0d:fb:30:
a6:2d:0e:31:25:36:04:50:a9:71:fe:bf:d6:ea:0f:
bc:9d:11:ba:72:3b:b7:f9:2a:8b:92:17:42:44:31:
34:f6:38:1f:cb:6a:84:35:35:f4:6f:b4:03:3d:f1:
60:c1:7f:1f:3b:dd:65:15:7b:0f:0c:23:02:a8:89:
e0:f9:80:2f:27:91:3c:67:05:87:19:9c:51:52:16:
45:c4:50:60:de:5b:3b:00:7f:21:66:5e:ae:9a:10:
59:d4:8d:d8:b8:a5:d0:04:79:cd:ce:b8:3d:7b:86:
37:39:6d:8f:c1:13:56:a9:82:39:84:fe:ad:a7:dc:
81:12:7f:7e:9a:fa:1e:4d:ae:23:70:65:a8:38:1a:
1b:e0:22:63:5c:e4:4a:c6:e5:ac:8a:02:b0:9a:52:
c8:b7:8b:cc:6d:ed:69:e2:d4:88:cb:81:25:a6:2c:
a5:97:22:b4:05:54:a3:63:cb:47:b0:6e:91:60:53:
9b:7c:3b:96:74:44:b4:c0:a8:8c:d3:7c:cb:c1:1e:
d6:08:e8:ac:7c:ca:77:e8:f8:a2:f5:6e:61:19:07:
03:1d:de:6f:f7:ae:94:28:04:78:e8:d9:a1:5e:b9:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:27:2D:20:98:8D:9B:81:F3:6B:15:96:40:B7:23:28:D9:BC:67:A4
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/RictIJiNm4HzaxWWQLcjKNm8Z6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.64.0/22
5.187.0.0/21
31.172.68.0/24
31.172.70.0-31.172.73.255
31.172.75.0/24
31.172.77.0/24
79.132.136.0/24
79.132.138.0/24
79.132.140.0/24
79.132.142.0/23
89.127.192.0/24
89.127.194.0/24
89.127.198.0/24
89.127.200.0/24
89.127.203.0/24
89.127.208.0/24
89.127.210.0/24
89.127.213.0/24
89.127.215.0/24
89.127.218.0/24
89.127.220.0/24
91.228.152.0/22
103.75.124.0/24
103.75.127.0/24
103.228.168.0/22
130.17.0.0/24
130.17.4.0/24
130.17.6.0/24
130.17.10.0/24
130.17.12.0/23
130.17.15.0/24
130.17.17.0/24
130.17.20.0/23
162.248.160.0/24
162.248.164.0/22
185.21.8.0/24
185.44.206.0/23
194.154.24.0/24
194.154.30.0/24
195.26.237.0/24
212.2.234.0/23
213.193.196.0/24
213.239.156.0/24
217.177.10.0/24
217.177.72.0/24
IPv6:
2a02:6b40::/32
Signature Algorithm: sha256WithRSAEncryption
38:e0:07:f9:03:13:15:fe:0b:78:1d:12:60:66:23:7c:58:c9:
78:bd:6c:1e:a2:c0:f1:c4:a6:fb:a9:9d:64:5e:37:80:6a:0b:
70:2a:b9:b9:65:58:c6:95:95:3c:83:ca:a7:4d:df:f3:49:14:
a2:70:ae:7e:d7:0c:3f:b1:5e:1e:36:07:85:0f:6c:01:0f:85:
1c:3f:80:07:e2:77:37:20:2f:fb:d6:5e:85:f3:14:52:40:c6:
24:26:f5:aa:ce:1d:16:c1:7a:43:14:85:dd:d4:a1:08:1e:2e:
ea:b0:d1:0a:05:d2:9a:a9:9c:0b:86:08:e2:17:0e:5d:08:6f:
b8:6f:ac:5d:f2:c8:7a:82:c6:68:5f:70:5c:66:8b:07:49:a5:
eb:be:19:a4:99:86:0a:d9:ad:3a:31:80:3b:03:32:ab:e2:1f:
16:a6:15:19:4d:8a:93:f1:79:ec:50:6b:d6:8c:89:b3:41:d9:
77:f7:e1:18:a4:0f:5d:49:77:b4:3f:00:95:f4:b6:49:91:9e:
40:0d:70:0d:02:b9:49:96:84:7c:c6:c9:4d:1b:21:28:f3:41:
7a:cc:86:05:d3:a8:8f:cc:9e:13:4f:25:9d:38:cd:83:b5:96:
be:47:21:2b:f6:28:01:bc:e6:0a:3a:4c:98:70:89:9a:f6:78:
6a:d5:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:39 2026 by rpki-client