Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/qYl8U2V2wjymoE5EgbVi4zr15oA.roa
File: qYl8U2V2wjymoE5EgbVi4zr15oA.roa (raw, json)
Hash identifier: 0cj0suyJHPGPdlrD72Qi8AuzhT9mmYmtajsb58y/ZiU=
Subject key identifier: A9:89:7C:53:65:76:C2:3C:A6:A0:4E:44:81:B5:62:E3:3A:F5:E6:80
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019DE482C7C5A66EC0A1F60EC76F12387EE0
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/qYl8U2V2wjymoE5EgbVi4zr15oA.roa
Signing time: Fri 01 May 2026 17:07:49 +0000
ROA not before: Fri 01 May 2026 17:07:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44051
IP address blocks: 2.58.64.0/24 maxlen: 24
2.58.65.0/24 maxlen: 24
2.58.66.0/24 maxlen: 24
2.58.67.0/24 maxlen: 24
5.187.0.0/24 maxlen: 24
5.187.1.0/24 maxlen: 24
5.187.2.0/24 maxlen: 24
5.187.3.0/24 maxlen: 24
5.187.4.0/24 maxlen: 24
5.187.5.0/24 maxlen: 24
5.187.6.0/24 maxlen: 24
5.187.7.0/24 maxlen: 24
31.172.68.0/24 maxlen: 24
31.172.70.0/24 maxlen: 24
31.172.71.0/24 maxlen: 24
31.172.72.0/24 maxlen: 24
31.172.73.0/24 maxlen: 24
31.172.75.0/24 maxlen: 24
31.172.77.0/24 maxlen: 24
79.132.136.0/24 maxlen: 24
79.132.138.0/24 maxlen: 24
79.132.140.0/24 maxlen: 24
79.132.142.0/24 maxlen: 24
79.132.143.0/24 maxlen: 24
89.127.192.0/24 maxlen: 24
89.127.194.0/24 maxlen: 24
89.127.200.0/24 maxlen: 24
89.127.203.0/24 maxlen: 24
89.127.208.0/24 maxlen: 24
89.127.210.0/24 maxlen: 24
89.127.213.0/24 maxlen: 24
89.127.215.0/24 maxlen: 24
91.228.152.0/22 maxlen: 22
91.228.152.0/24 maxlen: 24
91.228.153.0/24 maxlen: 24
91.228.154.0/24 maxlen: 24
91.228.155.0/24 maxlen: 24
103.75.124.0/24 maxlen: 24
103.75.127.0/24 maxlen: 24
103.228.168.0/24 maxlen: 24
103.228.169.0/24 maxlen: 24
103.228.170.0/24 maxlen: 24
103.228.171.0/24 maxlen: 24
162.248.160.0/24 maxlen: 24
162.248.164.0/24 maxlen: 24
162.248.165.0/24 maxlen: 24
162.248.166.0/24 maxlen: 24
162.248.167.0/24 maxlen: 24
185.21.8.0/24 maxlen: 24
185.44.206.0/24 maxlen: 24
185.44.207.0/24 maxlen: 24
194.154.24.0/24 maxlen: 24
194.154.30.0/24 maxlen: 24
195.26.237.0/24 maxlen: 24
212.2.234.0/24 maxlen: 24
212.2.235.0/24 maxlen: 24
213.239.156.0/24 maxlen: 24
217.177.10.0/24 maxlen: 24
217.177.72.0/24 maxlen: 24
2a02:6b40::/32 maxlen: 32
2a02:6b40::/48 maxlen: 48
2a02:6b40:1::/48 maxlen: 48
2a02:6b40:1000::/48 maxlen: 48
2a02:6b40:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:82:c7:c5:a6:6e:c0:a1:f6:0e:c7:6f:12:38:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: May 1 17:07:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9897c536576c23ca6a04e4481b562e33af5e680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:90:6f:23:91:1b:10:bb:6f:b5:59:1d:fa:
b5:77:e0:68:78:3e:96:a5:ea:89:26:08:92:72:eb:
2e:e8:a1:3f:db:75:58:f2:89:c0:fd:2e:49:76:b0:
24:d7:27:47:6f:d4:c4:da:10:ef:67:a5:8e:65:08:
43:9e:9c:d7:62:10:06:1d:73:55:22:c9:8d:a6:ae:
87:43:71:37:31:ac:5d:a4:38:ad:b4:ef:8a:08:3e:
6f:09:56:41:8a:70:99:c8:b9:56:a3:9a:9f:0d:83:
7c:03:cb:8e:a6:ad:40:bc:4f:79:9e:e8:ed:96:a1:
2a:ec:6b:29:24:f3:e1:7c:69:ec:de:59:fc:02:4e:
bb:82:1a:97:bf:50:d3:28:4d:03:5b:2b:02:69:72:
bf:87:0b:66:ee:2d:9e:7c:8f:82:30:7a:45:2b:cd:
86:ca:ab:6b:e4:2b:6c:be:ec:a1:9b:6c:3d:bb:79:
dc:96:b9:a0:18:4d:8f:55:bc:f9:83:33:0b:5f:dc:
fc:ed:ec:e7:70:49:80:56:62:b4:86:a9:ba:95:29:
81:91:5c:c1:b0:95:aa:1f:1d:5a:fb:56:62:b4:e2:
94:c1:62:28:3d:d7:2a:b7:84:59:0b:29:be:e7:fc:
33:6b:0f:6e:a3:06:ea:e3:6f:fd:94:84:ec:a7:d0:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:89:7C:53:65:76:C2:3C:A6:A0:4E:44:81:B5:62:E3:3A:F5:E6:80
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/qYl8U2V2wjymoE5EgbVi4zr15oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.64.0/22
5.187.0.0/21
31.172.68.0/24
31.172.70.0-31.172.73.255
31.172.75.0/24
31.172.77.0/24
79.132.136.0/24
79.132.138.0/24
79.132.140.0/24
79.132.142.0/23
89.127.192.0/24
89.127.194.0/24
89.127.200.0/24
89.127.203.0/24
89.127.208.0/24
89.127.210.0/24
89.127.213.0/24
89.127.215.0/24
91.228.152.0/22
103.75.124.0/24
103.75.127.0/24
103.228.168.0/22
162.248.160.0/24
162.248.164.0/22
185.21.8.0/24
185.44.206.0/23
194.154.24.0/24
194.154.30.0/24
195.26.237.0/24
212.2.234.0/23
213.239.156.0/24
217.177.10.0/24
217.177.72.0/24
IPv6:
2a02:6b40::/32
Signature Algorithm: sha256WithRSAEncryption
89:ef:17:22:30:47:bd:fe:89:ae:d7:d5:33:6f:37:dd:4e:e7:
ff:28:3f:10:d4:a1:1f:93:0e:45:c7:b3:90:99:0b:05:5f:cd:
26:19:ec:99:30:5a:82:5f:90:4e:9b:af:49:34:e3:3f:26:7c:
7a:56:2d:5c:83:40:02:4e:df:89:c1:02:9e:2a:0c:33:26:10:
79:2b:8a:fd:c8:0d:0e:74:fb:58:71:f0:c7:5e:74:fa:37:ba:
43:9e:83:17:4b:9a:28:aa:af:8e:dc:dd:ed:b4:41:1e:8a:87:
c4:4c:06:7e:10:4a:df:49:93:41:a1:19:db:a7:1a:7b:e4:14:
84:e6:6c:c1:c1:d4:f4:9c:58:93:4c:e1:d2:ff:2a:3e:13:1d:
92:d6:90:6a:2a:fb:11:78:4a:b0:12:cf:3a:0a:e4:ea:b7:60:
b4:50:47:dc:38:ed:c9:21:f9:d9:70:73:c1:30:7b:1a:53:2f:
44:ed:7b:3b:0b:16:32:3e:bf:db:6a:d2:0f:9f:d6:91:4a:7e:
ab:a6:95:f6:a5:e9:50:b4:95:70:61:5c:20:bb:b2:b3:b1:67:
10:d3:43:f0:d1:bd:49:c3:e8:52:da:c7:d1:97:29:bd:81:ca:
64:fa:cd:1c:a3:c7:07:f9:4a:15:e5:0e:59:c9:d3:2e:82:a9:
eb:f3:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:17 2026 by rpki-client