Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/wROc4hioTkQNOL_kQIzFQLa-I3I.roa
File: wROc4hioTkQNOL_kQIzFQLa-I3I.roa (raw, json)
Hash identifier: 836Y0ZxsLAH+3tXQo6RQfrPKHfPzdwSXakDKF509qs0=
Subject key identifier: C1:13:9C:E2:18:A8:4E:44:0D:38:BF:E4:40:8C:C5:40:B6:BE:23:72
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019F8BA01E32537D883636BC198C13E6A49E
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/wROc4hioTkQNOL_kQIzFQLa-I3I.roa
Signing time: Wed 22 Jul 2026 20:59:14 +0000
ROA not before: Wed 22 Jul 2026 20:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48040
IP address blocks: 31.172.65.0/24 maxlen: 32
81.85.79.0/24 maxlen: 24
89.127.193.0/24 maxlen: 24
89.127.201.0/24 maxlen: 24
89.127.204.0/24 maxlen: 24
89.127.207.0/24 maxlen: 24
89.127.212.0/24 maxlen: 24
89.127.222.0/24 maxlen: 32
130.17.1.0/24 maxlen: 24
130.17.8.0/24 maxlen: 24
130.17.14.0/24 maxlen: 32
130.17.16.0/24 maxlen: 32
162.248.163.0/24 maxlen: 24
185.21.11.0/24 maxlen: 24
194.154.25.0/24 maxlen: 24
194.154.31.0/24 maxlen: 24
199.68.198.0/24 maxlen: 24
199.68.199.0/24 maxlen: 24
213.193.197.0/24 maxlen: 32
213.239.158.0/24 maxlen: 24
2a02:6b40:800e::/48 maxlen: 48
2a02:6b40:800f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:a0:1e:32:53:7d:88:36:36:bc:19:8c:13:e6:a4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jul 22 20:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1139ce218a84e440d38bfe4408cc540b6be2372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:80:9b:91:b1:61:d5:cf:21:af:43:c7:e2:
8c:db:2c:82:e0:9e:b4:75:66:b9:8e:94:37:da:a4:
57:29:94:67:91:06:fe:7c:bf:ff:fb:8d:8c:e6:5e:
dd:4e:11:48:cf:8b:d1:a0:a7:4e:84:82:dd:c7:38:
2a:7f:d8:72:23:32:a9:68:5b:30:e1:03:24:01:aa:
46:20:64:ff:6b:6f:bb:51:ad:cd:cb:20:08:ae:b9:
20:fb:02:3e:c8:f3:09:d5:8d:7b:19:d7:bf:46:b3:
ff:6c:8b:6a:b1:a7:05:20:39:c9:7d:20:9c:76:65:
90:09:35:4f:a6:1c:e5:4d:0d:c6:58:95:a0:8b:46:
f2:f2:54:30:29:45:ce:95:60:ca:66:a5:0b:bc:4f:
50:82:8f:c5:69:e5:fe:11:32:1c:77:b8:3d:9e:aa:
37:0a:f8:45:45:13:5a:f2:68:49:40:e9:45:61:87:
39:2f:dc:64:ea:fe:6e:70:96:01:7f:68:84:c9:8a:
cc:d1:3f:d2:68:ae:c6:c9:20:b0:ad:10:0b:aa:0c:
07:9d:a9:c8:e4:0c:7e:61:21:92:07:f3:69:63:f1:
b1:6a:63:9b:bb:36:a4:b5:87:32:e0:c9:ae:ac:e2:
8f:f7:58:5f:81:be:9f:4a:18:05:e7:d3:6e:67:c5:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:9C:E2:18:A8:4E:44:0D:38:BF:E4:40:8C:C5:40:B6:BE:23:72
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/wROc4hioTkQNOL_kQIzFQLa-I3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.65.0/24
81.85.79.0/24
89.127.193.0/24
89.127.201.0/24
89.127.204.0/24
89.127.207.0/24
89.127.212.0/24
89.127.222.0/24
130.17.1.0/24
130.17.8.0/24
130.17.14.0/24
130.17.16.0/24
162.248.163.0/24
185.21.11.0/24
194.154.25.0/24
194.154.31.0/24
199.68.198.0/23
213.193.197.0/24
213.239.158.0/24
IPv6:
2a02:6b40:800e::/47
Signature Algorithm: sha256WithRSAEncryption
41:90:c7:1e:25:22:78:c5:c3:e9:04:27:8c:93:78:32:a9:2a:
3b:1a:e1:25:bd:71:87:72:ed:0d:fe:78:24:cc:5a:5d:b3:13:
e1:97:8f:1d:92:c3:73:fc:e2:5b:a6:79:1e:70:98:a5:b5:17:
94:af:8e:e9:39:a7:08:2a:c2:8e:ce:44:35:d7:b5:a2:85:0b:
4f:a4:90:c9:13:d0:43:f4:a7:48:33:54:f5:fb:5e:49:4b:36:
4c:d6:eb:f9:80:0c:35:07:87:31:51:91:fe:d0:5b:87:f0:fe:
97:ae:e4:75:5f:ad:08:bf:ae:d3:cc:0e:7a:2b:61:f2:31:a5:
7d:40:7d:a1:87:a1:7a:f3:df:fb:ac:24:5e:25:83:ae:ff:f0:
00:93:bf:85:1a:a8:8c:52:8e:7b:1d:6e:4a:fb:fd:68:93:d2:
e5:0b:70:9d:00:55:4e:8d:6c:52:c0:ee:c5:82:51:92:de:66:
01:d7:60:7e:9c:23:e2:34:37:f1:51:77:5d:21:10:97:68:81:
a1:44:ec:3b:ce:28:eb:27:fd:89:6d:0d:f1:df:a8:d5:5e:10:
f6:5a:33:dc:05:ff:5a:7f:e1:7a:01:8c:e6:d8:ab:08:41:93:
d4:90:04:bc:28:be:1c:94:b0:d5:45:22:95:a3:34:6e:44:47:
92:72:63:1f
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISAZ+LoB4yU32INja8GYwT5qSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYwNzIyMjA1OTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTEzOWNlMjE4YTg0ZTQ0MGQzOGJmZTQ0MDhjYzU0MGI2YmUyMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDyAm5GxYdXPIa9Dx+KM2yyC4J60
dWa5jpQ32qRXKZRnkQb+fL//+42M5l7dThFIz4vRoKdOhILdxzgqf9hyIzKpaFsw
4QMkAapGIGT/a2+7Ua3NyyAIrrkg+wI+yPMJ1Y17Gde/RrP/bItqsacFIDnJfSCc
dmWQCTVPphzlTQ3GWJWgi0by8lQwKUXOlWDKZqULvE9Qgo/FaeX+ETIcd7g9nqo3
CvhFRRNa8mhJQOlFYYc5L9xk6v5ucJYBf2iEyYrM0T/SaK7GySCwrRALqgwHnanI
5Ax+YSGSB/NpY/GxamObuzaktYcy4MmurOKP91hfgb6fShgF59NuZ8Wo0wIDAQAB
o4ICiTCCAoUwHQYDVR0OBBYEFMETnOIYqE5EDTi/5ECMxUC2viNyMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvd1JPYzRoaW9Ua1FOT0xfa1FJekZRTGEtSTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizB4BAIAATByAwQAH6xB
AwQAUVVPAwQAWX/BAwQAWX/JAwQAWX/MAwQAWX/PAwQAWX/UAwQAWX/eAwQAghEB
AwQAghEIAwQAghEOAwQAghEQAwQAovijAwQAuRULAwQAwpoZAwQAwpofAwQBx0TG
AwQA1cHFAwQA1e+eMA8EAgACMAkDBwEqAmtAgA4wDQYJKoZIhvcNAQELBQADggEB
AEGQxx4lInjFw+kEJ4yTeDKpKjsa4SW9cYdy7Q3+eCTMWl2zE+GXjx2Sw3P84lum
eR5wmKW1F5Svjuk5pwgqwo7ORDXXtaKFC0+kkMkT0EP0p0gzVPX7XklLNkzW6/mA
DDUHhzFRkf7QW4fw/peu5HVfrQi/rtPMDnorYfIxpX1AfaGHoXrz3/usJF4lg67/
8ACTv4UaqIxSjnsdbkr7/WiT0uULcJ0AVU6NbFLA7sWCUZLeZgHXYH6cI+I0N/FR
d10hEJdogaFE7DvOKOsn/YltDfHfqNVeEPZaM9wF/1p/4XoBjObYqwhBk9SQBLwo
vhyUsNVFIpWjNG5ER5JyYx8=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:03 2026 by rpki-client