Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa
File: rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa (raw, json)
Hash identifier: cw+3g+tlflCYhhvX9gDsDKPmWsCROnLpk0xinhWv2AY=
Subject key identifier: AD:7D:52:B3:60:8A:FE:0E:3F:18:5A:CB:12:7C:F1:C3:AC:06:5C:85
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019F4C13A55BF4A777B97D42F10FB08656B0
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa
Signing time: Fri 10 Jul 2026 12:49:43 +0000
ROA not before: Fri 10 Jul 2026 12:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 2.96.0.0/13 maxlen: 24
62.24.128.0/17 maxlen: 24
62.241.160.0/19 maxlen: 24
78.144.0.0/13 maxlen: 24
79.77.0.0/16 maxlen: 24
79.78.0.0/15 maxlen: 24
80.40.0.0/15 maxlen: 24
80.42.0.0/16 maxlen: 24
81.1.64.0/18 maxlen: 24
81.86.0.0/16 maxlen: 24
81.178.0.0/15 maxlen: 24
83.67.0.0/16 maxlen: 24
84.43.0.0/17 maxlen: 24
87.242.128.0/17 maxlen: 24
89.168.128.0/17 maxlen: 24
89.240.0.0/14 maxlen: 24
92.16.0.0/12 maxlen: 24
145.255.240.0/21 maxlen: 24
185.24.12.0/22 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
185.175.144.0/22 maxlen: 24
193.218.99.0/24 maxlen: 24
194.106.32.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
195.112.0.0/18 maxlen: 24
195.137.0.0/17 maxlen: 24
195.149.0.0/18 maxlen: 24
212.1.128.0/19 maxlen: 24
212.67.96.0/19 maxlen: 24
212.74.96.0/19 maxlen: 24
212.139.0.0/16 maxlen: 24
212.159.128.0/18 maxlen: 24
213.78.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:13:a5:5b:f4:a7:77:b9:7d:42:f1:0f:b0:86:56:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jul 10 12:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad7d52b3608afe0e3f185acb127cf1c3ac065c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:74:60:52:5d:39:10:f8:cd:c6:b3:48:28:
73:38:a5:8b:24:04:cf:4e:81:03:5a:7a:0f:76:33:
01:91:9e:65:a2:1c:fc:59:a8:de:d2:d1:7f:cc:08:
67:a3:95:32:8c:0b:8c:69:cb:29:84:e6:b6:55:1d:
e4:58:01:c3:2a:d8:b8:0f:1a:64:31:61:8b:05:e1:
78:ab:ab:24:90:a9:dd:d2:ae:aa:f6:de:0b:d3:17:
71:52:08:2c:22:59:63:01:36:a1:b9:33:fb:8b:7a:
73:3d:5c:64:0d:c9:b1:33:81:27:37:5c:07:51:27:
13:32:29:01:59:e2:d2:fc:67:be:e1:fe:e5:e4:f4:
8d:4f:2d:76:bd:c0:95:01:19:54:92:e5:a1:46:a1:
8d:ed:28:28:00:4e:14:1f:65:f9:8d:ba:77:eb:79:
86:b2:8e:cc:a3:6b:1f:00:19:51:29:7e:80:24:35:
6f:c6:9c:df:5f:10:ed:ba:f8:9d:79:89:91:25:dd:
6b:ab:dc:3b:5e:e6:f9:18:6e:c0:60:06:7f:57:bc:
1c:c5:a9:ea:ea:51:02:83:b8:4b:c0:0a:75:c0:6b:
82:aa:5e:a6:bf:fc:0a:1b:0e:5d:ca:34:e3:cc:29:
73:e9:f3:54:a8:39:74:8b:b5:3e:98:6d:08:af:b1:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7D:52:B3:60:8A:FE:0E:3F:18:5A:CB:12:7C:F1:C3:AC:06:5C:85
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
79.77.0.0-79.79.255.255
80.40.0.0-80.42.255.255
81.1.64.0/18
81.86.0.0/16
81.178.0.0/15
83.67.0.0/16
84.43.0.0/17
87.242.128.0/17
89.168.128.0/17
89.240.0.0/14
92.16.0.0/12
145.255.240.0/21
185.24.12.0/22
185.173.120.0/22
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:30:d0:e5:9a:6a:e3:b0:e8:85:01:3e:c8:af:50:61:5d:e2:
0b:31:e2:e0:d6:12:eb:20:2d:0f:25:88:90:42:b1:91:d2:4f:
f5:8f:c2:e9:a4:7b:5b:0c:3a:1a:ff:b3:01:1f:4b:e6:84:62:
2c:3d:4a:d8:33:ad:5c:4b:ef:f6:9b:b6:8d:07:09:13:93:fa:
46:93:6f:43:6e:ec:ca:15:16:31:b5:5b:6d:02:d1:8e:b7:74:
ab:a6:d2:76:4b:cd:d8:62:2d:7e:51:2b:ca:30:51:ff:21:b9:
a4:bf:6f:72:d7:30:13:ba:96:03:c4:8b:84:9d:8a:35:22:1b:
85:c6:26:59:de:7e:64:94:26:e1:66:be:1c:e0:d9:57:24:15:
7a:bf:e2:cd:56:03:5b:1a:1a:91:ae:8b:60:68:17:88:30:ae:
89:f4:b4:30:95:0b:53:11:60:de:59:39:8e:2d:6c:c2:11:1f:
8d:c0:0a:44:a7:7d:0c:71:ae:29:ff:47:40:5b:33:5a:b3:19:
4a:84:ec:94:e4:a5:72:0a:de:c5:bc:34:bd:28:d8:51:e7:b4:
04:13:28:a5:fe:92:3c:89:c8:71:dc:c5:bb:7c:e8:92:97:3b:
98:26:bc:25:ac:90:0c:8d:dd:b1:59:e1:5d:3b:23:4b:24:99:
81:6a:f6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:48 2026 by rpki-client