Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/neYIYJF2wg6OgH6kUj7IKfFilY8.roa
File: neYIYJF2wg6OgH6kUj7IKfFilY8.roa (raw, json)
Hash identifier: ry5xgcA92qzlZuKehBUAKzpu87W5MD4AyXHq3MrCGuk=
Subject key identifier: 9D:E6:08:60:91:76:C2:0E:8E:80:7E:A4:52:3E:C8:29:F1:62:95:8F
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019F18834799ED46AEAAD81478D40F6A9817
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/neYIYJF2wg6OgH6kUj7IKfFilY8.roa
Signing time: Tue 30 Jun 2026 12:31:24 +0000
ROA not before: Tue 30 Jun 2026 12:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51202
IP address blocks: 31.22.72.0/24 maxlen: 24
31.22.75.0/24 maxlen: 24
31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
95.175.150.0/24 maxlen: 24
109.175.211.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
192.40.69.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
2a14:6781:305::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:83:47:99:ed:46:ae:aa:d8:14:78:d4:0f:6a:98:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jun 30 12:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9de608609176c20e8e807ea4523ec829f162958f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:d2:c5:7c:57:b8:e5:e1:3d:de:4a:d3:98:
92:c3:98:39:61:ce:e8:01:97:16:e3:b9:eb:9c:1c:
20:2d:f3:75:8b:25:aa:59:c8:dd:6f:5e:3e:0d:93:
e9:6d:65:81:78:8a:c1:f2:f1:f7:20:41:fc:62:66:
e4:cb:d3:26:c5:e3:77:ad:ed:aa:13:ea:13:33:0c:
59:eb:bd:a3:36:03:63:aa:e6:10:51:ac:a6:37:cb:
54:eb:9d:61:72:bf:d8:6f:35:35:47:71:1e:22:57:
27:f9:d5:d4:35:7b:0d:dc:7f:14:48:0b:f9:01:7b:
82:e4:ca:cf:53:a4:bf:0e:69:40:ac:8e:8d:b7:9f:
03:e2:b6:6e:54:8c:d8:b1:ea:22:d9:22:f9:21:a9:
0e:57:d4:8b:c5:3d:a9:25:27:a9:0a:c1:b6:92:ec:
03:6e:ac:3b:25:04:e1:91:92:3f:ab:66:59:9e:30:
30:8c:07:8c:b0:a8:67:f8:8e:86:b8:4e:0e:60:14:
e0:ef:fa:17:dd:52:7b:e2:0f:2f:f5:09:8f:d1:81:
e1:4f:0a:a2:70:41:04:b7:c5:b1:f2:6a:d8:4a:2b:
14:2b:62:3e:f1:86:52:cf:f4:83:d3:1e:4f:80:13:
a0:12:15:58:34:a1:f8:b7:a8:ba:15:c6:ff:b2:bf:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E6:08:60:91:76:C2:0E:8E:80:7E:A4:52:3E:C8:29:F1:62:95:8F
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/neYIYJF2wg6OgH6kUj7IKfFilY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.72.0/24
31.22.75.0/24
31.25.11.0/24
62.169.152.0/24
89.36.32.0/24
89.36.35.0/24
95.175.150.0/24
109.175.211.0/24
185.121.132.0/23
185.121.135.0/24
185.144.70.0/23
192.40.69.0/24
194.117.225.0/24
212.232.18.0/23
IPv6:
2a0c:2500::/29
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
9e:db:f6:de:58:e6:df:23:d6:d5:cb:7a:82:d3:ec:f6:bd:cb:
2a:60:c8:f1:10:4e:ab:bf:c1:8b:f3:c8:11:37:81:f8:a4:de:
53:35:4d:0a:02:ea:14:d4:1c:e9:8c:00:f5:a2:20:5a:b2:b1:
20:a7:0d:44:14:b4:21:28:02:ef:1d:d4:e8:65:e5:1f:52:89:
43:ff:03:de:a1:69:55:5a:31:01:46:34:e7:ff:c4:5a:85:30:
22:ec:b7:b4:04:20:29:94:0e:76:2b:db:20:91:63:9f:7b:eb:
39:e1:fa:da:de:9d:0f:3c:86:fa:d7:a4:0c:f9:4e:37:8b:85:
af:c2:61:56:cb:fe:db:72:7e:2b:d3:5c:66:17:1d:9c:af:63:
a5:26:52:f2:ef:3b:d6:53:77:d9:5a:2e:1f:d1:e2:8a:5a:03:
47:13:c2:0a:35:88:f0:8a:89:25:3a:c8:c3:c0:8b:b1:c1:e5:
cc:fc:c3:3b:29:1e:48:47:33:a6:4a:cd:98:f8:b9:64:d9:c2:
af:32:69:08:92:9d:66:c9:9a:29:19:84:28:78:de:63:ca:7f:
d2:91:a9:b4:95:f1:df:cf:29:c7:e4:50:6b:b0:ef:ed:b8:b3:
5a:5b:5e:52:84:81:4d:ae:26:9e:39:20:7c:1e:31:87:e7:2a:
da:29:22:f9
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZ8Yg0eZ7UauqtgUeNQPapgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjYwNjMwMTIzMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGU2MDg2MDkxNzZjMjBlOGU4MDdlYTQ1MjNlYzgyOWYxNjI5NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFzSxXxXuOXhPd5K05iSw5g5Yc7o
AZcW47nrnBwgLfN1iyWqWcjdb14+DZPpbWWBeIrB8vH3IEH8Ymbky9MmxeN3re2q
E+oTMwxZ672jNgNjquYQUaymN8tU651hcr/YbzU1R3EeIlcn+dXUNXsN3H8USAv5
AXuC5MrPU6S/DmlArI6Nt58D4rZuVIzYseoi2SL5IakOV9SLxT2pJSepCsG2kuwD
bqw7JQThkZI/q2ZZnjAwjAeMsKhn+I6GuE4OYBTg7/oX3VJ74g8v9QmP0YHhTwqi
cEEEt8Wx8mrYSisUK2I+8YZSz/SD0x5PgBOgEhVYNKH4t6i6Fcb/sr89wQIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFJ3mCGCRdsIOjoB+pFI+yCnxYpWPMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvbmVZSVlKRjJ3ZzZPZ0g2a1VqN0lLZkZpbFk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwWgQCAAEwVAMEAB8WSAME
AB8WSwMEAB8ZCwMEAD6pmAMEAFkkIAMEAFkkIwMEAF+vlgMEAG2v0wMEAbl5hAME
ALl5hwMEAbmQRgMEAMAoRQMEAMJ14QMEAdToEjAUBAIAAjAOAwUDKgwlAAMFACoU
Z4EwDQYJKoZIhvcNAQELBQADggEBAJ7b9t5Y5t8j1tXLeoLT7Pa9yypgyPEQTqu/
wYvzyBE3gfik3lM1TQoC6hTUHOmMAPWiIFqysSCnDUQUtCEoAu8d1Ohl5R9SiUP/
A96haVVaMQFGNOf/xFqFMCLst7QEICmUDnYr2yCRY5976znh+trenQ88hvrXpAz5
TjeLha/CYVbL/ttyfivTXGYXHZyvY6UmUvLvO9ZTd9laLh/R4opaA0cTwgo1iPCK
iSU6yMPAi7HB5cz8wzspHkhHM6ZKzZj4uWTZwq8yaQiSnWbJmikZhCh43mPKf9KR
qbSV8d/PKcfkUGuw7+24s1pbXlKEgU2uJp45IHweMYfnKtopIvk=
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:35:20 2026 by rpki-client