Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/xhMUpgylDlZpkJWSksmBikEWq4g.roa
File: xhMUpgylDlZpkJWSksmBikEWq4g.roa (raw, json)
Hash identifier: JeE78K2zBK0V/eKXa4CRvCZlb3DOYW3NfeuKbFoyYk4=
Subject key identifier: C6:13:14:A6:0C:A5:0E:56:69:90:95:92:92:C9:81:8A:41:16:AB:88
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A042F72AC892E6AABC1641A393CBD4559C
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/xhMUpgylDlZpkJWSksmBikEWq4g.roa
Signing time: Thu 27 Aug 2026 11:24:49 +0000
ROA not before: Thu 27 Aug 2026 11:24:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51202
IP address blocks: 31.22.72.0/24 maxlen: 24
31.22.75.0/24 maxlen: 24
31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
95.175.150.0/24 maxlen: 24
109.175.211.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
192.40.69.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
2a14:6781:305::/48 maxlen: 48
2a14:6782:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:f7:2a:c8:92:e6:aa:bc:16:41:a3:93:cb:d4:55:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Aug 27 11:24:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c61314a60ca50e566990959292c9818a4116ab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:ca:8e:31:53:43:12:c9:1a:79:82:98:ca:
a5:81:fd:77:1c:b0:a3:6b:43:aa:3b:c3:e3:77:69:
c8:6b:6a:ad:be:a7:15:da:83:77:a4:dd:2d:5c:09:
c2:9c:d2:e4:30:a0:ab:af:a3:2e:8a:0e:41:dc:65:
11:3e:38:3a:73:31:4f:77:ef:83:17:f1:18:8b:aa:
e2:fc:c0:64:e1:dc:d4:fe:b5:4a:02:c7:3a:85:78:
5a:91:c3:e5:df:f0:88:e1:45:87:49:58:25:eb:ea:
33:e5:37:2d:08:e9:62:83:b3:e4:67:89:d2:6d:f9:
65:af:e8:f9:f5:d1:54:18:6e:d3:32:3c:bd:0d:2d:
78:1b:41:fd:29:e6:6e:b8:12:fb:9e:cf:12:72:11:
4a:e1:57:27:30:42:15:59:b8:29:2e:43:cd:63:b9:
97:53:43:3e:04:ad:14:b8:55:9d:6f:89:6f:73:88:
1f:fa:8c:48:de:cf:c3:72:86:89:a4:18:0b:5a:4a:
f4:f4:c1:f2:92:64:04:ea:59:3b:82:07:b7:4e:48:
7e:96:3d:ef:44:3e:64:c3:a5:88:02:39:63:f7:c4:
0b:fd:54:ba:c1:02:cc:13:d4:77:21:20:af:02:e6:
32:1c:01:38:fb:23:c8:eb:02:ad:3e:26:11:18:1b:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:13:14:A6:0C:A5:0E:56:69:90:95:92:92:C9:81:8A:41:16:AB:88
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/xhMUpgylDlZpkJWSksmBikEWq4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.72.0/24
31.22.75.0/24
31.25.11.0/24
62.169.152.0/24
89.36.32.0/24
89.36.35.0/24
95.175.150.0/24
109.175.211.0/24
185.121.132.0/23
185.121.135.0/24
185.144.70.0/23
192.40.69.0/24
194.117.225.0/24
212.232.18.0/23
IPv6:
2a0c:2500::/29
2a14:6781::/32
2a14:6782:1::/48
Signature Algorithm: sha256WithRSAEncryption
88:30:f4:29:bd:96:97:6f:30:a2:07:49:69:62:5f:68:18:ed:
0c:48:99:e3:b3:70:a1:27:56:ec:ad:47:dd:71:fa:e2:7d:c1:
d8:74:25:04:c9:3a:dd:c8:68:e3:75:76:e7:61:23:ae:66:7e:
3c:da:e3:56:ed:a6:09:44:ba:e0:38:f9:fb:73:5e:39:d9:7b:
a0:c6:f0:52:a2:a2:f6:f0:de:20:95:45:0f:26:0f:74:11:ea:
f2:40:4a:66:10:2b:1b:00:e7:3e:d8:a0:c5:7a:80:6c:e6:7a:
7e:3a:b7:88:24:79:e0:d8:f7:c7:98:fc:a8:90:0d:8e:f1:bc:
31:6d:6a:ba:25:dc:2f:d1:59:9f:75:64:66:50:4b:8a:3a:81:
14:88:6f:3c:a5:e5:8c:0c:90:2f:68:f4:97:4b:75:4b:2a:49:
04:b6:3a:b6:85:eb:8c:14:05:65:07:0f:d0:31:02:8c:b5:08:
5b:cd:79:00:85:9d:7c:b0:2d:15:2d:f9:f4:42:ae:6d:8f:10:
8f:91:50:7d:4e:99:8b:c6:87:83:3d:b8:86:01:90:1d:e4:a4:
aa:e6:d0:67:fe:38:15:8c:c1:09:35:d4:eb:7c:40:75:6f:e3:
35:3b:6b:07:5c:9b:8d:98:74:78:67:98:1e:0f:fe:6a:e9:98:
79:4b:de:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:25 2026 by rpki-client