Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/LXqYHZ-ZPGUTxzVaTVtl0COHTWo.roa
File: LXqYHZ-ZPGUTxzVaTVtl0COHTWo.roa (raw, json)
Hash identifier: 5NQrQW9N3IgSM0PQCJC1g2KETpNZ4HSxzHK048rjxU8=
Subject key identifier: 2D:7A:98:1D:9F:99:3C:65:13:C7:35:5A:4D:5B:65:D0:23:87:4D:6A
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 019F7FBEBC12A4DADBF26CB8B9695690C3A3
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/LXqYHZ-ZPGUTxzVaTVtl0COHTWo.roa
Signing time: Mon 20 Jul 2026 13:37:14 +0000
ROA not before: Mon 20 Jul 2026 13:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29684
IP address blocks: 46.235.88.0/21 maxlen: 24
46.235.88.0/23 maxlen: 23
46.235.90.0/23 maxlen: 23
46.235.91.0/24 maxlen: 24
46.235.92.0/23 maxlen: 23
46.235.94.0/23 maxlen: 23
46.235.94.0/24 maxlen: 24
62.204.48.0/24 maxlen: 24
77.75.224.0/24 maxlen: 24
79.110.229.0/24 maxlen: 24
88.85.224.0/19 maxlen: 24
88.85.224.0/21 maxlen: 21
88.85.224.0/23 maxlen: 23
88.85.226.0/23 maxlen: 23
88.85.228.0/23 maxlen: 23
88.85.228.0/24 maxlen: 24
88.85.230.0/23 maxlen: 23
88.85.231.0/24 maxlen: 24
88.85.232.0/21 maxlen: 21
88.85.232.0/24 maxlen: 24
88.85.234.0/24 maxlen: 24
88.85.235.0/24 maxlen: 24
88.85.236.0/24 maxlen: 24
88.85.237.0/24 maxlen: 24
88.85.238.0/23 maxlen: 23
88.85.238.0/24 maxlen: 24
88.85.239.0/24 maxlen: 24
88.85.240.0/21 maxlen: 21
88.85.240.0/23 maxlen: 23
88.85.242.0/24 maxlen: 24
88.85.244.0/24 maxlen: 24
88.85.245.0/24 maxlen: 24
88.85.246.0/23 maxlen: 23
88.85.247.0/24 maxlen: 24
88.85.248.0/21 maxlen: 21
88.85.248.0/23 maxlen: 23
88.85.250.0/23 maxlen: 23
88.85.250.0/24 maxlen: 24
88.85.252.0/23 maxlen: 23
88.85.254.0/23 maxlen: 23
88.85.254.0/24 maxlen: 24
88.85.255.0/24 maxlen: 24
146.19.71.0/24 maxlen: 24
158.94.222.0/24 maxlen: 24
176.97.216.0/24 maxlen: 24
176.98.32.0/22 maxlen: 22
176.98.32.0/24 maxlen: 24
176.98.33.0/24 maxlen: 24
176.98.34.0/23 maxlen: 23
176.98.34.0/24 maxlen: 24
176.98.35.0/24 maxlen: 24
176.241.184.0/21 maxlen: 24
176.241.184.0/23 maxlen: 23
176.241.186.0/23 maxlen: 23
176.241.188.0/24 maxlen: 24
176.241.189.0/24 maxlen: 24
176.241.190.0/24 maxlen: 24
176.241.191.0/24 maxlen: 24
178.20.144.0/21 maxlen: 24
178.20.144.0/23 maxlen: 23
178.20.146.0/23 maxlen: 23
178.20.146.0/24 maxlen: 24
178.20.147.0/24 maxlen: 24
178.20.148.0/23 maxlen: 23
178.20.150.0/23 maxlen: 23
185.10.112.0/22 maxlen: 24
185.10.112.0/24 maxlen: 24
185.10.113.0/24 maxlen: 24
185.10.114.0/23 maxlen: 23
185.10.114.0/24 maxlen: 24
185.10.115.0/24 maxlen: 24
185.72.102.0/24 maxlen: 24
185.149.193.0/24 maxlen: 24
185.219.130.0/24 maxlen: 24
185.224.252.0/22 maxlen: 24
185.224.252.0/23 maxlen: 23
185.224.252.0/24 maxlen: 24
185.224.253.0/24 maxlen: 24
185.224.254.0/23 maxlen: 23
185.224.254.0/24 maxlen: 24
185.224.255.0/24 maxlen: 24
193.105.25.0/24 maxlen: 24
193.242.127.0/24 maxlen: 24
194.104.226.0/24 maxlen: 24
212.12.160.0/19 maxlen: 24
212.12.160.0/20 maxlen: 20
212.12.160.0/23 maxlen: 23
212.12.160.0/24 maxlen: 24
212.12.161.0/24 maxlen: 24
212.12.162.0/23 maxlen: 23
212.12.162.0/24 maxlen: 24
212.12.163.0/24 maxlen: 24
212.12.164.0/23 maxlen: 23
212.12.164.0/24 maxlen: 24
212.12.166.0/23 maxlen: 23
212.12.166.0/24 maxlen: 24
212.12.167.0/24 maxlen: 24
212.12.168.0/23 maxlen: 23
212.12.168.0/24 maxlen: 24
212.12.169.0/24 maxlen: 24
212.12.170.0/23 maxlen: 23
212.12.170.0/24 maxlen: 24
212.12.171.0/24 maxlen: 24
212.12.172.0/23 maxlen: 23
212.12.174.0/23 maxlen: 23
212.12.175.0/24 maxlen: 24
212.12.176.0/20 maxlen: 20
212.12.176.0/23 maxlen: 23
212.12.178.0/23 maxlen: 23
212.12.180.0/23 maxlen: 23
212.12.182.0/23 maxlen: 23
212.12.182.0/24 maxlen: 24
212.12.183.0/24 maxlen: 24
212.12.184.0/23 maxlen: 23
212.12.185.0/24 maxlen: 24
212.12.186.0/23 maxlen: 23
212.12.187.0/24 maxlen: 24
212.12.188.0/23 maxlen: 23
212.12.189.0/24 maxlen: 24
212.12.190.0/23 maxlen: 23
212.43.128.0/20 maxlen: 24
212.108.85.0/24 maxlen: 24
2a00:1560::/32 maxlen: 48
2a00:1560:4::/47 maxlen: 47
2a00:1560:5::/48 maxlen: 48
2a00:1560:c::/48 maxlen: 48
2a00:1560:10::/48 maxlen: 48
2a00:1560:16::/48 maxlen: 48
2a00:1560:17::/48 maxlen: 48
2a00:1560:18::/48 maxlen: 48
2a00:1560:20::/48 maxlen: 48
2a00:1560:21::/48 maxlen: 48
2a00:1560:24::/48 maxlen: 48
2a00:1560:27::/48 maxlen: 48
2a00:1560:29::/48 maxlen: 48
2a00:1560:60::/48 maxlen: 48
2a00:1560:1111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:be:bc:12:a4:da:db:f2:6c:b8:b9:69:56:90:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Jul 20 13:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d7a981d9f993c6513c7355a4d5b65d023874d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:39:0b:85:0c:3f:d0:ad:0c:76:56:97:e6:
55:df:d4:33:ae:ab:02:ee:09:c4:fb:09:e6:75:49:
dc:db:4c:ca:a3:06:e4:45:d8:fb:4b:d3:8b:d0:5e:
cf:28:22:c1:7f:2a:19:77:9b:a7:a4:b2:b0:44:af:
36:9e:2b:dc:b0:d0:ba:0e:ec:67:77:0b:30:fc:8c:
a5:f0:48:0c:36:2c:ed:86:ec:c3:de:8b:4b:a5:6c:
78:62:69:c9:c7:93:dc:d3:91:5c:61:8d:a1:b7:c3:
a4:5d:32:4f:32:f5:f9:71:47:71:7f:02:37:11:42:
03:cd:08:f5:da:a3:61:57:e4:15:7d:7e:72:c0:4c:
a6:c2:da:49:52:3e:9a:ed:e6:1e:c8:1f:af:44:d2:
8a:ba:c4:6b:f8:89:2c:7c:97:42:7b:22:f7:82:62:
a1:3d:e4:6a:72:18:16:58:e1:c3:f2:84:a8:07:20:
32:7b:18:7c:fb:90:bb:2c:4e:75:7a:ad:fe:34:ba:
b7:2b:da:58:a0:ca:ee:00:79:f7:5c:9b:96:1f:c5:
aa:e4:33:82:c3:62:3a:3c:e1:f4:74:3a:24:fc:38:
48:3f:36:08:bb:94:56:eb:0a:1c:08:8c:e9:6d:52:
66:b1:53:73:77:27:02:ae:99:57:35:35:72:ce:b7:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7A:98:1D:9F:99:3C:65:13:C7:35:5A:4D:5B:65:D0:23:87:4D:6A
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/LXqYHZ-ZPGUTxzVaTVtl0COHTWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
62.204.48.0/24
77.75.224.0/24
79.110.229.0/24
88.85.224.0/19
146.19.71.0/24
158.94.222.0/24
176.97.216.0/24
176.98.32.0/22
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
185.72.102.0/24
185.149.193.0/24
185.219.130.0/24
185.224.252.0/22
193.105.25.0/24
193.242.127.0/24
194.104.226.0/24
212.12.160.0/19
212.43.128.0/20
212.108.85.0/24
IPv6:
2a00:1560::/32
Signature Algorithm: sha256WithRSAEncryption
0c:18:88:11:6a:4d:3f:89:38:57:30:11:a9:fa:69:5b:83:d0:
e4:2f:17:5a:8a:51:49:d0:77:23:c9:16:f4:b5:59:98:93:72:
c9:ff:71:09:4c:d2:c3:ae:67:6d:a1:72:eb:7d:85:ac:eb:75:
1e:e6:b5:69:0e:0c:91:4f:0f:c2:ef:57:0e:75:de:12:cd:f7:
50:95:37:4b:6e:7d:14:f5:c9:2f:ad:06:ff:79:2a:c1:2e:48:
ba:86:58:a3:fd:2d:27:51:1e:96:66:7d:9d:ec:ea:c5:dd:b9:
2f:cf:79:d0:75:75:d9:88:ad:9e:93:6f:ce:83:bb:be:68:c5:
c6:14:f4:80:33:4c:a8:f6:91:68:21:8d:ef:08:f6:dc:08:9d:
0b:0c:46:dd:0a:1a:61:eb:d9:1d:55:59:e6:f5:4f:f6:ae:4f:
76:a5:61:10:e3:60:32:c2:76:b7:39:3a:df:fa:f5:7d:09:a4:
08:9a:de:75:2d:b2:46:40:96:9a:82:fd:06:c6:ca:d4:b7:3f:
b8:80:90:db:79:24:51:01:8e:b8:35:f5:23:e9:ab:8a:ac:f6:
d4:f4:af:2d:5d:83:0b:58:bf:cc:39:26:e7:34:a0:4d:70:a1:
6a:cb:d5:a0:56:98:d5:51:f0:98:00:cd:0d:41:d1:3e:f8:ed:
88:01:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:59:47 2026 by rpki-client