Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/73GQds5O9lYETaz_JvZJg5MtNDc.roa
File: 73GQds5O9lYETaz_JvZJg5MtNDc.roa (raw, json)
Hash identifier: 5CnDcaJnAh40dI/cXcg78sdklFt4ZI6jaj6cDvX3nbI=
Subject key identifier: EF:71:90:76:CE:4E:F6:56:04:4D:AC:FF:26:F6:49:83:93:2D:34:37
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019FCD3FC1AA95840051FCB6F5D4A28A73A1
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/73GQds5O9lYETaz_JvZJg5MtNDc.roa
Signing time: Tue 04 Aug 2026 14:48:55 +0000
ROA not before: Tue 04 Aug 2026 14:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31500
IP address blocks: 2.153.248.0/21 maxlen: 21
2.153.248.0/24 maxlen: 24
83.243.69.0/24 maxlen: 24
91.108.40.0/24 maxlen: 24
91.108.50.0/24 maxlen: 24
94.124.180.0/23 maxlen: 23
94.124.182.0/24 maxlen: 24
94.124.183.0/24 maxlen: 24
95.140.80.0/20 maxlen: 20
95.140.80.0/24 maxlen: 32
95.140.81.0/24 maxlen: 24
95.140.82.0/24 maxlen: 24
95.140.83.0/24 maxlen: 24
95.140.88.0/24 maxlen: 24
95.140.89.0/24 maxlen: 24
95.140.90.0/24 maxlen: 24
95.140.91.0/24 maxlen: 24
95.140.93.0/24 maxlen: 24
95.140.95.0/24 maxlen: 24
95.161.128.0/24 maxlen: 24
95.161.240.0/20 maxlen: 24
109.239.128.0/24 maxlen: 24
109.239.129.0/24 maxlen: 24
109.239.130.0/24 maxlen: 24
109.239.130.128/25 maxlen: 25
109.239.131.0/24 maxlen: 24
109.239.132.0/24 maxlen: 24
109.239.133.0/24 maxlen: 24
109.239.134.0/24 maxlen: 24
109.239.135.0/24 maxlen: 24
109.239.136.0/23 maxlen: 23
109.239.138.0/24 maxlen: 24
109.239.139.0/24 maxlen: 24
109.239.140.0/24 maxlen: 24
109.239.141.0/24 maxlen: 24
109.239.142.0/24 maxlen: 24
109.239.143.0/24 maxlen: 24
178.18.228.0/24 maxlen: 24
178.18.229.0/24 maxlen: 24
178.18.231.0/24 maxlen: 24
178.18.232.0/24 maxlen: 24
185.26.75.0/24 maxlen: 24
2001:b28::/32 maxlen: 32
2001:b28:4::/48 maxlen: 48
2001:b28:7b0c::/48 maxlen: 48
2001:b28:9999::/48 maxlen: 48
2001:b28:9a9c::/48 maxlen: 48
2001:b28:a451::/48 maxlen: 48
2001:b28:ffff::/48 maxlen: 48
2a03:5f80::/46 maxlen: 46
2a03:5f80:2:10::/64 maxlen: 64
2a03:5f80:8::/46 maxlen: 46
2a03:5f80:a::/48 maxlen: 48
2a03:5f80:245::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:3f:c1:aa:95:84:00:51:fc:b6:f5:d4:a2:8a:73:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Aug 4 14:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef719076ce4ef656044dacff26f64983932d3437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:62:b8:42:63:61:b9:bc:6a:82:97:a4:36:
87:28:e1:20:62:79:36:59:3c:61:6e:9f:5f:d2:36:
63:86:d9:03:e0:29:41:7d:7c:41:4e:2e:3d:25:5d:
a9:f6:38:04:1a:3f:7a:fe:3a:1f:9e:a2:92:84:98:
be:60:f3:21:03:0f:a1:2b:9c:60:fc:2a:1f:b1:94:
db:ab:30:ca:0e:97:41:81:51:0c:9f:55:7a:e8:05:
37:de:2c:3e:2e:f0:29:ee:a5:27:3b:43:dc:c5:50:
fa:d3:49:fa:bb:50:22:11:6f:d9:36:48:b3:df:06:
be:12:f7:de:7f:6a:7f:48:b7:f5:9b:10:53:4f:3c:
93:a8:1f:55:9d:1a:d5:7a:43:79:0c:20:61:1b:f0:
cc:39:f7:e4:a4:99:5a:61:22:79:ed:df:7e:1e:bc:
e8:3f:25:5f:14:80:1e:12:e3:e3:76:39:32:90:e0:
8c:d9:4d:0f:69:3a:50:49:42:3c:d3:5f:96:da:6d:
1a:cc:40:97:fc:b9:45:5f:5a:fd:93:81:91:bd:5f:
b6:c3:fe:69:61:b9:44:c9:46:4f:5a:28:f4:c0:44:
26:c4:92:ee:39:f9:45:93:2d:5c:31:9b:94:7a:e4:
72:94:ec:50:fb:73:43:ad:0d:48:22:d8:0c:3b:1b:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:71:90:76:CE:4E:F6:56:04:4D:AC:FF:26:F6:49:83:93:2D:34:37
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/73GQds5O9lYETaz_JvZJg5MtNDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.153.248.0/21
83.243.69.0/24
91.108.40.0/24
91.108.50.0/24
94.124.180.0/22
95.140.80.0/20
95.161.128.0/24
95.161.240.0/20
109.239.128.0/20
178.18.228.0/23
178.18.231.0-178.18.232.255
185.26.75.0/24
IPv6:
2001:b28::/32
2a03:5f80::/46
2a03:5f80:8::/46
2a03:5f80:245::/48
Signature Algorithm: sha256WithRSAEncryption
97:27:e4:2f:55:ff:3e:e2:6b:d5:dd:d5:b8:d5:93:29:4a:e9:
81:e0:7e:d1:7a:12:f7:ff:56:ef:3a:fe:29:91:e2:37:af:48:
03:da:56:e6:3a:72:bb:cc:43:d9:86:71:16:43:30:6a:6b:f0:
b2:ef:55:81:ab:20:a8:d3:de:78:5c:31:09:5d:4d:45:1c:1f:
84:2b:86:47:43:c7:9a:e6:12:df:a3:4d:1f:0c:df:a4:91:3e:
02:5c:fc:00:75:c4:8b:bb:07:1b:ea:d2:9f:12:6d:16:d4:a2:
5d:d5:58:b4:06:27:36:72:b5:d5:62:ef:8a:8e:29:5b:cf:71:
8a:5e:6f:82:f5:06:6a:37:05:ba:8d:6c:2c:73:4d:54:ec:d2:
6c:dc:f5:02:b4:c6:db:cd:cf:f7:81:ed:81:67:49:7d:fa:ad:
91:de:33:b7:ba:41:19:98:e9:b0:1a:13:9c:e7:04:fa:eb:f3:
c9:02:78:d7:c0:d4:4d:ec:7f:38:81:e2:3c:78:e9:f1:f0:bf:
2c:a4:ab:ee:cf:5f:52:e6:89:96:32:f4:e1:78:6f:cc:b9:21:
9a:55:07:fe:d4:d5:a3:11:80:4b:cb:e4:6f:52:25:21:64:ed:
3e:d6:ba:4f:a5:52:76:5a:34:7a:64:38:d6:96:8d:c7:78:c9:
97:66:bc:bc
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAZ/NP8GqlYQAUfy29dSiinOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjYwODA0MTQ0ODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjcxOTA3NmNlNGVmNjU2MDQ0ZGFjZmYyNmY2NDk4MzkzMmQzNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XpiuEJjYbm8aoKXpDaHKOEgYnk2
WTxhbp9f0jZjhtkD4ClBfXxBTi49JV2p9jgEGj96/jofnqKShJi+YPMhAw+hK5xg
/CofsZTbqzDKDpdBgVEMn1V66AU33iw+LvAp7qUnO0PcxVD600n6u1AiEW/ZNkiz
3wa+Evfef2p/SLf1mxBTTzyTqB9VnRrVekN5DCBhG/DMOffkpJlaYSJ57d9+Hrzo
PyVfFIAeEuPjdjkykOCM2U0PaTpQSUI801+W2m0azECX/LlFX1r9k4GRvV+2w/5p
YblEyUZPWij0wEQmxJLuOflFky1cMZuUeuRylOxQ+3NDrQ1IItgMOxtPVQIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFO9xkHbOTvZWBE2s/yb2SYOTLTQ3MB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvNzNHUWRzNU85bFlFVGF6X0p2WkpnNU10TkRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGVBggrBgEFBQcBBwEB/wSBhTCBgjBWBAIAATBQAwQDApn4
AwQAU/NFAwQAW2woAwQAW2wyAwQCXny0AwQEX4xQAwQAX6GAAwQEX6HwAwQEbe+A
AwQBshLkMAwDBACyEucDBACyEugDBAC5GkswKAQCAAIwIgMFACABCygDBwIqA1+A
AAADBwIqA1+AAAgDBwAqA1+AAkUwDQYJKoZIhvcNAQELBQADggEBAJcn5C9V/z7i
a9Xd1bjVkylK6YHgftF6Evf/Vu86/imR4jevSAPaVuY6crvMQ9mGcRZDMGpr8LLv
VYGrIKjT3nhcMQldTUUcH4QrhkdDx5rmEt+jTR8M36SRPgJc/AB1xIu7Bxvq0p8S
bRbUol3VWLQGJzZytdVi74qOKVvPcYpeb4L1Bmo3BbqNbCxzTVTs0mzc9QK0xtvN
z/eB7YFnSX36rZHeM7e6QRmY6bAaE5znBPrr88kCeNfA1E3sfziB4jx46fHwvyyk
q+7PX1LmiZYy9OF4b8y5IZpVB/7U1aMRgEvL5G9SJSFk7T7Wuk+lUnZaNHpkONaW
jcd4yZdmvLw=
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:30 2026 by rpki-client