Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4lIp8ea3WQFBN3Pqrh3ubx-xLGE.roa
File: 4lIp8ea3WQFBN3Pqrh3ubx-xLGE.roa (raw, json)
Hash identifier: MzcrykLHz17bn51pu2cLDUXzNCETQeDxNQFftxunStY=
Subject key identifier: E2:52:29:F1:E6:B7:59:01:41:37:73:EA:AE:1D:EE:6F:1F:B1:2C:61
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019E73A92BE3D611ACBF6546C7E9F4FF1965
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4lIp8ea3WQFBN3Pqrh3ubx-xLGE.roa
Signing time: Fri 29 May 2026 12:15:27 +0000
ROA not before: Fri 29 May 2026 12:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 2.59.168.0/22 maxlen: 22
2.59.168.0/24 maxlen: 24
2.59.169.0/24 maxlen: 24
2.59.170.0/24 maxlen: 24
2.59.171.0/24 maxlen: 24
45.14.132.0/22 maxlen: 22
45.14.132.0/24 maxlen: 24
45.14.133.0/24 maxlen: 24
45.14.134.0/24 maxlen: 24
45.14.135.0/24 maxlen: 24
45.82.64.0/22 maxlen: 22
45.82.64.0/24 maxlen: 24
45.82.65.0/24 maxlen: 24
45.82.66.0/24 maxlen: 24
45.82.67.0/24 maxlen: 24
62.112.8.0/22 maxlen: 22
62.112.8.0/24 maxlen: 24
62.112.9.0/24 maxlen: 24
62.112.10.0/24 maxlen: 24
62.112.11.0/24 maxlen: 24
80.79.4.0/22 maxlen: 22
80.79.4.0/24 maxlen: 24
80.79.5.0/24 maxlen: 24
80.79.6.0/24 maxlen: 24
80.79.7.0/24 maxlen: 24
89.38.96.0/22 maxlen: 22
89.38.96.0/24 maxlen: 24
89.38.97.0/24 maxlen: 24
89.38.98.0/24 maxlen: 24
89.38.99.0/24 maxlen: 24
89.39.104.0/22 maxlen: 22
89.39.104.0/24 maxlen: 24
89.39.105.0/24 maxlen: 24
89.39.106.0/24 maxlen: 24
89.39.107.0/24 maxlen: 24
91.229.23.0/24 maxlen: 24
91.232.105.0/24 maxlen: 24
93.190.136.0/21 maxlen: 21
93.190.136.0/24 maxlen: 24
93.190.137.0/24 maxlen: 24
93.190.138.0/24 maxlen: 24
93.190.139.0/24 maxlen: 24
93.190.140.0/22 maxlen: 22
93.190.140.0/24 maxlen: 24
93.190.141.0/24 maxlen: 24
93.190.142.0/24 maxlen: 24
93.190.143.0/24 maxlen: 24
109.236.80.0/20 maxlen: 20
109.236.80.0/24 maxlen: 24
109.236.81.0/24 maxlen: 24
109.236.82.0/24 maxlen: 24
109.236.83.0/24 maxlen: 24
109.236.84.0/24 maxlen: 24
109.236.85.0/24 maxlen: 24
109.236.86.0/24 maxlen: 24
109.236.87.0/24 maxlen: 24
109.236.88.0/24 maxlen: 24
109.236.89.0/24 maxlen: 24
109.236.90.0/24 maxlen: 24
109.236.91.0/24 maxlen: 24
109.236.92.0/24 maxlen: 24
109.236.93.0/24 maxlen: 24
109.236.94.0/24 maxlen: 24
109.236.95.0/24 maxlen: 24
175.110.112.0/20 maxlen: 20
175.110.112.0/24 maxlen: 24
175.110.113.0/24 maxlen: 24
175.110.114.0/24 maxlen: 24
175.110.115.0/24 maxlen: 24
175.110.116.0/24 maxlen: 24
175.110.117.0/24 maxlen: 24
175.110.118.0/24 maxlen: 24
175.110.119.0/24 maxlen: 24
175.110.120.0/24 maxlen: 24
175.110.121.0/24 maxlen: 24
175.110.122.0/24 maxlen: 24
175.110.123.0/24 maxlen: 24
175.110.124.0/24 maxlen: 24
175.110.125.0/24 maxlen: 24
175.110.126.0/24 maxlen: 24
175.110.127.0/24 maxlen: 24
178.132.0.0/21 maxlen: 21
178.132.0.0/24 maxlen: 24
178.132.1.0/24 maxlen: 24
178.132.2.0/24 maxlen: 24
178.132.3.0/24 maxlen: 24
178.132.4.0/24 maxlen: 24
178.132.5.0/24 maxlen: 24
178.132.6.0/24 maxlen: 24
178.132.7.0/24 maxlen: 24
178.218.196.0/22 maxlen: 22
178.218.196.0/24 maxlen: 24
178.218.197.0/24 maxlen: 24
178.218.198.0/24 maxlen: 24
178.218.199.0/24 maxlen: 24
185.2.80.0/22 maxlen: 22
185.2.80.0/24 maxlen: 24
185.2.81.0/24 maxlen: 24
185.2.82.0/24 maxlen: 24
185.2.83.0/24 maxlen: 24
185.4.112.0/22 maxlen: 22
185.21.60.0/22 maxlen: 22
185.21.60.0/24 maxlen: 24
185.21.61.0/24 maxlen: 24
185.21.62.0/24 maxlen: 24
185.21.63.0/24 maxlen: 24
185.100.232.0/22 maxlen: 22
185.100.232.0/24 maxlen: 24
185.100.233.0/24 maxlen: 24
185.100.234.0/24 maxlen: 24
185.100.235.0/24 maxlen: 24
185.132.132.0/22 maxlen: 22
185.132.132.0/24 maxlen: 24
185.132.133.0/24 maxlen: 24
185.132.134.0/24 maxlen: 24
185.132.135.0/24 maxlen: 24
185.132.176.0/22 maxlen: 22
185.132.176.0/24 maxlen: 24
185.132.177.0/24 maxlen: 24
185.132.178.0/24 maxlen: 24
185.132.179.0/24 maxlen: 24
185.165.240.0/22 maxlen: 22
185.165.240.0/24 maxlen: 24
185.165.241.0/24 maxlen: 24
185.165.242.0/24 maxlen: 24
185.165.243.0/24 maxlen: 24
185.172.88.0/22 maxlen: 22
185.172.88.0/24 maxlen: 24
185.172.89.0/24 maxlen: 24
185.172.90.0/24 maxlen: 24
185.172.91.0/24 maxlen: 24
185.173.160.0/22 maxlen: 22
185.173.160.0/24 maxlen: 24
185.173.161.0/24 maxlen: 24
185.173.162.0/24 maxlen: 24
185.173.163.0/24 maxlen: 24
185.177.124.0/22 maxlen: 22
185.177.124.0/24 maxlen: 24
185.177.125.0/24 maxlen: 24
185.177.126.0/24 maxlen: 24
185.177.127.0/24 maxlen: 24
185.180.220.0/22 maxlen: 22
185.180.220.0/24 maxlen: 24
185.180.221.0/24 maxlen: 24
185.180.222.0/24 maxlen: 24
185.180.223.0/24 maxlen: 24
185.182.192.0/22 maxlen: 22
185.182.192.0/24 maxlen: 24
185.182.193.0/24 maxlen: 24
185.182.194.0/24 maxlen: 24
185.182.195.0/24 maxlen: 24
185.183.32.0/22 maxlen: 22
185.183.32.0/24 maxlen: 24
185.183.33.0/24 maxlen: 24
185.183.34.0/24 maxlen: 24
185.183.35.0/24 maxlen: 24
185.184.192.0/22 maxlen: 22
185.184.192.0/24 maxlen: 24
185.184.193.0/24 maxlen: 24
185.184.194.0/24 maxlen: 24
185.184.195.0/24 maxlen: 24
185.185.48.0/22 maxlen: 22
185.185.48.0/24 maxlen: 24
185.185.49.0/24 maxlen: 24
185.185.50.0/24 maxlen: 24
185.185.51.0/24 maxlen: 24
185.191.0.0/22 maxlen: 22
185.191.0.0/24 maxlen: 24
185.191.1.0/24 maxlen: 24
185.191.2.0/24 maxlen: 24
185.191.3.0/24 maxlen: 24
193.200.164.0/24 maxlen: 24
194.88.104.0/22 maxlen: 22
194.88.104.0/24 maxlen: 24
194.88.105.0/24 maxlen: 24
194.88.106.0/24 maxlen: 24
194.88.107.0/24 maxlen: 24
212.8.240.0/24 maxlen: 24
212.8.242.0/23 maxlen: 23
212.8.242.0/24 maxlen: 24
212.8.243.0/24 maxlen: 24
212.8.248.0/23 maxlen: 23
212.8.248.0/24 maxlen: 24
212.8.249.0/24 maxlen: 24
212.8.250.0/24 maxlen: 24
212.8.252.0/23 maxlen: 23
212.8.252.0/24 maxlen: 24
212.8.253.0/24 maxlen: 24
213.189.8.0/22 maxlen: 22
217.23.0.0/20 maxlen: 20
217.23.0.0/24 maxlen: 24
217.23.1.0/24 maxlen: 24
217.23.2.0/24 maxlen: 24
217.23.3.0/24 maxlen: 24
217.23.4.0/24 maxlen: 24
217.23.5.0/24 maxlen: 24
217.23.6.0/24 maxlen: 24
217.23.7.0/24 maxlen: 24
217.23.8.0/24 maxlen: 24
217.23.9.0/24 maxlen: 24
217.23.10.0/24 maxlen: 24
217.23.11.0/24 maxlen: 24
217.23.12.0/24 maxlen: 24
217.23.13.0/24 maxlen: 24
217.23.14.0/24 maxlen: 24
217.23.15.0/24 maxlen: 24
2a00:7c80::/29 maxlen: 32
2a00:7c80::/32 maxlen: 32
2a00:7c81::/32 maxlen: 32
2a00:7c82::/32 maxlen: 32
2a00:7c83::/32 maxlen: 32
2a02:20b3:100::/40 maxlen: 40
2a02:20b3:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:a9:2b:e3:d6:11:ac:bf:65:46:c7:e9:f4:ff:19:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: May 29 12:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e25229f1e6b75901413773eaae1dee6f1fb12c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:fb:a4:f4:f8:46:36:a3:4b:4b:01:aa:68:
98:96:2f:8d:4d:cb:0a:f1:8d:ff:91:7e:7d:dd:bf:
ac:29:34:1a:b1:03:79:f8:9b:1c:f2:27:e5:7d:3c:
84:89:2c:57:75:0c:59:e2:6f:f0:5a:8c:38:34:40:
bf:11:1f:32:74:06:47:c5:ab:5b:2e:d8:30:97:7f:
a5:9e:43:fe:2b:61:88:23:bf:da:ec:e4:34:52:a5:
0f:49:20:e6:59:16:b4:a3:cb:ee:a6:10:82:9d:8b:
dc:3e:47:84:ee:13:3d:d9:a8:a2:e4:22:9c:18:25:
7f:05:0d:e6:6f:5b:a2:52:6e:74:d2:bd:c0:54:0d:
10:e3:72:f8:4a:0c:6b:3d:1c:c5:18:4d:33:87:68:
5b:7b:6d:35:2f:a8:cd:ff:78:a4:96:8e:f1:ff:bc:
02:df:e1:25:e4:92:dc:da:7e:f6:11:94:21:01:2a:
bf:e0:78:14:5d:63:82:a1:65:58:53:09:f2:02:97:
f9:26:84:58:df:bd:32:92:d6:45:55:93:d5:66:bd:
34:cd:57:b5:57:1d:99:0c:84:54:01:63:e3:10:64:
3d:7a:48:45:60:f4:69:77:05:17:02:08:ed:69:ce:
a8:e1:6b:35:de:8c:ae:ba:4f:63:65:67:06:1c:c4:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:29:F1:E6:B7:59:01:41:37:73:EA:AE:1D:EE:6F:1F:B1:2C:61
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4lIp8ea3WQFBN3Pqrh3ubx-xLGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.168.0/22
45.14.132.0/22
45.82.64.0/22
62.112.8.0/22
80.79.4.0/22
89.38.96.0/22
89.39.104.0/22
91.229.23.0/24
91.232.105.0/24
93.190.136.0/21
109.236.80.0/20
175.110.112.0/20
178.132.0.0/21
178.218.196.0/22
185.2.80.0/22
185.4.112.0/22
185.21.60.0/22
185.100.232.0/22
185.132.132.0/22
185.132.176.0/22
185.165.240.0/22
185.172.88.0/22
185.173.160.0/22
185.177.124.0/22
185.180.220.0/22
185.182.192.0/22
185.183.32.0/22
185.184.192.0/22
185.185.48.0/22
185.191.0.0/22
193.200.164.0/24
194.88.104.0/22
212.8.240.0/24
212.8.242.0/23
212.8.248.0-212.8.250.255
212.8.252.0/23
213.189.8.0/22
217.23.0.0/20
IPv6:
2a00:7c80::/29
2a02:20b3:100::-2a02:20b3:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:8d:af:e6:e0:3e:6e:c5:41:1f:36:3b:16:fc:2e:84:be:3c:
00:fa:85:a4:a3:26:6a:ef:8d:7a:d3:70:cd:f1:5d:37:1a:bd:
a4:37:fc:f6:ae:b1:89:7e:a3:08:66:5e:b5:0b:7c:70:a3:6e:
5e:c4:d9:91:88:1f:60:07:4f:3c:3e:1e:b8:3d:36:36:17:5f:
d4:29:60:3e:cd:65:90:fe:b1:89:33:fe:be:37:c8:8c:e3:f0:
f5:5e:a1:e1:5c:90:38:30:69:d8:8a:88:a8:5e:8d:2c:14:09:
7b:48:6b:bc:64:ab:27:fc:34:be:e0:0e:01:e9:07:66:46:6d:
33:34:67:98:e9:42:b8:8a:cb:a4:27:24:df:f8:d2:0e:49:d9:
78:ef:4b:cf:da:e7:e6:94:9b:be:3d:7f:53:85:4b:2a:6c:38:
66:02:7a:16:fa:6d:87:79:d9:1e:d3:92:67:29:70:de:65:1c:
ce:cb:9c:8f:ef:cc:41:91:01:87:bb:8e:19:bf:b2:6f:86:91:
30:01:9f:02:b4:30:a0:0f:0d:6a:60:31:da:0a:c3:47:f0:f1:
5f:06:61:ac:3d:10:e4:7d:04:94:87:13:b4:b5:df:d5:1a:c2:
c1:b1:2f:c0:d0:b5:f3:1c:55:41:d3:06:97:0e:e1:6a:4a:de:
76:4f:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:19:44 2026 by rpki-client