Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/efYx2Naa9G8N6_bwOdBPLtUpvIc.roa
File: efYx2Naa9G8N6_bwOdBPLtUpvIc.roa (raw, json)
Hash identifier: 2vbWTgOzCvgtKkoB/3a/tGvRVc8asQkkZl4xhzqkRcU=
Subject key identifier: 79:F6:31:D8:D6:9A:F4:6F:0D:EB:F6:F0:39:D0:4F:2E:D5:29:BC:87
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A163ABD1A7E83540D0CA43E78675C81818
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/efYx2Naa9G8N6_bwOdBPLtUpvIc.roa
Signing time: Thu 22 Oct 2026 12:52:47 +0000
ROA not before: Thu 22 Oct 2026 12:52:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 2.59.168.0/22 maxlen: 22
2.59.168.0/24 maxlen: 24
2.59.169.0/24 maxlen: 24
2.59.170.0/24 maxlen: 24
2.59.171.0/24 maxlen: 24
45.14.132.0/22 maxlen: 22
45.14.132.0/24 maxlen: 24
45.14.133.0/24 maxlen: 24
45.14.134.0/24 maxlen: 24
45.14.135.0/24 maxlen: 24
45.82.64.0/22 maxlen: 22
45.82.64.0/24 maxlen: 24
45.82.65.0/24 maxlen: 24
45.82.66.0/24 maxlen: 24
45.82.67.0/24 maxlen: 24
62.112.8.0/22 maxlen: 22
62.112.8.0/24 maxlen: 24
62.112.9.0/24 maxlen: 24
62.112.10.0/24 maxlen: 24
62.112.11.0/24 maxlen: 24
80.79.4.0/22 maxlen: 22
80.79.4.0/24 maxlen: 24
80.79.5.0/24 maxlen: 24
80.79.6.0/24 maxlen: 24
80.79.7.0/24 maxlen: 24
83.98.152.0/22 maxlen: 22
83.98.160.0/22 maxlen: 22
83.98.176.0/22 maxlen: 22
89.38.96.0/22 maxlen: 22
89.38.96.0/24 maxlen: 24
89.38.97.0/24 maxlen: 24
89.38.98.0/24 maxlen: 24
89.38.99.0/24 maxlen: 24
89.39.104.0/22 maxlen: 22
89.39.104.0/24 maxlen: 24
89.39.105.0/24 maxlen: 24
89.39.106.0/24 maxlen: 24
89.39.107.0/24 maxlen: 24
91.229.23.0/24 maxlen: 24
91.232.105.0/24 maxlen: 24
93.190.136.0/21 maxlen: 21
93.190.136.0/24 maxlen: 24
93.190.137.0/24 maxlen: 24
93.190.138.0/24 maxlen: 24
93.190.139.0/24 maxlen: 24
93.190.140.0/22 maxlen: 22
93.190.140.0/24 maxlen: 24
93.190.141.0/24 maxlen: 24
93.190.142.0/24 maxlen: 24
93.190.143.0/24 maxlen: 24
109.236.80.0/20 maxlen: 20
109.236.80.0/24 maxlen: 24
109.236.81.0/24 maxlen: 24
109.236.82.0/24 maxlen: 24
109.236.83.0/24 maxlen: 24
109.236.84.0/24 maxlen: 24
109.236.85.0/24 maxlen: 24
109.236.86.0/24 maxlen: 24
109.236.87.0/24 maxlen: 24
109.236.88.0/24 maxlen: 24
109.236.89.0/24 maxlen: 24
109.236.90.0/24 maxlen: 24
109.236.91.0/24 maxlen: 24
109.236.92.0/24 maxlen: 24
109.236.93.0/24 maxlen: 24
109.236.94.0/24 maxlen: 24
109.236.95.0/24 maxlen: 24
175.110.112.0/20 maxlen: 20
175.110.112.0/24 maxlen: 24
175.110.113.0/24 maxlen: 24
175.110.114.0/24 maxlen: 24
175.110.115.0/24 maxlen: 24
175.110.116.0/24 maxlen: 24
175.110.117.0/24 maxlen: 24
175.110.118.0/24 maxlen: 24
175.110.119.0/24 maxlen: 24
175.110.120.0/24 maxlen: 24
175.110.121.0/24 maxlen: 24
175.110.122.0/24 maxlen: 24
175.110.123.0/24 maxlen: 24
175.110.124.0/24 maxlen: 24
175.110.125.0/24 maxlen: 24
175.110.126.0/24 maxlen: 24
175.110.127.0/24 maxlen: 24
178.132.0.0/21 maxlen: 21
178.132.0.0/24 maxlen: 24
178.132.1.0/24 maxlen: 24
178.132.2.0/24 maxlen: 24
178.132.3.0/24 maxlen: 24
178.132.4.0/24 maxlen: 24
178.132.5.0/24 maxlen: 24
178.132.6.0/24 maxlen: 24
178.132.7.0/24 maxlen: 24
178.218.196.0/22 maxlen: 22
178.218.196.0/24 maxlen: 24
178.218.197.0/24 maxlen: 24
178.218.198.0/24 maxlen: 24
178.218.199.0/24 maxlen: 24
185.2.80.0/22 maxlen: 22
185.2.80.0/24 maxlen: 24
185.2.81.0/24 maxlen: 24
185.2.82.0/24 maxlen: 24
185.2.83.0/24 maxlen: 24
185.4.112.0/22 maxlen: 22
185.21.60.0/22 maxlen: 22
185.21.60.0/24 maxlen: 24
185.21.61.0/24 maxlen: 24
185.21.62.0/24 maxlen: 24
185.21.63.0/24 maxlen: 24
185.100.232.0/22 maxlen: 22
185.100.232.0/24 maxlen: 24
185.100.233.0/24 maxlen: 24
185.100.234.0/24 maxlen: 24
185.100.235.0/24 maxlen: 24
185.132.132.0/22 maxlen: 22
185.132.132.0/24 maxlen: 24
185.132.133.0/24 maxlen: 24
185.132.134.0/24 maxlen: 24
185.132.135.0/24 maxlen: 24
185.132.176.0/22 maxlen: 22
185.132.176.0/24 maxlen: 24
185.132.177.0/24 maxlen: 24
185.132.178.0/24 maxlen: 24
185.132.179.0/24 maxlen: 24
185.165.240.0/22 maxlen: 22
185.165.240.0/24 maxlen: 24
185.165.241.0/24 maxlen: 24
185.165.242.0/24 maxlen: 24
185.165.243.0/24 maxlen: 24
185.172.88.0/22 maxlen: 22
185.172.88.0/24 maxlen: 24
185.172.89.0/24 maxlen: 24
185.172.90.0/24 maxlen: 24
185.172.91.0/24 maxlen: 24
185.173.160.0/22 maxlen: 22
185.173.160.0/24 maxlen: 24
185.173.161.0/24 maxlen: 24
185.173.162.0/24 maxlen: 24
185.173.163.0/24 maxlen: 24
185.177.124.0/22 maxlen: 22
185.177.124.0/24 maxlen: 24
185.177.125.0/24 maxlen: 24
185.177.126.0/24 maxlen: 24
185.177.127.0/24 maxlen: 24
185.180.220.0/22 maxlen: 22
185.180.220.0/24 maxlen: 24
185.180.221.0/24 maxlen: 24
185.180.222.0/24 maxlen: 24
185.180.223.0/24 maxlen: 24
185.182.192.0/22 maxlen: 22
185.182.192.0/24 maxlen: 24
185.182.193.0/24 maxlen: 24
185.182.194.0/24 maxlen: 24
185.182.195.0/24 maxlen: 24
185.183.32.0/22 maxlen: 22
185.183.32.0/24 maxlen: 24
185.183.33.0/24 maxlen: 24
185.183.34.0/24 maxlen: 24
185.183.35.0/24 maxlen: 24
185.184.192.0/22 maxlen: 22
185.184.192.0/24 maxlen: 24
185.184.193.0/24 maxlen: 24
185.184.194.0/24 maxlen: 24
185.184.195.0/24 maxlen: 24
185.185.48.0/22 maxlen: 22
185.185.48.0/24 maxlen: 24
185.185.49.0/24 maxlen: 24
185.185.50.0/24 maxlen: 24
185.185.51.0/24 maxlen: 24
185.191.0.0/22 maxlen: 22
185.191.0.0/24 maxlen: 24
185.191.1.0/24 maxlen: 24
185.191.2.0/24 maxlen: 24
185.191.3.0/24 maxlen: 24
193.200.164.0/24 maxlen: 24
194.88.104.0/22 maxlen: 22
194.88.104.0/24 maxlen: 24
194.88.105.0/24 maxlen: 24
194.88.106.0/24 maxlen: 24
194.88.107.0/24 maxlen: 24
212.8.240.0/24 maxlen: 24
212.8.242.0/23 maxlen: 23
212.8.242.0/24 maxlen: 24
212.8.243.0/24 maxlen: 24
212.8.248.0/23 maxlen: 23
212.8.248.0/24 maxlen: 24
212.8.249.0/24 maxlen: 24
212.8.250.0/24 maxlen: 24
212.8.252.0/23 maxlen: 23
212.8.252.0/24 maxlen: 24
212.8.253.0/24 maxlen: 24
213.189.8.0/22 maxlen: 22
217.23.0.0/20 maxlen: 20
217.23.0.0/24 maxlen: 24
217.23.1.0/24 maxlen: 24
217.23.2.0/24 maxlen: 24
217.23.3.0/24 maxlen: 24
217.23.4.0/24 maxlen: 24
217.23.5.0/24 maxlen: 24
217.23.6.0/24 maxlen: 24
217.23.7.0/24 maxlen: 24
217.23.8.0/24 maxlen: 24
217.23.9.0/24 maxlen: 24
217.23.10.0/24 maxlen: 24
217.23.11.0/24 maxlen: 24
217.23.12.0/24 maxlen: 24
217.23.13.0/24 maxlen: 24
217.23.14.0/24 maxlen: 24
217.23.15.0/24 maxlen: 24
2a00:7c80::/29 maxlen: 32
2a00:7c80::/32 maxlen: 32
2a00:7c81::/32 maxlen: 32
2a00:7c82::/32 maxlen: 32
2a00:7c83::/32 maxlen: 32
2a02:20b3:100::/40 maxlen: 40
2a02:20b3:200::/40 maxlen: 40
2a02:20b3:300::/40 maxlen: 40
2a02:20b4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:ab:d1:a7:e8:35:40:d0:ca:43:e7:86:75:c8:18:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 22 12:52:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79f631d8d69af46f0debf6f039d04f2ed529bc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:d0:d2:23:66:e6:f5:00:78:6e:58:c6:b4:
33:80:87:fe:7a:a6:90:71:8a:fd:fa:1c:58:88:a3:
5e:08:65:04:e4:02:39:3a:7d:ba:c5:d8:c5:41:0e:
c3:ff:33:70:6b:8b:2e:0d:44:69:9a:a9:cb:e9:31:
c6:9c:d3:78:d3:dd:51:76:6e:60:16:77:53:b6:9f:
4d:16:8a:1f:c1:61:c1:4a:6e:9e:4a:16:88:e6:8e:
f1:a7:f1:e0:df:1f:b2:72:9c:b5:da:b9:41:61:50:
3c:20:ac:98:e8:c9:14:78:be:02:a9:a4:2a:84:b1:
10:bc:68:f5:77:2b:11:a4:59:eb:c5:18:2b:8b:37:
4e:d6:91:bf:7c:79:5e:cc:c8:c1:55:50:02:46:5b:
57:aa:b8:6b:ec:42:c3:66:7b:83:28:5c:bd:4d:74:
86:8f:69:89:8f:b6:31:27:03:c5:b2:4a:c2:90:c8:
f4:48:74:a1:df:20:7b:00:97:b3:8c:4c:bc:f4:33:
c6:88:df:8d:3a:a6:af:06:7f:e7:bd:69:73:14:96:
8f:52:fd:67:c4:46:6a:b5:7a:0f:a3:c2:8f:57:c2:
b2:f7:00:b5:c9:a1:03:68:89:b6:76:40:a3:1e:55:
19:67:d3:e7:43:be:05:ec:7f:7c:82:d1:a5:8b:1d:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F6:31:D8:D6:9A:F4:6F:0D:EB:F6:F0:39:D0:4F:2E:D5:29:BC:87
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/efYx2Naa9G8N6_bwOdBPLtUpvIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.168.0/22
45.14.132.0/22
45.82.64.0/22
62.112.8.0/22
80.79.4.0/22
83.98.152.0/22
83.98.160.0/22
83.98.176.0/22
89.38.96.0/22
89.39.104.0/22
91.229.23.0/24
91.232.105.0/24
93.190.136.0/21
109.236.80.0/20
175.110.112.0/20
178.132.0.0/21
178.218.196.0/22
185.2.80.0/22
185.4.112.0/22
185.21.60.0/22
185.100.232.0/22
185.132.132.0/22
185.132.176.0/22
185.165.240.0/22
185.172.88.0/22
185.173.160.0/22
185.177.124.0/22
185.180.220.0/22
185.182.192.0/22
185.183.32.0/22
185.184.192.0/22
185.185.48.0/22
185.191.0.0/22
193.200.164.0/24
194.88.104.0/22
212.8.240.0/24
212.8.242.0/23
212.8.248.0-212.8.250.255
212.8.252.0/23
213.189.8.0/22
217.23.0.0/20
IPv6:
2a00:7c80::/29
2a02:20b3:100::-2a02:20b3:3ff:ffff:ffff:ffff:ffff:ffff
2a02:20b4::/32
Signature Algorithm: sha256WithRSAEncryption
3c:f1:4a:3e:70:e1:b0:81:c1:8f:5b:c8:94:fd:f7:7b:37:90:
80:2c:23:a2:21:68:16:50:1c:71:b7:a3:73:02:69:fc:58:6b:
e5:e9:33:eb:af:ec:ec:23:1c:55:c0:09:78:ca:9d:a5:0c:6b:
57:68:18:d0:4d:19:cd:a8:f8:66:bd:ff:aa:cf:d9:17:48:b9:
90:0a:43:51:25:72:11:7f:18:d7:ba:85:fd:f6:fe:98:23:3b:
cc:e7:97:1f:22:96:7d:25:3c:8a:9d:4c:cd:08:a4:c2:1d:a7:
51:71:92:23:94:d1:4f:a3:a9:1c:2f:6f:3e:0e:50:e5:94:48:
18:7e:23:8a:e0:6f:98:45:9d:ac:89:c5:9d:77:a0:9c:c0:78:
57:a1:ad:2d:70:e3:90:3d:9d:92:4f:11:2a:e4:4b:55:32:8c:
64:d6:06:bb:f4:31:d7:53:cf:96:78:be:c4:ec:34:ba:0b:7a:
2f:66:9d:d7:5b:cb:dd:14:19:cd:8d:8f:04:37:59:6b:68:65:
d5:77:16:0e:95:24:8f:4e:42:92:b3:89:87:8f:9a:25:5d:68:
8d:75:ba:62:e0:ca:cf:25:3d:e0:e8:cf:e4:89:5a:47:8a:5f:
58:f8:4b:54:b2:2e:56:32:bf:b1:41:a2:ca:95:e8:de:60:2f:
71:6c:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:34:43 2026 by rpki-client