Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/N6M8d0NwoaL1PF0XdGzWcM7oS6U.roa
File: N6M8d0NwoaL1PF0XdGzWcM7oS6U.roa (raw, json)
Hash identifier: 1nELI2aLvZST5tqYPUbmQ6P3U27GObfmmTSbFUSvOQ8=
Subject key identifier: 37:A3:3C:77:43:70:A1:A2:F5:3C:5D:17:74:6C:D6:70:CE:E8:4B:A5
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019E83C02114EF34A5F18F1C04091DD0CE86
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/N6M8d0NwoaL1PF0XdGzWcM7oS6U.roa
Signing time: Mon 01 Jun 2026 15:14:27 +0000
ROA not before: Mon 01 Jun 2026 15:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.0.0/21 maxlen: 22
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.90.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.51.0/24 maxlen: 24
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.240.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:c0:21:14:ef:34:a5:f1:8f:1c:04:09:1d:d0:ce:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 1 15:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37a33c774370a1a2f53c5d17746cd670cee84ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:bd:e5:98:f3:70:37:29:63:04:a7:4b:57:
0b:24:25:97:f6:06:26:ad:00:bc:34:52:7a:2f:42:
9d:48:6d:b8:ee:a7:a5:c6:c4:ee:aa:79:ae:30:06:
9d:70:c8:1d:83:10:7b:94:c5:ad:cb:5e:74:93:19:
05:e2:6e:7b:71:7a:0f:81:6b:e0:c5:7b:96:35:64:
5c:e1:2e:66:e8:31:5a:78:91:b3:1b:58:3f:36:c0:
70:21:4e:b3:f2:b1:36:21:68:c5:20:b5:bf:be:67:
a3:36:99:20:82:54:5d:4a:aa:fb:ed:cb:9a:35:b8:
d4:26:23:d4:82:7e:da:33:68:6d:5a:4c:1d:28:5e:
4a:11:db:1e:d4:75:f1:a1:3a:2f:23:56:8a:e1:db:
59:e5:43:1d:c7:a4:f9:81:e6:4c:00:74:51:03:a1:
fb:a9:84:ef:6b:31:33:74:9a:08:7c:b1:27:4a:7d:
cc:b1:55:f8:c4:87:6e:56:20:fe:e5:21:a4:bd:cf:
34:41:dd:51:c0:9d:e0:b2:d5:20:a3:d4:1f:b6:27:
95:94:e0:97:1a:9f:4c:5e:9b:7f:6f:17:67:53:79:
13:fa:12:a5:05:3f:68:d7:b7:23:de:24:3c:fd:a7:
8c:e7:48:52:1b:8c:84:07:ae:da:f1:04:86:39:5e:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:3C:77:43:70:A1:A2:F5:3C:5D:17:74:6C:D6:70:CE:E8:4B:A5
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/N6M8d0NwoaL1PF0XdGzWcM7oS6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.0.0-5.8.16.255
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.90.0/23
5.188.44.0-5.188.49.255
5.188.51.0/24
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.188.0/22
31.184.192.0/21
31.184.238.0-31.184.241.255
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
6f:66:85:7a:e7:3e:8c:3a:bd:c3:b0:14:a1:78:a8:d3:5b:4c:
d1:e0:d5:a5:89:8d:da:d0:32:a1:60:02:7b:70:b8:2b:49:84:
be:eb:06:7d:34:4f:5e:b9:0f:1f:71:40:44:db:cc:f6:47:69:
16:c2:f4:d6:0b:af:32:fb:a9:73:b3:ce:87:bb:cb:ee:4f:e9:
87:9e:b8:1a:5e:38:41:88:7a:22:9c:27:1a:0e:a2:b9:33:68:
5c:ef:a4:c8:3f:a0:67:8a:4b:27:69:c4:5e:14:ec:a5:70:19:
90:83:9f:bc:43:79:07:f4:be:96:ac:f0:8c:3b:55:4b:8b:6c:
73:ed:27:95:44:2b:1d:1c:5f:e5:fe:62:cd:d2:42:69:60:22:
c6:b5:10:e0:7f:9f:ee:e6:57:16:95:51:b0:47:1e:d9:ae:3f:
15:68:f1:0a:d1:53:74:ff:33:23:99:c7:6d:0c:cd:ef:b1:15:
b6:9b:b5:6f:50:9c:fe:2a:b0:28:34:98:c1:1f:ee:17:fe:6a:
d1:64:9b:e2:a7:71:1f:d8:11:db:dd:23:59:64:a2:c4:bd:46:
38:f2:69:15:45:0e:57:15:fb:27:0f:19:72:24:b6:c6:11:56:
46:62:c4:98:a1:9a:42:c2:20:ee:dc:bd:49:a4:2e:68:a2:f3:
26:47:51:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:05 2026 by rpki-client