Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ybDI0eMtWsSSq_xPUrRWLwY36gI.roa
File: ybDI0eMtWsSSq_xPUrRWLwY36gI.roa (raw, json)
Hash identifier: qYHpjfUrZ9EOnBSlaujoY6IlHaVuawHAJ/3Mp+t7rcY=
Subject key identifier: C9:B0:C8:D1:E3:2D:5A:C4:92:AB:FC:4F:52:B4:56:2F:06:37:EA:02
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368EF606BEB70166284236AD6126AB5
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ybDI0eMtWsSSq_xPUrRWLwY36gI.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
91.216.229.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.29.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 22
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.149.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.244.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.176.0/22 maxlen: 22
193.247.193.0/24 maxlen: 24
193.247.212.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:918:ffaa::/48 maxlen: 48
2001:91a::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ef:60:6b:eb:70:16:62:84:23:6a:d6:12:6a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9b0c8d1e32d5ac492abfc4f52b4562f0637ea02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:33:9b:68:4b:49:7b:d0:82:45:be:8e:6d:
0c:55:73:0c:5b:d9:f9:12:ba:63:cc:74:38:e4:c6:
c3:5a:6d:79:f5:e0:30:58:30:70:8a:a1:8c:d4:1d:
2f:ee:5c:2f:7d:12:84:44:50:ff:60:4b:62:32:4b:
64:04:8b:c4:81:c1:bf:c7:54:6f:3c:b2:c4:19:a7:
fe:b2:f6:c4:5f:4a:0c:88:84:f0:43:12:6b:b3:10:
b5:ad:8c:e5:a4:a0:24:df:9b:ed:22:b7:2e:7b:1d:
66:25:7c:69:f5:eb:16:72:13:7b:75:03:76:77:7c:
dd:90:95:b4:8e:c9:71:b8:47:2e:85:c4:79:83:ed:
5e:23:7f:45:bf:10:26:9a:2d:9d:11:1d:b4:72:4c:
4e:8c:db:27:f9:0f:ce:07:e1:50:60:08:3b:9c:22:
09:e8:7e:9a:5a:71:0e:f7:12:d8:d7:21:75:c2:e3:
fd:1c:e8:fc:7f:5d:a0:46:62:80:84:31:c8:4f:00:
36:05:fe:64:90:3c:b0:d9:a2:a8:42:f3:d7:0c:f8:
8a:a9:fd:9e:f1:27:84:b9:4f:13:46:b8:2a:6a:5a:
56:ad:83:bc:f6:7d:38:ae:e7:b3:bc:d0:79:2f:7b:
a0:cb:74:bb:63:ae:e8:d5:aa:e0:c2:f7:24:e1:db:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:C8:D1:E3:2D:5A:C4:92:AB:FC:4F:52:B4:56:2F:06:37:EA:02
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ybDI0eMtWsSSq_xPUrRWLwY36gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
91.216.229.0/24
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.29.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.244.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.168.0-193.247.179.255
193.247.193.0/24
193.247.212.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91a::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
5d:3a:82:5a:8e:69:64:af:5a:36:ad:c3:44:7b:95:c6:a6:25:
bb:53:d9:03:30:62:61:3d:65:7c:fa:f3:da:16:f1:d6:ba:5f:
11:ba:88:d5:34:cd:eb:f0:2d:75:ea:e8:35:dc:71:04:77:5e:
66:d0:05:09:da:b4:f6:2e:89:1e:71:94:bb:5f:9c:59:e3:e4:
b1:af:46:5c:35:26:68:a3:8f:9d:ae:e8:bc:91:e0:db:b8:03:
ec:0c:14:7f:f0:7c:19:a2:7b:75:43:a3:76:56:99:d0:cf:74:
94:58:e4:bd:c0:45:c6:81:19:24:b5:87:e8:d7:d8:a9:68:ba:
e2:28:db:e3:74:f4:e1:36:01:50:f7:51:3d:5c:89:4a:71:95:
09:a3:50:a0:27:f3:92:45:a7:02:6d:41:0f:8e:02:35:1c:37:
12:0d:f4:4c:1c:a5:a7:be:c8:5f:0d:17:8a:4a:94:d1:7f:ce:
03:4e:8d:0a:9a:16:69:bb:15:da:b1:7d:1e:19:45:6e:53:33:
d8:0a:93:90:56:9c:b3:97:50:e3:dd:fe:33:71:28:35:79:3d:
2a:b7:c1:11:0b:7d:4f:b7:b8:b5:c3:17:1d:3a:02:6e:b6:2d:
f1:54:1a:47:19:98:36:a5:28:34:cd:9a:73:69:ab:a2:1b:0c:
74:86:4c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:19 2026 by rpki-client