Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/rleI_lIS5woMuB3c6gl94b-COqI.roa
File: rleI_lIS5woMuB3c6gl94b-COqI.roa (raw, json)
Hash identifier: QD88ExDvyIgWPGx1fjBATSvd4/kmty0tfSEnAJh+eY0=
Subject key identifier: AE:57:88:FE:52:12:E7:0A:0C:B8:1D:DC:EA:09:7D:E1:BF:82:3A:A2
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 019F2369346A7610B5D2F5E1FBD2134C6ED3
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/rleI_lIS5woMuB3c6gl94b-COqI.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 378
IP address blocks: 128.139.0.0/16 maxlen: 24
128.139.0.0/17 maxlen: 17
128.139.4.0/24 maxlen: 24
128.139.6.0/24 maxlen: 24
128.139.7.0/24 maxlen: 24
128.139.128.0/17 maxlen: 17
128.139.171.0/24 maxlen: 24
128.139.199.0/24 maxlen: 24
128.139.200.0/24 maxlen: 24
132.78.0.0/16 maxlen: 16
185.115.212.0/22 maxlen: 22
192.114.0.0/21 maxlen: 21
192.114.0.0/24 maxlen: 24
192.114.1.0/24 maxlen: 24
192.114.2.0/24 maxlen: 24
192.114.16.0/21 maxlen: 21
192.114.48.0/21 maxlen: 21
192.114.49.0/24 maxlen: 24
192.114.50.0/24 maxlen: 24
192.114.56.0/22 maxlen: 22
192.114.60.0/23 maxlen: 23
192.114.92.0/22 maxlen: 22
192.114.96.0/20 maxlen: 20
192.114.100.0/24 maxlen: 24
192.114.101.0/24 maxlen: 24
192.114.102.0/24 maxlen: 24
192.114.124.0/22 maxlen: 22
192.114.128.0/20 maxlen: 20
192.114.192.0/18 maxlen: 18
192.115.32.0/20 maxlen: 20
192.115.40.0/24 maxlen: 24
192.115.46.0/24 maxlen: 24
192.115.64.0/22 maxlen: 22
192.115.164.0/22 maxlen: 22
192.115.168.0/21 maxlen: 21
192.115.192.0/21 maxlen: 21
192.117.80.0/20 maxlen: 20
2001:bf8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:34:6a:76:10:b5:d2:f5:e1:fb:d2:13:4c:6e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae5788fe5212e70a0cb81ddcea097de1bf823aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:04:fa:93:2c:b9:57:a9:fa:c3:3d:f7:b4:
90:d9:24:ee:99:2f:25:9a:b9:7c:47:44:eb:6d:87:
90:64:8f:c9:80:09:d3:a9:1e:42:20:7e:92:63:9d:
70:6a:86:22:6b:e1:52:18:3e:6a:3c:fc:2a:29:d2:
36:15:b7:cd:9a:5b:22:41:ae:1f:79:1f:eb:6f:f3:
30:ad:a3:9a:94:d8:02:96:47:3a:7a:54:ab:a6:84:
e8:56:8e:01:7c:72:10:d4:fc:df:a6:ac:a0:44:95:
35:a0:5d:76:14:5f:a6:51:bd:48:20:56:ae:dd:0b:
bc:d5:85:e6:2f:ba:cd:03:72:6d:b7:7c:68:89:05:
81:80:92:fb:78:7e:10:66:b6:55:81:ee:f2:75:6d:
2c:83:27:6e:a8:15:c8:e5:f2:da:e4:5d:27:da:35:
c2:93:15:0c:0b:a4:aa:e7:f0:0d:cb:35:56:51:ab:
b4:10:da:8a:9d:df:01:80:50:22:04:dc:62:5e:5a:
ca:1b:83:cf:c1:1d:ad:c2:48:5b:df:74:5e:b2:3a:
9b:c9:22:46:e2:93:79:a4:a5:fd:bf:45:5b:b6:84:
d1:93:2a:38:fc:ec:fb:91:a4:c1:1a:79:d6:43:7b:
9a:00:d6:33:cb:89:d6:34:8b:b0:34:eb:36:09:9c:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:57:88:FE:52:12:E7:0A:0C:B8:1D:DC:EA:09:7D:E1:BF:82:3A:A2
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/rleI_lIS5woMuB3c6gl94b-COqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.0.0/16
132.78.0.0/16
185.115.212.0/22
192.114.0.0/21
192.114.16.0/21
192.114.48.0-192.114.61.255
192.114.92.0-192.114.111.255
192.114.124.0-192.114.143.255
192.114.192.0/18
192.115.32.0/20
192.115.64.0/22
192.115.164.0-192.115.175.255
192.115.192.0/21
192.117.80.0/20
IPv6:
2001:bf8::/32
Signature Algorithm: sha256WithRSAEncryption
81:98:b0:9a:04:59:fb:b7:3e:35:39:b5:45:d2:cc:b7:6b:59:
3d:4d:87:fc:47:96:b0:cd:ad:cc:1c:9f:05:d7:2d:6b:e9:df:
3f:4a:ec:a1:69:c3:14:13:63:4f:05:96:bf:31:d9:93:0b:54:
34:87:31:eb:13:1b:3a:4f:96:c6:71:6d:72:88:a9:03:5c:3e:
d2:4d:3e:1e:b2:bc:c3:ce:3e:92:42:89:1e:b7:af:a3:08:76:
73:87:4a:18:53:b8:2c:f4:3b:76:fe:5c:62:af:3e:bd:2c:d5:
72:f0:19:ce:75:4f:ed:7c:11:50:ed:54:43:4b:76:94:13:1e:
52:fd:c8:1c:6a:64:46:74:fb:91:30:5c:ca:97:13:9f:fc:98:
dc:a2:bf:87:37:51:76:3d:76:b1:e0:14:3e:e6:4b:a4:52:b0:
3a:bb:e9:20:43:a7:84:41:0b:e5:80:17:2a:3c:af:70:f6:9a:
46:6f:fd:09:41:c4:5d:88:97:fd:eb:14:ce:31:97:5d:2c:4b:
7c:95:2d:43:e7:02:32:b4:18:c3:c0:bf:89:a8:19:7e:9d:41:
e3:a0:3d:a4:80:9e:4f:33:99:9a:fc:e1:ad:58:78:d7:96:1f:
f1:16:85:88:1a:44:c8:fc:08:6a:d0:e8:e3:ac:15:2a:c5:c8:
5f:88:db:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:41 2026 by rpki-client