Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/uTvO6SZkjQFvdI1ZHQsIdz3HB2s.roa
File: uTvO6SZkjQFvdI1ZHQsIdz3HB2s.roa (raw, json)
Hash identifier: 1N5rJ4DYAOCB+iOadCqD6q+2siTbZVNpmhH3JuU9WDA=
Subject key identifier: B9:3B:CE:E9:26:64:8D:01:6F:74:8D:59:1D:0B:08:77:3D:C7:07:6B
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019FEBDEB7DF2B54CD1AA8522B77FFFAEBF5
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/uTvO6SZkjQFvdI1ZHQsIdz3HB2s.roa
Signing time: Mon 10 Aug 2026 13:31:09 +0000
ROA not before: Mon 10 Aug 2026 13:31:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 24
45.83.57.0/24 maxlen: 24
45.83.58.0/24 maxlen: 24
45.83.59.0/24 maxlen: 24
45.86.144.0/24 maxlen: 24
45.86.145.0/24 maxlen: 24
45.86.146.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
86.104.67.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/24 maxlen: 24
89.34.239.0/24 maxlen: 24
89.39.201.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.142.0/24 maxlen: 24
89.40.143.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
89.44.237.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
92.114.86.0/24 maxlen: 24
92.114.87.0/24 maxlen: 24
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/22 maxlen: 22
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
93.115.57.0/24 maxlen: 24
94.176.108.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.10.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
94.177.48.0/24 maxlen: 24
94.177.49.0/24 maxlen: 24
94.177.96.0/24 maxlen: 24
94.177.98.0/24 maxlen: 24
94.177.99.0/24 maxlen: 24
176.223.64.0/24 maxlen: 24
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.214.199.0/24 maxlen: 24
188.215.6.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.80.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.241.66.0/24 maxlen: 24
188.241.67.0/24 maxlen: 24
188.241.126.0/24 maxlen: 24
188.241.138.0/24 maxlen: 24
188.241.139.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
193.239.140.0/23 maxlen: 24
193.239.141.0/24 maxlen: 24
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:de:b7:df:2b:54:cd:1a:a8:52:2b:77:ff:fa:eb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Aug 10 13:31:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b93bcee926648d016f748d591d0b08773dc7076b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:dd:5d:78:3e:0f:d0:c5:99:dc:64:c8:37:
e4:32:7c:1a:0a:4a:94:1b:1f:e8:a7:65:72:ad:65:
6d:9e:71:52:e2:c9:8d:0f:08:7e:bb:15:1b:0c:b6:
9f:6a:f1:94:e7:54:b2:b8:5c:1d:07:14:e7:b3:02:
1b:43:b4:5f:96:4f:eb:9d:ee:55:6c:0a:0f:c5:b4:
db:7d:7d:d9:6b:d4:5f:f0:1b:83:87:83:e7:04:fd:
fd:86:7e:e3:01:6e:41:16:b8:f1:f7:36:94:f3:73:
a4:f4:02:c4:38:84:cb:b1:cf:12:98:57:15:d2:8d:
b6:4a:b6:51:9f:e1:6d:f8:84:ae:6a:d0:3b:55:70:
b4:1a:41:ad:94:6f:56:a4:d3:6c:02:0e:ed:5b:e5:
10:d0:2c:de:32:e9:c7:1a:8e:1d:44:c0:a6:5d:89:
a3:fd:fc:79:57:65:9d:42:8d:de:a1:53:68:89:d1:
b6:15:66:72:83:67:a5:2b:81:e8:12:7e:ca:59:61:
cd:04:fc:44:3a:46:5c:20:0c:95:d3:ed:fd:51:96:
a7:47:db:c8:60:77:c3:66:ba:dd:6b:02:8c:dc:10:
0d:8d:6f:7c:ff:de:2d:99:06:f9:a1:1c:f3:a7:16:
b9:68:a9:96:4e:fb:f5:28:d0:9d:04:5e:1b:be:3b:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3B:CE:E9:26:64:8D:01:6F:74:8D:59:1D:0B:08:77:3D:C7:07:6B
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/uTvO6SZkjQFvdI1ZHQsIdz3HB2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0-45.86.146.255
77.81.103.0/24
86.104.67.0/24
86.107.110.0/24
89.34.236.0/24
89.34.239.0/24
89.39.201.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
89.44.237.0/24
91.212.52.0/24
91.229.186.0/24
92.114.86.0/23
93.113.144.0/21
93.115.57.0/24
94.176.108.0/24
94.176.212.0/24
94.177.10.0/24
94.177.21.0/24
94.177.48.0/23
94.177.96.0/24
94.177.98.0/23
176.223.64.0/24
185.184.240.0/22
185.198.244.0-185.198.246.255
188.208.16.0/23
188.211.248.0/24
188.214.199.0/24
188.215.6.0/24
188.215.94.0/24
188.240.80.0/24
188.240.228.0/23
188.241.66.0/23
188.241.126.0/24
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
03:3f:b8:da:b7:7e:28:1a:75:1d:b4:82:83:cc:df:b4:e9:1e:
2f:2e:ae:25:cb:e5:0e:d4:ac:25:03:fc:74:75:82:9e:6f:79:
1c:34:94:9c:65:35:03:7e:35:1a:b9:50:34:b6:78:47:53:68:
fb:0c:3c:ab:75:6e:ae:1d:d9:96:0e:e7:0f:aa:cd:4a:51:a6:
4b:77:92:e7:10:81:e4:96:93:d8:fc:54:4d:98:0b:c6:11:3d:
66:e1:13:50:2e:b1:76:4a:85:43:c0:b5:0d:70:a7:d4:0a:26:
55:04:4b:26:ff:8f:f8:a1:bd:56:ca:e9:af:3c:f8:c3:df:57:
72:13:89:29:54:23:46:4c:90:18:41:33:4f:53:86:c5:3a:5f:
88:21:65:0e:03:04:a1:62:b2:01:90:cd:81:bf:61:2f:44:aa:
64:92:29:35:e6:96:54:b3:b0:09:be:24:61:dc:cc:1b:4c:29:
0a:17:32:e7:d8:53:cf:ad:05:63:da:b9:61:6d:57:fa:8a:c3:
41:0b:fe:e0:28:8e:34:3a:d1:da:38:1b:29:0e:bd:37:3e:0b:
aa:75:00:a2:bc:e0:04:46:90:30:1b:a2:c3:b8:94:1d:59:10:
ea:a4:81:30:21:98:f6:f1:68:ec:d9:bd:3d:53:4e:4c:91:e1:
d3:a5:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:56:00 2026 by rpki-client