Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MaddMEoZ8olvC2vjnmhirFO73Ik.roa
File: MaddMEoZ8olvC2vjnmhirFO73Ik.roa (raw, json)
Hash identifier: c8NwSOH3wRGOfeaEsO8QlI3JQoLRqCZ4c562oJm19Eg=
Subject key identifier: 31:A7:5D:30:4A:19:F2:89:6F:0B:6B:E3:9E:68:62:AC:53:BB:DC:89
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019ED1922798609A251E661E78BF1FBD5CCF
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MaddMEoZ8olvC2vjnmhirFO73Ik.roa
Signing time: Tue 16 Jun 2026 17:54:36 +0000
ROA not before: Tue 16 Jun 2026 17:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.68.83.0/24 maxlen: 24
62.68.86.0/24 maxlen: 24
62.68.87.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.68.145.0/24 maxlen: 24
80.68.158.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
93.177.104.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.155.101.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.64.114.0/24 maxlen: 24
195.93.249.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:92:27:98:60:9a:25:1e:66:1e:78:bf:1f:bd:5c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 16 17:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31a75d304a19f2896f0b6be39e6862ac53bbdc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:49:4f:49:13:06:3c:20:ec:99:a7:9f:a7:
d3:2a:5b:6b:73:f8:27:56:20:7f:c0:3d:fe:d4:19:
92:1c:9e:9b:7a:5c:24:8b:b5:68:41:1c:ef:25:18:
0b:7f:3c:09:e9:0f:76:12:9f:a0:3c:9f:ea:34:af:
39:14:c0:13:4a:71:5c:74:f6:df:08:96:3b:c9:09:
e0:b7:c8:f4:d9:b5:08:74:3b:a0:d5:0d:4f:bd:d3:
9c:49:4b:70:cd:a9:d2:1a:c9:86:c5:e8:3f:37:43:
e7:ea:8c:1d:f8:d2:ae:52:d1:33:26:a5:e7:9a:b5:
2b:53:b8:5c:7c:51:3b:a9:d4:b2:ab:2a:a5:c7:10:
df:6c:cb:72:b9:10:58:4b:39:1c:60:31:56:e3:cb:
ec:16:88:12:c2:43:9a:8f:e1:6d:ee:b4:26:96:06:
c5:60:d5:ef:a3:13:27:ad:30:bb:a7:7f:9e:4d:44:
0a:04:71:a9:22:4c:4b:4f:04:bc:90:9d:1e:be:32:
3d:b0:82:e0:59:7e:da:b0:3a:48:c4:59:ef:2b:2b:
07:0d:0b:d6:ca:09:34:ce:0f:c5:9b:64:e0:49:20:
ed:42:78:24:1f:29:cb:d3:58:53:8d:31:5f:2c:c7:
14:f9:d2:25:47:da:34:06:ec:0e:bb:0a:dd:2b:1c:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:5D:30:4A:19:F2:89:6F:0B:6B:E3:9E:68:62:AC:53:BB:DC:89
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MaddMEoZ8olvC2vjnmhirFO73Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/24
45.132.48.0/24
45.157.136.0/24
62.68.83.0/24
62.68.86.0/23
62.204.36.0/24
62.233.49.0/24
62.233.56.0/24
62.233.60.0/24
80.68.145.0/24
80.68.158.0/24
80.91.209.0-80.91.210.255
91.226.247.0/24
93.177.104.0/24
94.143.226.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
146.19.148.0/24
146.19.150.0/24
146.19.152.0/24
146.19.190.0/24
176.56.38.0/24
185.122.206.0/24
185.155.101.0/24
185.218.1.0/24
193.3.22.0/24
193.239.209.0/24
195.64.112.0/24
195.64.114.0/24
195.93.249.0/24
195.96.136.0/24
195.96.157.0/24
212.52.5.0/24
217.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:34:b6:d3:f8:37:9e:99:3e:54:00:43:c7:a1:c3:f4:cf:c9:
ae:3f:68:77:d8:e5:db:20:4b:10:2a:a1:63:1e:25:2e:01:2a:
45:12:dd:92:06:a0:52:33:cb:9a:2d:24:7a:bb:b3:bb:60:5f:
16:07:80:66:44:ef:2c:78:bf:b9:9c:b8:4b:9a:46:9c:df:57:
a4:28:b6:d8:a4:b7:51:96:76:7b:c6:56:61:e6:16:49:b9:ce:
f0:06:af:b1:ef:76:9e:95:c2:77:63:67:a8:7c:00:db:49:04:
25:11:0e:59:73:b2:72:81:00:06:36:06:56:7a:89:7b:09:33:
87:8c:1b:a7:06:61:94:e3:ad:2f:8e:64:87:27:b7:0a:cc:01:
74:0e:dc:a5:d0:b2:bd:47:5f:86:9c:fd:02:69:72:bf:bd:ae:
f9:d1:76:fa:0f:e1:22:53:97:9d:78:af:b2:90:3e:99:c6:98:
6c:1c:98:0c:c8:ae:64:55:b3:46:f4:24:db:c6:b5:0c:5c:92:
81:3b:7b:9a:b0:9b:96:6d:9b:be:74:38:66:7e:97:93:82:88:
14:eb:a5:c1:cb:c6:f0:2e:b3:7d:f2:84:69:e7:44:6d:1a:ce:
a5:50:66:d3:a7:4b:67:90:fe:83:c4:0b:59:ce:61:81:25:68:
5f:94:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 23:34:57 2026 by rpki-client