Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Y_mOd-eJKcaPD8v577AbugAhyIQ.roa
File: Y_mOd-eJKcaPD8v577AbugAhyIQ.roa (raw, json)
Hash identifier: WcjTynGsSWLnYqn1MHjErwauRUenDi4pKq0zOCNqxfE=
Subject key identifier: 63:F9:8E:77:E7:89:29:C6:8F:0F:CB:F9:EF:B0:1B:BA:00:21:C8:84
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019FB2B94C2AE86E51B7FE6B70FCEB236601
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Y_mOd-eJKcaPD8v577AbugAhyIQ.roa
Signing time: Thu 30 Jul 2026 11:11:55 +0000
ROA not before: Thu 30 Jul 2026 11:11:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 31.216.60.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.124.0/22 maxlen: 22
45.81.76.0/22 maxlen: 22
45.129.204.0/22 maxlen: 22
45.132.20.0/22 maxlen: 22
45.133.224.0/22 maxlen: 22
45.134.52.0/22 maxlen: 22
45.135.28.0/22 maxlen: 22
45.139.108.0/22 maxlen: 22
45.139.168.0/22 maxlen: 22
45.140.72.0/22 maxlen: 22
45.143.244.0/22 maxlen: 22
45.144.168.0/22 maxlen: 22
84.246.81.0/24 maxlen: 24
84.246.110.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
192.109.91.0/24 maxlen: 24
192.109.100.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:b9:4c:2a:e8:6e:51:b7:fe:6b:70:fc:eb:23:66:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 30 11:11:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63f98e77e78929c68f0fcbf9efb01bba0021c884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:bc:a1:58:38:de:c3:d3:fd:12:79:aa:79:
28:0a:57:51:d7:4b:25:19:70:d9:67:cc:ae:98:b3:
6f:f4:99:f5:f6:c2:c1:cc:b8:df:e1:6c:2a:bd:62:
f5:aa:1e:46:b6:4f:ba:d6:4b:6e:be:87:cf:60:05:
ec:e6:2b:42:d9:6b:71:8c:3e:3e:4a:6a:48:f1:bb:
ad:35:5d:15:be:78:6c:19:cc:6e:fc:d5:5b:76:39:
5a:8e:67:a5:f1:1e:fc:48:8a:5b:28:a8:b5:0f:18:
9e:23:3e:41:0b:0c:32:af:47:3a:1c:55:96:62:53:
07:d9:50:b2:f7:e4:c9:3f:2f:c4:46:88:65:52:4e:
79:d7:7f:5f:15:9a:e1:12:ef:10:46:42:ff:5c:8e:
a3:d7:21:cf:7f:b4:c4:10:4f:0d:7a:07:ce:99:49:
dc:fd:88:70:f2:9d:10:a1:ec:c4:62:6a:dd:0f:4e:
f8:23:8a:5a:32:d8:56:3a:af:da:56:9e:0b:ce:ae:
a5:9a:44:5e:27:73:49:22:30:26:9c:de:d3:c8:9c:
41:8d:c5:88:2d:22:df:8c:52:30:33:65:d9:6f:35:
ff:fb:bb:27:7f:75:9c:c5:b6:b8:5e:8a:ea:d4:7d:
15:04:d9:0b:5b:87:c2:2c:6d:32:24:ba:ea:10:ef:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F9:8E:77:E7:89:29:C6:8F:0F:CB:F9:EF:B0:1B:BA:00:21:C8:84
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Y_mOd-eJKcaPD8v577AbugAhyIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.60.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.124.0/22
45.81.76.0/22
45.129.204.0/22
45.132.20.0/22
45.133.224.0/22
45.134.52.0/22
45.135.28.0/22
45.139.108.0/22
45.139.168.0/22
45.140.72.0/22
45.143.244.0/22
45.144.168.0/22
84.246.81.0/24
84.246.110.0/24
89.107.12.0/24
93.157.111.0/24
93.190.120.0/23
94.124.75.0/24
94.124.77.0/24
176.116.8.0/24
176.116.24.0/24
176.116.28.0/24
192.109.91.0/24
192.109.100.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
76:de:cd:b1:a7:63:1c:42:e8:d5:0c:c7:ff:32:52:3b:2c:e5:
bd:4b:b0:c0:2e:22:d7:9a:ff:7a:3b:61:64:ee:0c:e5:b5:0f:
85:55:80:e9:78:4f:a0:9f:08:d6:58:b4:9d:8e:4d:dd:4a:c0:
1c:4a:e6:f7:3e:6a:0c:7c:74:19:ec:d8:db:ac:52:7a:af:1e:
ce:9b:8b:ea:9a:d7:08:18:98:c3:c1:28:94:5b:a8:8c:73:40:
17:dc:e8:ce:19:71:4d:20:09:3e:81:71:03:80:55:a6:a0:3d:
c1:89:d5:01:96:d2:78:05:0e:48:3a:0d:5d:74:9a:01:86:94:
b3:e0:78:34:f4:c1:ec:19:da:a1:c5:a4:c2:c9:4e:1a:a0:67:
d9:59:f7:2d:9d:c8:8f:89:d6:d5:d0:02:52:1d:2f:92:90:1a:
c4:8e:05:c3:79:2c:50:be:c1:b0:71:df:56:30:9f:07:94:e3:
b8:0c:3e:0a:56:79:db:64:8e:50:13:d2:88:dd:0b:18:de:49:
9d:54:33:af:86:2d:24:be:53:3e:db:c7:8f:c5:c8:2b:ee:58:
d9:41:fa:dd:99:ce:af:91:8d:42:99:5a:59:40:6a:c1:e3:c8:
df:f3:39:61:8d:c5:43:1b:aa:f7:4f:6f:a1:f9:95:a6:ec:bb:
bc:98:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 13:38:00 2026 by rpki-client