Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vr5wGtNlcjX-TxSgTfy2VTuaU5o.roa
File: vr5wGtNlcjX-TxSgTfy2VTuaU5o.roa (raw, json)
Hash identifier: n2jbjRNx+iHjKKHw8WP81uxtDZDWlKypDwYlOCHiSJQ=
Subject key identifier: BE:BE:70:1A:D3:65:72:35:FE:4F:14:A0:4D:FC:B6:55:3B:9A:53:9A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019F41E06BD25CCAE0624C60CA7926536C57
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vr5wGtNlcjX-TxSgTfy2VTuaU5o.roa
Signing time: Wed 08 Jul 2026 13:17:34 +0000
ROA not before: Wed 08 Jul 2026 13:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.68.87.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.68.145.0/24 maxlen: 24
80.68.158.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
93.177.104.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.155.101.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 20:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:e0:6b:d2:5c:ca:e0:62:4c:60:ca:79:26:53:6c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 8 13:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bebe701ad3657235fe4f14a04dfcb6553b9a539a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:32:49:6e:58:82:1c:3c:35:7b:3d:f2:88:
42:05:fe:a1:49:86:ae:12:2b:df:10:2e:d9:31:ca:
09:2f:dc:81:cb:b2:e1:11:9a:f2:e5:c5:2d:14:81:
34:6d:35:65:36:97:dc:84:df:bf:18:44:8c:15:18:
d6:17:24:74:4f:d2:15:99:31:25:e9:71:9b:6b:a4:
08:89:29:82:0f:50:91:fa:0b:fa:79:c5:9b:bc:a3:
da:ad:5e:3e:69:d1:9c:29:ab:3e:3f:68:97:59:a8:
38:8d:5d:1d:8d:65:6e:ad:69:15:ff:61:e7:6b:01:
70:bc:ee:53:4e:e0:6f:7a:41:de:14:86:ea:72:27:
b4:49:61:f7:7a:07:fc:96:17:a1:f6:80:68:1f:84:
db:0d:ea:4f:90:85:04:02:7a:ad:fa:dd:6a:3c:f3:
73:ff:cb:36:ac:15:30:05:92:2f:5c:6c:01:c5:2c:
fe:fe:07:81:c7:bf:6e:1e:8a:d4:db:75:03:23:fe:
95:b1:a0:5e:23:82:be:fa:89:af:87:ef:25:de:53:
04:7e:7e:72:31:22:2d:a1:e1:0f:73:2a:19:9e:ec:
cc:32:b1:34:64:04:87:e5:04:67:ec:f7:02:78:72:
1a:c4:4d:db:00:c8:69:2b:58:49:96:22:4f:43:4b:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:70:1A:D3:65:72:35:FE:4F:14:A0:4D:FC:B6:55:3B:9A:53:9A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/vr5wGtNlcjX-TxSgTfy2VTuaU5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/24
45.132.48.0/24
45.157.136.0/24
62.68.87.0/24
62.204.36.0/24
62.233.49.0/24
62.233.56.0/24
62.233.60.0/24
80.68.145.0/24
80.68.158.0/24
80.91.209.0-80.91.210.255
91.226.247.0/24
93.177.104.0/24
94.143.226.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
146.19.148.0/24
146.19.150.0/24
146.19.152.0/24
146.19.190.0/24
176.56.38.0/24
185.122.206.0/24
185.155.101.0/24
185.218.1.0/24
193.3.22.0/24
193.239.209.0/24
195.64.112.0/24
195.96.136.0/24
195.96.157.0/24
212.52.5.0/24
217.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2f:1f:a0:9c:47:48:fc:00:81:ef:4a:9a:ec:78:9c:7a:78:
87:77:10:20:ca:e9:5d:f6:02:dd:7d:14:3f:12:30:37:dc:da:
27:e1:cc:de:e4:cd:a5:4f:a6:76:e6:bc:a2:d9:34:9a:0c:b9:
02:ad:4c:72:b1:03:27:54:e2:28:7a:5d:e9:7e:5a:ac:99:39:
bf:a0:1e:27:36:09:7b:2b:fa:5c:07:1e:e4:c5:09:d6:c7:59:
b1:6d:56:a2:54:b7:4a:77:a1:01:af:be:4d:a0:3a:cf:f0:1b:
cf:73:57:87:ba:15:55:c6:67:d8:b9:2d:ce:c8:a6:da:3e:c9:
2d:f8:4a:bd:72:f1:3f:31:b2:34:f0:c3:d3:03:8c:ac:29:19:
81:e2:3b:45:21:09:71:fe:22:a8:ab:1a:7b:16:e0:7c:ab:02:
45:53:d3:5b:2e:ec:6d:19:b7:0b:d2:4c:0f:6d:2c:be:d5:fb:
fa:1b:a1:a6:86:84:cb:44:c6:42:06:7c:9c:d0:7d:47:e5:41:
98:32:86:3e:92:29:a4:ab:21:78:a5:be:f4:cd:42:24:cf:3d:
ba:c9:a1:82:5f:b5:5a:a4:c0:57:ba:60:03:8c:a4:8f:97:2f:
59:7d:fe:af:7a:cf:b9:8e:8a:48:07:59:7c:21:bf:13:97:94:
f6:da:f8:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 9 04:06:21 2026 by rpki-client