Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/xgjyktPyu1OSmAWhJRaQSTNUDh4.roa
File: xgjyktPyu1OSmAWhJRaQSTNUDh4.roa (raw, json)
Hash identifier: Qc9AI3zHMumlf84aefYXsNeMjoNS3bf5l3zL9OVw5SY=
Subject key identifier: C6:08:F2:92:D3:F2:BB:53:92:98:05:A1:25:16:90:49:33:54:0E:1E
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 019EABADC0EAC28B5A70166F56D0C7CBCD9C
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/xgjyktPyu1OSmAWhJRaQSTNUDh4.roa
Signing time: Tue 09 Jun 2026 09:19:11 +0000
ROA not before: Tue 09 Jun 2026 09:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30722
IP address blocks: 2.32.0.0/16 maxlen: 20
2.33.0.0/17 maxlen: 17
2.33.128.0/17 maxlen: 17
2.33.176.0/20 maxlen: 20
2.34.0.0/15 maxlen: 20
2.36.0.0/14 maxlen: 18
2.40.0.0/16 maxlen: 20
2.41.0.0/16 maxlen: 16
2.42.0.0/16 maxlen: 20
2.43.0.0/16 maxlen: 16
2.44.0.0/16 maxlen: 19
2.45.0.0/16 maxlen: 20
2.46.0.0/15 maxlen: 20
5.88.0.0/13 maxlen: 20
31.26.0.0/16 maxlen: 16
31.27.0.0/18 maxlen: 18
31.27.96.0/20 maxlen: 20
31.27.128.0/17 maxlen: 19
31.27.192.0/19 maxlen: 19
31.27.224.0/19 maxlen: 19
31.156.0.0/14 maxlen: 19
37.116.0.0/16 maxlen: 19
37.117.0.0/16 maxlen: 19
37.118.0.0/16 maxlen: 16
37.119.0.0/17 maxlen: 19
37.119.128.0/17 maxlen: 20
37.159.0.0/17 maxlen: 17
37.159.128.0/17 maxlen: 20
37.176.0.0/13 maxlen: 20
47.53.0.0/16 maxlen: 16
47.53.32.0/19 maxlen: 19
47.53.64.0/19 maxlen: 19
47.53.128.0/19 maxlen: 19
47.53.160.0/19 maxlen: 19
47.53.208.0/20 maxlen: 20
83.224.64.0/20 maxlen: 20
83.224.80.0/24 maxlen: 24
83.224.81.0/24 maxlen: 24
83.224.86.0/23 maxlen: 23
83.224.128.0/17 maxlen: 17
83.225.0.0/16 maxlen: 16
91.80.0.0/19 maxlen: 19
91.80.32.0/21 maxlen: 21
91.80.46.0/24 maxlen: 24
91.80.48.0/20 maxlen: 24
91.80.64.0/18 maxlen: 18
91.80.128.0/17 maxlen: 17
91.81.0.0/17 maxlen: 19
91.81.128.0/17 maxlen: 24
93.64.0.0/16 maxlen: 18
93.65.0.0/16 maxlen: 18
93.66.0.0/15 maxlen: 17
93.68.0.0/16 maxlen: 16
93.69.0.0/16 maxlen: 16
93.70.0.0/16 maxlen: 18
93.71.0.0/16 maxlen: 18
93.144.0.0/16 maxlen: 20
93.145.0.0/16 maxlen: 20
93.146.0.0/16 maxlen: 20
93.147.0.0/16 maxlen: 20
93.148.0.0/16 maxlen: 20
93.149.0.0/16 maxlen: 20
93.150.0.0/16 maxlen: 20
93.151.128.0/17 maxlen: 20
109.112.0.0/15 maxlen: 15
109.114.0.0/15 maxlen: 19
109.115.96.0/19 maxlen: 19
109.115.192.0/19 maxlen: 19
109.115.224.0/19 maxlen: 19
109.116.0.0/15 maxlen: 20
109.118.0.0/16 maxlen: 16
109.119.0.0/16 maxlen: 16
130.0.128.0/18 maxlen: 21
130.25.0.0/16 maxlen: 18
176.242.0.0/15 maxlen: 15
176.244.0.0/14 maxlen: 14
188.152.0.0/17 maxlen: 20
188.152.128.0/17 maxlen: 20
188.153.0.0/16 maxlen: 20
188.216.0.0/15 maxlen: 17
188.218.0.0/15 maxlen: 18
2a01:820::/32 maxlen: 32
2a01:827::/32 maxlen: 32
2a01:8d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:ad:c0:ea:c2:8b:5a:70:16:6f:56:d0:c7:cb:cd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Jun 9 09:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c608f292d3f2bb53929805a12516904933540e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:d6:c8:60:56:6a:16:22:e2:1d:9d:94:cb:
2c:0e:94:d9:72:df:00:44:61:c4:e2:35:ac:f0:6a:
48:40:34:00:41:ea:2b:86:4b:bd:c7:0d:a1:0a:9d:
a7:7c:f3:84:fd:46:e1:b1:b4:07:67:67:f9:8d:ca:
7b:ab:b7:3c:8e:e1:bb:01:21:4e:c6:9b:0c:8f:10:
83:2d:9a:94:5a:a9:af:05:0f:ee:ca:f4:85:c1:95:
70:05:9a:7e:5d:54:34:7a:82:c6:fb:75:7c:3e:67:
a3:aa:e2:7b:fc:43:f5:0a:6c:27:66:4b:26:3d:94:
1d:07:11:d9:45:72:d0:1e:f3:82:40:75:f7:f0:6c:
04:a7:21:b0:3f:c8:3b:81:39:df:af:70:13:43:90:
be:b6:28:f2:03:cd:cf:c3:91:cc:c8:c8:c0:3a:55:
2f:55:67:e8:e6:c1:0d:ec:78:71:1c:5e:d7:8c:f1:
06:ab:4d:1a:fc:5b:40:38:c4:1d:bd:2d:74:9d:70:
7b:27:0a:7d:f7:d6:f1:47:38:a5:d5:12:e5:5c:6f:
74:8f:4e:b8:04:2a:4f:77:7b:f0:85:b1:3a:10:9f:
d8:a3:0d:8f:ca:a5:7a:a3:2c:0c:7a:53:7b:f2:d1:
84:0d:7a:53:31:20:59:d6:7d:56:50:66:d2:89:f7:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:08:F2:92:D3:F2:BB:53:92:98:05:A1:25:16:90:49:33:54:0E:1E
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/xgjyktPyu1OSmAWhJRaQSTNUDh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.32.0.0/12
5.88.0.0/13
31.26.0.0-31.27.63.255
31.27.96.0/20
31.27.128.0/17
31.156.0.0/14
37.116.0.0/14
37.159.0.0/16
37.176.0.0/13
47.53.0.0/16
83.224.64.0-83.224.81.255
83.224.86.0/23
83.224.128.0-83.225.255.255
91.80.0.0-91.80.39.255
91.80.46.0/24
91.80.48.0-91.81.255.255
93.64.0.0/13
93.144.0.0-93.150.255.255
93.151.128.0/17
109.112.0.0/13
130.0.128.0/18
130.25.0.0/16
176.242.0.0-176.247.255.255
188.152.0.0/15
188.216.0.0/14
IPv6:
2a01:820::/32
2a01:827::/32
2a01:8d0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:ea:71:f0:a5:12:79:b9:a7:aa:d9:9f:42:7e:09:8b:f2:21:
5c:21:43:65:b9:a4:98:aa:b3:03:d0:cd:0b:bf:e3:78:c6:de:
63:84:fd:a3:13:ee:23:fe:1b:0b:4e:04:b3:27:f5:8c:17:44:
aa:14:c7:ff:2a:05:2f:3d:0b:b3:11:61:6f:a8:ac:79:cd:de:
0f:bb:35:99:30:28:64:07:92:d7:1c:07:d1:a6:97:5a:59:f8:
dd:9e:ca:26:03:d6:94:ef:6c:61:d5:21:82:ce:62:54:6a:85:
d3:cb:c1:53:6c:95:51:be:c4:df:d5:96:ca:0e:5a:42:48:43:
8d:8b:d6:6c:d0:a5:12:88:f9:5f:33:ed:fb:b1:8c:10:a3:e5:
4f:8d:26:9c:36:a8:f3:51:2d:a6:10:9a:5c:fe:51:80:1e:eb:
42:04:8c:66:f1:eb:48:12:db:7b:41:c6:5f:3e:3b:9e:50:13:
54:4a:7c:13:d3:30:6c:5a:db:89:54:65:06:b6:47:33:f3:6f:
b9:c2:87:f8:0b:0d:72:03:be:b3:2c:f2:59:55:52:89:0d:65:
22:02:2f:d6:c3:89:37:ca:94:d4:ac:d4:c2:a5:16:bc:52:2a:
e8:6f:a0:b9:d3:a7:39:f2:79:b4:b8:f8:4c:44:64:a6:b8:7e:
81:03:8a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:12 2026 by rpki-client