Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RGyDFfoiB0F3m7DyFrH_e5apHDQ.roa
File: RGyDFfoiB0F3m7DyFrH_e5apHDQ.roa (raw, json)
Hash identifier: 1EdbO3YD7bq/RNoDEoqDzz7uWm0/7NiqKn5kr/5dQrI=
Subject key identifier: 44:6C:83:15:FA:22:07:41:77:9B:B0:F2:16:B1:FF:7B:96:A9:1C:34
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E7313F15A37344653843BDA46057DE186
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RGyDFfoiB0F3m7DyFrH_e5apHDQ.roa
Signing time: Fri 29 May 2026 09:32:27 +0000
ROA not before: Fri 29 May 2026 09:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 130.49.4.0/24 maxlen: 24
130.49.7.0/24 maxlen: 24
130.49.13.0/24 maxlen: 24
130.49.18.0/24 maxlen: 24
130.49.19.0/24 maxlen: 24
130.49.23.0/24 maxlen: 24
130.49.26.0/24 maxlen: 24
130.49.28.0/24 maxlen: 24
130.49.33.0/24 maxlen: 24
130.49.34.0/24 maxlen: 24
130.49.38.0/24 maxlen: 24
130.49.41.0/24 maxlen: 24
130.49.43.0/24 maxlen: 24
130.49.48.0/24 maxlen: 24
130.49.49.0/24 maxlen: 24
130.49.54.0/24 maxlen: 24
130.49.56.0/24 maxlen: 24
130.49.59.0/24 maxlen: 24
130.49.63.0/24 maxlen: 24
130.49.64.0/24 maxlen: 24
130.49.69.0/24 maxlen: 24
130.49.71.0/24 maxlen: 24
130.49.74.0/24 maxlen: 24
130.49.82.0/24 maxlen: 24
130.49.83.0/24 maxlen: 24
130.49.88.0/24 maxlen: 24
130.49.90.0/24 maxlen: 24
130.49.93.0/24 maxlen: 24
130.49.97.0/24 maxlen: 24
130.49.98.0/24 maxlen: 24
130.49.103.0/24 maxlen: 24
130.49.105.0/24 maxlen: 24
130.49.109.0/24 maxlen: 24
130.49.116.0/24 maxlen: 24
130.49.118.0/24 maxlen: 24
130.49.123.0/24 maxlen: 24
130.49.124.0/24 maxlen: 24
138.249.29.0/24 maxlen: 24
138.249.30.0/24 maxlen: 24
138.249.31.0/24 maxlen: 24
138.249.36.0/24 maxlen: 24
138.249.38.0/24 maxlen: 24
138.249.39.0/24 maxlen: 24
138.249.44.0/24 maxlen: 24
138.249.45.0/24 maxlen: 24
138.249.47.0/24 maxlen: 24
138.249.48.0/24 maxlen: 24
138.249.49.0/24 maxlen: 24
138.249.50.0/24 maxlen: 24
138.249.51.0/24 maxlen: 24
138.249.53.0/24 maxlen: 24
138.249.55.0/24 maxlen: 24
138.249.57.0/24 maxlen: 24
138.249.60.0/24 maxlen: 24
138.249.61.0/24 maxlen: 24
138.249.62.0/24 maxlen: 24
138.249.64.0/24 maxlen: 24
138.249.65.0/24 maxlen: 24
138.249.66.0/24 maxlen: 24
138.249.67.0/24 maxlen: 24
138.249.68.0/24 maxlen: 24
138.249.69.0/24 maxlen: 24
138.249.70.0/24 maxlen: 24
138.249.71.0/24 maxlen: 24
138.249.72.0/24 maxlen: 24
138.249.73.0/24 maxlen: 24
138.249.74.0/24 maxlen: 24
138.249.76.0/24 maxlen: 24
138.249.78.0/24 maxlen: 24
138.249.79.0/24 maxlen: 24
138.249.80.0/24 maxlen: 24
138.249.81.0/24 maxlen: 24
138.249.82.0/24 maxlen: 24
138.249.83.0/24 maxlen: 24
138.249.85.0/24 maxlen: 24
138.249.87.0/24 maxlen: 24
138.249.89.0/24 maxlen: 24
138.249.92.0/24 maxlen: 24
138.249.93.0/24 maxlen: 24
138.249.94.0/24 maxlen: 24
138.249.95.0/24 maxlen: 24
138.249.96.0/24 maxlen: 24
138.249.97.0/24 maxlen: 24
138.249.99.0/24 maxlen: 24
138.249.100.0/24 maxlen: 24
138.249.101.0/24 maxlen: 24
138.249.111.0/24 maxlen: 24
138.249.113.0/24 maxlen: 24
138.249.114.0/24 maxlen: 24
138.249.152.0/24 maxlen: 24
138.249.159.0/24 maxlen: 24
138.249.164.0/24 maxlen: 24
138.249.183.0/24 maxlen: 24
138.249.192.0/24 maxlen: 24
138.249.216.0/24 maxlen: 24
138.249.225.0/24 maxlen: 24
138.249.230.0/24 maxlen: 24
138.249.247.0/24 maxlen: 24
155.212.33.0/24 maxlen: 24
155.212.40.0/24 maxlen: 24
155.212.42.0/24 maxlen: 24
155.212.47.0/24 maxlen: 24
155.212.48.0/24 maxlen: 24
155.212.52.0/24 maxlen: 24
155.212.54.0/24 maxlen: 24
155.212.57.0/24 maxlen: 24
155.212.61.0/24 maxlen: 24
155.212.62.0/24 maxlen: 24
155.212.68.0/24 maxlen: 24
155.212.69.0/24 maxlen: 24
155.212.73.0/24 maxlen: 24
155.212.76.0/24 maxlen: 24
155.212.78.0/24 maxlen: 24
155.212.83.0/24 maxlen: 24
155.212.84.0/24 maxlen: 24
155.212.88.0/24 maxlen: 24
155.212.90.0/24 maxlen: 24
155.212.93.0/24 maxlen: 24
155.212.97.0/24 maxlen: 24
155.212.98.0/24 maxlen: 24
155.212.103.0/24 maxlen: 24
155.212.105.0/24 maxlen: 24
155.212.112.0/24 maxlen: 24
155.212.116.0/24 maxlen: 24
155.212.118.0/24 maxlen: 24
155.212.123.0/24 maxlen: 24
155.212.124.0/24 maxlen: 24
170.168.205.0/24 maxlen: 24
170.168.213.0/24 maxlen: 24
170.168.214.0/24 maxlen: 24
170.168.222.0/24 maxlen: 24
170.168.229.0/24 maxlen: 24
170.168.231.0/24 maxlen: 24
170.168.239.0/24 maxlen: 24
170.168.249.0/24 maxlen: 24
193.108.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:13:f1:5a:37:34:46:53:84:3b:da:46:05:7d:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 29 09:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=446c8315fa220741779bb0f216b1ff7b96a91c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:e5:fc:e8:97:bd:4c:48:d2:ef:ef:6f:11:
96:93:d0:26:a1:68:40:99:12:ad:8f:25:6b:02:dd:
35:5d:96:d3:af:52:e3:f2:88:dc:eb:5a:00:0c:4a:
63:82:ad:1c:eb:0a:a8:14:1f:5f:48:f8:85:6e:5a:
78:7c:53:5e:1b:12:88:98:75:72:6a:10:9c:9f:8b:
4c:eb:84:d8:fc:48:0c:a4:03:a6:c6:19:e6:db:25:
ac:b6:87:d8:95:4c:46:91:6f:ae:d3:6a:42:e4:40:
d6:44:03:11:f5:ad:58:15:e5:a8:b8:c1:0e:49:23:
f2:91:19:d4:d4:2f:ac:18:86:7d:10:5a:eb:b1:b6:
86:2d:fd:3e:77:32:30:a1:b8:83:07:dc:f8:c0:b7:
59:91:49:c8:c5:a1:99:cd:d8:44:a1:c8:a9:37:f1:
43:62:9c:81:a0:07:7d:d5:46:e9:31:da:e6:3a:00:
f2:c2:70:6b:31:75:b5:9a:71:ae:23:c5:a3:2c:01:
17:5d:74:2f:94:c5:85:73:12:a8:d8:0e:7d:bb:f0:
d9:6f:1b:e0:c3:3e:96:9d:e7:20:41:a4:a3:f4:80:
f0:53:6b:28:fb:1a:8c:51:ee:61:0a:3c:4a:c8:54:
09:25:74:0e:df:78:a5:e3:18:04:c2:7d:5d:8b:2f:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6C:83:15:FA:22:07:41:77:9B:B0:F2:16:B1:FF:7B:96:A9:1C:34
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RGyDFfoiB0F3m7DyFrH_e5apHDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.4.0/24
130.49.7.0/24
130.49.13.0/24
130.49.18.0/23
130.49.23.0/24
130.49.26.0/24
130.49.28.0/24
130.49.33.0-130.49.34.255
130.49.38.0/24
130.49.41.0/24
130.49.43.0/24
130.49.48.0/23
130.49.54.0/24
130.49.56.0/24
130.49.59.0/24
130.49.63.0-130.49.64.255
130.49.69.0/24
130.49.71.0/24
130.49.74.0/24
130.49.82.0/23
130.49.88.0/24
130.49.90.0/24
130.49.93.0/24
130.49.97.0-130.49.98.255
130.49.103.0/24
130.49.105.0/24
130.49.109.0/24
130.49.116.0/24
130.49.118.0/24
130.49.123.0-130.49.124.255
138.249.29.0-138.249.31.255
138.249.36.0/24
138.249.38.0/23
138.249.44.0/23
138.249.47.0-138.249.51.255
138.249.53.0/24
138.249.55.0/24
138.249.57.0/24
138.249.60.0-138.249.62.255
138.249.64.0-138.249.74.255
138.249.76.0/24
138.249.78.0-138.249.83.255
138.249.85.0/24
138.249.87.0/24
138.249.89.0/24
138.249.92.0-138.249.97.255
138.249.99.0-138.249.101.255
138.249.111.0/24
138.249.113.0-138.249.114.255
138.249.152.0/24
138.249.159.0/24
138.249.164.0/24
138.249.183.0/24
138.249.192.0/24
138.249.216.0/24
138.249.225.0/24
138.249.230.0/24
138.249.247.0/24
155.212.33.0/24
155.212.40.0/24
155.212.42.0/24
155.212.47.0-155.212.48.255
155.212.52.0/24
155.212.54.0/24
155.212.57.0/24
155.212.61.0-155.212.62.255
155.212.68.0/23
155.212.73.0/24
155.212.76.0/24
155.212.78.0/24
155.212.83.0-155.212.84.255
155.212.88.0/24
155.212.90.0/24
155.212.93.0/24
155.212.97.0-155.212.98.255
155.212.103.0/24
155.212.105.0/24
155.212.112.0/24
155.212.116.0/24
155.212.118.0/24
155.212.123.0-155.212.124.255
170.168.205.0/24
170.168.213.0-170.168.214.255
170.168.222.0/24
170.168.229.0/24
170.168.231.0/24
170.168.239.0/24
170.168.249.0/24
193.108.191.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c9:10:e7:b7:4d:ef:ac:f6:78:71:ac:42:5b:ff:75:b4:37:
60:0c:d8:b9:3b:86:dc:a7:d0:ee:9f:ea:a6:4a:c9:9d:9e:1f:
6f:37:84:93:9b:ec:14:20:b7:6e:e5:88:d1:e9:51:d4:1d:dd:
e1:24:87:93:6c:58:b2:7e:6d:88:25:73:98:8c:d6:95:d7:09:
68:3b:ee:ca:75:a2:2a:b8:d4:6a:57:85:46:be:3d:3e:c0:66:
94:73:73:d0:64:81:e1:ae:5f:cc:0a:52:5e:79:18:88:80:06:
80:02:ac:ea:d7:5f:0e:41:b1:1d:0f:4d:d1:0d:e9:e5:d6:f3:
19:45:16:ab:e6:4a:93:29:b0:e7:a1:9d:aa:a2:54:b5:b6:94:
ab:58:c5:3a:01:07:d4:5a:58:fb:97:ea:55:09:b5:06:da:e1:
f4:e0:7b:4b:5c:51:2b:58:50:ae:31:73:99:b5:97:f1:70:df:
29:14:ba:e9:31:57:a6:a6:25:9c:13:81:9d:29:9d:70:c5:7e:
c3:0a:ef:9b:a6:a7:36:3b:2c:4f:3c:f1:1e:3f:a2:15:5f:7d:
f4:a6:0e:df:fa:83:83:17:de:c5:09:bb:29:32:6b:97:2c:82:
18:ed:77:ea:77:51:13:5d:1a:34:55:54:e3:41:2b:59:91:61:
fe:02:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:01:40 2026 by rpki-client