Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/p9Xc1NWuJwJtic_LMYH2xpHQORE.roa
File: p9Xc1NWuJwJtic_LMYH2xpHQORE.roa (raw, json)
Hash identifier: ycnNbTebJL7I288YEvuiZNuGjFmWk21xTMfldGExuyo=
Subject key identifier: A7:D5:DC:D4:D5:AE:27:02:6D:89:CF:CB:31:81:F6:C6:91:D0:39:11
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E6A7B03A5466A93D9B905DAFA9BE73170
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/p9Xc1NWuJwJtic_LMYH2xpHQORE.roa
Signing time: Wed 27 May 2026 17:28:27 +0000
ROA not before: Wed 27 May 2026 17:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 103.147.170.0/24 maxlen: 24
103.148.141.0/24 maxlen: 24
103.149.85.0/24 maxlen: 24
103.152.175.0/24 maxlen: 24
130.49.2.0/24 maxlen: 24
130.49.5.0/24 maxlen: 24
130.49.14.0/24 maxlen: 24
130.49.17.0/24 maxlen: 24
130.49.22.0/24 maxlen: 24
130.49.24.0/24 maxlen: 24
130.49.31.0/24 maxlen: 24
130.49.32.0/24 maxlen: 24
130.49.39.0/24 maxlen: 24
130.49.42.0/24 maxlen: 24
130.49.47.0/24 maxlen: 24
130.49.51.0/24 maxlen: 24
130.49.55.0/24 maxlen: 24
130.49.57.0/24 maxlen: 24
130.49.60.0/24 maxlen: 24
130.49.62.0/24 maxlen: 24
130.49.68.0/24 maxlen: 24
130.49.70.0/24 maxlen: 24
130.49.81.0/24 maxlen: 24
130.49.84.0/24 maxlen: 24
130.49.87.0/24 maxlen: 24
130.49.89.0/24 maxlen: 24
130.49.92.0/24 maxlen: 24
130.49.96.0/24 maxlen: 24
130.49.99.0/24 maxlen: 24
130.49.101.0/24 maxlen: 24
130.49.104.0/24 maxlen: 24
130.49.110.0/24 maxlen: 24
130.49.111.0/24 maxlen: 24
130.49.122.0/24 maxlen: 24
130.49.125.0/24 maxlen: 24
138.249.28.0/24 maxlen: 24
138.249.46.0/24 maxlen: 24
138.249.52.0/24 maxlen: 24
138.249.54.0/24 maxlen: 24
138.249.58.0/24 maxlen: 24
138.249.59.0/24 maxlen: 24
138.249.63.0/24 maxlen: 24
138.249.77.0/24 maxlen: 24
138.249.84.0/24 maxlen: 24
138.249.86.0/24 maxlen: 24
138.249.88.0/24 maxlen: 24
138.249.91.0/24 maxlen: 24
138.249.98.0/24 maxlen: 24
138.249.150.0/24 maxlen: 24
138.249.201.0/24 maxlen: 24
138.249.255.0/24 maxlen: 24
155.212.34.0/24 maxlen: 24
155.212.44.0/24 maxlen: 24
155.212.46.0/24 maxlen: 24
155.212.53.0/24 maxlen: 24
155.212.55.0/24 maxlen: 24
155.212.58.0/24 maxlen: 24
155.212.60.0/24 maxlen: 24
155.212.63.0/24 maxlen: 24
155.212.64.0/24 maxlen: 24
155.212.67.0/24 maxlen: 24
155.212.74.0/24 maxlen: 24
155.212.75.0/24 maxlen: 24
155.212.81.0/24 maxlen: 24
155.212.82.0/24 maxlen: 24
155.212.89.0/24 maxlen: 24
155.212.92.0/24 maxlen: 24
155.212.96.0/24 maxlen: 24
155.212.101.0/24 maxlen: 24
155.212.104.0/24 maxlen: 24
155.212.115.0/24 maxlen: 24
155.212.117.0/24 maxlen: 24
155.212.122.0/24 maxlen: 24
155.212.126.0/24 maxlen: 24
170.168.144.0/24 maxlen: 24
170.168.146.0/24 maxlen: 24
170.168.197.0/24 maxlen: 24
170.168.207.0/24 maxlen: 24
170.168.212.0/24 maxlen: 24
170.168.223.0/24 maxlen: 24
170.168.228.0/24 maxlen: 24
170.168.238.0/24 maxlen: 24
170.168.248.0/24 maxlen: 24
213.178.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:7b:03:a5:46:6a:93:d9:b9:05:da:fa:9b:e7:31:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 27 17:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7d5dcd4d5ae27026d89cfcb3181f6c691d03911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:44:7e:44:5a:66:e5:a0:1e:f7:7e:b1:90:
87:4c:06:89:b8:d5:ce:5f:52:d3:82:26:98:6d:87:
a5:a9:be:d3:08:19:c4:ec:9b:cb:97:0b:20:aa:7b:
39:3c:69:8e:21:7b:04:08:1d:9e:f5:1d:61:b1:32:
8d:32:cc:fb:c2:9a:6f:e0:40:4c:a3:c0:32:3e:79:
03:86:5d:2b:cb:95:90:9e:75:00:c7:ef:50:4f:0a:
5b:ee:30:d8:50:a0:d0:3a:c1:82:82:76:0f:00:bf:
32:e9:73:ab:d9:0f:85:37:9e:f7:11:03:f6:1c:08:
4c:4a:59:34:56:f0:8e:49:9e:91:75:5c:e6:da:21:
e8:69:ac:35:ba:8d:30:5e:af:63:d5:d1:36:b5:9c:
8c:9f:81:d7:24:c7:bb:ac:06:57:c8:4c:fd:a1:28:
5c:51:88:02:19:bf:d3:97:61:f3:74:d9:77:d6:13:
53:0d:fe:de:42:af:61:49:ea:bc:53:25:3c:a3:71:
26:c8:ce:73:79:ca:56:23:4c:69:1a:d5:3e:c9:f6:
05:8f:9d:17:12:b1:b4:14:9a:eb:a6:a2:c3:8e:bb:
71:97:00:88:01:f4:56:88:37:15:91:fc:d3:24:38:
90:c2:f4:15:7a:83:ac:8b:66:88:03:82:fc:07:5d:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D5:DC:D4:D5:AE:27:02:6D:89:CF:CB:31:81:F6:C6:91:D0:39:11
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/p9Xc1NWuJwJtic_LMYH2xpHQORE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.170.0/24
103.148.141.0/24
103.149.85.0/24
103.152.175.0/24
130.49.2.0/24
130.49.5.0/24
130.49.14.0/24
130.49.17.0/24
130.49.22.0/24
130.49.24.0/24
130.49.31.0-130.49.32.255
130.49.39.0/24
130.49.42.0/24
130.49.47.0/24
130.49.51.0/24
130.49.55.0/24
130.49.57.0/24
130.49.60.0/24
130.49.62.0/24
130.49.68.0/24
130.49.70.0/24
130.49.81.0/24
130.49.84.0/24
130.49.87.0/24
130.49.89.0/24
130.49.92.0/24
130.49.96.0/24
130.49.99.0/24
130.49.101.0/24
130.49.104.0/24
130.49.110.0/23
130.49.122.0/24
130.49.125.0/24
138.249.28.0/24
138.249.46.0/24
138.249.52.0/24
138.249.54.0/24
138.249.58.0/23
138.249.63.0/24
138.249.77.0/24
138.249.84.0/24
138.249.86.0/24
138.249.88.0/24
138.249.91.0/24
138.249.98.0/24
138.249.150.0/24
138.249.201.0/24
138.249.255.0/24
155.212.34.0/24
155.212.44.0/24
155.212.46.0/24
155.212.53.0/24
155.212.55.0/24
155.212.58.0/24
155.212.60.0/24
155.212.63.0-155.212.64.255
155.212.67.0/24
155.212.74.0/23
155.212.81.0-155.212.82.255
155.212.89.0/24
155.212.92.0/24
155.212.96.0/24
155.212.101.0/24
155.212.104.0/24
155.212.115.0/24
155.212.117.0/24
155.212.122.0/24
155.212.126.0/24
170.168.144.0/24
170.168.146.0/24
170.168.197.0/24
170.168.207.0/24
170.168.212.0/24
170.168.223.0/24
170.168.228.0/24
170.168.238.0/24
170.168.248.0/24
213.178.152.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:2b:8b:3b:d9:83:3b:6a:20:85:79:f7:69:50:c5:be:d5:33:
68:3b:3d:00:a6:1a:f8:7f:eb:73:58:d0:1e:19:69:d4:0a:68:
22:a4:5d:9a:1d:cc:ef:4e:4f:bd:cb:7c:bb:92:c0:bb:75:f4:
07:13:61:01:0c:c0:87:d8:e0:d6:62:90:5d:2f:bd:d5:da:65:
3b:2d:44:ee:c0:3b:2a:c0:c0:22:b5:51:03:6c:34:08:6d:74:
62:c3:f4:46:1d:2c:a5:c1:12:5e:28:35:29:b9:fd:40:34:15:
fe:3a:b6:3f:ab:0a:0c:bf:2b:ef:e4:47:c1:68:d5:05:55:10:
ff:ed:29:52:de:d5:ad:d6:bd:48:d7:f7:6a:48:fa:d9:33:53:
6d:aa:cc:87:d1:22:f0:b7:29:3c:88:b0:5e:03:1a:4e:36:f1:
26:d4:3e:53:94:23:ec:ee:aa:d3:97:7e:a2:05:0d:3f:0e:36:
a2:7b:11:1f:1c:b5:15:8a:82:c9:5f:5e:4c:3f:49:f8:bc:db:
8e:68:c3:21:01:d2:77:93:b3:c8:ab:8b:5d:72:8f:6e:b6:e6:
65:98:9a:68:f2:45:69:28:c7:6f:0c:59:08:fc:fa:c1:e6:63:
43:95:fc:d1:68:a9:53:cc:86:2b:82:78:5d:42:d1:a8:f1:b3:
e7:a2:61:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:34 2026 by rpki-client