Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/7lXBjbngAvV9gHuyOcicow6UdVo.roa
File: 7lXBjbngAvV9gHuyOcicow6UdVo.roa (raw, json)
Hash identifier: BQCTu2EQ42JTon6DFlUxY4dueGNRFijDWqRTzuT0vfE=
Subject key identifier: EE:55:C1:8D:B9:E0:02:F5:7D:80:7B:B2:39:C8:9C:A3:0E:94:75:5A
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019CE2BDD871CE22E5688D8FC479FECE2A1D
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/7lXBjbngAvV9gHuyOcicow6UdVo.roa
Signing time: Thu 12 Mar 2026 15:50:18 +0000
ROA not before: Thu 12 Mar 2026 15:50:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398781
IP address blocks: 31.13.211.0/24 maxlen: 32
45.81.39.0/24 maxlen: 32
67.211.224.0/20 maxlen: 32
69.160.128.0/20 maxlen: 32
69.160.144.0/20 maxlen: 32
80.76.48.0/24 maxlen: 32
81.31.193.0/24 maxlen: 32
82.158.232.0/21 maxlen: 32
82.158.240.0/21 maxlen: 32
82.158.248.0/21 maxlen: 32
85.136.224.0/20 maxlen: 32
85.136.240.0/20 maxlen: 32
85.217.222.0/23 maxlen: 32
87.120.4.0/24 maxlen: 32
87.120.38.0/24 maxlen: 32
87.120.59.0/24 maxlen: 32
87.120.60.0/24 maxlen: 32
87.120.98.0/24 maxlen: 32
87.120.236.0/24 maxlen: 32
87.121.20.0/24 maxlen: 32
87.121.21.0/24 maxlen: 32
87.121.45.0/24 maxlen: 32
87.121.87.0/24 maxlen: 32
91.92.230.0/24 maxlen: 32
93.123.47.0/24 maxlen: 32
93.123.73.0/24 maxlen: 32
93.123.117.0/24 maxlen: 32
93.123.119.0/24 maxlen: 32
94.156.12.0/24 maxlen: 32
94.156.130.0/24 maxlen: 32
94.156.239.0/24 maxlen: 32
94.156.248.0/24 maxlen: 32
185.207.13.0/24 maxlen: 32
194.180.51.0/24 maxlen: 32
213.254.64.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:bd:d8:71:ce:22:e5:68:8d:8f:c4:79:fe:ce:2a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Mar 12 15:50:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee55c18db9e002f57d807bb239c89ca30e94755a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:91:6a:11:8e:7d:f2:97:a6:3b:de:18:68:
85:f8:c3:00:2e:93:34:50:fa:da:89:c0:3e:94:f5:
31:b9:b1:37:6f:7c:da:d9:57:7a:cf:bd:4d:b0:ce:
6c:ec:b8:5d:5e:90:2b:be:02:50:7c:74:5d:c7:e4:
dc:46:55:d0:ec:03:48:4e:77:a5:24:c8:4a:36:7a:
c2:3e:61:26:e9:aa:36:55:b0:25:41:c4:76:bc:2c:
50:fb:fb:b5:bd:75:76:6a:a2:0e:af:83:7b:22:3c:
b5:a0:67:aa:d8:a5:22:ae:9f:5d:9a:df:6e:b4:52:
58:4e:7d:a8:20:d3:81:54:fa:f4:48:0e:41:35:68:
3a:a7:e0:8b:bd:09:c8:fd:24:6b:48:97:2f:f5:b4:
16:e0:c4:2b:fb:4d:c5:c0:84:43:23:a5:21:53:2c:
0e:71:3c:0e:cd:e3:5f:be:bb:14:5c:5c:aa:cb:dd:
d7:57:ca:cb:58:98:28:4a:0f:59:dd:fc:ea:7c:25:
fb:1d:2a:81:4f:e1:ff:ed:4a:6e:09:0a:37:a6:76:
dc:ef:12:e9:75:ea:98:9b:cb:a5:f4:1f:29:f0:8d:
82:34:56:7b:21:75:4a:54:5b:77:78:e0:4f:bc:c9:
da:ff:46:9e:e7:a5:cb:04:fc:6f:26:c3:02:e3:2d:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:55:C1:8D:B9:E0:02:F5:7D:80:7B:B2:39:C8:9C:A3:0E:94:75:5A
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/7lXBjbngAvV9gHuyOcicow6UdVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.81.39.0/24
67.211.224.0/20
69.160.128.0/19
80.76.48.0/24
81.31.193.0/24
82.158.232.0-82.158.255.255
85.136.224.0/19
85.217.222.0/23
87.120.4.0/24
87.120.38.0/24
87.120.59.0-87.120.60.255
87.120.98.0/24
87.120.236.0/24
87.121.20.0/23
87.121.45.0/24
87.121.87.0/24
91.92.230.0/24
93.123.47.0/24
93.123.73.0/24
93.123.117.0/24
93.123.119.0/24
94.156.12.0/24
94.156.130.0/24
94.156.239.0/24
94.156.248.0/24
185.207.13.0/24
194.180.51.0/24
213.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:fe:14:cb:22:d4:93:d6:4b:f5:fd:2f:af:ae:c7:bd:2c:21:
10:26:09:a0:20:2a:c3:ed:d3:68:4e:b4:b9:fd:1f:4d:f1:b3:
53:7e:e1:44:78:4c:c1:05:48:63:4c:ae:f7:4c:c4:33:e4:1d:
11:3c:24:12:3d:5c:b2:34:05:23:4a:05:43:c1:84:5d:8b:d2:
bb:93:6f:0c:1d:09:0c:a3:a6:0b:c3:61:69:7f:00:ca:e3:34:
64:06:0a:1b:b8:3f:04:cc:b8:26:3d:8b:0b:ea:a6:79:1b:2c:
20:07:d8:51:d6:83:79:9b:c2:cb:4a:9c:c1:7f:64:ff:e6:fc:
e8:6f:65:d2:b6:99:72:a4:95:09:c9:12:28:7a:40:a7:8c:00:
51:ed:fa:6f:50:99:41:f8:ad:f7:68:63:40:f4:a3:84:54:63:
57:4f:cf:20:97:29:8a:d1:83:f1:c8:83:3a:84:34:26:2a:0c:
c3:fd:8a:91:59:71:90:72:05:f0:71:f5:3b:91:7a:16:df:cc:
0c:3f:ed:45:48:84:f5:d7:eb:66:ce:7c:df:ef:10:82:9f:49:
bf:4c:7e:7c:16:e3:0e:e8:d2:39:0a:01:e3:71:96:64:2f:e2:
a9:95:6e:a1:30:76:f3:8b:eb:a1:d0:4f:24:3f:29:a5:94:12:
e8:9e:c6:56
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgISAZzivdhxziLlaI2PxHn+ziodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl
NzczNWIwHhcNMjYwMzEyMTU1MDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTU1YzE4ZGI5ZTAwMmY1N2Q4MDdiYjIzOWM4OWNhMzBlOTQ3NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8iRahGOffKXpjveGGiF+MMALpM0
UPraicA+lPUxubE3b3za2Vd6z71NsM5s7LhdXpArvgJQfHRdx+TcRlXQ7ANITnel
JMhKNnrCPmEm6ao2VbAlQcR2vCxQ+/u1vXV2aqIOr4N7Ijy1oGeq2KUirp9dmt9u
tFJYTn2oINOBVPr0SA5BNWg6p+CLvQnI/SRrSJcv9bQW4MQr+03FwIRDI6UhUywO
cTwOzeNfvrsUXFyqy93XV8rLWJgoSg9Z3fzqfCX7HSqBT+H/7UpuCQo3pnbc7xLp
deqYm8ul9B8p8I2CNFZ7IXVKVFt3eOBPvMna/0ae56XLBPxvJsMC4y3e0QIDAQAB
o4ICxTCCAsEwHQYDVR0OBBYEFO5VwY254AL1fYB7sjnInKMOlHVaMB8GA1UdIwQY
MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt
ZWVkZDk0ZWMxMjhjLzEvN2xYQmpibmdBdlY5Z0h1eU9jaWNvdzZVZFZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj
LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBxAQCAAEwgb0DBAAf
DdMDBAAtUScDBARD0+ADBAVFoIADBABQTDADBABRH8EwCwMEA1Ke6AMDAFKeAwQF
VYjgAwQBVdneAwQAV3gEAwQAV3gmMAwDBABXeDsDBABXeDwDBABXeGIDBABXeOwD
BAFXeRQDBABXeS0DBABXeVcDBABbXOYDBABdey8DBABde0kDBABde3UDBABde3cD
BABenAwDBABenIIDBABenO8DBABenPgDBAC5zw0DBADCtDMDBAbV/kAwDQYJKoZI
hvcNAQELBQADggEBAEr+FMsi1JPWS/X9L6+ux70sIRAmCaAgKsPt02hOtLn9H03x
s1N+4UR4TMEFSGNMrvdMxDPkHRE8JBI9XLI0BSNKBUPBhF2L0ruTbwwdCQyjpgvD
YWl/AMrjNGQGChu4PwTMuCY9iwvqpnkbLCAH2FHWg3mbwstKnMF/ZP/m/OhvZdK2
mXKklQnJEih6QKeMAFHt+m9QmUH4rfdoY0D0o4RUY1dPzyCXKYrRg/HIgzqENCYq
DMP9ipFZcZByBfBx9TuRehbfzAw/7UVIhPXX62bOfN/vEIKfSb9MfnwW4w7o0jkK
AeNxlmQv4qmVbqEwdvOL66HQTyQ/KaWUEuiexlY=
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:34:23 2026 by rpki-client