Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/z6k43Q6Mlg6101zXMnQ3lKLqrZI.roa
File: z6k43Q6Mlg6101zXMnQ3lKLqrZI.roa (raw, json)
Hash identifier: WKsgqY1IGIdnJy6vmh3A6PaJlhcqbIIJGjfXdiXAmvU=
Subject key identifier: CF:A9:38:DD:0E:8C:96:0E:B5:D3:5C:D7:32:74:37:94:A2:EA:AD:92
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019FF5C6732D72A0C8013F0E086A58C27734
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/z6k43Q6Mlg6101zXMnQ3lKLqrZI.roa
Signing time: Wed 12 Aug 2026 11:40:51 +0000
ROA not before: Wed 12 Aug 2026 11:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398781
IP address blocks: 31.13.211.0/24 maxlen: 32
45.81.39.0/24 maxlen: 32
45.112.248.0/22 maxlen: 24
67.211.224.0/20 maxlen: 32
69.160.128.0/20 maxlen: 32
69.160.144.0/20 maxlen: 32
80.76.48.0/24 maxlen: 32
81.31.193.0/24 maxlen: 32
82.158.232.0/21 maxlen: 32
82.158.240.0/21 maxlen: 32
82.158.248.0/21 maxlen: 32
85.136.224.0/20 maxlen: 32
85.136.240.0/20 maxlen: 32
85.217.222.0/23 maxlen: 32
87.120.4.0/24 maxlen: 32
87.120.38.0/24 maxlen: 32
87.120.59.0/24 maxlen: 32
87.120.60.0/24 maxlen: 32
87.120.98.0/24 maxlen: 32
87.120.236.0/24 maxlen: 32
87.121.20.0/24 maxlen: 32
87.121.21.0/24 maxlen: 32
87.121.45.0/24 maxlen: 32
87.121.87.0/24 maxlen: 32
91.92.230.0/24 maxlen: 32
93.123.47.0/24 maxlen: 32
93.123.73.0/24 maxlen: 32
93.123.117.0/24 maxlen: 32
93.123.119.0/24 maxlen: 32
94.156.12.0/24 maxlen: 32
94.156.130.0/24 maxlen: 32
94.156.239.0/24 maxlen: 32
94.156.248.0/24 maxlen: 32
103.52.124.0/22 maxlen: 24
103.210.200.0/22 maxlen: 24
132.243.0.0/20 maxlen: 24
132.243.96.0/20 maxlen: 24
139.84.96.0/19 maxlen: 24
140.209.128.0/18 maxlen: 24
151.123.192.0/19 maxlen: 24
152.114.224.0/22 maxlen: 24
152.114.240.0/21 maxlen: 24
153.79.128.0/19 maxlen: 24
153.79.192.0/19 maxlen: 24
157.239.32.0/19 maxlen: 24
160.20.0.0/22 maxlen: 24
165.217.0.0/18 maxlen: 24
165.217.64.0/19 maxlen: 24
185.207.13.0/24 maxlen: 32
194.180.51.0/24 maxlen: 32
213.254.64.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:c6:73:2d:72:a0:c8:01:3f:0e:08:6a:58:c2:77:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Aug 12 11:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfa938dd0e8c960eb5d35cd732743794a2eaad92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:b3:ea:ee:47:41:0f:90:99:a1:b5:ea:7c:
23:d2:86:73:55:bc:22:80:6c:72:82:d2:e5:dd:f2:
aa:6d:58:45:41:eb:80:dc:32:09:db:f4:fd:29:a3:
4f:4f:25:97:59:d6:22:17:67:e9:8b:0c:a5:35:df:
a8:04:c4:43:94:21:1d:39:fb:51:ed:62:22:8d:0d:
dd:ad:88:4a:93:88:5c:fa:b0:5a:08:42:8c:83:cc:
c6:b3:3c:e4:92:8b:27:d7:05:c8:39:d4:31:3c:93:
62:a0:25:1d:ca:0c:5a:a1:31:a2:5f:d4:a3:57:c5:
25:19:62:81:2d:8d:54:d9:9d:f3:81:26:9c:f9:60:
21:f9:78:68:b8:0e:63:78:ae:7b:d8:ee:0c:70:f3:
a1:7f:ae:a1:2f:7b:55:b4:88:7d:c9:5b:b1:45:d5:
19:72:b6:d0:ad:7c:e4:ec:52:26:00:0c:b9:ce:ff:
cd:dc:e0:45:4a:37:a8:98:d2:30:d3:97:19:6c:cb:
a5:50:6c:96:c7:a6:c4:df:48:fb:bf:fd:5b:0b:b5:
55:4a:54:c1:75:b7:a3:c0:e5:bb:b2:55:ef:43:a3:
c0:46:6d:d9:fa:c4:c2:24:98:66:6f:16:27:8f:f4:
e2:96:29:5e:cf:cf:93:f2:a3:6c:84:78:82:06:1a:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:38:DD:0E:8C:96:0E:B5:D3:5C:D7:32:74:37:94:A2:EA:AD:92
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/z6k43Q6Mlg6101zXMnQ3lKLqrZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.81.39.0/24
45.112.248.0/22
67.211.224.0/20
69.160.128.0/19
80.76.48.0/24
81.31.193.0/24
82.158.232.0-82.158.255.255
85.136.224.0/19
85.217.222.0/23
87.120.4.0/24
87.120.38.0/24
87.120.59.0-87.120.60.255
87.120.98.0/24
87.120.236.0/24
87.121.20.0/23
87.121.45.0/24
87.121.87.0/24
91.92.230.0/24
93.123.47.0/24
93.123.73.0/24
93.123.117.0/24
93.123.119.0/24
94.156.12.0/24
94.156.130.0/24
94.156.239.0/24
94.156.248.0/24
103.52.124.0/22
103.210.200.0/22
132.243.0.0/20
132.243.96.0/20
139.84.96.0/19
140.209.128.0/18
151.123.192.0/19
152.114.224.0/22
152.114.240.0/21
153.79.128.0/19
153.79.192.0/19
157.239.32.0/19
160.20.0.0/22
165.217.0.0-165.217.95.255
185.207.13.0/24
194.180.51.0/24
213.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b8:79:5a:34:ee:0d:c1:c3:d5:c8:bd:7f:d0:ba:42:dc:7b:60:
a0:e3:79:2e:0f:d3:a4:5b:43:d6:48:08:90:04:a0:64:3c:b2:
c1:00:92:2b:15:30:87:f8:72:80:d5:0e:d4:53:2d:94:26:91:
01:97:8e:d9:03:27:d2:4c:ec:0b:54:a8:45:2e:f3:ee:99:0c:
fd:c0:07:33:f1:3c:7f:12:56:4c:93:0b:6f:85:56:c0:69:78:
0c:37:0f:26:c2:a8:1a:f2:de:78:e8:32:e7:9e:91:aa:81:42:
89:4e:e3:a3:cc:5b:a2:93:1a:b6:fc:58:7b:70:25:63:cf:19:
0d:b4:1f:60:72:e8:cc:fb:ab:65:43:63:ab:46:84:77:a6:b6:
17:73:25:d4:24:2e:a0:74:b7:b8:07:60:96:2a:04:91:c9:cc:
65:df:10:2b:f8:0c:1c:80:85:b2:80:f2:35:49:fc:2c:90:14:
b8:67:1f:1a:22:32:61:76:d9:cb:70:e8:9f:1e:83:76:c7:39:
62:1d:de:4c:67:77:b3:a4:45:09:96:6e:4f:1d:55:df:ed:ce:
f3:6b:25:53:40:10:da:1f:59:91:c7:22:2d:7b:88:a2:ae:f4:
dd:dc:79:27:28:8f:bf:8d:88:b4:a2:0b:02:a9:f3:db:cf:39:
8e:6c:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:08:56 2026 by rpki-client