Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/xyPRxt8gyN4UvPVCARX1LVhRpNY.roa
File: xyPRxt8gyN4UvPVCARX1LVhRpNY.roa (raw, json)
Hash identifier: 6Z0OEqU5ZvJLP8MHSq0j/bl+XSlDKyhwlrMFSdH8iSg=
Subject key identifier: C7:23:D1:C6:DF:20:C8:DE:14:BC:F5:42:01:15:F5:2D:58:51:A4:D6
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 019FD201696BD88FE28F3F5C8833B25EC380
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/xyPRxt8gyN4UvPVCARX1LVhRpNY.roa
Signing time: Wed 05 Aug 2026 12:58:55 +0000
ROA not before: Wed 05 Aug 2026 12:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398781
IP address blocks: 80.173.192.0/21 maxlen: 32
80.173.232.0/21 maxlen: 32
80.173.240.0/21 maxlen: 32
80.173.248.0/21 maxlen: 32
81.172.0.0/19 maxlen: 24
81.172.48.0/21 maxlen: 24
82.158.0.0/18 maxlen: 32
82.158.92.0/22 maxlen: 32
82.158.96.0/22 maxlen: 32
82.158.100.0/22 maxlen: 32
82.158.104.0/22 maxlen: 32
82.158.108.0/22 maxlen: 32
87.192.88.0/21 maxlen: 24
87.192.208.0/21 maxlen: 24
87.232.144.0/20 maxlen: 24
87.232.200.0/21 maxlen: 24
87.232.208.0/20 maxlen: 24
87.232.226.0/23 maxlen: 24
87.232.232.0/21 maxlen: 24
87.232.240.0/21 maxlen: 24
87.232.248.0/23 maxlen: 24
89.124.246.0/23 maxlen: 24
131.222.136.0/21 maxlen: 24
131.222.144.0/21 maxlen: 24
131.222.152.0/21 maxlen: 24
131.222.160.0/21 maxlen: 24
131.222.168.0/21 maxlen: 24
131.222.176.0/21 maxlen: 24
131.222.184.0/21 maxlen: 24
139.84.64.0/19 maxlen: 24
139.100.32.0/19 maxlen: 24
139.100.64.0/19 maxlen: 24
140.225.32.0/21 maxlen: 32
140.225.40.0/21 maxlen: 32
140.225.48.0/21 maxlen: 32
140.225.56.0/21 maxlen: 32
140.225.224.0/19 maxlen: 32
157.239.64.0/18 maxlen: 24
167.150.82.0/23 maxlen: 32
167.150.96.0/23 maxlen: 32
167.150.108.0/23 maxlen: 32
167.150.114.0/23 maxlen: 32
167.150.150.0/23 maxlen: 32
167.150.164.0/23 maxlen: 32
167.150.168.0/23 maxlen: 32
167.150.174.0/23 maxlen: 32
167.150.178.0/23 maxlen: 32
167.150.184.0/23 maxlen: 32
167.150.202.0/23 maxlen: 32
167.150.212.0/23 maxlen: 32
167.150.242.0/23 maxlen: 32
173.224.144.0/20 maxlen: 32
188.240.83.0/24 maxlen: 24
209.92.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:01:69:6b:d8:8f:e2:8f:3f:5c:88:33:b2:5e:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Aug 5 12:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c723d1c6df20c8de14bcf5420115f52d5851a4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:11:11:0a:ba:89:19:1a:7b:77:9d:43:63:3a:
48:af:4a:37:8e:e8:23:98:f9:39:df:9c:d3:e6:e0:
29:41:1f:01:f2:6c:5c:c8:ce:e5:49:20:21:5c:d3:
be:09:22:6d:6c:bd:bb:7c:88:8e:51:d4:bb:9b:62:
6b:70:99:e0:59:79:0e:21:e3:ff:38:e2:4a:ba:c0:
61:eb:d0:27:20:1c:83:3a:6b:a4:b9:b5:ce:f1:81:
31:bc:d5:19:c0:98:fb:dc:d8:7b:d0:71:af:74:29:
29:62:79:bd:94:bc:f6:b4:09:1c:ac:f0:6f:a0:81:
7d:51:e5:22:e6:29:28:6d:d6:df:80:7a:ee:98:d9:
eb:5a:af:01:b5:6d:b3:bf:dc:2f:d1:71:4e:24:53:
9d:05:43:ab:20:62:77:66:f3:98:ac:5e:d9:5b:90:
ab:1d:75:79:fa:42:0f:28:9f:2d:33:d7:6d:a6:de:
cb:60:5a:34:7e:eb:f5:5e:b7:31:45:a5:1f:1c:3b:
d4:17:3a:21:a7:ef:1a:8e:fb:ad:70:6c:ca:66:6d:
ff:3d:47:18:6e:c8:9e:c0:ea:fb:5f:21:ea:cb:e0:
e7:18:a6:44:55:84:55:5b:ea:ec:9f:73:8f:58:50:
ec:e9:e3:8c:48:ed:d1:5a:ac:0e:1a:32:af:67:01:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:23:D1:C6:DF:20:C8:DE:14:BC:F5:42:01:15:F5:2D:58:51:A4:D6
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/xyPRxt8gyN4UvPVCARX1LVhRpNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.192.0/21
80.173.232.0-80.173.255.255
81.172.0.0/19
81.172.48.0/21
82.158.0.0/18
82.158.92.0-82.158.111.255
87.192.88.0/21
87.192.208.0/21
87.232.144.0/20
87.232.200.0-87.232.223.255
87.232.226.0/23
87.232.232.0-87.232.249.255
89.124.246.0/23
131.222.136.0-131.222.191.255
139.84.64.0/19
139.100.32.0-139.100.95.255
140.225.32.0/19
140.225.224.0/19
157.239.64.0/18
167.150.82.0/23
167.150.96.0/23
167.150.108.0/23
167.150.114.0/23
167.150.150.0/23
167.150.164.0/23
167.150.168.0/23
167.150.174.0/23
167.150.178.0/23
167.150.184.0/23
167.150.202.0/23
167.150.212.0/23
167.150.242.0/23
173.224.144.0/20
188.240.83.0/24
209.92.16.0/20
Signature Algorithm: sha256WithRSAEncryption
13:a5:79:51:1e:27:dc:08:a4:5a:5d:3c:a5:fe:62:ae:ed:f7:
04:f1:ca:d4:6f:23:a4:90:b1:38:5f:13:09:84:a5:92:6a:b2:
9a:7e:75:be:2a:51:2b:6d:81:75:b6:c6:53:8f:8c:e9:d4:0b:
9a:80:01:ba:84:de:d3:00:ea:23:30:78:82:3f:bc:63:b6:f0:
a3:aa:f5:31:bc:34:aa:d1:3d:f0:13:98:64:d5:4f:3d:11:6c:
09:30:42:24:a7:de:89:00:5c:c6:c1:b7:38:40:cf:3a:14:a2:
43:79:54:cb:44:c4:3b:c0:ef:1f:c5:75:35:19:aa:d8:29:65:
b8:fc:c5:56:71:56:7f:5b:6b:62:5d:04:51:59:8c:39:35:70:
a5:1e:0f:14:e7:6d:36:fb:22:5b:24:4a:b9:e7:92:85:96:28:
60:e9:3b:ef:03:a5:7a:0a:42:31:e2:c3:c8:8b:73:b8:06:f3:
99:f3:73:b4:83:9f:ee:17:e5:a0:4c:d4:4e:05:62:ab:10:87:
89:ac:d1:a6:f0:67:81:74:e4:f9:a3:e6:1a:4f:9b:fb:2b:28:
e4:54:6a:07:c5:e4:ae:99:a0:51:fd:c3:c6:ff:5a:c4:cc:00:
6e:d1:ea:16:fa:ae:12:2c:c4:34:f4:38:5f:85:52:cd:f8:80:
dc:8a:ea:48
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgISAZ/SAWlr2I/ijz9ciDOyXsOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk
YzI2MWUwHhcNMjYwODA1MTI1ODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzIzZDFjNmRmMjBjOGRlMTRiY2Y1NDIwMTE1ZjUyZDU4NTFhNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RERCrqJGRp7d51DYzpIr0o3jugj
mPk535zT5uApQR8B8mxcyM7lSSAhXNO+CSJtbL27fIiOUdS7m2JrcJngWXkOIeP/
OOJKusBh69AnIByDOmukubXO8YExvNUZwJj73Nh70HGvdCkpYnm9lLz2tAkcrPBv
oIF9UeUi5ikobdbfgHrumNnrWq8BtW2zv9wv0XFOJFOdBUOrIGJ3ZvOYrF7ZW5Cr
HXV5+kIPKJ8tM9dtpt7LYFo0fuv1XrcxRaUfHDvUFzohp+8ajvutcGzKZm3/PUcY
bsiewOr7XyHqy+DnGKZEVYRVW+rsn3OPWFDs6eOMSO3RWqwOGjKvZwGFUQIDAQAB
o4IDDjCCAwowHQYDVR0OBBYEFMcj0cbfIMjeFLz1QgEV9S1YUaTWMB8GA1UdIwQY
MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt
MTRhMDk5OTNkNjcxLzEveHlQUnh0OGd5TjRVdlBWQ0FSWDFMVmhScE5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx
LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIgYIKwYBBQUHAQcBAf8EggERMIIBDTCCAQkEAgABMIIB
AQMEA1CtwDALAwQDUK3oAwMBUKwDBAVRrAADBANRrDADBAZSngAwDAMEAlKeXAME
BFKeYAMEA1fAWAMEA1fA0AMEBFfokDAMAwQDV+jIAwQFV+jAAwQBV+jiMAwDBANX
6OgDBAFX6PgDBAFZfPYwDAMEA4PeiAMEBoPegAMEBYtUQDAMAwQFi2QgAwQFi2RA
AwQFjOEgAwQFjOHgAwQGne9AAwQBp5ZSAwQBp5ZgAwQBp5ZsAwQBp5ZyAwQBp5aW
AwQBp5akAwQBp5aoAwQBp5auAwQBp5ayAwQBp5a4AwQBp5bKAwQBp5bUAwQBp5by
AwQEreCQAwQAvPBTAwQE0VwQMA0GCSqGSIb3DQEBCwUAA4IBAQATpXlRHifcCKRa
XTyl/mKu7fcE8crUbyOkkLE4XxMJhKWSarKafnW+KlErbYF1tsZTj4zp1AuagAG6
hN7TAOojMHiCP7xjtvCjqvUxvDSq0T3wE5hk1U89EWwJMEIkp96JAFzGwbc4QM86
FKJDeVTLRMQ7wO8fxXU1GarYKWW4/MVWcVZ/W2tiXQRRWYw5NXClHg8U5202+yJb
JEq555KFlihg6TvvA6V6CkIx4sPIi3O4BvOZ83O0g5/uF+WgTNROBWKrEIeJrNGm
8GeBdOT5o+YaT5v7KyjkVGoHxeSumaBR/cPG/1rEzABu0eoW+q4SLMQ09DhfhVLN
+IDciupI
-----END CERTIFICATE-----
Generated at Sat Aug 22 04:08:57 2026 by rpki-client