Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YRakhs6efEFnm6l_LULBYVyFEIk.roa
File: YRakhs6efEFnm6l_LULBYVyFEIk.roa (raw, json)
Hash identifier: djebTsnNVE3WxVjIBUpAJhnh3/3A5D39quUN6bFqtyM=
Subject key identifier: 61:16:A4:86:CE:9E:7C:41:67:9B:A9:7F:2D:42:C1:61:5C:85:10:89
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E4EE287D1D63DD5461161A54866C
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YRakhs6efEFnm6l_LULBYVyFEIk.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15557
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.140.0.0/15 maxlen: 24
77.142.0.0/16 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 24
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.118.4.0/24 maxlen: 24
80.124.0.0/15 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.65.0.0/16 maxlen: 16
81.185.0.0/16 maxlen: 24
81.220.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
85.68.0.0/15 maxlen: 24
85.168.0.0/14 maxlen: 24
86.64.0.0/12 maxlen: 24
86.66.127.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
88.136.0.0/13 maxlen: 24
88.136.0.0/14 maxlen: 24
88.140.0.0/15 maxlen: 24
88.142.0.0/16 maxlen: 24
88.143.251.0/24 maxlen: 24
88.143.252.0/24 maxlen: 24
88.143.253.0/24 maxlen: 24
88.143.254.0/24 maxlen: 24
88.143.255.0/24 maxlen: 24
88.219.0.0/16 maxlen: 16
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
91.68.0.0/22 maxlen: 22
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
93.191.80.0/21 maxlen: 21
95.157.192.0/18 maxlen: 18
109.0.0.0/11 maxlen: 24
141.170.216.0/21 maxlen: 24
185.147.204.0/22 maxlen: 24
194.6.128.0/19 maxlen: 19
194.183.192.0/19 maxlen: 19
194.242.176.0/20 maxlen: 20
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:9380::/32 maxlen: 32
2a00:b280::/32 maxlen: 32
2a00:cc80::/32 maxlen: 32
2a00:d780::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400::/48 maxlen: 48
2a02:8400:11::/48 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a04:800::/29 maxlen: 29
2a04:800::/30 maxlen: 30
2a04:807::/48 maxlen: 48
2a04:807:1::/48 maxlen: 48
2a04:807:2::/48 maxlen: 48
2a04:807:3::/48 maxlen: 48
2a04:807:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e4:ee:28:7d:1d:63:dd:54:61:16:1a:54:86:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6116a486ce9e7c41679ba97f2d42c1615c851089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:ec:8c:2c:6c:85:9d:92:5f:c8:6d:4b:55:
3b:c9:51:a5:71:ca:d8:61:b5:7c:5b:95:5f:84:57:
53:35:88:ae:bb:d4:c3:45:b1:f9:22:47:de:f2:84:
d0:26:fd:b3:f4:97:db:5a:3b:26:fe:f7:41:eb:c4:
3f:c1:6e:55:ba:8e:dd:94:fe:ac:e1:9e:eb:af:1b:
f5:4b:c8:83:ae:4e:cb:77:44:fb:cd:79:c5:9b:fc:
42:ed:22:25:40:70:d1:45:ed:f2:38:10:88:88:8b:
16:e3:18:6c:bb:22:7c:b8:d5:fe:11:9c:46:f6:c6:
69:57:d2:52:2f:5d:5b:14:cc:d9:d1:fc:8f:6e:16:
4b:cb:01:93:9c:52:a0:af:61:8e:d3:47:41:85:97:
0b:a8:a0:a1:99:96:29:c3:75:b9:f6:5f:75:63:60:
9b:ac:2f:1e:68:29:3f:cf:e2:b6:1f:6f:55:1d:21:
4a:bd:f1:ac:30:1d:4f:3e:37:8d:d6:50:3c:54:2e:
1f:81:16:72:69:d6:27:6c:21:bf:f9:95:7c:34:4f:
d2:dd:1e:99:60:d6:b6:f2:1f:ab:3c:07:a7:8e:08:
e7:c0:84:21:74:b1:94:6e:a5:b9:86:61:c1:e6:88:
ee:ca:80:c3:a5:c1:9b:15:96:82:97:7b:cc:77:4b:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:16:A4:86:CE:9E:7C:41:67:9B:A9:7F:2D:42:C1:61:5C:85:10:89
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/YRakhs6efEFnm6l_LULBYVyFEIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.142.255.255
77.144.0.0/12
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.191.80.0/21
95.157.192.0/18
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:8d80::/32
2a00:9380::/32
2a00:b280::/32
2a00:cc80::/32
2a00:d780::/32
2a00:ec80::/32
2a02:8400::/25
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
65:2f:2b:a6:b7:b5:57:29:e4:58:4a:58:82:11:2a:36:88:01:
17:f8:a6:0b:41:71:42:5d:cf:9a:fb:3b:eb:f8:c2:2c:93:ac:
56:14:43:7b:69:63:6e:af:fd:8d:b5:0b:62:14:e5:5d:3b:a1:
24:96:be:33:d0:d8:e0:a3:6f:1c:ca:b2:36:98:5a:bb:07:dd:
85:4a:8a:fb:29:d3:5c:f1:61:d6:8f:b2:06:11:df:df:82:0d:
bb:c2:fb:67:9a:da:9f:23:1e:c0:36:6b:ab:5c:27:da:84:2d:
2c:35:88:b2:d6:94:30:ca:08:b4:ee:59:04:40:44:b5:e3:2a:
47:4f:49:67:11:3f:cc:f6:a1:ca:24:3d:bc:a8:34:98:4c:0d:
53:f9:38:90:7c:ba:13:27:97:44:fe:2f:eb:89:ed:33:d8:b0:
25:5d:22:fd:92:61:9b:d5:55:88:10:e6:f9:ec:96:4e:99:13:
a5:ba:c6:22:b2:de:ab:04:00:cd:76:8b:a2:46:d9:1e:05:75:
50:15:a7:de:8e:e0:4a:b4:63:33:98:e6:7a:d8:03:66:a9:2c:
c0:84:d2:71:a1:95:d7:c1:d5:bb:c7:85:56:cf:63:d2:2a:27:
75:0b:2b:59:06:0a:95:b5:7c:39:34:67:1a:b8:b8:1f:69:2a:
2a:d1:4b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:08 2026 by rpki-client