Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r_pD8ck87krNIJsBOPWxv-JI-QM.roa
File: r_pD8ck87krNIJsBOPWxv-JI-QM.roa (raw, json)
Hash identifier: bL7SiBnX1trBwjKBwddWGaNNNqcs0cSRdREf5dTIMrE=
Subject key identifier: AF:FA:43:F1:C9:3C:EE:4A:CD:20:9B:01:38:F5:B1:BF:E2:48:F9:03
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368AA5A104E7C880945C88543ABE740
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r_pD8ck87krNIJsBOPWxv-JI-QM.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8851
IP address blocks: 37.98.144.0/21 maxlen: 24
37.98.144.0/22 maxlen: 24
37.252.24.0/21 maxlen: 24
77.93.128.0/19 maxlen: 24
77.107.64.0/18 maxlen: 24
79.99.72.0/21 maxlen: 24
79.99.144.0/21 maxlen: 24
80.240.80.0/20 maxlen: 24
81.5.128.0/18 maxlen: 24
81.168.0.0/17 maxlen: 24
82.152.0.0/15 maxlen: 24
82.152.0.0/16 maxlen: 24
82.163.0.0/19 maxlen: 24
85.159.128.0/21 maxlen: 24
89.28.232.0/21 maxlen: 24
89.31.232.0/21 maxlen: 24
89.213.48.0/20 maxlen: 24
89.213.64.0/18 maxlen: 24
89.213.192.0/18 maxlen: 24
95.130.96.0/21 maxlen: 24
109.176.0.0/16 maxlen: 24
158.255.8.0/21 maxlen: 24
185.20.32.0/22 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
185.24.84.0/24 maxlen: 24
185.24.86.0/23 maxlen: 24
185.101.44.0/22 maxlen: 24
193.27.212.0/23 maxlen: 24
194.105.64.0/19 maxlen: 24
195.128.138.0/24 maxlen: 24
212.38.64.0/19 maxlen: 24
213.130.128.0/19 maxlen: 24
213.152.32.0/19 maxlen: 24
213.210.0.0/18 maxlen: 24
213.218.208.0/20 maxlen: 24
213.218.224.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
2001:1a90::/32 maxlen: 48
2a00:c60::/32 maxlen: 48
2a00:1c40::/29 maxlen: 48
2a02:21f8::/32 maxlen: 48
2a02:6f80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:aa:5a:10:4e:7c:88:09:45:c8:85:43:ab:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=affa43f1c93cee4acd209b0138f5b1bfe248f903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:e4:27:6f:fe:6d:0e:bb:f2:23:bd:2d:c7:
7f:c5:b4:76:8d:6a:d6:ea:85:d6:9f:03:d2:d0:76:
37:e5:ac:61:fa:ca:46:77:8a:1b:19:94:16:11:a9:
14:ac:cf:5c:5d:5c:f9:c5:84:95:0a:da:0f:41:39:
95:af:c4:bc:77:a5:e8:09:5a:3d:9f:67:14:9d:25:
06:5a:65:2f:c1:76:e5:b8:af:33:c9:86:9f:bc:69:
4e:a0:23:72:8a:84:cf:38:2d:0e:05:86:90:63:fb:
d7:ef:ce:a3:80:49:66:15:0e:3c:a2:d3:ca:d7:86:
32:f1:15:33:b9:45:0d:3f:01:95:59:ea:0e:59:0a:
0f:16:5b:7d:3e:29:c2:b9:2b:a1:9f:5f:30:82:5c:
a4:29:1b:9b:af:91:32:b7:fb:0d:0e:50:6f:d2:24:
75:01:b4:e6:2e:39:31:56:b6:27:2e:60:89:79:b6:
d6:40:77:cb:26:44:a3:3a:39:6f:50:96:c7:bf:6f:
7b:0d:3b:f0:28:42:b0:bd:d1:d7:22:b9:38:17:10:
7a:ec:9d:8c:4c:56:72:2c:d1:27:34:4e:e6:c7:8c:
c3:78:31:5c:bf:12:d6:d7:ce:7c:f2:b9:94:70:a7:
de:ea:f4:b6:a9:4d:61:9d:43:2b:ec:f1:c1:d1:50:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:43:F1:C9:3C:EE:4A:CD:20:9B:01:38:F5:B1:BF:E2:48:F9:03
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r_pD8ck87krNIJsBOPWxv-JI-QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.93.128.0/19
77.107.64.0/18
79.99.72.0/21
79.99.144.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.28.232.0/21
89.31.232.0/21
89.213.48.0-89.213.127.255
89.213.192.0/18
95.130.96.0/21
109.176.0.0/16
158.255.8.0/21
185.20.32.0/22
185.24.84.0/24
185.24.86.0/23
185.101.44.0/22
193.27.212.0/23
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a00:1c40::/29
2a02:21f8::/32
2a02:6f80::/29
Signature Algorithm: sha256WithRSAEncryption
59:34:ef:46:10:ca:72:3f:8b:2f:d8:c9:7e:11:81:b1:11:94:
f1:82:8a:c4:25:89:9b:6c:76:d5:f9:d6:33:1e:65:44:d4:61:
cd:c3:61:ff:f9:e6:67:37:f0:e1:b3:e9:51:f8:5f:e3:8d:0c:
f1:48:ee:0a:e7:f8:66:c5:21:e3:f8:ac:59:b5:75:ff:52:e3:
ba:c7:ce:fe:b6:71:da:84:c1:02:14:59:8c:82:4a:85:77:a2:
a7:18:5f:0b:ab:ce:33:98:8c:89:a9:30:9c:cf:af:c2:55:68:
5d:56:ae:ff:86:0b:7c:00:cc:cc:52:b4:33:77:9d:4e:d6:70:
b3:a2:4f:9b:9f:42:fe:eb:f3:7a:7a:26:09:5e:13:de:f8:c9:
72:e0:7b:0e:12:83:10:c1:a7:15:2b:db:1b:14:34:c3:21:a4:
5b:08:e6:ce:fb:a3:49:07:33:c0:00:c7:1f:8d:93:d4:2e:79:
25:86:50:b1:75:4a:ba:b3:4b:39:6c:ff:20:03:bc:c0:c5:c9:
36:81:2b:7b:c6:58:43:37:04:e9:56:06:83:c0:34:f3:04:4a:
9f:17:98:96:84:d5:0d:cd:d8:f5:14:b5:8d:87:5f:a1:21:e9:
84:5d:15:29:a9:08:c0:4a:05:28:ec:b7:8f:2c:ca:4b:1b:50:
cc:6f:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:27 2026 by rpki-client