Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/teU9v00y3huMTlTBsjGbCe6m3oA.roa
File: teU9v00y3huMTlTBsjGbCe6m3oA.roa (raw, json)
Hash identifier: iFPT8116ArHbxLz6TCPLa+BxfjBa6xdFI8/BkdokrQM=
Subject key identifier: B5:E5:3D:BF:4D:32:DE:1B:8C:4E:54:C1:B2:31:9B:09:EE:A6:DE:80
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019EB593EFA7018D0C3DA4635ACE164AB5D4
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/teU9v00y3huMTlTBsjGbCe6m3oA.roa
Signing time: Thu 11 Jun 2026 07:27:11 +0000
ROA not before: Thu 11 Jun 2026 07:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49685
IP address blocks: 31.3.8.0/21 maxlen: 24
31.223.160.0/20 maxlen: 24
37.17.208.0/20 maxlen: 24
46.226.56.0/21 maxlen: 24
78.108.128.0/20 maxlen: 24
80.84.224.0/19 maxlen: 24
80.246.192.0/20 maxlen: 24
80.246.207.0/24 maxlen: 24
80.255.240.0/20 maxlen: 24
81.4.64.0/20 maxlen: 24
81.4.80.0/22 maxlen: 24
81.4.88.0/21 maxlen: 24
81.4.96.0/22 maxlen: 24
81.4.112.0/21 maxlen: 24
81.21.136.0/21 maxlen: 24
81.21.136.0/24 maxlen: 24
81.30.32.0/20 maxlen: 24
83.96.128.0/18 maxlen: 24
83.96.192.0/21 maxlen: 24
83.96.208.0/22 maxlen: 24
83.96.224.0/21 maxlen: 24
83.96.232.0/22 maxlen: 24
83.96.248.0/22 maxlen: 24
85.10.160.0/19 maxlen: 24
85.10.172.0/22 maxlen: 24
85.158.248.0/22 maxlen: 24
85.158.252.0/23 maxlen: 24
91.142.240.0/21 maxlen: 24
91.142.252.0/23 maxlen: 24
91.189.208.0/22 maxlen: 24
91.205.32.0/22 maxlen: 24
94.142.208.0/21 maxlen: 24
141.255.176.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
171.33.128.0/21 maxlen: 24
171.33.128.0/24 maxlen: 24
176.74.224.0/19 maxlen: 24
185.15.248.0/22 maxlen: 24
185.65.52.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.89.152.0/22 maxlen: 24
185.95.68.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
193.242.119.0/24 maxlen: 24
217.21.240.0/20 maxlen: 24
217.21.241.0/24 maxlen: 24
217.149.128.0/20 maxlen: 24
2001:828::/32 maxlen: 48
2001:4cb8::/29 maxlen: 48
2a00:c080::/32 maxlen: 48
2a03:4f00::/32 maxlen: 48
2a03:5700::/32 maxlen: 48
2a05:2500::/32 maxlen: 48
2a05:a282::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:93:ef:a7:01:8d:0c:3d:a4:63:5a:ce:16:4a:b5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jun 11 07:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5e53dbf4d32de1b8c4e54c1b2319b09eea6de80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ea:57:1c:5c:c9:ce:a6:77:1b:25:87:9a:5d:
9d:66:44:98:6a:4f:0b:0b:71:69:86:2a:2e:7b:cd:
3b:70:4b:2b:6f:a6:15:ae:5f:34:7e:5a:4c:50:d5:
99:84:0c:d6:d6:1e:65:ce:61:1f:c8:65:f7:e6:35:
50:34:99:f3:69:8b:be:12:a1:ad:86:e2:a7:2a:40:
62:17:06:a9:b6:7d:be:82:0c:bb:a0:2d:a3:dc:55:
de:dc:a5:fd:e0:79:c4:71:03:f1:da:a6:5a:e9:35:
e1:91:ea:ab:28:79:a7:21:e0:35:f7:5b:ca:85:9e:
e2:8b:01:a6:a6:fb:a1:67:6c:65:08:35:c1:8c:7b:
7f:e4:56:34:66:b3:b0:61:45:94:47:a7:33:35:8b:
fa:4b:b4:24:08:73:e2:3a:b1:c1:2f:64:7a:12:e7:
a8:61:a9:84:70:43:74:17:58:36:26:52:db:71:9b:
7d:64:61:52:ea:8b:18:fb:57:f0:8e:d8:65:75:86:
7b:cb:ea:31:e1:42:b8:64:33:1e:93:73:d2:92:34:
61:34:4d:c4:d0:53:ca:4d:1a:41:28:dd:8e:46:c2:
9a:26:d8:8f:8d:75:c7:ce:35:f9:91:b6:e4:6d:6c:
14:b1:56:8c:47:c7:16:27:52:e3:a7:e0:2c:81:8e:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:3D:BF:4D:32:DE:1B:8C:4E:54:C1:B2:31:9B:09:EE:A6:DE:80
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/teU9v00y3huMTlTBsjGbCe6m3oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.8.0/21
31.223.160.0/20
37.17.208.0/20
46.226.56.0/21
78.108.128.0/20
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.83.255
81.4.88.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0-83.96.199.255
83.96.208.0/22
83.96.224.0-83.96.235.255
83.96.248.0/22
85.10.160.0/19
85.158.248.0-85.158.253.255
91.142.240.0/21
91.142.252.0/23
91.189.208.0/22
91.205.32.0/22
94.142.208.0/21
141.255.176.0/21
171.33.128.0/21
176.74.224.0/19
185.15.248.0/22
185.65.52.0/22
185.69.232.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.105.204.0/22
185.105.216.0/22
193.93.172.0/22
193.242.119.0/24
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
81:d8:fe:c3:3b:8e:2b:5d:3d:53:df:a8:f8:ff:4e:81:64:c2:
ad:93:95:52:08:ff:10:93:e4:61:a9:24:d4:48:20:6c:7e:dc:
54:c8:11:8e:b4:f4:9d:f2:ae:81:ee:ab:18:30:6a:b0:39:8b:
cc:23:03:ee:b1:59:f1:1b:e9:88:51:f5:5b:d1:03:56:46:19:
0b:69:ef:eb:5c:36:53:6e:4c:a2:f8:ad:7c:a6:5d:56:66:2b:
b0:9d:90:33:1a:86:74:71:67:73:1d:9b:49:1f:b3:fc:0f:11:
c5:9b:c3:ac:b2:42:df:c6:4b:4c:c7:fb:b6:f5:91:c4:d2:43:
0f:88:cc:fe:db:de:ee:3b:04:f8:eb:6a:05:6d:ad:5d:73:9e:
3c:91:29:31:81:35:08:13:8f:0d:08:a5:f0:12:69:67:28:65:
26:83:e0:bd:7f:dd:46:b1:26:4a:46:5f:4e:bf:89:30:56:f7:
bd:ab:cb:a1:7b:7d:a1:71:f4:bf:fb:74:cb:f3:78:90:27:70:
44:f1:58:d1:db:4f:4d:31:27:b0:ab:5d:b0:de:5e:0f:9a:b8:
c5:9d:11:f4:b9:7f:14:44:d3:d4:56:a4:17:44:8b:61:77:b1:
e5:83:71:e6:52:6f:e7:4d:3d:0f:06:d0:8a:ff:0e:3c:07:c5:
ab:d1:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:23:30 2026 by rpki-client