Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/YrFAJ5HlrMGSrM-tu5nQioRuqPg.roa
File: YrFAJ5HlrMGSrM-tu5nQioRuqPg.roa (raw, json)
Hash identifier: bjj/lspNZnucO111n6tmzviaGQ1/0uiAEZYw/tDeIYM=
Subject key identifier: 62:B1:40:27:91:E5:AC:C1:92:AC:CF:AD:BB:99:D0:8A:84:6E:A8:F8
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 01A11529764910787510BBC72010FB77FBAB
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/YrFAJ5HlrMGSrM-tu5nQioRuqPg.roa
Signing time: Wed 07 Oct 2026 07:00:01 +0000
ROA not before: Wed 07 Oct 2026 07:00:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56630
IP address blocks: 5.182.228.0/22 maxlen: 24
5.188.172.0/24 maxlen: 24
5.188.173.0/24 maxlen: 24
5.188.180.0/22 maxlen: 24
31.40.216.0/22 maxlen: 24
45.135.120.0/22 maxlen: 24
45.141.8.0/22 maxlen: 24
45.150.232.0/22 maxlen: 24
46.21.84.0/22 maxlen: 24
77.72.16.0/23 maxlen: 24
77.72.18.0/23 maxlen: 24
77.72.20.0/23 maxlen: 24
77.72.22.0/23 maxlen: 24
88.210.38.0/24 maxlen: 24
88.210.39.0/24 maxlen: 24
88.218.240.0/22 maxlen: 24
89.34.238.0/24 maxlen: 24
89.36.160.0/24 maxlen: 24
89.36.161.0/24 maxlen: 24
91.192.80.0/24 maxlen: 24
91.192.83.0/24 maxlen: 24
91.201.64.0/22 maxlen: 24
92.119.88.0/22 maxlen: 24
93.189.56.0/24 maxlen: 24
93.189.57.0/24 maxlen: 24
93.189.58.0/24 maxlen: 24
93.189.60.0/24 maxlen: 24
93.189.61.0/24 maxlen: 24
93.189.62.0/24 maxlen: 24
93.189.63.0/24 maxlen: 24
95.81.64.0/22 maxlen: 24
95.81.68.0/23 maxlen: 24
95.81.70.0/24 maxlen: 24
95.81.71.0/24 maxlen: 24
95.81.80.0/23 maxlen: 24
95.81.82.0/24 maxlen: 24
95.81.83.0/24 maxlen: 24
95.81.84.0/24 maxlen: 24
95.81.87.0/24 maxlen: 24
95.81.104.0/23 maxlen: 24
95.81.106.0/24 maxlen: 24
95.81.108.0/23 maxlen: 24
95.81.111.0/24 maxlen: 24
103.82.100.0/23 maxlen: 24
103.97.88.0/24 maxlen: 24
103.97.89.0/24 maxlen: 24
103.97.90.0/24 maxlen: 24
103.253.37.0/24 maxlen: 24
109.122.202.0/23 maxlen: 24
109.122.204.0/23 maxlen: 24
185.6.12.0/23 maxlen: 24
185.6.14.0/23 maxlen: 24
185.35.220.0/23 maxlen: 24
185.110.216.0/23 maxlen: 24
185.120.136.0/24 maxlen: 24
185.120.137.0/24 maxlen: 24
185.120.138.0/24 maxlen: 24
185.120.139.0/24 maxlen: 24
185.131.64.0/24 maxlen: 24
185.131.65.0/24 maxlen: 24
185.131.66.0/24 maxlen: 24
185.131.67.0/24 maxlen: 24
185.135.84.0/22 maxlen: 24
185.140.12.0/22 maxlen: 24
185.140.208.0/24 maxlen: 24
185.140.209.0/24 maxlen: 24
185.224.248.0/24 maxlen: 24
185.224.250.0/24 maxlen: 24
185.234.146.0/23 maxlen: 24
185.246.152.0/24 maxlen: 24
185.246.153.0/24 maxlen: 24
185.246.154.0/24 maxlen: 24
185.246.155.0/24 maxlen: 24
192.77.240.0/22 maxlen: 24
192.77.244.0/22 maxlen: 24
192.77.249.0/24 maxlen: 24
192.77.250.0/24 maxlen: 24
192.77.252.0/22 maxlen: 24
194.59.46.0/24 maxlen: 24
194.59.59.0/24 maxlen: 24
194.59.142.0/24 maxlen: 24
194.59.155.0/24 maxlen: 24
195.238.124.0/22 maxlen: 24
212.23.200.0/24 maxlen: 24
213.111.128.0/23 maxlen: 24
213.111.132.0/23 maxlen: 24
213.111.136.0/23 maxlen: 24
213.111.138.0/23 maxlen: 24
213.111.143.0/24 maxlen: 24
213.173.32.0/22 maxlen: 24
213.183.32.0/24 maxlen: 24
213.183.33.0/24 maxlen: 24
213.183.36.0/24 maxlen: 24
213.183.37.0/24 maxlen: 24
213.183.38.0/24 maxlen: 24
213.183.39.0/24 maxlen: 24
213.183.40.0/24 maxlen: 24
213.183.41.0/24 maxlen: 24
213.183.42.0/24 maxlen: 24
213.183.43.0/24 maxlen: 24
213.183.44.0/24 maxlen: 24
213.183.45.0/24 maxlen: 24
213.183.46.0/24 maxlen: 24
213.183.47.0/24 maxlen: 24
213.183.48.0/24 maxlen: 24
213.183.49.0/24 maxlen: 24
213.183.50.0/24 maxlen: 24
213.183.51.0/24 maxlen: 24
213.183.52.0/24 maxlen: 24
213.183.53.0/24 maxlen: 24
213.183.58.0/24 maxlen: 24
213.183.59.0/24 maxlen: 24
213.183.60.0/24 maxlen: 24
213.183.61.0/24 maxlen: 24
213.183.62.0/24 maxlen: 24
213.183.63.0/24 maxlen: 24
213.226.68.0/22 maxlen: 24
217.30.8.0/22 maxlen: 24
2a06:f900::/36 maxlen: 36
2a06:f900:4000::/36 maxlen: 36
2a06:f901::/36 maxlen: 36
2a06:f902::/36 maxlen: 36
2a06:f902:c000::/36 maxlen: 36
2a06:f903::/36 maxlen: 36
2a06:f903:8000::/36 maxlen: 36
2a06:f904::/36 maxlen: 36
2a06:f905::/36 maxlen: 36
2a06:f906::/36 maxlen: 36
2a06:f907::/36 maxlen: 36
2a06:f907:4000::/36 maxlen: 36
2a0d:8400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:29:76:49:10:78:75:10:bb:c7:20:10:fb:77:fb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Oct 7 07:00:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62b1402791e5acc192accfadbb99d08a846ea8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:d2:3f:6b:56:88:b1:a4:57:e5:2f:41:e8:
c2:e9:a0:30:0e:ee:61:a3:15:b8:02:dc:db:83:fb:
f1:c7:5b:93:ea:f8:3a:f8:89:62:4b:a7:f2:27:3e:
2a:04:b9:06:23:89:a3:54:40:79:30:e4:49:6d:5f:
e9:85:22:0d:73:c9:4c:e0:bf:bc:28:f8:8a:64:c4:
e5:3e:13:d0:31:2f:45:f0:72:35:ae:4e:53:5e:98:
f7:3e:13:8e:ab:a8:d1:e5:d2:98:9b:59:24:1a:ff:
8c:de:83:b9:ac:53:a6:1a:7d:b1:60:c6:71:2e:a3:
17:9d:13:ec:6c:d9:4d:99:a2:83:eb:c3:4f:af:6d:
29:d9:5d:d2:18:88:bb:4f:f8:52:2b:d2:9c:08:2b:
46:87:a0:3e:4a:f0:af:40:db:98:24:6f:5a:17:ac:
7e:3a:9d:ff:44:a1:b0:3d:c1:33:dd:51:6f:e1:20:
cf:a8:07:82:0e:34:39:96:04:75:84:12:43:f5:97:
6a:9b:84:6c:f2:32:18:34:34:06:43:16:6c:29:c7:
c5:95:c3:d5:79:33:64:90:b8:7a:1e:a9:5a:49:89:
36:27:95:8e:d5:fc:57:f2:4a:ec:6c:e1:3a:8b:47:
2f:3e:49:8a:e7:12:de:5b:65:6c:ee:67:cc:7c:a1:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B1:40:27:91:E5:AC:C1:92:AC:CF:AD:BB:99:D0:8A:84:6E:A8:F8
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/YrFAJ5HlrMGSrM-tu5nQioRuqPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.228.0/22
5.188.172.0/23
5.188.180.0/22
31.40.216.0/22
45.135.120.0/22
45.141.8.0/22
45.150.232.0/22
46.21.84.0/22
77.72.16.0/21
88.210.38.0/23
88.218.240.0/22
89.34.238.0/24
89.36.160.0/23
91.192.80.0/24
91.192.83.0/24
91.201.64.0/22
92.119.88.0/22
93.189.56.0-93.189.58.255
93.189.60.0/22
95.81.64.0/21
95.81.80.0-95.81.84.255
95.81.87.0/24
95.81.104.0-95.81.106.255
95.81.108.0/23
95.81.111.0/24
103.82.100.0/23
103.97.88.0-103.97.90.255
103.253.37.0/24
109.122.202.0-109.122.205.255
185.6.12.0/22
185.35.220.0/23
185.110.216.0/23
185.120.136.0/22
185.131.64.0/22
185.135.84.0/22
185.140.12.0/22
185.140.208.0/23
185.224.248.0/24
185.224.250.0/24
185.234.146.0/23
185.246.152.0/22
192.77.240.0/21
192.77.249.0-192.77.250.255
192.77.252.0/22
194.59.46.0/24
194.59.59.0/24
194.59.142.0/24
194.59.155.0/24
195.238.124.0/22
212.23.200.0/24
213.111.128.0/23
213.111.132.0/23
213.111.136.0/22
213.111.143.0/24
213.173.32.0/22
213.183.32.0/23
213.183.36.0-213.183.53.255
213.183.58.0-213.183.63.255
213.226.68.0/22
217.30.8.0/22
IPv6:
2a06:f900::/36
2a06:f900:4000::/36
2a06:f901::/36
2a06:f902::/36
2a06:f902:c000::/36
2a06:f903::/36
2a06:f903:8000::/36
2a06:f904::/36
2a06:f905::/36
2a06:f906::/36
2a06:f907::/36
2a06:f907:4000::/36
2a0d:8400::/32
Signature Algorithm: sha256WithRSAEncryption
24:83:33:4b:f8:6e:6b:39:f3:cb:38:71:a8:7a:7d:a8:ce:0b:
02:0b:b3:67:e3:d6:ea:8c:00:5f:0d:4d:84:28:b0:59:12:8d:
ae:b1:a8:7e:95:a6:b7:42:e1:06:da:5b:87:f1:27:c5:c6:b0:
6f:05:20:84:9d:c0:53:73:31:74:b4:8f:c6:dc:cc:51:a6:84:
f7:cf:55:9a:b5:f7:3b:6d:50:16:46:ed:bc:2d:72:31:bc:ad:
8b:69:54:7b:cf:af:41:bb:d5:89:73:e4:f5:eb:71:a2:00:ea:
07:64:88:fb:57:c1:bc:43:fa:e9:e8:df:57:e5:c4:c3:57:29:
b0:39:60:0e:4d:83:d3:ed:c2:89:cb:e1:32:10:a1:81:65:a8:
49:09:7a:e1:40:09:25:5f:88:51:8b:e4:72:ad:62:a7:fc:ef:
35:b4:4d:f3:68:a7:3a:a5:a0:01:fc:5e:82:f2:72:80:79:3a:
88:56:bb:1d:9f:67:e9:41:82:26:02:37:04:3b:51:09:a9:92:
f5:c8:cc:81:d7:2c:8e:69:45:4c:fd:cc:b2:4f:b8:f5:cc:47:
3a:fc:91:80:ce:b3:06:d0:19:9e:da:09:bf:31:92:2d:ac:64:
2c:92:3b:a5:74:23:13:e9:d6:c0:de:a5:08:7d:ef:47:62:0b:
a6:f0:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:18:36 2026 by rpki-client