Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1lXhfZ1DadjWs3yhxpKC9cTkOZQ.roa
File: 1lXhfZ1DadjWs3yhxpKC9cTkOZQ.roa (raw, json)
Hash identifier: y73iNKGE+T+v1gQLlSr9cc3sDANV9ZwEBBguiXPT5B0=
Subject key identifier: D6:55:E1:7D:9D:43:69:D8:D6:B3:7C:A1:C6:92:82:F5:C4:E4:39:94
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019E448FD3B4163FEBA221B87BC1562AD337
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1lXhfZ1DadjWs3yhxpKC9cTkOZQ.roa
Signing time: Wed 20 May 2026 08:45:37 +0000
ROA not before: Wed 20 May 2026 08:45:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31213
IP address blocks: 37.28.160.0/21 maxlen: 21
37.28.168.0/21 maxlen: 21
37.29.48.0/21 maxlen: 21
37.29.56.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
37.29.71.0/24 maxlen: 24
78.25.96.0/21 maxlen: 21
78.25.104.0/22 maxlen: 22
78.25.108.0/22 maxlen: 22
78.25.120.0/22 maxlen: 22
83.149.0.0/21 maxlen: 21
85.26.128.0/20 maxlen: 20
85.26.208.0/22 maxlen: 22
85.26.212.0/22 maxlen: 22
85.26.216.0/22 maxlen: 22
85.26.220.0/22 maxlen: 22
85.26.248.0/22 maxlen: 22
85.26.252.0/22 maxlen: 22
94.25.208.0/22 maxlen: 22
94.25.216.0/21 maxlen: 21
94.25.224.0/21 maxlen: 21
94.25.228.0/23 maxlen: 23
94.25.232.0/21 maxlen: 21
109.188.128.0/17 maxlen: 17
128.204.74.0/24 maxlen: 24
128.204.75.0/24 maxlen: 24
176.106.130.0/24 maxlen: 24
176.106.131.0/24 maxlen: 24
178.178.224.0/24 maxlen: 24
178.178.225.0/24 maxlen: 24
178.178.226.0/24 maxlen: 24
178.178.227.0/24 maxlen: 24
178.178.244.0/22 maxlen: 22
178.178.248.0/23 maxlen: 23
188.162.64.0/23 maxlen: 23
188.170.64.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.66.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
188.170.68.0/24 maxlen: 24
188.170.72.0/21 maxlen: 21
188.170.80.0/21 maxlen: 21
188.170.92.0/22 maxlen: 22
2a03:d000::/40 maxlen: 40
2a03:d000::/41 maxlen: 41
2a03:d000:80::/41 maxlen: 41
2a03:d000:100::/40 maxlen: 40
2a03:d000:100::/41 maxlen: 41
2a03:d000:180::/41 maxlen: 41
2a03:d000:200::/41 maxlen: 41
2a03:d000:280::/41 maxlen: 41
2a03:d000:301::/48 maxlen: 48
2a03:d000:302::/48 maxlen: 48
2a03:d000:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:8f:d3:b4:16:3f:eb:a2:21:b8:7b:c1:56:2a:d3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: May 20 08:45:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d655e17d9d4369d8d6b37ca1c69282f5c4e43994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:3b:5e:bf:0e:86:5e:70:fe:02:a8:71:ac:
b8:26:da:ce:9b:dd:80:07:23:c1:10:84:44:5e:5b:
e3:34:1e:5c:9d:83:37:75:d1:ca:bd:de:5b:fd:69:
7d:83:2a:db:2c:fc:52:75:39:a2:76:db:ee:3d:1e:
02:3a:0d:90:7b:39:21:84:19:c1:cf:8e:36:2c:6c:
97:dc:9e:15:34:94:4e:8b:c3:20:f6:24:84:71:47:
82:8c:77:a3:bd:b6:32:75:4c:ab:bd:7a:c5:0b:41:
5b:a1:95:41:39:6d:55:b9:ab:20:94:c0:89:a1:8f:
a8:4d:9c:67:c1:43:b1:e1:9c:1f:c3:75:64:7c:4d:
0d:f6:eb:6e:6e:7b:ec:e2:c0:4d:79:b3:e2:e2:6e:
d9:b3:97:78:b7:e9:f9:4d:1d:8e:dd:8f:92:84:1a:
da:da:4e:35:d1:48:a1:7a:17:df:b9:28:e6:2c:b0:
4d:ed:16:c8:54:50:4d:9d:b8:da:d8:29:c6:1e:19:
db:36:e9:d9:b9:58:2c:94:f2:a6:f0:8e:e6:cf:3b:
5e:a8:06:66:eb:50:35:c8:a1:30:76:40:3e:04:37:
52:1a:bf:52:32:7e:03:f4:f2:65:e6:42:3c:63:aa:
06:b4:75:2e:79:24:66:76:a4:82:8a:d6:0d:64:be:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:55:E1:7D:9D:43:69:D8:D6:B3:7C:A1:C6:92:82:F5:C4:E4:39:94
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1lXhfZ1DadjWs3yhxpKC9cTkOZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
85.26.128.0/20
85.26.208.0/20
85.26.248.0/21
94.25.208.0/22
94.25.216.0-94.25.239.255
109.188.128.0/17
128.204.74.0/23
176.106.130.0/23
178.178.224.0/22
178.178.244.0-178.178.249.255
188.162.64.0/23
188.170.64.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
IPv6:
2a03:d000::-2a03:d000:2ff:ffff:ffff:ffff:ffff:ffff
2a03:d000:301::-2a03:d000:302:ffff:ffff:ffff:ffff:ffff
2a03:d000:400::/40
Signature Algorithm: sha256WithRSAEncryption
38:e3:95:93:0a:72:e8:c4:92:16:06:14:03:c0:d1:02:76:29:
f0:41:8b:68:35:4f:c8:01:bf:b8:b7:a7:5f:30:fe:75:f2:0d:
00:ae:7f:18:a4:f6:47:15:dd:8b:c2:83:ee:03:f4:9b:52:84:
6f:22:31:14:46:f0:ba:d6:9a:22:91:70:01:50:3b:da:2a:e6:
38:3d:32:91:9e:b6:4a:4e:3d:2b:39:6e:e3:d0:29:01:06:68:
4a:31:fb:a7:87:68:ad:ef:0b:42:74:22:49:b9:84:3b:f8:d4:
b8:3a:c0:a8:53:9f:f6:17:a8:a0:2b:fa:4a:46:72:24:fd:f6:
d5:5a:22:80:88:33:e5:a9:cd:c4:90:67:44:17:1c:e4:df:b8:
4f:da:b6:7c:8f:e2:e4:e5:82:41:a0:71:7d:79:44:c8:58:71:
b2:5c:71:35:2a:1c:d8:b6:c0:dc:b0:14:49:20:e1:33:62:7c:
61:95:14:3c:55:44:a3:4d:23:ee:68:13:9e:d9:a9:9c:ff:a0:
21:c8:fc:04:6c:ba:e0:d4:17:95:97:14:1f:fd:23:30:26:31:
5d:34:e4:54:a2:bc:7a:b3:f7:4e:59:c6:53:bf:f1:f8:fd:6d:
41:39:01:6f:f4:5e:e4:ef:a7:0d:ed:25:95:1c:5f:c7:1d:29:
4c:7b:79:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:24 2026 by rpki-client