Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2r0mNht5o2KGbjiIbWwSmRU4OGA.roa
File: 2r0mNht5o2KGbjiIbWwSmRU4OGA.roa (raw, json)
Hash identifier: rKHEt+MrHCMYLE6qwcfSdEX/FCOANHyJprK/tGECh2Y=
Subject key identifier: DA:BD:26:36:1B:79:A3:62:86:6E:38:88:6D:6C:12:99:15:38:38:60
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019F270E1F819BE4249147F57A3FF924C922
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2r0mNht5o2KGbjiIbWwSmRU4OGA.roa
Signing time: Fri 03 Jul 2026 08:17:44 +0000
ROA not before: Fri 03 Jul 2026 08:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201942
IP address blocks: 31.170.100.0/22 maxlen: 24
37.32.99.0/24 maxlen: 24
45.90.238.0/24 maxlen: 24
45.131.132.0/23 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
62.106.87.0/24 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
91.235.40.0/24 maxlen: 24
91.235.41.0/24 maxlen: 24
91.238.239.0/24 maxlen: 24
92.60.34.0/24 maxlen: 24
92.60.35.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.120.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
185.91.108.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
185.163.168.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.197.216.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.55.0/24 maxlen: 24
185.200.228.0/22 maxlen: 24
185.201.152.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
185.202.205.0/24 maxlen: 24
185.202.206.0/24 maxlen: 24
185.204.108.0/24 maxlen: 24
185.204.244.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.217.12.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.221.16.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.226.8.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
185.245.32.0/23 maxlen: 23
185.247.4.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
193.35.88.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
193.162.15.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.119.0/24 maxlen: 24
195.34.67.0/24 maxlen: 24
195.182.13.0/24 maxlen: 24
212.80.208.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:0e:1f:81:9b:e4:24:91:47:f5:7a:3f:f9:24:c9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 3 08:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dabd26361b79a362866e38886d6c129915383860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:a8:f1:6a:54:17:39:41:a5:e4:fc:b8:61:
ac:ff:8b:34:9c:03:73:77:fd:35:7e:f2:4d:1f:97:
c5:81:f3:07:b3:c2:48:26:1b:54:cf:46:c3:8f:ce:
8c:12:16:14:8e:cf:4a:cb:7b:87:04:13:98:1f:fd:
4e:b0:20:a1:91:ed:66:48:21:51:57:05:70:e4:40:
bd:df:bd:60:d1:f3:7a:b7:5b:15:89:ad:de:35:98:
22:35:cc:e7:dd:5b:0f:8c:91:65:5b:79:85:9b:84:
67:82:c1:cf:9e:f2:bb:78:6e:80:07:49:7c:f4:ef:
14:11:8e:87:5a:12:38:d8:3b:7c:d5:11:2c:4f:c6:
75:e5:bb:1d:d5:d8:25:05:0b:a4:0d:25:8b:e3:df:
9b:b6:3b:63:af:2b:5d:82:26:8e:92:3a:05:90:a5:
9c:55:30:57:c4:48:ec:a6:de:e7:c1:fe:40:51:56:
ab:05:93:b6:7d:df:98:0c:c0:b2:ff:99:71:32:4e:
62:6d:e0:88:6a:e8:94:a5:88:93:50:82:16:23:da:
68:4d:3a:66:31:f6:e3:7d:c1:04:8f:af:8b:b7:59:
2e:16:8b:e2:7f:51:83:9b:19:1a:27:0b:8a:f5:0c:
1f:fb:e4:96:da:11:b8:c9:cf:e8:98:ce:1c:c8:96:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BD:26:36:1B:79:A3:62:86:6E:38:88:6D:6C:12:99:15:38:38:60
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2r0mNht5o2KGbjiIbWwSmRU4OGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
37.32.99.0/24
45.90.238.0/24
45.131.132.0/23
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
62.106.87.0/24
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.34.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.55.0/24
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.35.88.0/22
193.105.66.0/24
193.162.15.0/24
194.35.40.0/24
194.41.116.0/22
195.34.67.0/24
195.182.13.0/24
212.80.208.0/22
212.115.44.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:cb:78:e3:77:81:61:df:b5:8d:82:7e:f6:c5:3f:67:78:ce:
43:9d:de:5c:5f:6d:25:2b:59:75:6d:d8:c3:0c:63:ba:9f:d1:
ec:50:52:25:51:19:b4:7b:57:fe:db:8e:70:0f:c1:62:90:c5:
f8:ea:cf:08:e9:de:7a:b9:95:3f:49:22:bc:23:da:c2:55:6f:
09:29:12:6a:00:98:c4:6e:d9:7a:44:85:9d:5d:2d:14:3c:00:
77:1e:45:f0:9e:03:03:ba:54:9e:9f:e4:b8:0f:09:a9:a3:6b:
79:be:20:02:e6:09:b4:0f:9c:5f:9b:b5:10:63:0f:27:36:85:
89:1d:54:f3:74:57:66:a8:40:33:33:8c:1c:87:be:f8:2e:80:
f4:de:3f:8b:19:f4:6d:31:25:59:63:3a:11:90:5d:84:11:0c:
b9:2b:fc:1f:39:7b:74:90:a7:77:f3:31:15:43:85:a9:3c:bd:
21:c6:1c:b8:18:b6:f7:ea:b4:b2:2d:e9:9a:a7:d5:01:dd:aa:
27:3d:6a:0c:a6:48:92:fe:6c:9f:b8:d0:6c:f2:d9:51:0b:29:
38:06:b7:0e:eb:1e:9e:50:d1:a2:3c:47:63:4f:c9:55:3d:22:
be:71:6e:14:fa:98:00:e5:17:9c:6f:fd:d2:af:b4:f2:f0:0d:
65:6b:6e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 11:15:16 2026 by rpki-client