Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/wqiyCuPlBwl0V2dv27OCD_ym6j8.roa
File: wqiyCuPlBwl0V2dv27OCD_ym6j8.roa (raw, json)
Hash identifier: cfx0UFR+LbEyoqcHZVCvxbww/uNktl+L5oOZlTwnYPo=
Subject key identifier: C2:A8:B2:0A:E3:E5:07:09:74:57:67:6F:DB:B3:82:0F:FC:A6:EA:3F
Certificate issuer: /CN=c6b619d4d1835745b04be9e44dab102d0614622f
Certificate serial: 019F23692CBA07E76901162334C742223F9B
Authority key identifier: C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/wqiyCuPlBwl0V2dv27OCD_ym6j8.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207990
IP address blocks: 31.40.228.0/22 maxlen: 32
78.138.8.0/24 maxlen: 32
78.138.41.0/24 maxlen: 32
78.138.53.0/24 maxlen: 32
78.138.54.0/23 maxlen: 32
78.138.63.0/24 maxlen: 32
80.240.98.0/23 maxlen: 32
83.229.0.0/23 maxlen: 32
83.229.7.0/24 maxlen: 32
83.229.12.0/23 maxlen: 32
83.229.27.0/24 maxlen: 32
83.229.30.0/24 maxlen: 32
83.229.36.0/23 maxlen: 32
83.229.58.0/23 maxlen: 32
83.229.60.0/24 maxlen: 32
83.229.66.0/24 maxlen: 32
83.229.92.0/24 maxlen: 32
83.229.110.0/24 maxlen: 32
83.229.114.0/24 maxlen: 32
83.229.116.0/22 maxlen: 32
91.196.180.0/22 maxlen: 32
185.4.226.0/24 maxlen: 32
188.190.104.0/22 maxlen: 32
188.190.120.0/22 maxlen: 32
193.31.56.0/22 maxlen: 32
193.42.56.0/22 maxlen: 32
194.31.176.0/22 maxlen: 32
194.41.120.0/22 maxlen: 32
194.187.36.0/22 maxlen: 32
195.3.136.0/22 maxlen: 32
212.107.0.0/22 maxlen: 32
213.255.193.0/24 maxlen: 32
213.255.194.0/24 maxlen: 32
213.255.196.0/24 maxlen: 32
213.255.199.0/24 maxlen: 32
213.255.204.0/24 maxlen: 32
213.255.207.0/24 maxlen: 32
217.194.130.0/23 maxlen: 32
217.194.136.0/23 maxlen: 32
217.194.139.0/24 maxlen: 32
217.194.144.0/24 maxlen: 32
217.194.151.0/24 maxlen: 32
217.194.152.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2c:ba:07:e7:69:01:16:23:34:c7:42:22:3f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b619d4d1835745b04be9e44dab102d0614622f
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2a8b20ae3e507097457676fdbb3820ffca6ea3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:6a:6c:3e:bc:e4:a8:ba:0f:f5:c1:12:58:
0a:fa:2e:12:87:80:df:d7:31:e8:0b:75:c6:ca:62:
45:30:22:ef:0d:65:44:32:bf:25:c0:99:49:39:9d:
4b:ac:ed:53:01:d9:74:8c:55:c7:1c:5c:64:4c:6e:
97:c1:33:ba:a8:5a:cf:00:56:97:66:ac:1f:86:04:
0f:01:05:5f:e9:ce:60:a2:11:5c:3d:9a:11:09:15:
9d:97:67:d7:ea:03:45:9e:e7:8b:99:13:c9:9c:c6:
a5:7a:2a:a8:e2:9c:09:34:f3:84:ca:46:99:cb:5c:
41:7a:57:79:c3:68:64:e9:21:14:72:27:5c:6d:56:
5b:ef:c4:8d:70:9c:31:6d:91:e4:aa:ad:44:4c:cf:
c7:9e:cd:39:74:67:13:1d:03:0f:53:a2:8d:ca:73:
27:76:5a:3f:68:3d:bd:8e:c9:61:5f:07:b5:3f:14:
47:f4:31:6d:0d:bf:70:d6:01:72:05:fa:25:2f:e4:
f6:f9:85:5e:9f:82:b1:08:d1:34:db:2e:08:9d:62:
99:72:0b:5c:4b:15:f8:26:9a:53:5a:85:26:a2:e1:
c1:4b:22:2a:c1:14:e3:70:a8:73:80:1f:1a:d0:d2:
35:72:50:2d:c3:65:50:03:d4:44:b6:3a:59:b8:99:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A8:B2:0A:E3:E5:07:09:74:57:67:6F:DB:B3:82:0F:FC:A6:EA:3F
X509v3 Authority Key Identifier:
keyid:C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/wqiyCuPlBwl0V2dv27OCD_ym6j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.228.0/22
78.138.8.0/24
78.138.41.0/24
78.138.53.0-78.138.55.255
78.138.63.0/24
80.240.98.0/23
83.229.0.0/23
83.229.7.0/24
83.229.12.0/23
83.229.27.0/24
83.229.30.0/24
83.229.36.0/23
83.229.58.0-83.229.60.255
83.229.66.0/24
83.229.92.0/24
83.229.110.0/24
83.229.114.0/24
83.229.116.0/22
91.196.180.0/22
185.4.226.0/24
188.190.104.0/22
188.190.120.0/22
193.31.56.0/22
193.42.56.0/22
194.31.176.0/22
194.41.120.0/22
194.187.36.0/22
195.3.136.0/22
212.107.0.0/22
213.255.193.0-213.255.194.255
213.255.196.0/24
213.255.199.0/24
213.255.204.0/24
213.255.207.0/24
217.194.130.0/23
217.194.136.0/23
217.194.139.0/24
217.194.144.0/24
217.194.151.0-217.194.152.255
Signature Algorithm: sha256WithRSAEncryption
bf:b5:30:b4:e4:12:3b:9d:63:86:83:cf:1c:68:2f:09:3a:61:
90:e4:ac:db:51:62:b8:82:a2:9b:25:2a:19:05:7b:ae:94:0f:
4e:14:da:76:7e:9e:f4:16:02:56:fc:42:e3:23:51:37:e6:59:
68:0d:ca:d8:2c:e0:ef:6c:a4:49:65:d0:ae:df:99:f6:2d:5a:
b7:c2:9a:84:64:24:bd:e0:7f:d7:a7:82:d6:2f:cc:cc:30:81:
36:29:47:d2:08:59:fd:c0:4d:73:90:09:d7:db:60:eb:54:21:
6a:d4:72:cf:b6:07:37:92:d1:19:37:cc:62:67:d1:c7:26:c6:
c9:ea:f2:46:63:d7:28:49:3c:18:d0:3a:41:10:75:8e:2d:f0:
9c:e1:ff:d6:a2:33:a2:5c:72:03:d0:ee:77:ca:be:d4:53:a8:
a5:0e:56:0d:4c:73:5a:84:22:4b:f7:cf:56:cf:aa:0d:cf:8a:
fc:12:c8:bb:9c:3a:04:73:6c:5f:ff:ac:52:c6:72:27:61:4b:
eb:0b:17:a1:a4:7b:64:df:bd:97:8a:6c:29:5c:2f:de:2a:b5:
f1:4a:71:85:4c:1b:ba:b3:8c:94:60:3a:92:5a:8e:fc:00:9f:
01:0b:28:9d:fc:f8:01:55:f9:21:11:fc:50:c3:f8:6a:44:ea:
13:e9:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:36 2026 by rpki-client