Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/N92xQsEO51IYJTropYtUnPwrxYw.roa
File: N92xQsEO51IYJTropYtUnPwrxYw.roa (raw, json)
Hash identifier: OD9x3CEUatyOJn0kuCTo48nFtTt2hN6K3SmAMkKjRTU=
Subject key identifier: 37:DD:B1:42:C1:0E:E7:52:18:25:3A:E8:A5:8B:54:9C:FC:2B:C5:8C
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019E8869F94554440B4BC3FAEC55DC8E6405
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/N92xQsEO51IYJTropYtUnPwrxYw.roa
Signing time: Tue 02 Jun 2026 12:58:26 +0000
ROA not before: Tue 02 Jun 2026 12:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48715
IP address blocks: 78.110.120.0/22 maxlen: 24
80.71.149.0/24 maxlen: 24
80.249.114.0/24 maxlen: 24
88.135.36.0/22 maxlen: 22
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
91.247.171.0/24 maxlen: 24
130.193.77.0/24 maxlen: 24
152.89.44.0/22 maxlen: 22
152.89.44.0/24 maxlen: 24
152.89.45.0/24 maxlen: 24
152.89.46.0/24 maxlen: 24
152.89.47.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.36.228.0/24 maxlen: 24
185.51.200.0/22 maxlen: 22
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.58.240.0/22 maxlen: 24
185.112.149.0/24 maxlen: 24
185.112.150.0/23 maxlen: 23
185.112.150.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.121.130.0/23 maxlen: 23
185.121.130.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.128.136.0/22 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.141.104.0/22 maxlen: 22
185.141.104.0/24 maxlen: 24
185.141.105.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.141.107.0/24 maxlen: 24
185.141.132.0/22 maxlen: 22
185.141.132.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.170.8.0/24 maxlen: 24
185.173.129.0/24 maxlen: 24
185.173.130.0/24 maxlen: 24
185.206.231.0/24 maxlen: 24
185.213.195.0/24 maxlen: 24
185.234.14.0/24 maxlen: 24
185.235.245.0/24 maxlen: 24
185.252.200.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
188.209.152.0/24 maxlen: 24
188.209.153.0/24 maxlen: 24
195.110.38.0/23 maxlen: 23
195.211.44.0/22 maxlen: 22
195.211.44.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
195.211.47.0/24 maxlen: 24
213.109.199.0/24 maxlen: 24
2a0a:5e80::/29 maxlen: 29
2a0a:5e80::/48 maxlen: 48
2a0a:5e80::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:69:f9:45:54:44:0b:4b:c3:fa:ec:55:dc:8e:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jun 2 12:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37ddb142c10ee75218253ae8a58b549cfc2bc58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:c7:f8:88:9f:fd:61:5e:09:d5:04:f9:e8:
09:f3:5a:f7:a5:b6:ee:39:6c:9b:30:d3:f9:bf:b6:
61:c5:37:52:56:53:6f:ce:41:1a:26:5d:ba:ce:93:
7b:c8:08:bd:5b:37:f5:e8:6d:18:d0:74:24:82:4b:
3e:46:d9:a5:29:a6:0c:99:6b:91:f6:da:54:11:90:
e7:2a:bf:55:09:72:a3:20:20:5a:eb:46:70:d3:a6:
63:4b:f4:a7:5c:2b:d2:70:64:87:60:1d:e2:61:87:
d5:b2:88:5e:17:b4:71:c9:46:5c:13:6d:a4:20:63:
f5:53:a6:ba:1b:1d:14:57:e0:4c:bb:bd:08:de:c7:
39:21:20:f9:87:32:ef:72:cf:06:ab:38:14:7b:0f:
f6:98:08:a2:71:67:49:5a:e4:47:79:65:87:57:3a:
64:76:e6:ef:f9:79:0e:b7:b0:ce:72:db:4a:e4:92:
c9:97:b0:7a:bd:05:b4:c7:1c:a2:38:7e:21:73:7f:
73:c6:0c:34:79:65:69:0a:df:b9:64:d7:e6:aa:86:
96:86:c7:15:63:77:5e:2e:dd:69:b1:16:4d:45:12:
8d:06:6b:d5:8b:b7:c1:a8:66:ff:f5:7f:b6:2f:24:
f7:e4:20:93:2b:b0:5d:62:11:76:0b:ef:18:64:f0:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DD:B1:42:C1:0E:E7:52:18:25:3A:E8:A5:8B:54:9C:FC:2B:C5:8C
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/N92xQsEO51IYJTropYtUnPwrxYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.120.0/22
80.71.149.0/24
80.249.114.0/24
88.135.36.0/22
91.236.168.0/23
91.247.171.0/24
130.193.77.0/24
152.89.44.0/22
185.18.212.0/22
185.36.228.0/24
185.51.200.0/22
185.58.240.0/22
185.112.149.0-185.112.151.255
185.121.130.0/23
185.128.136.0/22
185.141.104.0/22
185.141.132.0/22
185.170.8.0/24
185.173.129.0-185.173.130.255
185.206.231.0/24
185.213.195.0/24
185.234.14.0/24
185.235.245.0/24
185.252.200.0/24
188.209.152.0/23
195.110.38.0/23
195.211.44.0/22
213.109.199.0/24
IPv6:
2a0a:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
71:dd:59:6b:17:8f:87:9e:bc:2a:32:07:ee:da:fd:a6:d5:ae:
72:c8:ef:3e:18:4b:98:a2:3d:f2:3e:98:ff:d3:f7:9a:e3:28:
8d:59:79:0a:7e:13:9a:b1:eb:6f:5b:29:cf:a8:48:df:9c:df:
97:c6:ff:ed:d3:16:c5:98:52:51:e1:28:de:8a:e6:3f:f9:32:
1d:44:04:1f:c6:f3:c5:49:13:ea:8e:67:2a:d4:d7:cf:15:cf:
6e:69:e3:0b:a8:31:3b:42:85:46:d7:cc:e8:08:2d:71:84:07:
40:81:59:ab:12:7e:8d:fb:60:2b:ae:6d:69:7c:dd:70:4b:7a:
cd:7e:77:32:1b:00:06:4a:64:8e:0c:03:be:de:6b:5e:c2:70:
24:4f:dc:8b:3e:a3:81:21:1a:74:ba:f0:e6:c7:70:30:33:b5:
3b:fa:89:15:00:1d:00:87:5c:18:bb:a3:3b:e1:e7:bd:83:5f:
e0:3f:ac:e5:1b:a9:8a:55:72:76:9e:72:b0:10:e1:11:23:3a:
60:ff:7f:b8:b1:e6:df:51:52:00:e1:ef:74:bf:c1:bf:ec:28:
86:b8:94:1b:cc:82:15:2f:b9:d7:e2:6d:ba:db:0d:62:42:c2:
ad:62:2e:5d:b3:59:e8:9e:3e:6c:5a:18:af:d8:27:05:c6:51:
11:78:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:05 2026 by rpki-client