Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/LrQxuyLUvkTlTwVzft2jiHwl2kU.roa
File: LrQxuyLUvkTlTwVzft2jiHwl2kU.roa (raw, json)
Hash identifier: NZE1Am2hblzl+CtHrl8BwC9fFtxbKmx1XK22QJPmvv4=
Subject key identifier: 2E:B4:31:BB:22:D4:BE:44:E5:4F:05:73:7E:DD:A3:88:7C:25:DA:45
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 019E3AE9BB2E17C1F2D71818F1022AA19A7A
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/LrQxuyLUvkTlTwVzft2jiHwl2kU.roa
Signing time: Mon 18 May 2026 11:47:36 +0000
ROA not before: Mon 18 May 2026 11:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48854
IP address blocks: 46.36.204.0/22 maxlen: 22
46.36.208.0/21 maxlen: 21
77.243.128.0/20 maxlen: 20
80.70.0.0/23 maxlen: 23
80.70.6.0/23 maxlen: 23
80.70.6.0/24 maxlen: 24
80.70.7.0/24 maxlen: 24
81.95.240.0/20 maxlen: 20
81.95.249.0/24 maxlen: 24
89.188.72.0/21 maxlen: 21
91.197.248.0/22 maxlen: 22
91.217.201.0/24 maxlen: 24
93.191.152.0/21 maxlen: 21
93.191.152.0/22 maxlen: 22
93.191.156.0/24 maxlen: 24
93.191.157.0/24 maxlen: 24
93.191.158.0/24 maxlen: 24
94.143.8.0/21 maxlen: 21
94.231.96.0/20 maxlen: 20
94.231.103.0/24 maxlen: 24
109.71.56.0/21 maxlen: 21
178.251.0.0/21 maxlen: 21
178.251.1.0/24 maxlen: 24
185.20.204.0/22 maxlen: 22
185.20.205.0/24 maxlen: 24
185.20.206.0/23 maxlen: 23
185.21.40.0/22 maxlen: 22
185.25.140.0/24 maxlen: 24
185.25.141.0/24 maxlen: 24
185.25.142.0/24 maxlen: 24
185.25.143.0/24 maxlen: 24
185.134.28.0/22 maxlen: 22
185.154.240.0/22 maxlen: 22
185.221.36.0/22 maxlen: 22
185.223.24.0/22 maxlen: 22
185.235.52.0/22 maxlen: 22
185.235.52.0/24 maxlen: 24
193.239.96.0/22 maxlen: 22
194.150.112.0/22 maxlen: 22
195.69.128.0/22 maxlen: 22
195.178.14.0/23 maxlen: 23
212.97.132.0/22 maxlen: 22
212.97.140.0/22 maxlen: 22
212.97.140.0/24 maxlen: 24
212.97.141.0/24 maxlen: 24
212.97.142.0/24 maxlen: 24
212.97.143.0/24 maxlen: 24
212.237.248.0/23 maxlen: 23
217.61.237.0/24 maxlen: 24
217.61.238.0/24 maxlen: 24
2a02:2338::/32 maxlen: 48
2a02:2339::/36 maxlen: 36
2a02:2339:4000::/34 maxlen: 48
2a03:2740::/48 maxlen: 48
2a06:eac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:e9:bb:2e:17:c1:f2:d7:18:18:f1:02:2a:a1:9a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: May 18 11:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2eb431bb22d4be44e54f05737edda3887c25da45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:66:f4:1f:40:8c:98:bb:01:46:e6:55:8b:
45:9f:15:09:22:58:a5:d4:53:92:35:dc:df:fb:e7:
24:fe:42:84:f6:71:d8:09:4d:d9:bc:e5:37:f6:8b:
33:9f:29:ee:be:af:d5:de:1f:62:fa:23:2e:05:0f:
b5:85:4c:28:2a:dc:98:46:80:c5:e5:d8:50:c8:2c:
59:69:52:81:fe:27:7f:03:21:49:44:ab:4f:69:7e:
d3:08:cb:d8:82:23:ea:9d:70:af:43:96:b3:1f:33:
00:bd:8a:eb:ba:80:2c:94:a4:d2:1c:15:b0:a0:1c:
ba:5e:be:45:de:14:e1:84:c7:45:d5:b3:0a:a1:82:
e9:d4:7c:be:45:04:c0:ab:6c:69:b6:95:c0:7a:49:
6f:86:20:31:5b:c9:86:87:a7:31:60:81:ca:51:94:
1b:3d:7c:dd:e1:4e:cb:9f:88:ce:05:bb:8a:0a:6a:
3a:5b:6f:b3:98:da:41:40:bb:d7:ef:f1:23:13:1b:
2d:74:0c:21:c9:2b:6e:7e:a2:34:7b:0e:a0:5a:85:
b5:44:2d:84:c1:cd:b5:04:13:be:0f:f3:75:d6:a5:
91:73:cd:b4:3e:90:11:74:e5:b7:41:1d:12:99:05:
55:a1:62:6b:cb:98:89:b4:cd:02:e6:c6:41:a4:d4:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:31:BB:22:D4:BE:44:E5:4F:05:73:7E:DD:A3:88:7C:25:DA:45
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/LrQxuyLUvkTlTwVzft2jiHwl2kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.204.0-46.36.215.255
77.243.128.0/20
80.70.0.0/23
80.70.6.0/23
81.95.240.0/20
89.188.72.0/21
91.197.248.0/22
91.217.201.0/24
93.191.152.0/21
94.143.8.0/21
94.231.96.0/20
109.71.56.0/21
178.251.0.0/21
185.20.204.0/22
185.21.40.0/22
185.25.140.0/22
185.134.28.0/22
185.154.240.0/22
185.221.36.0/22
185.223.24.0/22
185.235.52.0/22
193.239.96.0/22
194.150.112.0/22
195.69.128.0/22
195.178.14.0/23
212.97.132.0/22
212.97.140.0/22
212.237.248.0/23
217.61.237.0-217.61.238.255
IPv6:
2a02:2338::-2a02:2339:fff:ffff:ffff:ffff:ffff:ffff
2a02:2339:4000::/34
2a03:2740::/48
2a06:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
23:f0:4a:5a:8e:bd:11:34:21:a1:c6:36:f0:be:65:2d:08:ac:
d8:07:3b:67:ac:29:4e:37:fa:22:5c:94:5d:bc:d2:ef:2c:c8:
5b:70:5d:47:d6:43:fa:ea:30:51:46:6d:31:69:41:d8:8f:b2:
b2:ce:9e:09:cc:9e:c4:96:7c:0a:19:6f:85:52:15:fa:74:f6:
ea:91:71:f6:bd:00:64:8e:45:0d:e8:ae:2d:9c:a7:88:66:05:
0e:ff:fe:1a:43:07:8e:a0:47:e5:27:ee:a0:a1:2f:95:24:12:
4c:9b:95:a6:f8:09:da:38:15:42:68:9b:a9:e7:62:d5:de:2c:
65:2f:54:14:be:ad:9a:2b:b1:a1:d7:2a:70:3e:37:29:0c:3c:
4c:18:57:61:d0:5b:a9:68:ef:7d:77:55:01:50:ea:e2:c4:91:
d8:10:f0:4c:7b:72:50:d1:b8:0b:70:46:77:5a:8e:4c:1a:68:
e1:38:0f:79:74:36:74:23:5b:4c:ac:54:53:bc:62:42:58:2a:
f7:d3:95:a2:43:4a:29:f5:57:a3:8d:30:71:41:71:e4:7c:9a:
13:61:d8:d6:f1:b0:a4:87:2e:8c:6f:cb:76:18:d9:c9:3d:b0:
1a:d0:8f:17:6f:fe:e2:27:27:1c:7f:61:b5:ba:9f:8d:29:a8:
91:0f:3c:d4
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgISAZ466bsuF8Hy1xgY8QIqoZp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl
NzUxNjQwHhcNMjYwNTE4MTE0NzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWI0MzFiYjIyZDRiZTQ0ZTU0ZjA1NzM3ZWRkYTM4ODdjMjVkYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAdm9B9AjJi7AUbmVYtFnxUJIlil
1FOSNdzf++ck/kKE9nHYCU3ZvOU39osznynuvq/V3h9i+iMuBQ+1hUwoKtyYRoDF
5dhQyCxZaVKB/id/AyFJRKtPaX7TCMvYgiPqnXCvQ5azHzMAvYrruoAslKTSHBWw
oBy6Xr5F3hThhMdF1bMKoYLp1Hy+RQTAq2xptpXAeklvhiAxW8mGh6cxYIHKUZQb
PXzd4U7Ln4jOBbuKCmo6W2+zmNpBQLvX7/EjExstdAwhyStufqI0ew6gWoW1RC2E
wc21BBO+D/N11qWRc820PpARdOW3QR0SmQVVoWJry5iJtM0C5sZBpNSTnQIDAQAB
o4IC+DCCAvQwHQYDVR0OBBYEFC60Mbsi1L5E5U8Fc37do4h8JdpFMB8GA1UdIwQY
MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt
M2U1OWNlNDQ1YjFjLzEvTHJReHV5TFV2a1RsVHdWemZ0MmppSHdsMmtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj
LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDAYIKwYBBQUHAQcBAf8EgfwwgfkwgcUEAgABMIG+MAwD
BAIuJMwDBAMuJNADBARN84ADBAFQRgADBAFQRgYDBARRX/ADBANZvEgDBAJbxfgD
BABb2ckDBANdv5gDBANejwgDBARe52ADBANtRzgDBAOy+wADBAK5FMwDBAK5FSgD
BAK5GYwDBAK5hhwDBAK5mvADBAK53SQDBAK53xgDBAK56zQDBALB72ADBALClnAD
BALDRYADBAHDsg4DBALUYYQDBALUYYwDBAHU7fgwDAMEANk97QMEANk97jAvBAIA
AjApMA8DBQMqAiM4AwYEKgIjOQADBgYqAiM5QAMHACoDJ0AAAAMFAyoG6sAwDQYJ
KoZIhvcNAQELBQADggEBACPwSlqOvRE0IaHGNvC+ZS0IrNgHO2esKU43+iJclF28
0u8syFtwXUfWQ/rqMFFGbTFpQdiPsrLOngnMnsSWfAoZb4VSFfp09uqRcfa9AGSO
RQ3ori2cp4hmBQ7//hpDB46gR+Un7qChL5UkEkyblab4Cdo4FUJom6nnYtXeLGUv
VBS+rZorsaHXKnA+NykMPEwYV2HQW6lo7313VQFQ6uLEkdgQ8Ex7clDRuAtwRnda
jkwaaOE4D3l0NnQjW0ysVFO8YkJYKvfTlaJDSin1V6ONMHFBceR8mhNh2NbxsKSH
Loxvy3YY2ck9sBrQjxdv/uInJxx/YbW6n40pqJEPPNQ=
-----END CERTIFICATE-----
Generated at Fri Jun 12 12:16:55 2026 by rpki-client