Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/XIQjtwCAeuz5pHeyEJIwylepx78.roa
File: XIQjtwCAeuz5pHeyEJIwylepx78.roa (raw, json)
Hash identifier: /ZdrEI8StygXoq2z181JCF5ttjpJyDiccnOn6hndeRs=
Subject key identifier: 5C:84:23:B7:00:80:7A:EC:F9:A4:77:B2:10:92:30:CA:57:A9:C7:BF
Certificate issuer: /CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Certificate serial: 019F2368E0D8A0947928B2AF805DBF6FE28E
Authority key identifier: 25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/XIQjtwCAeuz5pHeyEJIwylepx78.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39326
IP address blocks: 37.46.200.0/21 maxlen: 24
46.17.56.0/21 maxlen: 24
77.75.104.0/21 maxlen: 24
80.71.0.0/19 maxlen: 24
80.71.27.0/24 maxlen: 24
89.248.16.0/20 maxlen: 24
93.89.80.0/20 maxlen: 24
185.75.28.0/22 maxlen: 24
185.75.30.0/24 maxlen: 24
194.0.77.0/24 maxlen: 24
194.0.78.0/23 maxlen: 24
195.90.120.0/23 maxlen: 24
195.90.121.0/24 maxlen: 24
195.238.232.0/24 maxlen: 24
217.196.224.0/19 maxlen: 24
2001:a08::/32 maxlen: 32
2a01:348::/32 maxlen: 32
2a01:348:62::/48 maxlen: 48
2a01:348:fab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e0:d8:a0:94:79:28:b2:af:80:5d:bf:6f:e2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c8423b700807aecf9a477b2109230ca57a9c7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:cc:81:01:bb:24:67:da:41:97:09:48:b4:
88:52:eb:25:ac:bb:06:b7:68:25:a1:4d:e6:6d:c8:
61:c6:d4:e5:2c:c0:74:89:77:74:53:1d:03:81:fc:
b3:14:0a:5a:ae:5a:d3:72:28:c7:45:12:4c:b5:ce:
99:d9:8f:6e:ee:5d:8f:a8:be:90:29:9d:6a:9e:9a:
83:da:87:34:f7:c8:02:67:73:db:02:87:62:cd:19:
91:80:9e:4f:cb:39:3d:72:60:a9:ac:cd:92:56:f3:
97:75:cb:34:da:69:ef:96:69:bb:dc:3d:54:8c:e3:
96:76:3b:af:c2:01:8c:6a:de:a5:73:19:61:06:5f:
a1:3c:4e:35:83:69:8f:a0:c1:6d:1a:ed:ca:30:94:
79:80:53:4d:46:1b:eb:fa:a9:74:25:bc:dc:ca:89:
9b:39:08:72:b8:be:53:ed:f5:6c:76:67:04:2d:79:
0e:08:6a:b9:dd:fb:d4:54:41:67:21:98:e7:d3:d7:
6a:7c:d6:23:3b:97:f5:01:20:d6:ed:f7:24:98:da:
10:25:a5:90:7b:86:64:6c:2e:e3:eb:67:52:b0:67:
73:f1:83:6f:e5:76:7c:f0:04:f8:9b:8a:72:f4:3c:
da:6b:2c:34:27:12:9f:20:aa:6b:80:00:a0:19:51:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:23:B7:00:80:7A:EC:F9:A4:77:B2:10:92:30:CA:57:A9:C7:BF
X509v3 Authority Key Identifier:
keyid:25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/XIQjtwCAeuz5pHeyEJIwylepx78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.200.0/21
46.17.56.0/21
77.75.104.0/21
80.71.0.0/19
89.248.16.0/20
93.89.80.0/20
185.75.28.0/22
194.0.77.0-194.0.79.255
195.90.120.0/23
195.238.232.0/24
217.196.224.0/19
IPv6:
2001:a08::/32
2a01:348::/32
Signature Algorithm: sha256WithRSAEncryption
10:eb:3c:ef:7f:03:b2:0f:f3:7a:bb:eb:9b:df:91:a7:50:e9:
f2:d1:09:d4:c8:c7:2f:b5:5c:cd:76:db:f7:cb:52:d3:0e:0d:
ca:1f:e5:4c:85:37:52:4d:d5:ad:02:8f:9d:a6:dd:33:d8:ec:
32:bf:b1:7b:9d:c6:0a:7b:e0:56:a4:6a:41:7f:4d:66:c0:cc:
b3:bb:00:6e:f1:83:eb:6a:02:3b:60:5d:ed:f6:c8:ef:21:cd:
60:c0:18:21:bc:46:7f:b6:4a:08:ee:79:b7:07:df:80:f1:32:
95:e2:2b:44:c3:2a:67:6f:24:05:b3:4c:c6:e2:2f:01:26:63:
ef:8d:83:ca:d6:45:6f:cd:22:37:9e:7e:4f:cf:53:55:25:ce:
1e:1b:0c:d7:03:e4:c2:d9:27:99:c0:4d:4a:d1:3c:ea:0d:e5:
17:48:17:19:eb:c7:9a:66:e1:bd:ed:4b:5b:a0:87:01:e3:4d:
72:1d:89:5d:18:bf:7a:2f:53:76:42:a4:c4:f0:51:66:20:b3:
01:0d:1a:70:19:f1:ef:b1:7e:4d:16:10:4f:76:cd:de:6d:92:
d5:84:76:43:d5:2b:68:47:e1:cb:01:f1:85:ba:82:53:23:1e:
25:ee:23:1f:c0:be:f2:12:a5:6b:da:4a:13:72:18:12:b2:fa:
75:be:f1:ca
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZ8jaODYoJR5KLKvgF2/b+KOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Zjk0YmQyYWJjYWE0M2M5N2U1Nzg2YjJkYjM1YjcxM2Zi
ZTVmZTQwHhcNMjYwNzAyMTUxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yzg0MjNiNzAwODA3YWVjZjlhNDc3YjIxMDkyMzBjYTU3YTljN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q7MgQG7JGfaQZcJSLSIUuslrLsG
t2gloU3mbchhxtTlLMB0iXd0Ux0DgfyzFAparlrTcijHRRJMtc6Z2Y9u7l2PqL6Q
KZ1qnpqD2oc098gCZ3PbAodizRmRgJ5Pyzk9cmCprM2SVvOXdcs02mnvlmm73D1U
jOOWdjuvwgGMat6lcxlhBl+hPE41g2mPoMFtGu3KMJR5gFNNRhvr+ql0Jbzcyomb
OQhyuL5T7fVsdmcELXkOCGq53fvUVEFnIZjn09dqfNYjO5f1ASDW7fckmNoQJaWQ
e4ZkbC7j62dSsGdz8YNv5XZ88AT4m4py9Dzaayw0JxKfIKprgACgGVEz2QIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFFyEI7cAgHrs+aR3shCSMMpXqce/MB8GA1UdIwQY
MBaAFCX5S9KryqQ8l+V4ay2zW3E/vl/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZsTDBxdktwRHlYNVhockxiTmJjVC0tWC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt
MmE2YjlhMGNjYWJkLzEvWElRanR3Q0FldXo1cEhleUVKSXd5bGVweDc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk
LzEvSmZsTDBxdktwRHlYNVhockxiTmJjVC0tWC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBQBAIAATBKAwQDJS7IAwQD
LhE4AwQDTUtoAwQFUEcAAwQEWfgQAwQEXVlQAwQCuUscMAwDBADCAE0DBATCAEAD
BAHDWngDBADD7ugDBAXZxOAwFAQCAAIwDgMFACABCggDBQAqAQNIMA0GCSqGSIb3
DQEBCwUAA4IBAQAQ6zzvfwOyD/N6u+ub35GnUOny0QnUyMcvtVzNdtv3y1LTDg3K
H+VMhTdSTdWtAo+dpt0z2Owyv7F7ncYKe+BWpGpBf01mwMyzuwBu8YPragI7YF3t
9sjvIc1gwBghvEZ/tkoI7nm3B9+A8TKV4itEwypnbyQFs0zG4i8BJmPvjYPK1kVv
zSI3nn5Pz1NVJc4eGwzXA+TC2SeZwE1K0TzqDeUXSBcZ68eaZuG97UtboIcB401y
HYldGL96L1N2QqTE8FFmILMBDRpwGfHvsX5NFhBPds3ebZLVhHZD1StoR+HLAfGF
uoJTIx4l7iMfwL7yEqVr2koTchgSsvp1vvHK
-----END CERTIFICATE-----
Generated at Thu Jul 16 07:35:03 2026 by rpki-client