Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/xO9jFaII48tbfLESar_CudZ_vuk.roa
File: xO9jFaII48tbfLESar_CudZ_vuk.roa (raw, json)
Hash identifier: XjN5rY6K6jpsp1vXuAYaoKqO6y5BbZAGbJQkVHrQmFU=
Subject key identifier: C4:EF:63:15:A2:08:E3:CB:5B:7C:B1:12:6A:BF:C2:B9:D6:7F:BE:E9
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019F14D38D7CF882C9C00F105808787EDC5B
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/xO9jFaII48tbfLESar_CudZ_vuk.roa
Signing time: Mon 29 Jun 2026 19:20:36 +0000
ROA not before: Mon 29 Jun 2026 19:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8400
IP address blocks: 5.134.104.0/21 maxlen: 21
5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
37.153.175.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.148.64.0/18 maxlen: 18
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.234.0/23 maxlen: 23
92.60.236.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.250.0/24 maxlen: 24
93.113.251.0/24 maxlen: 24
94.228.224.0/22 maxlen: 22
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.232.0/23 maxlen: 23
94.228.234.0/24 maxlen: 24
94.228.235.0/24 maxlen: 24
94.228.236.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.238.0/23 maxlen: 23
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/19 maxlen: 19
176.67.192.0/21 maxlen: 21
176.67.200.0/23 maxlen: 23
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.208.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/23 maxlen: 23
176.67.214.0/24 maxlen: 24
176.67.215.0/24 maxlen: 24
176.67.216.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.222.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.16.0/21 maxlen: 21
178.17.24.0/22 maxlen: 22
178.17.28.0/23 maxlen: 23
178.17.30.0/24 maxlen: 24
178.17.31.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.79.16.0/23 maxlen: 23
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.27.129.0/24 maxlen: 24
185.27.130.0/23 maxlen: 23
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
194.106.160.0/19 maxlen: 19
195.178.32.0/19 maxlen: 19
195.252.64.0/18 maxlen: 18
195.252.82.0/24 maxlen: 24
195.252.88.0/24 maxlen: 24
195.252.92.0/22 maxlen: 22
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a00:8720::/32 maxlen: 32
2a01:b800::/32 maxlen: 32
2a02:61a0::/32 maxlen: 32
2a03:fc40::/32 maxlen: 32
2a04:1dc0::/29 maxlen: 29
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:d3:8d:7c:f8:82:c9:c0:0f:10:58:08:78:7e:dc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jun 29 19:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4ef6315a208e3cb5b7cb1126abfc2b9d67fbee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:5e:b4:51:b8:62:9e:c3:9a:b5:93:1e:6f:
23:f3:22:e8:f9:65:4d:43:c7:e4:b4:fa:b0:b1:83:
e8:1d:f0:34:8b:d3:82:c3:a6:67:28:dd:cd:cc:3c:
51:99:e3:a1:fa:57:40:13:db:04:4d:e8:2a:cf:0d:
28:2c:f4:c7:a1:3c:a9:f3:ad:07:5a:46:d5:8a:67:
d9:61:98:48:3d:78:a3:03:85:a5:3c:57:6b:91:b2:
5c:e3:1c:97:66:cc:31:8a:c4:a0:9a:c8:10:89:4d:
09:93:d9:97:66:99:31:fa:c8:b8:f2:2b:58:7d:3c:
03:cf:23:64:0c:c1:5e:95:85:24:3d:7a:d5:bb:d4:
11:1a:e0:9a:83:68:96:46:33:ac:17:04:63:40:64:
94:7c:be:72:65:42:4d:64:48:fe:8e:1b:d2:7b:62:
7f:af:de:a2:fd:b3:94:26:68:c2:c8:21:9c:2b:a8:
b1:86:af:c6:f1:ac:9d:e0:49:78:b8:1c:fc:f3:e8:
93:48:ea:86:d8:a4:36:d2:41:4e:4a:2d:ad:f9:8c:
f8:4c:bf:c6:e3:a0:30:b5:dd:76:94:f3:a7:46:ca:
ae:c3:27:31:39:35:a6:ba:2e:b2:9e:94:ec:19:4b:
2d:fe:57:c9:2b:30:f6:e0:c1:74:ca:81:b9:1d:28:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EF:63:15:A2:08:E3:CB:5B:7C:B1:12:6A:BF:C2:B9:D6:7F:BE:E9
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/xO9jFaII48tbfLESar_CudZ_vuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.104.0/21
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.148.64.0/18
91.150.64.0/18
92.60.224.0/20
92.244.128.0/19
93.86.0.0/15
93.113.250.0/23
94.228.224.0/22
94.228.229.0-94.228.239.255
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/19
178.17.16.0/20
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
194.106.160.0/19
195.178.32.0/19
195.252.64.0/18
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a00:8720::/32
2a01:b800::/32
2a02:61a0::/32
2a03:fc40::/32
2a04:1dc0::/29
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:cb:1a:33:bd:3a:74:de:28:9a:78:fc:ec:92:80:95:0a:64:
70:0b:67:73:15:6e:ad:f2:a6:26:c8:41:6a:f6:ea:a7:00:46:
fa:ac:cd:6c:63:3c:7a:10:7a:5c:c2:76:7d:dc:f2:db:10:58:
49:78:16:03:4e:11:88:64:e2:bd:74:97:30:03:5b:d3:b3:cf:
52:dc:db:cd:27:a1:54:81:12:88:b5:47:8a:08:ca:85:97:90:
1d:34:4b:46:ff:46:38:c1:00:b0:44:56:29:5e:56:7a:b9:11:
5f:68:5e:9b:18:59:db:9a:27:39:de:02:54:be:8f:c2:c5:77:
1e:5f:62:23:6d:50:79:b4:b4:b8:ab:6f:39:b1:b6:c2:35:28:
d5:85:ae:ba:8f:34:13:4a:86:cb:ed:80:60:66:70:9d:0f:42:
e2:4a:47:b7:1c:1b:d0:bb:d1:67:b8:48:47:ce:6f:a0:dd:c0:
48:ce:d3:23:6e:cc:0f:70:12:eb:65:55:3e:46:9b:9e:38:3e:
ff:c6:8d:21:a4:4c:ac:c4:9d:ac:37:40:fc:76:6e:f2:2b:92:
f3:3c:ee:64:c6:e3:04:0a:fa:b1:ae:88:61:fc:82:c3:1f:be:
43:58:db:88:db:62:01:21:53:e4:a9:bf:fa:e6:92:d5:90:5a:
9b:96:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 07:29:01 2026 by rpki-client