Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/icpya8TDb0FzzKEJ_mm4QXCGGWQ.roa
File: icpya8TDb0FzzKEJ_mm4QXCGGWQ.roa (raw, json)
Hash identifier: I9sUESWGZ24iKUQ4IL7Zk0ga/wiaveYK50sRzohqVDo=
Subject key identifier: 89:CA:72:6B:C4:C3:6F:41:73:CC:A1:09:FE:69:B8:41:70:86:19:64
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019FB25BE7C4B47CF0634D58FD14401AFBBF
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/icpya8TDb0FzzKEJ_mm4QXCGGWQ.roa
Signing time: Thu 30 Jul 2026 09:29:55 +0000
ROA not before: Thu 30 Jul 2026 09:29:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200651
IP address blocks: 37.156.68.0/24 maxlen: 24
37.228.128.0/24 maxlen: 24
37.228.129.0/24 maxlen: 24
85.193.77.0/24 maxlen: 24
94.198.190.0/24 maxlen: 24
95.133.164.0/24 maxlen: 24
95.133.166.0/23 maxlen: 23
185.10.68.0/24 maxlen: 24
185.100.84.0/23 maxlen: 23
185.100.84.0/24 maxlen: 24
185.100.85.0/24 maxlen: 24
185.100.86.0/24 maxlen: 24
185.100.87.0/24 maxlen: 24
185.146.232.0/24 maxlen: 24
185.146.233.0/24 maxlen: 24
185.146.234.0/24 maxlen: 24
185.165.168.0/24 maxlen: 24
185.165.169.0/24 maxlen: 24
185.165.170.0/24 maxlen: 24
185.165.171.0/24 maxlen: 24
185.246.188.0/24 maxlen: 24
185.246.189.0/24 maxlen: 24
185.246.190.0/24 maxlen: 24
185.246.191.0/24 maxlen: 24
185.247.224.0/24 maxlen: 24
185.247.225.0/24 maxlen: 24
185.247.226.0/24 maxlen: 24
188.240.231.0/24 maxlen: 24
188.241.54.0/24 maxlen: 24
213.218.160.0/24 maxlen: 24
213.218.161.0/24 maxlen: 24
2a06:1700::/48 maxlen: 48
2a06:1700:1::/48 maxlen: 48
2a06:1700:2::/48 maxlen: 48
2a06:1700:3::/48 maxlen: 48
2a06:1700:4::/48 maxlen: 48
2a06:1700:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:5b:e7:c4:b4:7c:f0:63:4d:58:fd:14:40:1a:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Jul 30 09:29:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89ca726bc4c36f4173cca109fe69b84170861964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:53:84:2e:4b:c3:0d:a7:23:1d:d7:de:de:
6e:b2:9c:1c:c7:28:c4:58:62:34:d5:cf:07:ec:15:
bf:5e:1c:b0:17:59:31:46:f5:98:7e:22:0e:14:63:
21:db:34:35:3d:c0:4f:5a:ee:91:ae:66:45:ee:22:
f7:20:d7:de:6b:ca:54:20:8d:93:7c:67:58:3a:5c:
7c:ff:38:f2:54:ed:09:1b:ae:f9:6d:2f:62:5e:49:
12:9f:a2:10:59:29:9b:88:2b:9d:7e:29:ae:73:8f:
53:35:f2:e6:d3:10:9d:78:54:67:58:e9:2b:1a:32:
06:5e:91:2e:38:7a:3d:ef:b5:34:11:84:54:99:e6:
d7:60:75:64:29:70:55:b0:11:8a:e3:90:e0:b9:dc:
74:3e:7a:7f:27:28:68:b9:7f:3f:97:8c:41:33:75:
59:2e:9f:f4:9e:8c:17:4a:e3:19:74:7a:9b:5d:7b:
09:1c:ac:49:77:f0:18:00:5e:d8:fb:23:14:20:04:
69:76:f3:57:15:e5:32:56:f3:2c:25:f6:c4:52:dc:
d0:2f:80:a5:09:5c:27:b0:1b:c2:c3:43:ae:fa:16:
52:0f:7b:4f:67:73:b3:b3:9f:aa:32:2a:52:66:fa:
78:3e:e6:0a:08:99:59:0c:df:a8:fd:45:59:3d:7c:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CA:72:6B:C4:C3:6F:41:73:CC:A1:09:FE:69:B8:41:70:86:19:64
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/icpya8TDb0FzzKEJ_mm4QXCGGWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.68.0/24
37.228.128.0/23
85.193.77.0/24
94.198.190.0/24
95.133.164.0/24
95.133.166.0/23
185.10.68.0/24
185.100.84.0/22
185.146.232.0-185.146.234.255
185.165.168.0/22
185.246.188.0/22
185.247.224.0-185.247.226.255
188.240.231.0/24
188.241.54.0/24
213.218.160.0/23
IPv6:
2a06:1700::-2a06:1700:4:ffff:ffff:ffff:ffff:ffff
2a06:1700:100::/48
Signature Algorithm: sha256WithRSAEncryption
81:9a:8a:22:fa:41:ed:48:3e:1f:a9:48:3e:10:ba:b6:9d:fd:
f9:fa:06:16:80:32:fa:d0:1a:5a:23:ff:da:bc:75:4b:3a:c2:
f1:a1:a6:f0:85:97:1a:47:68:0e:50:c5:cf:a6:79:1e:ca:0d:
12:60:06:3a:3c:b5:6f:d1:ca:c2:63:bc:9e:47:fe:96:b5:7c:
0d:67:d6:b4:a6:c9:9f:8b:46:d3:a8:03:8a:d2:8c:89:41:2c:
a7:ad:6f:e5:f0:6c:5d:6a:bd:d4:76:ce:a0:b3:a6:20:f9:b4:
0c:5f:29:28:5d:9f:79:ad:b0:18:3b:18:f6:4b:5d:16:21:f3:
97:e9:79:54:88:17:4d:9a:b9:3f:e2:d6:21:35:cd:e6:ec:b0:
98:7a:12:db:1a:39:0c:fd:82:aa:b2:e6:7b:d4:36:c2:91:ed:
de:08:0a:84:3b:62:91:9c:eb:74:5b:71:32:b3:44:b0:0c:44:
d9:63:f6:9e:78:8e:e4:fb:bf:bb:42:93:de:41:6b:24:da:d9:
29:78:01:ae:a1:bb:9b:a7:1c:13:96:2a:79:4f:f3:54:16:07:
06:9e:6b:ac:a3:6c:24:a4:e4:ec:35:80:2f:5d:43:3a:f2:b2:
8d:d2:da:92:42:fb:c2:3d:f2:d9:cd:28:92:73:4a:cf:46:d4:
1a:fa:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:48:23 2026 by rpki-client