Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/y3Qt_jRz9_YzDzrKpBTzquwpzrA.roa
File: y3Qt_jRz9_YzDzrKpBTzquwpzrA.roa (raw, json)
Hash identifier: ZfMyO7sHU+DSQBbVWaD8npAjVzh3pUDPb8tI9s5b6ME=
Subject key identifier: CB:74:2D:FE:34:73:F7:F6:33:0F:3A:CA:A4:14:F3:AA:EC:29:CE:B0
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 019FD78262C4B23710992FEBE9596806917F
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/y3Qt_jRz9_YzDzrKpBTzquwpzrA.roa
Signing time: Thu 06 Aug 2026 14:37:54 +0000
ROA not before: Thu 06 Aug 2026 14:37:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 109.106.239.0/24 maxlen: 24
109.245.12.0/22 maxlen: 24
109.245.31.0/24 maxlen: 24
109.245.32.0/21 maxlen: 24
109.245.74.0/24 maxlen: 24
109.245.79.0/24 maxlen: 24
109.245.95.0/24 maxlen: 24
109.245.96.0/24 maxlen: 24
109.245.97.0/24 maxlen: 24
109.245.98.0/24 maxlen: 24
109.245.99.0/24 maxlen: 24
109.245.100.0/24 maxlen: 24
109.245.101.0/24 maxlen: 24
109.245.102.0/24 maxlen: 24
109.245.103.0/24 maxlen: 24
109.245.111.0/24 maxlen: 24
109.245.112.0/24 maxlen: 24
109.245.113.0/24 maxlen: 24
109.245.114.0/24 maxlen: 24
109.245.115.0/24 maxlen: 24
109.245.116.0/24 maxlen: 24
109.245.117.0/24 maxlen: 24
109.245.118.0/24 maxlen: 24
109.245.119.0/24 maxlen: 24
109.245.127.0/24 maxlen: 24
109.245.128.0/24 maxlen: 24
109.245.129.0/24 maxlen: 24
109.245.130.0/24 maxlen: 24
109.245.131.0/24 maxlen: 24
109.245.132.0/24 maxlen: 24
109.245.133.0/24 maxlen: 24
109.245.134.0/24 maxlen: 24
109.245.135.0/24 maxlen: 24
109.245.143.0/24 maxlen: 24
109.245.144.0/24 maxlen: 24
109.245.145.0/24 maxlen: 24
109.245.146.0/24 maxlen: 24
109.245.147.0/24 maxlen: 24
109.245.148.0/24 maxlen: 24
109.245.149.0/24 maxlen: 24
109.245.150.0/24 maxlen: 24
109.245.151.0/24 maxlen: 24
109.245.159.0/24 maxlen: 24
109.245.160.0/24 maxlen: 24
109.245.161.0/24 maxlen: 24
109.245.162.0/24 maxlen: 24
109.245.163.0/24 maxlen: 24
109.245.164.0/24 maxlen: 24
109.245.165.0/24 maxlen: 24
109.245.166.0/24 maxlen: 24
109.245.167.0/24 maxlen: 24
109.245.168.0/24 maxlen: 24
109.245.169.0/24 maxlen: 24
109.245.170.0/24 maxlen: 24
109.245.171.0/24 maxlen: 24
109.245.172.0/24 maxlen: 24
109.245.173.0/24 maxlen: 24
109.245.174.0/24 maxlen: 24
109.245.175.0/24 maxlen: 24
109.245.191.0/24 maxlen: 24
109.245.192.0/24 maxlen: 24
109.245.193.0/24 maxlen: 24
109.245.194.0/24 maxlen: 24
109.245.195.0/24 maxlen: 24
109.245.196.0/24 maxlen: 24
109.245.197.0/24 maxlen: 24
109.245.198.0/24 maxlen: 24
109.245.199.0/24 maxlen: 24
109.245.200.0/24 maxlen: 24
109.245.201.0/24 maxlen: 24
109.245.202.0/24 maxlen: 24
109.245.203.0/24 maxlen: 24
109.245.204.0/24 maxlen: 24
109.245.205.0/24 maxlen: 24
109.245.206.0/24 maxlen: 24
109.245.207.0/24 maxlen: 24
109.245.218.0/24 maxlen: 24
109.245.224.0/22 maxlen: 24
217.65.192.0/24 maxlen: 24
217.65.193.0/24 maxlen: 24
217.65.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:82:62:c4:b2:37:10:99:2f:eb:e9:59:68:06:91:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Aug 6 14:37:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb742dfe3473f7f6330f3acaa414f3aaec29ceb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:e4:9d:db:6e:e7:a6:3a:c4:ea:11:fb:40:
de:30:aa:d8:68:36:37:ce:af:5a:ca:30:42:11:f0:
20:aa:f3:58:57:34:52:4e:65:44:f3:d0:9a:32:34:
e7:6a:86:24:77:a5:01:77:a3:b9:7a:d3:60:ad:ab:
cf:19:b3:a0:58:d8:a8:17:64:a0:40:ff:3a:8a:9c:
d7:4e:3b:ab:74:a5:e8:00:91:f5:47:ca:ed:84:d6:
b1:1b:ad:7e:77:f4:75:9b:5e:02:f8:07:ab:7e:92:
11:01:13:08:94:e5:a4:81:9f:93:4d:25:a3:cd:3c:
a4:11:9e:dd:3f:b1:bb:1e:33:61:d2:7f:96:40:a4:
94:8c:4d:b0:67:52:a0:3d:75:62:a0:fa:26:a1:14:
35:4c:a3:94:bb:e7:19:1e:ba:4b:93:ee:9c:49:c9:
8c:eb:4f:6d:e9:21:ee:ae:97:6c:a6:69:1a:7f:1f:
8d:2e:4d:f0:ad:18:b7:0c:2d:d4:9f:a6:5e:98:b5:
22:39:88:9e:5a:07:57:62:29:9d:36:3a:6e:f3:e8:
6b:e7:9e:1c:5e:46:a0:23:6a:ac:fb:9d:dc:2d:31:
27:cc:fb:53:81:05:4a:10:24:67:7b:8d:62:7b:98:
33:fa:97:b6:c3:9c:d5:f2:72:b8:9b:34:f6:9b:20:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:74:2D:FE:34:73:F7:F6:33:0F:3A:CA:A4:14:F3:AA:EC:29:CE:B0
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/y3Qt_jRz9_YzDzrKpBTzquwpzrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.239.0/24
109.245.12.0/22
109.245.31.0-109.245.39.255
109.245.74.0/24
109.245.79.0/24
109.245.95.0-109.245.103.255
109.245.111.0-109.245.119.255
109.245.127.0-109.245.135.255
109.245.143.0-109.245.151.255
109.245.159.0-109.245.175.255
109.245.191.0-109.245.207.255
109.245.218.0/24
109.245.224.0/22
217.65.192.0/23
217.65.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b5:cb:8a:57:31:01:e2:fa:b7:f0:c0:75:61:37:2e:34:9d:
17:ed:5d:d4:65:69:a6:a2:5c:2a:cf:c3:c3:47:b9:d6:aa:31:
58:e4:32:fb:fe:95:b5:3a:45:30:8e:42:51:91:93:8a:f7:69:
7a:91:a9:ee:36:b0:1c:14:0a:70:98:bd:8a:1f:fe:bf:e0:1b:
15:ce:b2:b5:7f:ea:f9:9e:f2:ab:dd:ad:44:64:ec:a6:f6:97:
49:a5:40:3e:56:5b:cc:3b:12:7f:42:6d:c3:01:98:43:32:c5:
50:a2:90:67:6e:d6:51:29:3b:78:50:43:9e:93:de:07:78:ff:
85:ef:eb:68:e7:30:ea:e4:d3:de:9d:fc:a4:9b:79:37:9f:e4:
0f:23:e6:f9:e6:f0:36:cc:0d:43:94:01:aa:89:1d:25:5a:ab:
8c:fb:a6:53:3d:05:87:0d:58:a2:53:d9:1b:b5:90:2f:a0:d6:
b5:2e:22:1c:cd:17:06:a8:73:3a:c2:c6:de:01:bc:91:97:6f:
ec:6d:4b:46:07:e1:e0:c4:ec:bb:0a:dd:c1:9c:0c:fb:d5:29:
aa:94:44:3b:51:a3:4d:f2:b2:d8:f7:8f:4f:78:ec:c2:3b:11:
81:31:dd:06:0e:f4:43:c4:eb:9e:b0:9f:5f:4b:88:59:8f:5c:
09:6a:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:28 2026 by rpki-client