Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/X-7HQZC9zy7GCLS-G_9TImPP2kU.roa
File: X-7HQZC9zy7GCLS-G_9TImPP2kU.roa (raw, json)
Hash identifier: 36cYqJN6wlU8jY5y3DdoT/lXOgeKUsdpLhbqi18oJfA=
Subject key identifier: 5F:EE:C7:41:90:BD:CF:2E:C6:08:B4:BE:1B:FF:53:22:63:CF:DA:45
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 01A057E26F7D3C0DD027EEBBEAB2C68F9198
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/X-7HQZC9zy7GCLS-G_9TImPP2kU.roa
Signing time: Mon 31 Aug 2026 12:54:12 +0000
ROA not before: Mon 31 Aug 2026 12:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44051
IP address blocks: 2.58.64.0/24 maxlen: 24
2.58.65.0/24 maxlen: 24
2.58.66.0/24 maxlen: 24
2.58.67.0/24 maxlen: 24
5.187.0.0/24 maxlen: 24
5.187.1.0/24 maxlen: 24
5.187.2.0/24 maxlen: 24
5.187.3.0/24 maxlen: 24
5.187.4.0/24 maxlen: 24
5.187.5.0/24 maxlen: 24
5.187.6.0/24 maxlen: 24
5.187.7.0/24 maxlen: 24
31.172.68.0/24 maxlen: 24
31.172.70.0/24 maxlen: 24
31.172.71.0/24 maxlen: 24
31.172.72.0/24 maxlen: 24
31.172.73.0/24 maxlen: 24
31.172.75.0/24 maxlen: 24
31.172.77.0/24 maxlen: 24
79.132.136.0/24 maxlen: 24
79.132.138.0/24 maxlen: 24
79.132.140.0/24 maxlen: 24
79.132.142.0/24 maxlen: 24
79.132.143.0/24 maxlen: 24
89.127.192.0/24 maxlen: 24
89.127.194.0/24 maxlen: 24
89.127.198.0/24 maxlen: 24
89.127.200.0/24 maxlen: 24
89.127.203.0/24 maxlen: 24
89.127.208.0/24 maxlen: 24
89.127.210.0/24 maxlen: 24
89.127.213.0/24 maxlen: 24
89.127.215.0/24 maxlen: 24
89.127.218.0/24 maxlen: 24
89.127.220.0/24 maxlen: 24
91.228.152.0/22 maxlen: 22
91.228.152.0/24 maxlen: 24
91.228.153.0/24 maxlen: 24
91.228.154.0/24 maxlen: 24
91.228.155.0/24 maxlen: 24
103.75.124.0/24 maxlen: 24
103.75.127.0/24 maxlen: 24
103.228.168.0/24 maxlen: 24
103.228.169.0/24 maxlen: 24
103.228.170.0/24 maxlen: 24
103.228.171.0/24 maxlen: 24
130.17.0.0/24 maxlen: 24
130.17.4.0/24 maxlen: 24
130.17.6.0/24 maxlen: 24
130.17.10.0/24 maxlen: 24
130.17.12.0/24 maxlen: 24
130.17.13.0/24 maxlen: 24
130.17.15.0/24 maxlen: 24
130.17.17.0/24 maxlen: 24
130.17.20.0/24 maxlen: 24
130.17.21.0/24 maxlen: 24
130.17.22.0/24 maxlen: 24
130.17.24.0/24 maxlen: 24
130.17.25.0/24 maxlen: 24
130.17.27.0/24 maxlen: 24
130.17.30.0/24 maxlen: 24
130.17.31.0/24 maxlen: 24
162.248.160.0/24 maxlen: 24
162.248.164.0/24 maxlen: 24
162.248.165.0/24 maxlen: 24
162.248.166.0/24 maxlen: 24
162.248.167.0/24 maxlen: 24
185.21.8.0/24 maxlen: 24
185.44.206.0/24 maxlen: 24
185.44.207.0/24 maxlen: 24
194.154.24.0/24 maxlen: 24
194.154.30.0/24 maxlen: 24
195.26.237.0/24 maxlen: 24
212.2.234.0/24 maxlen: 24
212.2.235.0/24 maxlen: 24
213.193.196.0/24 maxlen: 24
213.239.156.0/24 maxlen: 24
217.177.10.0/24 maxlen: 24
217.177.72.0/24 maxlen: 24
2a02:6b40::/32 maxlen: 32
2a02:6b40::/48 maxlen: 48
2a02:6b40:1::/48 maxlen: 48
2a02:6b40:1000::/48 maxlen: 48
2a02:6b40:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:e2:6f:7d:3c:0d:d0:27:ee:bb:ea:b2:c6:8f:91:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Aug 31 12:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5feec74190bdcf2ec608b4be1bff532263cfda45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:eb:44:81:34:33:5a:d6:a5:30:32:b8:79:
52:ad:49:96:f2:2d:57:99:25:cd:7a:4e:e8:53:22:
73:aa:1e:31:97:7d:10:b0:b6:54:03:a8:0c:b6:2c:
30:ab:5d:28:73:79:dc:91:88:46:88:fa:12:08:c6:
7f:0e:c7:db:67:2c:4f:01:3b:4f:a3:5f:b1:32:66:
b1:fd:1b:58:90:70:59:c7:22:a5:9f:6e:d2:14:48:
e8:53:6b:f9:f7:a2:0e:5a:e3:df:ff:85:31:e0:5e:
b5:2d:9a:31:a1:52:f1:ec:e1:56:99:5a:8d:73:2e:
d2:03:e8:68:44:bc:1f:c2:3a:98:59:95:a4:18:74:
3a:fb:4b:3f:c6:05:92:68:77:23:67:26:c6:31:77:
9e:1c:cb:73:ff:9a:01:cc:35:0f:c9:03:86:bf:b6:
8a:c1:20:fa:a0:eb:6b:df:c0:74:b5:cc:44:a1:1e:
c4:da:ce:29:69:1f:99:7f:ba:4c:ca:d2:d9:b2:24:
bb:fa:53:91:d1:29:6a:45:63:52:fa:6c:c6:e6:36:
f0:2b:9a:a9:c9:f3:ef:1d:fb:a4:40:c3:ac:38:25:
66:ed:50:44:67:c5:21:1b:6f:20:11:14:3f:7a:b3:
98:b6:4a:2b:b6:a5:12:2d:2a:a3:fb:56:1c:a4:1f:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:C7:41:90:BD:CF:2E:C6:08:B4:BE:1B:FF:53:22:63:CF:DA:45
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/X-7HQZC9zy7GCLS-G_9TImPP2kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.64.0/22
5.187.0.0/21
31.172.68.0/24
31.172.70.0-31.172.73.255
31.172.75.0/24
31.172.77.0/24
79.132.136.0/24
79.132.138.0/24
79.132.140.0/24
79.132.142.0/23
89.127.192.0/24
89.127.194.0/24
89.127.198.0/24
89.127.200.0/24
89.127.203.0/24
89.127.208.0/24
89.127.210.0/24
89.127.213.0/24
89.127.215.0/24
89.127.218.0/24
89.127.220.0/24
91.228.152.0/22
103.75.124.0/24
103.75.127.0/24
103.228.168.0/22
130.17.0.0/24
130.17.4.0/24
130.17.6.0/24
130.17.10.0/24
130.17.12.0/23
130.17.15.0/24
130.17.17.0/24
130.17.20.0-130.17.22.255
130.17.24.0/23
130.17.27.0/24
130.17.30.0/23
162.248.160.0/24
162.248.164.0/22
185.21.8.0/24
185.44.206.0/23
194.154.24.0/24
194.154.30.0/24
195.26.237.0/24
212.2.234.0/23
213.193.196.0/24
213.239.156.0/24
217.177.10.0/24
217.177.72.0/24
IPv6:
2a02:6b40::/32
Signature Algorithm: sha256WithRSAEncryption
05:72:55:77:04:34:4a:ad:f0:d4:e3:8d:11:58:e0:ae:c0:a2:
4b:09:12:ab:12:8c:92:eb:9a:b2:7a:8f:15:95:ce:34:23:81:
cf:21:a6:70:df:0b:51:c0:b0:e0:d8:59:52:4a:fa:ca:3b:f7:
b3:d8:49:5a:15:ca:4d:19:4a:91:ff:60:cc:ff:90:d2:88:9a:
21:2d:c2:c9:9c:77:7a:1b:62:f8:f9:41:50:35:80:65:64:85:
bf:a0:35:e8:ec:83:2b:20:e3:de:5d:d8:3d:99:18:fa:9a:ef:
7a:b8:79:14:fb:41:72:a4:73:e2:53:1e:39:56:3b:c2:40:8c:
79:d1:b0:b2:9a:84:9e:b5:05:66:3d:a7:1c:a2:91:c1:84:b4:
03:f8:d9:1f:b2:ed:65:16:f8:c0:0c:dc:e3:e2:05:37:91:ad:
c7:72:81:57:6f:0d:5d:4e:40:ed:38:58:51:be:a8:63:0f:73:
7e:2c:a0:7b:22:03:f5:5a:fc:a6:ab:67:0e:99:46:c1:1d:54:
06:b5:d4:81:ca:50:27:2f:09:55:8b:ea:77:80:06:58:f8:76:
25:18:58:89:c5:16:0f:a7:45:a5:9c:c0:44:5b:80:27:57:e1:
fe:d2:8e:77:6f:1c:cc:35:aa:21:5f:43:5a:ee:17:9b:2e:bd:
06:fc:aa:65
-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgISAaBX4m99PA3QJ+676rLGj5GYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYwODMxMTI1NDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmVlYzc0MTkwYmRjZjJlYzYwOGI0YmUxYmZmNTMyMjYzY2ZkYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfvrRIE0M1rWpTAyuHlSrUmW8i1X
mSXNek7oUyJzqh4xl30QsLZUA6gMtiwwq10oc3nckYhGiPoSCMZ/DsfbZyxPATtP
o1+xMmax/RtYkHBZxyKln27SFEjoU2v596IOWuPf/4Ux4F61LZoxoVLx7OFWmVqN
cy7SA+hoRLwfwjqYWZWkGHQ6+0s/xgWSaHcjZybGMXeeHMtz/5oBzDUPyQOGv7aK
wSD6oOtr38B0tcxEoR7E2s4paR+Zf7pMytLZsiS7+lOR0SlqRWNS+mzG5jbwK5qp
yfPvHfukQMOsOCVm7VBEZ8UhG28gERQ/erOYtkortqUSLSqj+1YcpB9wrQIDAQAB
o4IDTDCCA0gwHQYDVR0OBBYEFF/ux0GQvc8uxgi0vhv/UyJjz9pFMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvWC03SFFaQzl6eTdHQ0xTLUdfOVRJbVBQMmtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYAYIKwYBBQUHAQcBAf8EggFPMIIBSzCCATgEAgABMIIB
MAMEAgI6QAMEAwW7AAMEAB+sRDAMAwQBH6xGAwQBH6xIAwQAH6xLAwQAH6xNAwQA
T4SIAwQAT4SKAwQAT4SMAwQBT4SOAwQAWX/AAwQAWX/CAwQAWX/GAwQAWX/IAwQA
WX/LAwQAWX/QAwQAWX/SAwQAWX/VAwQAWX/XAwQAWX/aAwQAWX/cAwQCW+SYAwQA
Z0t8AwQAZ0t/AwQCZ+SoAwQAghEAAwQAghEEAwQAghEGAwQAghEKAwQBghEMAwQA
ghEPAwQAghERMAwDBAKCERQDBACCERYDBAGCERgDBACCERsDBAGCER4DBACi+KAD
BAKi+KQDBAC5FQgDBAG5LM4DBADCmhgDBADCmh4DBADDGu0DBAHUAuoDBADVwcQD
BADV75wDBADZsQoDBADZsUgwDQQCAAIwBwMFACoCa0AwDQYJKoZIhvcNAQELBQAD
ggEBAAVyVXcENEqt8NTjjRFY4K7AoksJEqsSjJLrmrJ6jxWVzjQjgc8hpnDfC1HA
sODYWVJK+so797PYSVoVyk0ZSpH/YMz/kNKImiEtwsmcd3obYvj5QVA1gGVkhb+g
Nejsgysg495d2D2ZGPqa73q4eRT7QXKkc+JTHjlWO8JAjHnRsLKahJ61BWY9pxyi
kcGEtAP42R+y7WUW+MAM3OPiBTeRrcdygVdvDV1OQO04WFG+qGMPc34soHsiA/Va
/KarZw6ZRsEdVAa11IHKUCcvCVWL6neABlj4diUYWInFFg+nRaWcwERbgCdX4f7S
jndvHMw1qiFfQ1ruF5suvQb8qmU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:07:29 2026 by rpki-client