Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/XFniYr5rP1OEAhLmxduyRpE2v8c.roa
File: XFniYr5rP1OEAhLmxduyRpE2v8c.roa (raw, json)
Hash identifier: hZgUci+NEfvde5mCsK5EpgIIp5ewzdNVMKdWldva/N8=
Subject key identifier: 5C:59:E2:62:BE:6B:3F:53:84:02:12:E6:C5:DB:B2:46:91:36:BF:C7
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019FDC878D04289FF6320BDA49505CBD0DB6
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/XFniYr5rP1OEAhLmxduyRpE2v8c.roa
Signing time: Fri 07 Aug 2026 14:01:38 +0000
ROA not before: Fri 07 Aug 2026 14:01:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.148.128.0/22 maxlen: 24
37.148.128.0/24 maxlen: 24
37.148.129.0/24 maxlen: 24
37.148.130.0/24 maxlen: 24
37.148.131.0/24 maxlen: 24
45.157.158.0/23 maxlen: 24
95.155.128.0/23 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.131.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.136.0/24 maxlen: 24
95.155.137.0/24 maxlen: 24
95.155.144.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/23 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/23 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.152.0/22 maxlen: 24
95.155.152.0/24 maxlen: 24
95.155.153.0/24 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.160.0/20 maxlen: 24
95.155.172.0/24 maxlen: 24
95.155.173.0/24 maxlen: 24
95.155.176.0/21 maxlen: 24
95.155.176.0/24 maxlen: 24
95.155.179.0/24 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:87:8d:04:28:9f:f6:32:0b:da:49:50:5c:bd:0d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 7 14:01:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c59e262be6b3f53840212e6c5dbb2469136bfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:65:c4:7e:58:73:f7:b4:8d:dd:6a:8f:3e:
78:3f:52:8e:60:79:9f:dd:a3:f2:6d:a6:87:b4:0b:
a0:d7:b2:69:de:a4:b4:55:fd:20:29:cb:ad:b1:6a:
1f:b1:5a:b3:c3:db:b2:e2:10:52:73:14:da:fe:ef:
71:8e:4a:03:cc:6e:01:fd:de:d7:d8:13:fe:d1:6b:
bc:4f:b2:e7:2d:02:fd:9f:9c:07:84:26:26:0f:13:
04:f9:d9:94:48:7d:d8:6b:80:11:72:82:d8:a2:13:
e2:9b:0c:ff:92:52:aa:b8:08:0f:08:96:87:ad:e2:
01:06:90:c4:bc:f7:45:ff:d8:97:2d:45:c3:67:00:
75:04:92:58:43:02:28:da:f3:0f:e3:27:f7:7a:79:
f3:12:cb:f9:88:00:c3:54:da:f0:de:65:aa:d6:c6:
23:d6:e4:3f:26:ee:b9:6b:4d:eb:0b:8f:de:72:a3:
93:d4:41:fc:56:b2:b0:07:90:b5:bf:b3:71:47:ef:
62:28:9c:a4:43:eb:83:a4:36:b4:6f:5b:78:c4:de:
39:dc:5e:f8:b9:88:fa:6a:fa:10:81:ab:4f:54:ec:
1d:3c:cd:ae:7a:12:7b:cc:33:48:20:64:ce:a9:e1:
49:7c:f1:06:b5:7e:53:7c:c0:5e:19:c7:55:29:bc:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:59:E2:62:BE:6B:3F:53:84:02:12:E6:C5:DB:B2:46:91:36:BF:C7
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/XFniYr5rP1OEAhLmxduyRpE2v8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
45.157.158.0/23
95.155.128.0/23
95.155.131.0/24
95.155.133.0/24
95.155.136.0/23
95.155.144.0-95.155.149.255
95.155.152.0-95.155.156.255
95.155.160.0-95.155.183.255
152.89.84.0/24
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c9:bd:84:b4:4c:69:e6:7d:e5:d7:c4:07:01:00:a8:46:32:
a8:ca:8f:92:eb:ac:e9:13:4d:43:2c:82:8f:bd:1d:a1:cf:0c:
ae:1e:40:18:d5:46:ac:e5:22:fb:ac:d3:f6:78:b2:f4:53:6b:
b7:b2:fa:65:94:d7:8b:29:d6:85:ca:48:af:e5:28:ae:1d:dc:
bc:28:42:e1:43:90:cb:11:95:ea:13:64:a6:09:da:56:42:39:
0d:1a:b3:15:67:36:59:f0:5e:5e:1d:93:de:ef:04:db:9a:d5:
89:e5:f5:ab:80:0d:48:03:41:c6:69:54:d8:c4:58:c8:0f:40:
47:ef:5a:3d:35:cd:28:e1:ab:79:1d:21:52:41:60:ea:fb:82:
19:1b:e7:9a:03:48:22:03:77:13:c8:87:d0:88:53:89:51:19:
f3:89:58:de:59:b4:27:00:d3:0e:97:d0:5d:db:33:aa:1a:64:
f8:98:22:ea:1f:4e:41:d8:5b:ba:5f:c5:68:17:37:30:b1:37:
4a:86:68:d7:7d:04:ac:f2:8a:1c:5b:16:ac:aa:17:f8:8a:76:
e4:35:9a:39:3e:53:70:5c:9f:cb:09:be:f9:d4:71:e9:bf:e7:
d5:bc:28:60:65:b7:bb:b9:9a:76:34:ac:64:cb:b3:e7:3a:76:
2b:4a:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:02 2026 by rpki-client