Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/q23Cy4yTWPKFmSJJ7G1yL-LRX1g.roa
File: q23Cy4yTWPKFmSJJ7G1yL-LRX1g.roa (raw, json)
Hash identifier: ywM5/EMJVOH52z017xtq/3TG1e8lHdHdmQ6EWs4nLP8=
Subject key identifier: AB:6D:C2:CB:8C:93:58:F2:85:99:22:49:EC:6D:72:2F:E2:D1:5F:58
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01A07B32102F41D602BD7A137C8AE356B7A2
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/q23Cy4yTWPKFmSJJ7G1yL-LRX1g.roa
Signing time: Mon 07 Sep 2026 09:27:53 +0000
ROA not before: Mon 07 Sep 2026 09:27:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12430
IP address blocks: 2.154.0.0/15 maxlen: 16
2.154.0.0/16 maxlen: 16
2.154.192.0/18 maxlen: 18
2.155.0.0/16 maxlen: 16
5.40.0.0/16 maxlen: 16
62.42.0.0/15 maxlen: 16
62.57.0.0/16 maxlen: 16
62.81.0.0/16 maxlen: 24
62.100.96.0/19 maxlen: 19
62.174.0.0/15 maxlen: 19
81.60.0.0/15 maxlen: 18
81.184.0.0/16 maxlen: 16
81.202.0.0/16 maxlen: 16
82.159.0.0/16 maxlen: 16
82.213.128.0/18 maxlen: 18
83.173.128.0/18 maxlen: 18
84.120.0.0/13 maxlen: 19
84.127.229.0/24 maxlen: 24
85.219.0.0/17 maxlen: 17
85.251.0.0/16 maxlen: 17
89.140.0.0/16 maxlen: 16
89.141.0.0/16 maxlen: 16
95.39.0.0/16 maxlen: 19
185.128.128.0/22 maxlen: 24
194.106.0.0/19 maxlen: 19
194.140.128.0/18 maxlen: 18
194.149.192.0/19 maxlen: 19
212.21.224.0/19 maxlen: 19
212.40.224.0/19 maxlen: 19
212.40.224.0/24 maxlen: 24
212.78.128.0/19 maxlen: 19
212.79.128.0/19 maxlen: 19
212.95.192.0/19 maxlen: 19
212.97.160.0/19 maxlen: 19
212.183.192.0/18 maxlen: 18
213.37.0.0/16 maxlen: 16
213.201.0.0/17 maxlen: 17
213.227.0.0/18 maxlen: 18
213.231.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:32:10:2f:41:d6:02:bd:7a:13:7c:8a:e3:56:b7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Sep 7 09:27:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab6dc2cb8c9358f285992249ec6d722fe2d15f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:15:20:fe:e2:b6:8d:94:62:2c:d4:f8:0c:
83:bb:9f:60:76:92:c0:02:53:ce:a7:ec:e8:20:82:
eb:2d:b2:23:80:7d:bf:8a:d3:10:bb:b8:cf:3c:43:
ba:22:0b:7c:e3:61:4c:74:e9:45:af:05:de:55:cd:
06:62:3b:49:53:ca:a3:7a:fa:21:ce:d3:3b:dd:ec:
fd:f6:36:5a:9a:82:e5:03:d9:07:cd:77:d1:f8:03:
c1:a6:5e:63:81:d1:9a:c6:31:10:26:1f:31:e9:68:
6d:40:6f:ca:cc:93:03:4d:4e:bf:5e:b6:75:d9:af:
ef:2a:52:fd:ee:c7:65:7f:cb:dd:72:49:ed:ee:14:
69:2b:19:d3:d7:56:44:7b:d2:65:c0:fd:ae:65:cd:
c1:7a:3e:b8:46:b1:c3:3a:0d:2e:cd:a2:5d:f1:2f:
64:4d:71:34:53:6f:4c:9d:8c:55:99:de:62:4a:80:
37:bc:0c:fa:a8:4e:9e:88:99:43:84:3f:e5:a2:a8:
ff:8c:a0:fa:d9:8a:c6:b1:21:5d:55:35:8b:2c:e4:
c3:01:f4:de:f5:42:7b:39:dd:bd:63:fd:d4:b3:6e:
25:a9:e4:93:6d:4b:32:ee:48:24:6a:0c:45:a5:40:
f4:f1:a2:a7:af:bf:21:bf:2e:99:ee:dc:fa:7e:04:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6D:C2:CB:8C:93:58:F2:85:99:22:49:EC:6D:72:2F:E2:D1:5F:58
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/q23Cy4yTWPKFmSJJ7G1yL-LRX1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.154.0.0/15
5.40.0.0/16
62.42.0.0/15
62.57.0.0/16
62.81.0.0/16
62.100.96.0/19
62.174.0.0/15
81.60.0.0/15
81.184.0.0/16
81.202.0.0/16
82.159.0.0/16
82.213.128.0/18
83.173.128.0/18
84.120.0.0/13
85.219.0.0/17
85.251.0.0/16
89.140.0.0/15
95.39.0.0/16
185.128.128.0/22
194.106.0.0/19
194.140.128.0/18
194.149.192.0/19
212.21.224.0/19
212.40.224.0/19
212.78.128.0/19
212.79.128.0/19
212.95.192.0/19
212.97.160.0/19
212.183.192.0/18
213.37.0.0/16
213.201.0.0/17
213.227.0.0/18
213.231.64.0/18
Signature Algorithm: sha256WithRSAEncryption
83:ef:46:01:95:75:4b:06:4f:7d:e7:cb:01:0b:51:50:42:bf:
70:1c:29:4d:77:af:66:f6:51:b2:c3:f5:82:00:12:1f:27:04:
69:76:48:cb:ce:df:ff:bc:03:03:5e:89:23:2d:2d:36:68:b0:
0f:e4:76:bf:20:11:a6:be:10:f8:50:b4:59:ea:f4:2f:83:27:
00:24:fe:87:ec:90:6e:24:60:c4:3e:ce:13:fd:6a:70:03:24:
2e:59:aa:c9:c5:4a:9d:5e:bd:87:2a:9a:76:e7:4f:69:e3:0f:
c4:39:0e:b7:58:d6:8e:d7:35:6b:05:a7:e5:9d:66:6e:2d:95:
ad:29:5d:1e:b6:80:ec:db:db:8c:41:b7:ae:0c:7e:02:e8:88:
c3:e3:9e:21:68:51:48:9a:ea:30:21:73:b0:82:7c:4d:6e:66:
d2:c0:16:f3:37:b1:bf:61:20:0d:ff:79:e9:f8:9b:70:31:45:
f9:b6:1b:e6:40:64:7f:fd:bf:3f:91:8c:37:cc:37:2e:dc:fd:
f8:9b:72:a4:66:0b:dd:fa:45:72:dc:f3:8a:17:f9:18:37:b0:
f1:bc:dc:22:4d:3b:78:18:6e:36:e6:bb:86:29:26:ec:99:5b:
12:ed:2b:b2:a5:bf:a1:26:f4:5e:69:08:36:59:95:21:69:10:
35:08:80:7e
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAaB7MhAvQdYCvXoTfIrjVreiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjYwOTA3MDkyNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjZkYzJjYjhjOTM1OGYyODU5OTIyNDllYzZkNzIyZmUyZDE1ZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow8VIP7ito2UYizU+AyDu59gdpLA
AlPOp+zoIILrLbIjgH2/itMQu7jPPEO6Igt842FMdOlFrwXeVc0GYjtJU8qjevoh
ztM73ez99jZamoLlA9kHzXfR+APBpl5jgdGaxjEQJh8x6WhtQG/KzJMDTU6/XrZ1
2a/vKlL97sdlf8vdcknt7hRpKxnT11ZEe9JlwP2uZc3Bej64RrHDOg0uzaJd8S9k
TXE0U29MnYxVmd5iSoA3vAz6qE6eiJlDhD/loqj/jKD62YrGsSFdVTWLLOTDAfTe
9UJ7Od29Y/3Us24lqeSTbUsy7kgkagxFpUD08aKnr78hvy6Z7tz6fgRQrwIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFKttwsuMk1jyhZkiSextci/i0V9YMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvcTIzQ3k0eVRXUEtGbVNKSjdHMXlMLUxSWDFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBvgQCAAEwgbcDAwEC
mgMDAAUoAwMBPioDAwA+OQMDAD5RAwQFPmRgAwMBPq4DAwFRPAMDAFG4AwMAUcoD
AwBSnwMEBlLVgAMEBlOtgAMDA1R4AwQHVdsAAwMAVfsDAwFZjAMDAF8nAwQCuYCA
AwQFwmoAAwQGwoyAAwQFwpXAAwQF1BXgAwQF1CjgAwQF1E6AAwQF1E+AAwQF1F/A
AwQF1GGgAwQG1LfAAwMA1SUDBAfVyQADBAbV4wADBAbV50AwDQYJKoZIhvcNAQEL
BQADggEBAIPvRgGVdUsGT33nywELUVBCv3AcKU13r2b2UbLD9YIAEh8nBGl2SMvO
3/+8AwNeiSMtLTZosA/kdr8gEaa+EPhQtFnq9C+DJwAk/ofskG4kYMQ+zhP9anAD
JC5ZqsnFSp1evYcqmnbnT2njD8Q5DrdY1o7XNWsFp+WdZm4tla0pXR62gOzb24xB
t64MfgLoiMPjniFoUUia6jAhc7CCfE1uZtLAFvM3sb9hIA3/een4m3AxRfm2G+ZA
ZH/9vz+RjDfMNy7c/fibcqRmC936RXLc84oX+Rg3sPG83CJNO3gYbjbmu4YpJuyZ
WxLtK7Klv6Em9F5pCDZZlSFpEDUIgH4=
-----END CERTIFICATE-----
Generated at Wed Sep 9 22:21:23 2026 by rpki-client