Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/1_cbd91siaKvf9bZfnMNGMXekDs.roa
File: 1_cbd91siaKvf9bZfnMNGMXekDs.roa (raw, json)
Hash identifier: oApWa2Po6QpwY0bFHzrByL4PHHcG7yvJrrV17eY2uxs=
Subject key identifier: D7:F7:1B:77:DD:6C:89:A2:AF:7F:D6:D9:7E:73:0D:18:C5:DE:90:3B
Certificate issuer: /CN=5bc2724ba1f58f0fb239ec39f6e1a09d58094458
Certificate serial: 019F236927503ECCB744611C26F69096CBA3
Authority key identifier: 5B:C2:72:4B:A1:F5:8F:0F:B2:39:EC:39:F6:E1:A0:9D:58:09:44:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/1_cbd91siaKvf9bZfnMNGMXekDs.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 62.164.131.0/24 maxlen: 24
62.164.132.0/22 maxlen: 24
62.164.136.0/22 maxlen: 24
62.164.140.0/24 maxlen: 24
62.164.145.0/24 maxlen: 24
62.164.146.0/23 maxlen: 24
62.164.152.0/24 maxlen: 24
62.164.169.0/24 maxlen: 24
62.164.171.0/24 maxlen: 24
62.164.176.0/24 maxlen: 24
62.164.178.0/24 maxlen: 24
62.164.179.0/24 maxlen: 24
62.164.180.0/24 maxlen: 24
62.164.183.0/24 maxlen: 24
62.164.184.0/24 maxlen: 24
62.164.186.0/24 maxlen: 24
62.164.187.0/24 maxlen: 24
62.164.188.0/24 maxlen: 24
62.164.189.0/24 maxlen: 24
62.164.190.0/24 maxlen: 24
62.164.191.0/24 maxlen: 24
62.164.196.0/24 maxlen: 24
62.164.199.0/24 maxlen: 24
62.169.150.0/24 maxlen: 24
62.169.154.0/24 maxlen: 24
86.54.7.0/24 maxlen: 24
86.54.10.0/24 maxlen: 24
86.54.27.0/24 maxlen: 24
86.54.43.0/24 maxlen: 24
86.54.44.0/24 maxlen: 24
86.54.45.0/24 maxlen: 24
86.54.80.0/24 maxlen: 24
86.54.87.0/24 maxlen: 24
86.54.96.0/24 maxlen: 24
86.54.97.0/24 maxlen: 24
86.54.98.0/24 maxlen: 24
86.54.100.0/23 maxlen: 24
86.54.102.0/24 maxlen: 24
86.54.103.0/24 maxlen: 24
86.54.104.0/24 maxlen: 24
86.54.106.0/24 maxlen: 24
86.54.108.0/24 maxlen: 24
86.54.109.0/24 maxlen: 24
86.54.111.0/24 maxlen: 24
86.54.112.0/24 maxlen: 24
86.54.113.0/24 maxlen: 24
86.54.114.0/24 maxlen: 24
86.54.115.0/24 maxlen: 24
86.54.116.0/24 maxlen: 24
86.54.117.0/24 maxlen: 24
86.54.118.0/24 maxlen: 24
86.54.119.0/24 maxlen: 24
86.54.120.0/24 maxlen: 24
86.54.121.0/24 maxlen: 24
86.54.122.0/24 maxlen: 24
86.54.124.0/24 maxlen: 24
86.54.127.0/24 maxlen: 24
86.54.128.0/24 maxlen: 24
86.54.129.0/24 maxlen: 24
86.54.131.0/24 maxlen: 24
86.54.134.0/24 maxlen: 24
86.54.142.0/24 maxlen: 24
86.54.143.0/24 maxlen: 24
86.54.148.0/24 maxlen: 24
86.54.149.0/24 maxlen: 24
86.54.150.0/24 maxlen: 24
86.54.161.0/24 maxlen: 24
86.54.162.0/24 maxlen: 24
86.54.164.0/24 maxlen: 24
86.54.173.0/24 maxlen: 24
86.54.174.0/24 maxlen: 24
86.54.177.0/24 maxlen: 24
86.54.178.0/24 maxlen: 24
86.54.180.0/24 maxlen: 24
86.54.183.0/24 maxlen: 24
86.54.185.0/24 maxlen: 24
86.54.200.0/24 maxlen: 24
86.54.210.0/24 maxlen: 24
86.54.212.0/24 maxlen: 24
86.54.224.0/24 maxlen: 24
86.54.234.0/24 maxlen: 24
86.54.248.0/24 maxlen: 24
193.108.169.0/24 maxlen: 24
194.164.2.0/24 maxlen: 24
194.164.12.0/24 maxlen: 24
194.164.38.0/24 maxlen: 24
194.164.80.0/22 maxlen: 24
194.164.85.0/24 maxlen: 24
194.164.86.0/24 maxlen: 24
194.164.100.0/24 maxlen: 24
194.164.106.0/24 maxlen: 24
194.164.140.0/22 maxlen: 24
194.164.144.0/24 maxlen: 24
194.164.181.0/24 maxlen: 24
194.164.223.0/24 maxlen: 24
194.164.232.0/24 maxlen: 24
194.164.238.0/24 maxlen: 24
194.164.241.0/24 maxlen: 24
194.164.242.0/23 maxlen: 24
194.164.247.0/24 maxlen: 24
195.26.228.0/24 maxlen: 24
195.26.236.0/24 maxlen: 24
195.184.228.0/23 maxlen: 24
195.184.245.0/24 maxlen: 24
195.200.22.0/24 maxlen: 24
212.32.42.0/24 maxlen: 24
212.32.55.0/24 maxlen: 24
212.32.66.0/24 maxlen: 24
212.47.80.0/23 maxlen: 23
212.47.84.0/24 maxlen: 24
212.56.57.0/24 maxlen: 24
213.254.171.0/24 maxlen: 24
213.254.178.0/24 maxlen: 24
213.254.185.0/24 maxlen: 24
217.154.28.0/24 maxlen: 24
217.154.30.0/24 maxlen: 24
217.154.31.0/24 maxlen: 24
217.154.39.0/24 maxlen: 24
217.154.49.0/24 maxlen: 24
217.154.72.0/23 maxlen: 24
217.154.90.0/24 maxlen: 24
217.154.96.0/24 maxlen: 24
217.154.103.0/24 maxlen: 24
217.154.109.0/24 maxlen: 24
217.154.110.0/23 maxlen: 24
217.154.122.0/23 maxlen: 24
217.154.127.0/24 maxlen: 24
217.154.131.0/24 maxlen: 24
217.154.132.0/22 maxlen: 22
217.154.137.0/24 maxlen: 24
217.154.138.0/24 maxlen: 24
217.154.141.0/24 maxlen: 24
217.154.157.0/24 maxlen: 24
217.154.176.0/24 maxlen: 24
217.154.187.0/24 maxlen: 24
217.154.230.0/24 maxlen: 24
217.154.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:27:50:3e:cc:b7:44:61:1c:26:f6:90:96:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc2724ba1f58f0fb239ec39f6e1a09d58094458
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7f71b77dd6c89a2af7fd6d97e730d18c5de903b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:63:64:d6:7c:42:24:2a:87:f7:ae:1b:e6:
a6:4e:db:c1:a8:e5:1a:53:fc:a3:09:f5:8a:ba:a7:
a3:cd:cd:d5:32:aa:fc:71:c5:73:d3:63:76:fd:8c:
9e:13:db:cc:90:0e:1b:7a:c0:d1:76:ee:58:69:f8:
39:f3:85:c8:2d:ed:db:e7:25:91:7a:a7:e8:67:a9:
90:a9:79:e1:03:eb:ab:51:42:0d:87:ff:e4:24:8c:
dd:dd:ba:09:b9:85:a5:4a:79:0c:9c:74:f0:45:79:
6e:96:3d:de:29:98:b0:b7:11:7f:c5:a0:32:22:bb:
26:3b:0f:f6:03:b8:58:9c:16:e4:72:0a:e3:bc:cf:
88:38:5f:f1:98:50:18:7c:7a:2b:c3:85:4f:11:91:
55:12:ed:11:cf:76:13:dc:1a:b4:45:04:fd:ec:64:
05:0d:5f:7c:01:46:a8:3f:2f:0a:23:f1:86:9f:c2:
e2:f0:2c:9d:34:24:52:a6:e8:4c:f6:c6:16:e3:6a:
79:be:a1:12:41:ab:d5:48:ff:8b:fd:8e:b3:2f:ee:
83:b1:29:9e:b6:c4:bb:be:77:a4:17:9f:60:de:7e:
88:34:b0:cb:b2:91:07:11:d0:dc:3a:7e:9a:47:f5:
9f:2d:c8:de:25:46:cf:a9:81:cb:19:b7:3e:fe:ef:
e5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F7:1B:77:DD:6C:89:A2:AF:7F:D6:D9:7E:73:0D:18:C5:DE:90:3B
X509v3 Authority Key Identifier:
keyid:5B:C2:72:4B:A1:F5:8F:0F:B2:39:EC:39:F6:E1:A0:9D:58:09:44:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/1_cbd91siaKvf9bZfnMNGMXekDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.131.0-62.164.140.255
62.164.145.0-62.164.147.255
62.164.152.0/24
62.164.169.0/24
62.164.171.0/24
62.164.176.0/24
62.164.178.0-62.164.180.255
62.164.183.0-62.164.184.255
62.164.186.0-62.164.191.255
62.164.196.0/24
62.164.199.0/24
62.169.150.0/24
62.169.154.0/24
86.54.7.0/24
86.54.10.0/24
86.54.27.0/24
86.54.43.0-86.54.45.255
86.54.80.0/24
86.54.87.0/24
86.54.96.0-86.54.98.255
86.54.100.0-86.54.104.255
86.54.106.0/24
86.54.108.0/23
86.54.111.0-86.54.122.255
86.54.124.0/24
86.54.127.0-86.54.129.255
86.54.131.0/24
86.54.134.0/24
86.54.142.0/23
86.54.148.0-86.54.150.255
86.54.161.0-86.54.162.255
86.54.164.0/24
86.54.173.0-86.54.174.255
86.54.177.0-86.54.178.255
86.54.180.0/24
86.54.183.0/24
86.54.185.0/24
86.54.200.0/24
86.54.210.0/24
86.54.212.0/24
86.54.224.0/24
86.54.234.0/24
86.54.248.0/24
193.108.169.0/24
194.164.2.0/24
194.164.12.0/24
194.164.38.0/24
194.164.80.0/22
194.164.85.0-194.164.86.255
194.164.100.0/24
194.164.106.0/24
194.164.140.0-194.164.144.255
194.164.181.0/24
194.164.223.0/24
194.164.232.0/24
194.164.238.0/24
194.164.241.0-194.164.243.255
194.164.247.0/24
195.26.228.0/24
195.26.236.0/24
195.184.228.0/23
195.184.245.0/24
195.200.22.0/24
212.32.42.0/24
212.32.55.0/24
212.32.66.0/24
212.47.80.0/23
212.47.84.0/24
212.56.57.0/24
213.254.171.0/24
213.254.178.0/24
213.254.185.0/24
217.154.28.0/24
217.154.30.0/23
217.154.39.0/24
217.154.49.0/24
217.154.72.0/23
217.154.90.0/24
217.154.96.0/24
217.154.103.0/24
217.154.109.0-217.154.111.255
217.154.122.0/23
217.154.127.0/24
217.154.131.0-217.154.135.255
217.154.137.0-217.154.138.255
217.154.141.0/24
217.154.157.0/24
217.154.176.0/24
217.154.187.0/24
217.154.230.0/24
217.154.246.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:43:9a:49:e0:ac:71:eb:41:39:a2:60:ed:38:3b:77:01:32:
5f:b5:db:8b:c5:00:ca:bd:9c:1e:d0:45:cb:a1:fb:ed:0e:58:
32:65:0f:26:ee:7e:b0:6e:e6:9b:2f:80:b5:4d:1e:84:62:dd:
af:04:0a:f5:5e:92:eb:85:43:41:80:cc:1f:d0:36:fd:5f:7e:
63:a3:84:e6:42:86:1e:84:27:6b:01:93:8a:9d:9a:e5:ea:3e:
97:87:0f:30:31:c7:cd:18:fa:06:23:b5:4c:ec:cb:11:c3:41:
5b:fd:1e:3f:9b:8c:8b:ed:54:3c:51:73:68:e0:20:b0:12:ba:
35:5b:66:84:38:47:80:60:e1:c2:33:a7:92:d3:a8:7e:28:b4:
88:38:5d:23:c9:88:ee:fc:8b:2f:ae:fa:63:74:92:a2:2d:62:
80:07:70:1f:c9:33:b4:63:66:e9:9e:cc:4e:ea:d8:79:9d:73:
38:58:ef:da:45:db:f1:d7:ba:de:2a:d0:36:00:a1:23:71:29:
57:bb:a4:05:e5:e9:06:4f:d5:dd:d6:2f:66:a3:3c:01:08:20:
53:f9:18:34:43:af:a7:c3:88:7d:78:2a:a5:cf:2f:84:ae:fa:
36:1f:8a:f3:25:89:29:7d:3f:62:92:5f:b5:7d:61:c2:2f:70:
76:59:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:43:06 2026 by rpki-client