Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/Xq3SuMnZU62smroRMp98U4xq9mc.roa
File: Xq3SuMnZU62smroRMp98U4xq9mc.roa (raw, json)
Hash identifier: XEObqeJ3NLPZAeeZJznW5UF99OAYc4+AxleAkXeNlyo=
Subject key identifier: 5E:AD:D2:B8:C9:D9:53:AD:AC:9A:BA:11:32:9F:7C:53:8C:6A:F6:67
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 019F84C50CD6E6FEC482EB88AB91630446CA
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/Xq3SuMnZU62smroRMp98U4xq9mc.roa
Signing time: Tue 21 Jul 2026 13:02:14 +0000
ROA not before: Tue 21 Jul 2026 13:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61098
IP address blocks: 85.217.160.0/22 maxlen: 24
85.217.172.0/23 maxlen: 24
85.217.174.0/23 maxlen: 24
85.217.184.0/23 maxlen: 24
85.217.186.0/23 maxlen: 24
89.145.160.0/22 maxlen: 24
89.145.164.0/23 maxlen: 24
89.145.166.0/23 maxlen: 24
91.92.116.0/23 maxlen: 24
91.92.118.0/23 maxlen: 24
91.92.140.0/23 maxlen: 24
91.92.142.0/23 maxlen: 24
91.92.152.0/23 maxlen: 24
91.92.154.0/23 maxlen: 24
91.92.200.0/23 maxlen: 24
91.92.202.0/23 maxlen: 24
91.92.224.0/23 maxlen: 24
91.92.227.0/24 maxlen: 24
92.39.56.0/22 maxlen: 24
92.39.60.0/22 maxlen: 24
138.124.208.0/22 maxlen: 24
138.124.212.0/22 maxlen: 24
138.124.216.0/22 maxlen: 24
138.124.220.0/22 maxlen: 24
151.145.192.0/22 maxlen: 24
151.145.196.0/22 maxlen: 22
151.145.200.0/21 maxlen: 22
151.145.200.0/22 maxlen: 22
151.145.208.0/22 maxlen: 24
151.145.212.0/22 maxlen: 24
151.145.216.0/22 maxlen: 24
151.145.220.0/22 maxlen: 24
159.100.240.0/22 maxlen: 24
159.100.244.0/24 maxlen: 24
159.100.245.0/24 maxlen: 24
159.100.246.0/23 maxlen: 24
159.100.248.0/21 maxlen: 24
161.104.192.0/19 maxlen: 24
161.104.192.0/22 maxlen: 24
185.19.28.0/22 maxlen: 24
185.150.8.0/22 maxlen: 24
194.182.160.0/22 maxlen: 24
194.182.164.0/22 maxlen: 24
194.182.168.0/22 maxlen: 24
194.182.172.0/22 maxlen: 24
194.182.176.0/22 maxlen: 24
194.182.180.0/22 maxlen: 24
194.182.184.0/22 maxlen: 24
194.182.188.0/22 maxlen: 24
2a04:c41::/32 maxlen: 48
2a04:c42::/32 maxlen: 48
2a04:c42:f11::/48 maxlen: 48
2a04:c42:f12::/48 maxlen: 48
2a04:c43::/32 maxlen: 48
2a04:c44::/32 maxlen: 48
2a04:c45::/32 maxlen: 48
2a04:c46::/32 maxlen: 48
2a04:c47::/32 maxlen: 48
2a04:c47:f11::/48 maxlen: 48
2a04:c47:f12::/48 maxlen: 48
2a07:6cc0:10::/44 maxlen: 48
2a07:6cc0:10::/48 maxlen: 48
2a07:6cc0:11::/48 maxlen: 48
2a07:6cc0:12::/48 maxlen: 48
2a07:6cc0:20::/44 maxlen: 48
2a07:6cc0:20::/48 maxlen: 48
2a07:6cc0:21::/48 maxlen: 48
2a07:6cc0:30::/44 maxlen: 48
2a07:6cc0:30::/48 maxlen: 48
2a07:6cc0:31::/48 maxlen: 48
2a07:6cc0:40::/44 maxlen: 48
2a07:6cc0:40::/48 maxlen: 48
2a07:6cc0:41::/48 maxlen: 48
2a07:6cc0:50::/44 maxlen: 48
2a07:6cc0:50::/48 maxlen: 48
2a07:6cc0:60::/44 maxlen: 48
2a07:6cc0:60::/48 maxlen: 48
2a07:6cc0:70::/44 maxlen: 48
2a07:6cc0:70::/48 maxlen: 48
2a07:6cc0:71::/48 maxlen: 48
2a07:6cc0:80::/44 maxlen: 48
2a07:6cc0:80::/48 maxlen: 48
2a07:6cc1::/32 maxlen: 48
2a07:6cc2::/32 maxlen: 48
2a07:6cc2:f11::/48 maxlen: 48
2a07:6cc2:f12::/48 maxlen: 48
2a07:6cc3::/32 maxlen: 48
2a07:6cc3:f11::/48 maxlen: 48
2a07:6cc3:f12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c5:0c:d6:e6:fe:c4:82:eb:88:ab:91:63:04:46:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Jul 21 13:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5eadd2b8c9d953adac9aba11329f7c538c6af667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:76:1a:02:54:4d:87:37:a3:0b:c6:d6:39:
0e:a8:66:14:39:44:14:e5:77:38:66:af:f7:44:03:
97:03:9a:48:e6:18:f5:cc:14:c0:91:79:1c:ae:a9:
8c:db:c6:6e:b9:7d:b0:6d:c6:7f:58:21:69:2c:27:
4f:f3:7f:b6:c2:15:92:21:82:e9:64:56:54:0c:b8:
c1:1e:8b:af:ec:13:11:b7:82:b8:64:9d:9f:10:93:
44:5e:d7:1a:f4:1c:9d:c3:6c:a5:d2:ab:7a:14:62:
31:bb:5d:93:92:b7:09:71:8d:d5:02:ac:08:ac:e6:
a3:ab:b3:7d:1b:8a:7f:21:9e:99:e0:c6:8f:f3:2c:
53:1b:3d:4f:66:86:de:4a:c2:87:c7:04:36:2c:b3:
bd:13:0f:48:3d:e4:7c:0b:23:51:f5:b0:0a:76:13:
38:0a:db:ec:7f:a2:e2:fd:f1:2a:05:3f:3e:09:5f:
2c:a5:b3:59:2c:6c:9f:a4:43:c6:a0:b4:02:a8:dc:
f8:3e:1a:a9:75:fe:b7:77:72:70:81:78:1d:50:01:
db:62:42:2e:84:ca:c1:ce:1e:fe:50:3b:5c:59:62:
0a:05:13:7b:e3:b0:99:33:39:45:43:0a:45:d4:fd:
f6:ce:2a:a4:a4:be:7f:a7:fb:e0:9c:a3:97:8e:d8:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:D2:B8:C9:D9:53:AD:AC:9A:BA:11:32:9F:7C:53:8C:6A:F6:67
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/Xq3SuMnZU62smroRMp98U4xq9mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.160.0/22
85.217.172.0/22
85.217.184.0/22
89.145.160.0/21
91.92.116.0/22
91.92.140.0/22
91.92.152.0/22
91.92.200.0/22
91.92.224.0/23
91.92.227.0/24
92.39.56.0/21
138.124.208.0/20
151.145.192.0/19
159.100.240.0/20
161.104.192.0/19
185.19.28.0/22
185.150.8.0/22
194.182.160.0/19
IPv6:
2a04:c41::-2a04:c47:ffff:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:10::-2a07:6cc0:8f:ffff:ffff:ffff:ffff:ffff
2a07:6cc1::-2a07:6cc3:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:86:f2:22:92:6a:00:8d:15:01:97:6c:14:26:e5:f4:6b:f7:
35:ab:11:f3:94:20:a8:bd:6e:44:bf:78:7d:35:37:94:d0:eb:
98:72:d2:ed:a7:9e:ab:ea:30:24:a4:ee:1a:1a:cf:e3:5b:f0:
6a:69:c2:00:a0:0c:50:21:0a:46:56:af:7a:fa:21:fc:ce:fb:
50:94:2c:e1:ee:df:31:59:de:35:41:2a:6a:ef:14:22:ed:a3:
21:4b:de:7b:8c:c4:ff:a9:9f:c5:59:70:fb:4a:4c:21:27:90:
42:54:f3:f5:17:98:da:61:ce:92:40:c5:7a:5b:2b:4d:6a:6d:
0e:14:8f:9c:a3:d3:fa:c8:0b:a1:1a:c8:08:6e:86:0a:6f:84:
d5:3c:1e:da:62:bf:ce:eb:42:db:13:f7:b9:85:86:fb:5e:03:
de:3c:2b:25:13:be:a0:31:dc:f0:fc:8a:9b:d8:7c:f7:71:f0:
c2:0e:2e:72:e5:da:60:39:53:96:f3:2d:0e:b6:3f:b8:13:50:
6c:7a:ac:c4:df:7f:d3:f2:24:47:80:6a:d5:73:ad:63:cf:ee:
86:13:0e:af:fa:fe:25:82:c7:13:d9:eb:63:9e:d3:19:41:df:
09:d0:fe:d1:18:b9:32:c2:a9:6b:7b:88:f0:bd:5d:d9:8b:b2:
4d:1f:03:b7
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZ+ExQzW5v7EguuIq5FjBEbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy
ODQyOGMwHhcNMjYwNzIxMTMwMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWFkZDJiOGM5ZDk1M2FkYWM5YWJhMTEzMjlmN2M1MzhjNmFmNjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQJ2GgJUTYc3owvG1jkOqGYUOUQU
5Xc4Zq/3RAOXA5pI5hj1zBTAkXkcrqmM28ZuuX2wbcZ/WCFpLCdP83+2whWSIYLp
ZFZUDLjBHouv7BMRt4K4ZJ2fEJNEXtca9Bydw2yl0qt6FGIxu12TkrcJcY3VAqwI
rOajq7N9G4p/IZ6Z4MaP8yxTGz1PZobeSsKHxwQ2LLO9Ew9IPeR8CyNR9bAKdhM4
Ctvsf6Li/fEqBT8+CV8spbNZLGyfpEPGoLQCqNz4Phqpdf63d3JwgXgdUAHbYkIu
hMrBzh7+UDtcWWIKBRN747CZMzlFQwpF1P32ziqkpL5/p/vgnKOXjti4LwIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFF6t0rjJ2VOtrJq6ETKffFOMavZnMB8GA1UdIwQY
MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt
NmU0NTI0MjVhMTkzLzEvWHEzU3VNblpVNjJzbXJvUk1wOThVNHhxOW1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz
LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDByBAIAATBsAwQCVdmg
AwQCVdmsAwQCVdm4AwQDWZGgAwQCW1x0AwQCW1yMAwQCW1yYAwQCW1zIAwQBW1zg
AwQAW1zjAwQDXCc4AwQEinzQAwQFl5HAAwQEn2TwAwQFoWjAAwQCuRMcAwQCuZYI
AwQFwragMDoEAgACMDQwDgMFACoEDEEDBQMqBAxAMBIDBwQqB2zAABADBwQqB2zA
AIAwDgMFACoHbMEDBQIqB2zAMA0GCSqGSIb3DQEBCwUAA4IBAQAPhvIikmoAjRUB
l2wUJuX0a/c1qxHzlCCovW5Ev3h9NTeU0OuYctLtp56r6jAkpO4aGs/jW/BqacIA
oAxQIQpGVq96+iH8zvtQlCzh7t8xWd41QSpq7xQi7aMhS957jMT/qZ/FWXD7Skwh
J5BCVPP1F5jaYc6SQMV6WytNam0OFI+co9P6yAuhGsgIboYKb4TVPB7aYr/O60Lb
E/e5hYb7XgPePCslE76gMdzw/Iqb2Hz3cfDCDi5y5dpgOVOW8y0Otj+4E1BseqzE
33/T8iRHgGrVc61jz+6GEw6v+v4lgscT2etjntMZQd8J0P7RGLkywqlre4jwvV3Z
i7JNHwO3
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:09 2026 by rpki-client