Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/C3XzksVeO3QCUyiHs8TOVbMh6Zk.roa
File: C3XzksVeO3QCUyiHs8TOVbMh6Zk.roa (raw, json)
Hash identifier: 4s956pvgUrIUCxJTz4szSri38ghA2yI0vC0ojMLDrf4=
Subject key identifier: 0B:75:F3:92:C5:5E:3B:74:02:53:28:87:B3:C4:CE:55:B3:21:E9:99
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 019ECA8D292C35E72E03192E39E42F2349AD
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/C3XzksVeO3QCUyiHs8TOVbMh6Zk.roa
Signing time: Mon 15 Jun 2026 09:11:49 +0000
ROA not before: Mon 15 Jun 2026 09:11:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
5.182.48.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
45.90.147.0/24 maxlen: 24
45.140.220.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/24 maxlen: 24
85.202.162.0/24 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.186.66.0/24 maxlen: 24
185.227.71.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.29.0/24 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.105.177.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
194.56.227.0/24 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b86:100::/40 maxlen: 48
2a0b:b86:fff0::/44 maxlen: 44
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffc0::/44 maxlen: 44
2a0b:b87:ffd2::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0b:7086:fff0::/44 maxlen: 44
2a0b:7087:fff0::/44 maxlen: 44
2a0d:77c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:8d:29:2c:35:e7:2e:03:19:2e:39:e4:2f:23:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jun 15 09:11:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b75f392c55e3b7402532887b3c4ce55b321e999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:48:dd:51:0f:91:f5:d9:93:25:6c:41:83:
93:f2:1e:32:ef:f8:09:f4:09:a9:47:cb:a8:cd:8e:
c6:a8:2c:3b:53:e2:e3:8a:cd:d8:0e:33:c6:a7:14:
52:0f:e7:e0:01:17:88:3f:c4:8f:c3:09:eb:49:de:
a6:30:04:45:4a:de:7a:6b:cd:01:19:57:30:53:d2:
cf:a6:02:99:81:a2:1b:79:10:06:32:c2:10:43:6a:
cb:69:0b:0f:aa:00:8b:5f:10:99:b0:f9:3b:4d:b1:
8b:a0:6d:cd:6c:dd:fb:76:9c:88:79:e3:b7:23:dd:
e5:13:a9:1b:ab:99:16:e1:0f:e8:aa:7f:0f:f1:69:
8d:68:0e:6f:0d:7b:a9:3d:3b:a8:a4:42:33:ba:4a:
4d:86:65:8e:47:ad:b3:2c:fa:af:78:02:cd:4a:4e:
a3:cc:ae:95:2e:c3:3b:18:2a:bf:f5:23:aa:bc:54:
40:9b:7d:49:44:4e:b9:2c:85:0f:91:8c:8b:33:e0:
d0:2b:24:60:8c:68:eb:56:2b:b0:21:f3:f7:45:e9:
12:4c:ff:04:61:ad:0b:01:0d:45:f8:12:e1:f8:8a:
a6:4c:7d:c0:6d:de:99:b3:e6:dc:34:7c:b4:60:80:
41:23:87:6e:aa:70:18:8e:25:fc:b1:b1:75:76:be:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:75:F3:92:C5:5E:3B:74:02:53:28:87:B3:C4:CE:55:B3:21:E9:99
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/C3XzksVeO3QCUyiHs8TOVbMh6Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/24
45.81.20.0/22
45.90.147.0/24
45.140.220.0/22
77.83.240.0/22
78.108.217.0/24
83.143.116.0/24
85.202.162.0/24
89.190.156.0/22
178.218.144.0/22
185.186.64.0/22
185.227.71.0/24
185.234.72.0/22
185.242.224.0/22
193.31.29.0-193.31.30.255
193.34.76.0/22
193.105.177.0/24
193.221.192.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:1ff:ffff:ffff:ffff:ffff:ffff
2a0b:b86:fff0::/44
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffc0::/44
2a0b:b87:ffd2::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0b:7086:fff0::/44
2a0b:7087:fff0::/44
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:91:d1:c7:5c:4b:55:8d:a7:e2:49:a5:14:8b:bf:03:16:ce:
bd:57:f9:f9:fa:53:1d:7c:46:aa:1a:40:ab:bb:a2:d8:dc:93:
16:9c:86:d8:8b:1d:26:08:5f:fe:b7:7a:3e:47:b2:d3:e5:01:
84:be:eb:b9:fc:50:68:ae:be:f0:50:18:6c:e3:ce:a7:c4:f8:
c5:3a:00:d7:3d:04:b8:12:da:5a:f0:ee:02:71:84:7b:0f:e7:
0b:05:01:ea:25:50:05:94:f5:b8:95:fb:80:a9:50:6f:84:50:
95:a3:53:bd:16:66:3e:9d:a3:4e:e1:7c:9b:b5:dc:59:a9:2b:
c3:0d:ce:06:ea:c9:13:e3:53:42:68:b6:a1:27:6b:96:c0:bf:
49:06:e7:75:1e:2b:b1:b8:81:91:9a:f2:23:8e:e9:1e:63:f4:
77:38:d1:a8:90:db:df:75:70:4f:8d:63:e0:50:a0:c2:16:29:
ec:c5:7b:b1:11:b0:3e:2c:8e:3c:13:9a:db:86:cd:57:35:b8:
7d:8c:65:6a:4f:9b:fe:c4:73:ff:36:33:38:c7:a2:58:ce:39:
ab:8a:02:51:e9:52:03:9a:06:f6:e3:1e:07:7b:fb:18:65:8e:
c7:aa:89:97:fc:9a:20:83:c6:9f:76:67:08:0c:7b:3d:bf:5e:
30:57:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:14:57 2026 by rpki-client