Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-X_-sxeer2xly0PcQH-MctXXqoA.roa
File: 1-X_-sxeer2xly0PcQH-MctXXqoA.roa (raw, json)
Hash identifier: 3xjp3afI6Vjm93njQepomh6C8ra+eT1Ze07rs4+D9vo=
Subject key identifier: F9:7F:FE:B3:17:9E:AF:6C:65:CB:43:DC:40:7F:8C:72:D5:D7:AA:80
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019FA8DC90A0CD71293D01B7A3804F7442C2
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-X_-sxeer2xly0PcQH-MctXXqoA.roa
Signing time: Tue 28 Jul 2026 13:14:14 +0000
ROA not before: Tue 28 Jul 2026 13:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.124.0/22 maxlen: 22
45.11.196.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.81.76.0/22 maxlen: 22
45.93.80.0/24 maxlen: 24
45.129.204.0/22 maxlen: 22
45.132.20.0/22 maxlen: 22
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.133.224.0/22 maxlen: 22
45.134.52.0/22 maxlen: 22
45.135.28.0/22 maxlen: 22
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.139.108.0/22 maxlen: 22
45.139.126.0/24 maxlen: 24
45.139.127.0/24 maxlen: 24
45.139.168.0/22 maxlen: 22
45.140.64.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.143.244.0/22 maxlen: 22
45.144.168.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
46.254.110.0/24 maxlen: 24
62.233.34.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
84.246.110.0/24 maxlen: 24
87.236.150.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
91.199.189.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
192.109.91.0/24 maxlen: 24
192.109.100.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
193.107.22.0/24 maxlen: 24
193.187.97.0/24 maxlen: 24
194.104.228.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:dc:90:a0:cd:71:29:3d:01:b7:a3:80:4f:74:42:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 28 13:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f97ffeb3179eaf6c65cb43dc407f8c72d5d7aa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:f4:cd:cb:33:2b:eb:3b:5b:1f:b9:8c:8a:
fe:65:3b:49:2b:33:cc:80:42:92:2a:48:8e:ef:07:
7d:69:cd:99:9e:22:d7:9c:46:1a:f5:36:4d:31:6d:
1e:2e:f8:13:49:e7:17:91:a2:55:45:f0:c5:6a:ee:
87:4e:4f:b1:dd:fc:29:6e:f9:08:b8:a4:21:8b:22:
13:fa:15:c5:e8:1f:26:cb:52:99:d1:60:da:2a:09:
25:a2:5d:c6:d3:14:63:93:56:08:2d:eb:ea:d7:6c:
9a:1a:1d:df:62:6d:01:c3:90:97:b8:c4:c4:d9:b5:
5b:2b:e9:0b:8f:31:a1:b8:0a:25:a7:04:3c:86:98:
b7:9c:31:c2:f4:90:bc:d1:fc:1f:12:28:3d:94:e2:
22:6d:1a:ff:ba:e7:b2:ba:04:2f:4d:c7:b1:38:75:
a1:2b:28:9d:f3:e3:45:a7:23:0b:97:1d:fc:82:4f:
ed:ad:36:ec:28:71:d5:2b:8d:2e:6a:48:bd:a6:df:
79:b6:da:a2:67:59:a0:19:50:c8:af:44:40:70:6e:
43:0f:29:fd:68:ed:0c:66:3c:db:54:70:a6:b7:19:
c7:a1:a4:13:49:52:08:a5:99:5f:22:27:27:8e:a2:
dc:71:2a:7c:44:b1:7e:cc:5c:29:ae:59:7d:9d:d7:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7F:FE:B3:17:9E:AF:6C:65:CB:43:DC:40:7F:8C:72:D5:D7:AA:80
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-X_-sxeer2xly0PcQH-MctXXqoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.216.60.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.124.0/22
45.11.196.0/24
45.15.238.0/24
45.81.76.0/22
45.93.80.0/24
45.129.204.0/22
45.132.20.0/22
45.132.38.0/24
45.132.128.0/23
45.133.224.0/22
45.134.52.0/22
45.135.28.0/22
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.139.108.0/22
45.139.126.0/23
45.139.168.0/22
45.140.64.0/24
45.140.72.0/22
45.143.244.0/22
45.144.168.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
46.254.110.0/24
62.233.34.0/24
62.233.48.0/24
84.246.81.0/24
84.246.110.0/24
87.236.150.0/24
89.107.12.0/24
91.199.189.0/24
91.206.68.0/24
91.236.121.0/24
93.157.111.0/24
93.190.120.0/23
94.124.75.0/24
94.124.77.0/24
176.116.8.0/24
176.116.12.0/24
176.116.24.0/24
176.116.28.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
192.109.91.0/24
192.109.100.0/24
193.5.28.0/24
193.31.4.0/23
193.58.170.0/24
193.107.22.0/24
193.187.97.0/24
194.104.228.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
67:b3:ff:f9:69:36:76:51:30:67:c6:9e:a4:1f:69:35:99:15:
3a:0c:8a:cd:fd:27:d5:bd:ee:be:c9:19:6e:db:89:9f:ae:8c:
dd:51:af:78:40:86:a8:76:f6:e9:02:36:fc:8e:ce:61:01:44:
b0:06:93:a7:ea:6c:64:bb:41:9a:4b:ac:1f:7a:4a:87:67:98:
12:4f:b3:d9:fd:47:d2:dd:a1:46:96:e4:87:4c:2b:58:f1:38:
5c:76:49:3f:a1:4a:df:c2:30:89:4c:3f:1c:a0:5f:b4:94:bb:
91:1b:97:dd:6d:3b:e2:b1:17:95:25:3b:fb:28:b1:ef:ae:52:
ab:0c:cf:a2:3b:8d:57:e8:23:04:e1:e2:9e:3b:db:68:91:3e:
fe:5e:97:cb:63:18:06:7b:e1:5f:9e:d6:a2:3b:90:e9:5c:c2:
b5:3e:bd:4f:4f:9a:d4:37:90:89:38:98:0d:15:7f:50:de:78:
00:96:18:2a:c7:22:8a:be:b3:ae:4f:39:b8:cf:38:20:75:42:
4e:b6:42:0a:26:6f:df:4e:ee:6f:50:d9:12:dc:b9:5d:a5:f8:
f8:a0:4e:af:88:3c:6c:83:b5:20:07:c2:28:5f:61:25:4c:6f:
bd:a5:2c:11:1f:0e:17:26:2a:31:18:37:d9:51:cf:95:75:4e:
fa:85:4d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:14 2026 by rpki-client