Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/6uNe2yh2-FK6z5wM0lGCmGgJGhw.roa
File: 6uNe2yh2-FK6z5wM0lGCmGgJGhw.roa (raw, json)
Hash identifier: s0Y+PLosYn+p3jedg880c87zsnXHEHvSe+77i9i4cU8=
Subject key identifier: EA:E3:5E:DB:28:76:F8:52:BA:CF:9C:0C:D2:51:82:98:68:09:1A:1C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019FA8A94A4BC23E807DEA6111175879B209
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/6uNe2yh2-FK6z5wM0lGCmGgJGhw.roa
Signing time: Tue 28 Jul 2026 12:18:14 +0000
ROA not before: Tue 28 Jul 2026 12:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 31.216.57.0/24 maxlen: 24
31.216.63.0/24 maxlen: 24
37.221.81.0/24 maxlen: 24
45.11.196.0/24 maxlen: 24
46.254.110.0/24 maxlen: 24
62.192.137.0/24 maxlen: 24
62.192.138.0/24 maxlen: 24
62.233.34.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
77.87.120.0/24 maxlen: 24
84.246.84.0/24 maxlen: 24
84.246.86.0/24 maxlen: 24
84.246.87.0/24 maxlen: 24
84.246.106.0/24 maxlen: 24
84.246.109.0/24 maxlen: 24
87.236.150.0/24 maxlen: 24
87.236.151.0/24 maxlen: 24
88.151.15.0/24 maxlen: 24
89.107.14.0/24 maxlen: 24
89.107.15.0/24 maxlen: 24
89.248.70.0/24 maxlen: 24
91.190.153.0/24 maxlen: 24
91.199.189.0/24 maxlen: 24
91.220.198.0/24 maxlen: 24
91.246.34.0/24 maxlen: 24
91.246.48.0/24 maxlen: 24
91.246.53.0/24 maxlen: 24
91.246.54.0/24 maxlen: 24
91.247.161.0/24 maxlen: 24
91.247.162.0/24 maxlen: 24
91.247.165.0/24 maxlen: 24
91.247.166.0/24 maxlen: 24
91.247.167.0/24 maxlen: 24
91.247.173.0/24 maxlen: 24
91.247.183.0/24 maxlen: 24
93.157.104.0/24 maxlen: 24
93.157.109.0/24 maxlen: 24
109.94.161.0/24 maxlen: 24
109.94.163.0/24 maxlen: 24
109.107.136.0/24 maxlen: 24
109.107.141.0/24 maxlen: 24
109.107.142.0/24 maxlen: 24
109.107.144.0/24 maxlen: 24
109.107.147.0/24 maxlen: 24
109.107.148.0/24 maxlen: 24
109.205.184.0/24 maxlen: 24
109.205.188.0/24 maxlen: 24
176.97.199.0/24 maxlen: 24
176.97.203.0/24 maxlen: 24
176.97.208.0/24 maxlen: 24
176.97.222.0/24 maxlen: 24
176.97.223.0/24 maxlen: 24
176.116.3.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.107.22.0/24 maxlen: 24
193.160.219.0/24 maxlen: 24
193.163.22.0/24 maxlen: 24
193.187.97.0/24 maxlen: 24
194.26.134.0/24 maxlen: 24
194.26.224.0/24 maxlen: 24
194.26.227.0/24 maxlen: 24
194.104.228.0/24 maxlen: 24
194.105.60.0/24 maxlen: 24
194.107.92.0/24 maxlen: 24
195.88.220.0/24 maxlen: 24
195.96.144.0/24 maxlen: 24
195.96.147.0/24 maxlen: 24
195.96.154.0/24 maxlen: 24
212.18.126.0/24 maxlen: 24
212.52.25.0/24 maxlen: 24
212.52.26.0/24 maxlen: 24
213.217.11.0/24 maxlen: 24
217.198.176.0/24 maxlen: 24
217.198.178.0/24 maxlen: 24
217.198.179.0/24 maxlen: 24
217.198.180.0/24 maxlen: 24
217.198.181.0/24 maxlen: 24
217.198.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:a9:4a:4b:c2:3e:80:7d:ea:61:11:17:58:79:b2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 28 12:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eae35edb2876f852bacf9c0cd251829868091a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:26:ea:7b:04:a5:df:1c:d2:fb:00:19:a5:
26:ba:7a:e2:54:6d:87:39:8e:20:16:dc:00:ce:ea:
0e:ce:35:28:81:dd:63:83:41:6e:80:73:09:60:2b:
8a:ae:54:f1:d4:ef:3f:bf:12:6e:b4:df:43:15:9f:
fe:53:8c:04:51:5f:83:3b:73:ff:0d:8e:40:94:70:
34:9d:01:f7:b0:0b:f5:0f:b1:f8:d7:60:31:fe:51:
c3:07:69:39:8d:2f:4d:d5:94:93:9e:3c:64:29:c5:
3a:cf:e6:06:9f:fe:c2:4e:f3:ca:80:c6:6d:f2:65:
39:18:93:71:6b:0b:69:7e:d5:21:bf:ea:42:28:89:
69:15:ae:b1:71:f0:e4:60:14:c0:07:00:6c:cf:8d:
bf:99:49:3f:ba:e2:c1:19:44:f6:d2:ac:67:0a:cc:
50:36:30:2d:c5:46:51:80:d2:0d:01:ad:25:94:68:
d0:a4:85:44:b5:11:ba:2b:22:23:70:b2:ef:ee:45:
38:23:3b:0e:d6:6f:07:7c:8f:41:1c:9d:de:ba:17:
a5:08:a7:4e:f6:a6:c3:c6:a4:d4:91:12:33:c5:62:
9c:1e:35:9c:1b:10:d0:8c:98:a8:44:dd:ae:67:8d:
9f:d3:cc:7f:fa:ae:d7:23:68:7a:fb:95:8d:1d:43:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E3:5E:DB:28:76:F8:52:BA:CF:9C:0C:D2:51:82:98:68:09:1A:1C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/6uNe2yh2-FK6z5wM0lGCmGgJGhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.57.0/24
31.216.63.0/24
37.221.81.0/24
45.11.196.0/24
46.254.110.0/24
62.192.137.0-62.192.138.255
62.233.34.0/24
62.233.48.0/24
77.87.120.0/24
84.246.84.0/24
84.246.86.0/23
84.246.106.0/24
84.246.109.0/24
87.236.150.0/23
88.151.15.0/24
89.107.14.0/23
89.248.70.0/24
91.190.153.0/24
91.199.189.0/24
91.220.198.0/24
91.246.34.0/24
91.246.48.0/24
91.246.53.0-91.246.54.255
91.247.161.0-91.247.162.255
91.247.165.0-91.247.167.255
91.247.173.0/24
91.247.183.0/24
93.157.104.0/24
93.157.109.0/24
109.94.161.0/24
109.94.163.0/24
109.107.136.0/24
109.107.141.0-109.107.142.255
109.107.144.0/24
109.107.147.0-109.107.148.255
109.205.184.0/24
109.205.188.0/24
176.97.199.0/24
176.97.203.0/24
176.97.208.0/24
176.97.222.0/23
176.116.3.0/24
176.116.12.0/24
185.188.41.0/24
193.5.28.0/24
193.31.4.0/24
193.107.22.0/24
193.160.219.0/24
193.163.22.0/24
193.187.97.0/24
194.26.134.0/24
194.26.224.0/24
194.26.227.0/24
194.104.228.0/24
194.105.60.0/24
194.107.92.0/24
195.88.220.0/24
195.96.144.0/24
195.96.147.0/24
195.96.154.0/24
212.18.126.0/24
212.52.25.0-212.52.26.255
213.217.11.0/24
217.198.176.0/24
217.198.178.0-217.198.182.255
Signature Algorithm: sha256WithRSAEncryption
8e:5c:8b:3c:86:5b:d5:4f:07:46:43:1c:ee:bf:14:c6:43:6e:
67:65:9d:27:f0:03:70:5e:6f:ee:36:f5:55:b5:a0:07:70:0e:
8b:20:3f:ef:e5:8b:6b:bd:e0:c8:12:15:03:2d:f5:59:2f:b5:
18:2b:ae:74:6c:b5:0a:22:0c:a5:6c:fb:a2:e1:b1:2e:ab:f9:
1d:f3:48:f8:1c:88:56:3f:a3:8a:8b:b7:4c:28:a8:88:06:1f:
92:e5:67:35:90:43:c5:0a:d8:60:dd:f6:29:6d:9c:1d:0a:e0:
7a:6c:ff:67:ed:04:1f:de:26:d2:b0:41:71:1a:26:11:bd:76:
97:ef:28:49:dc:19:bb:c9:69:5c:18:61:ea:e5:41:73:46:4d:
64:fd:68:3c:c4:87:af:9d:7a:bc:0f:ac:22:e0:95:d3:03:3b:
b8:22:c8:f6:84:f1:ae:e8:4b:ce:c8:d1:75:91:32:29:60:b4:
3b:1c:13:69:26:4f:17:bf:fd:74:e9:dc:14:79:9c:59:99:e7:
16:5b:a7:c4:e5:dc:03:8c:4e:d3:a0:9a:f7:cf:a3:38:6a:e0:
c4:31:7f:c7:ad:4f:9b:5c:cb:80:44:ee:18:9c:a0:12:8d:36:
a1:dd:92:c0:88:d4:ef:1f:4f:be:c7:d4:7c:a7:c2:e5:51:7a:
78:d6:90:74
-----BEGIN CERTIFICATE-----
MIIGxzCCBa+gAwIBAgISAZ+oqUpLwj6AfephERdYebIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjYwNzI4MTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWUzNWVkYjI4NzZmODUyYmFjZjljMGNkMjUxODI5ODY4MDkxYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnEm6nsEpd8c0vsAGaUmunriVG2H
OY4gFtwAzuoOzjUogd1jg0FugHMJYCuKrlTx1O8/vxJutN9DFZ/+U4wEUV+DO3P/
DY5AlHA0nQH3sAv1D7H412Ax/lHDB2k5jS9N1ZSTnjxkKcU6z+YGn/7CTvPKgMZt
8mU5GJNxawtpftUhv+pCKIlpFa6xcfDkYBTABwBsz42/mUk/uuLBGUT20qxnCsxQ
NjAtxUZRgNINAa0llGjQpIVEtRG6KyIjcLLv7kU4IzsO1m8HfI9BHJ3euhelCKdO
9qbDxqTUkRIzxWKcHjWcGxDQjJioRN2uZ42f08x/+q7XI2h6+5WNHUMSPQIDAQAB
o4ID0zCCA88wHQYDVR0OBBYEFOrjXtsodvhSus+cDNJRgphoCRocMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvNnVOZTJ5aDItRks2ejV3TTBsR0NtR2dKR2h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB5wYIKwYBBQUHAQcBAf8EggHWMIIB0jCCAc4EAgABMIIB
xgMEAB/YOQMEAB/YPwMEACXdUQMEAC0LxAMEAC7+bjAMAwQAPsCJAwQAPsCKAwQA
PukiAwQAPukwAwQATVd4AwQAVPZUAwQBVPZWAwQAVPZqAwQAVPZtAwQBV+yWAwQA
WJcPAwQBWWsOAwQAWfhGAwQAW76ZAwQAW8e9AwQAW9zGAwQAW/YiAwQAW/YwMAwD
BABb9jUDBABb9jYwDAMEAFv3oQMEAFv3ojAMAwQAW/elAwQDW/egAwQAW/etAwQA
W/e3AwQAXZ1oAwQAXZ1tAwQAbV6hAwQAbV6jAwQAbWuIMAwDBABta40DBABta44D
BABta5AwDAMEAG1rkwMEAG1rlAMEAG3NuAMEAG3NvAMEALBhxwMEALBhywMEALBh
0AMEAbBh3gMEALB0AwMEALB0DAMEALm8KQMEAMEFHAMEAMEfBAMEAMFrFgMEAMGg
2wMEAMGjFgMEAMG7YQMEAMIahgMEAMIa4AMEAMIa4wMEAMJo5AMEAMJpPAMEAMJr
XAMEAMNY3AMEAMNgkAMEAMNgkwMEAMNgmgMEANQSfjAMAwQA1DQZAwQA1DQaAwQA
1dkLAwQA2cawMAwDBAHZxrIDBADZxrYwDQYJKoZIhvcNAQELBQADggEBAI5cizyG
W9VPB0ZDHO6/FMZDbmdlnSfwA3Beb+429VW1oAdwDosgP+/li2u94MgSFQMt9Vkv
tRgrrnRstQoiDKVs+6LhsS6r+R3zSPgciFY/o4qLt0woqIgGH5LlZzWQQ8UK2GDd
9iltnB0K4Hps/2ftBB/eJtKwQXEaJhG9dpfvKEncGbvJaVwYYerlQXNGTWT9aDzE
h6+derwPrCLgldMDO7giyPaE8a7oS87I0XWRMilgtDscE2kmTxe//XTp3BR5nFmZ
5xZbp8Tl3AOMTtOgmvfPozhq4MQxf8etT5tcy4BE7hicoBKNNqHdksCI1O8fT77H
1HynwuVRenjWkHQ=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:45 2026 by rpki-client