Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/R2xSj4d2R34LInafdlB_bgHs8rY.roa
File: R2xSj4d2R34LInafdlB_bgHs8rY.roa (raw, json)
Hash identifier: +3JZnmMyqxiWEIJYvEv4BlQNNC2weJf8ELJ3tr8gckg=
Subject key identifier: 47:6C:52:8F:87:76:47:7E:0B:22:76:9F:76:50:7F:6E:01:EC:F2:B6
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019D872940121041CCEFC578684E75B599EF
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/R2xSj4d2R34LInafdlB_bgHs8rY.roa
Signing time: Mon 13 Apr 2026 14:05:20 +0000
ROA not before: Mon 13 Apr 2026 14:05:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.68.83.0/24 maxlen: 24
62.68.86.0/24 maxlen: 24
62.68.87.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.204.57.0/24 maxlen: 24
62.233.35.0/24 maxlen: 24
62.233.45.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.68.145.0/24 maxlen: 24
80.68.158.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.213.117.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
93.177.104.0/24 maxlen: 24
93.177.107.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.187.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.155.101.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
185.232.47.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.141.53.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.64.114.0/24 maxlen: 24
195.93.249.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.18.96.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:29:40:12:10:41:cc:ef:c5:78:68:4e:75:b5:99:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Apr 13 14:05:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=476c528f8776477e0b22769f76507f6e01ecf2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:43:ee:1a:85:fc:df:96:80:b2:63:8d:c1:
c8:89:03:5b:a6:9c:f9:ac:8c:9a:94:f0:70:40:fb:
bb:e2:02:35:b2:cb:ac:68:f7:b1:82:06:d5:75:ad:
08:4a:3a:e9:31:33:d5:e9:eb:e9:56:f8:db:cd:d9:
97:ff:11:fb:77:03:53:f1:22:9f:00:20:c5:79:10:
65:2c:8b:04:0c:a4:8a:a0:56:bb:2a:03:1e:09:a2:
7f:34:cd:d7:11:22:ae:60:58:a9:b3:0c:a1:e2:e4:
14:e3:94:8a:10:b5:e2:f3:06:d6:b1:03:80:01:f7:
20:f9:19:da:e5:53:45:a5:2b:ad:c9:d5:c9:ad:d0:
2c:70:23:f0:aa:17:b8:25:af:cb:76:45:15:d9:65:
a6:e2:3f:7a:1a:2d:aa:ee:8d:06:1d:34:48:dc:69:
e5:d9:c2:a7:57:01:bb:e2:45:1d:fa:1e:bc:6c:96:
be:a8:33:84:fa:c2:a4:f6:43:a6:7d:f7:4c:ec:2a:
6e:b4:9e:7b:9b:99:01:f0:c7:b4:bb:f9:c7:81:ad:
3a:1a:e9:c3:e3:3f:07:b7:71:34:03:0d:4a:82:38:
29:4d:3d:0a:b8:b1:10:1c:58:93:cb:7e:c7:51:1d:
62:40:4d:b8:45:bd:3c:e8:49:d1:13:c5:0b:09:32:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6C:52:8F:87:76:47:7E:0B:22:76:9F:76:50:7F:6E:01:EC:F2:B6
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/R2xSj4d2R34LInafdlB_bgHs8rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
45.132.48.0/24
45.157.136.0/24
62.68.83.0/24
62.68.86.0/23
62.204.36.0/24
62.204.57.0/24
62.233.35.0/24
62.233.45.0/24
62.233.49.0/24
62.233.56.0/24
62.233.60.0/24
80.68.145.0/24
80.68.158.0/24
80.91.209.0-80.91.210.255
91.213.117.0/24
91.226.247.0/24
93.177.104.0/24
93.177.107.0/24
94.143.226.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
146.19.148.0/24
146.19.150.0/24
146.19.152.0/24
146.19.187.0/24
146.19.190.0/24
176.56.38.0/24
185.122.206.0/24
185.155.101.0/24
185.218.1.0/24
185.232.47.0/24
193.3.22.0/24
193.141.53.0/24
193.239.209.0/24
195.64.112.0/24
195.64.114.0/24
195.93.249.0/24
195.96.136.0/24
195.96.157.0/24
212.18.96.0/24
212.52.5.0/24
217.114.32.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:cb:60:7d:01:fc:1e:be:2f:8e:c1:b0:f0:f4:54:ec:58:da:
5d:12:00:44:ee:f9:e4:49:72:81:7e:1f:cc:e1:a1:08:e5:e7:
a8:b7:ee:71:24:12:35:b5:a6:62:c7:4f:fe:18:d6:36:c1:0e:
cc:8e:e4:e7:6a:45:d3:f9:0b:65:97:5e:90:b8:00:28:e0:ea:
0c:2c:a3:1b:60:f9:01:ee:87:3c:de:eb:a5:4f:61:10:b3:95:
6c:fe:71:82:63:e4:8a:91:bf:45:f0:a9:b5:c5:31:3e:04:c9:
f5:1d:3d:ee:40:0f:5b:19:4f:de:44:a1:9d:0f:32:e2:0b:1c:
03:c7:32:57:bf:a6:76:89:3a:cf:75:f5:b0:09:69:70:8d:7d:
e4:68:c9:bc:2f:6c:f2:6c:6c:db:0d:8a:94:df:ab:33:be:6d:
41:ef:3c:c9:b1:1d:cf:61:f1:0a:26:80:dc:70:95:d6:7f:cd:
49:f4:80:b7:fa:39:44:de:29:de:ab:4a:d8:ef:86:8c:a5:3f:
1d:bd:85:bc:f6:38:11:f1:6c:ab:17:c6:6e:b7:0b:01:0f:80:
1a:a7:29:39:86:13:cc:c3:14:5a:f7:f6:0a:29:b1:bb:b1:8e:
ff:3f:b6:d7:58:bd:47:d0:f3:fb:99:78:45:ee:66:4d:9c:96:
29:76:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:24 2026 by rpki-client