Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/chNBYIE4gA8jrWAxZUlShBGqlPs.roa
File: chNBYIE4gA8jrWAxZUlShBGqlPs.roa (raw, json)
Hash identifier: qmmZ4LhW1qkM2Wcq2XSopnjfKwBuiAKH7aTKlWJ/VMA=
Subject key identifier: 72:13:41:60:81:38:80:0F:23:AD:60:31:65:49:52:84:11:AA:94:FB
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019E6E27424152D1E080506F02CB11D215AD
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/chNBYIE4gA8jrWAxZUlShBGqlPs.roa
Signing time: Thu 28 May 2026 10:35:27 +0000
ROA not before: Thu 28 May 2026 10:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29314
IP address blocks: 31.6.128.0/18 maxlen: 18
31.6.192.0/19 maxlen: 19
31.6.218.0/24 maxlen: 24
31.42.16.0/20 maxlen: 20
37.131.128.0/19 maxlen: 19
37.131.128.0/20 maxlen: 20
37.131.144.0/20 maxlen: 20
37.190.128.0/17 maxlen: 17
37.190.144.0/20 maxlen: 20
37.190.224.0/20 maxlen: 20
46.186.48.0/20 maxlen: 20
46.186.64.0/19 maxlen: 19
62.61.32.0/19 maxlen: 19
62.141.192.0/18 maxlen: 18
62.141.224.0/20 maxlen: 20
80.244.128.0/19 maxlen: 19
80.245.176.0/20 maxlen: 20
81.190.0.0/16 maxlen: 16
82.115.64.0/19 maxlen: 19
83.68.64.0/19 maxlen: 19
84.38.80.0/20 maxlen: 20
85.117.0.0/19 maxlen: 19
87.116.192.0/18 maxlen: 18
89.17.224.0/19 maxlen: 19
89.228.0.0/16 maxlen: 16
89.229.0.0/16 maxlen: 16
89.229.32.0/20 maxlen: 20
89.229.64.0/19 maxlen: 19
89.229.192.0/20 maxlen: 20
89.230.0.0/16 maxlen: 16
89.231.0.0/16 maxlen: 16
89.231.96.0/19 maxlen: 19
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
94.78.128.0/18 maxlen: 18
94.251.128.0/17 maxlen: 17
94.251.168.0/24 maxlen: 24
95.129.224.0/21 maxlen: 21
95.174.32.0/19 maxlen: 19
176.107.112.0/21 maxlen: 21
176.221.96.0/19 maxlen: 19
185.31.184.0/22 maxlen: 22
193.43.240.0/22 maxlen: 22
193.106.76.0/22 maxlen: 22
193.200.118.0/23 maxlen: 23
194.116.132.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
195.93.134.0/23 maxlen: 23
195.93.222.0/23 maxlen: 23
213.136.224.0/19 maxlen: 19
217.70.48.0/20 maxlen: 20
217.75.48.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
217.172.224.0/19 maxlen: 19
2a00:bde0::/34 maxlen: 34
2a00:bde0:4000::/34 maxlen: 34
2a00:bde0:8000::/34 maxlen: 34
2a00:bde0:c000::/34 maxlen: 34
2a02:2a40::/32 maxlen: 32
2a02:2a40::/34 maxlen: 34
2a02:2a40:4000::/34 maxlen: 34
2a02:2a40:8000::/34 maxlen: 34
2a02:2a40:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:27:42:41:52:d1:e0:80:50:6f:02:cb:11:d2:15:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: May 28 10:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=721341608138800f23ad60316549528411aa94fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:a0:a8:53:e5:03:53:c5:14:3f:d1:7e:a5:
9a:3d:46:06:b4:c8:5a:ff:87:ee:49:8f:15:00:71:
89:20:68:b7:55:81:fe:aa:69:80:81:fe:17:01:c4:
7e:bf:5e:75:de:e1:c3:93:c6:81:5f:01:0b:69:d9:
03:2f:35:8b:25:31:bc:c3:c5:1a:53:de:2c:41:fa:
3e:92:70:58:09:0a:64:d8:da:59:87:9b:f5:b1:e4:
5d:2a:cf:36:c5:54:37:c1:2c:86:a0:a1:b0:a6:59:
1f:fe:7c:99:cc:69:59:8b:40:2d:cc:e5:d3:40:bd:
0c:92:a9:3b:3c:7a:29:99:3f:a9:49:e9:19:39:9c:
65:64:a2:a4:7e:c1:5b:ac:4e:20:66:38:7a:e0:79:
5d:c2:58:16:d2:31:be:f0:fc:44:25:ee:2a:bc:e1:
90:c3:92:12:1d:0a:3c:71:18:c0:9d:e0:60:2b:14:
4e:1e:36:ea:c2:19:fc:d6:ea:84:83:37:43:5d:5b:
84:5b:cc:ef:fe:69:59:ad:2a:d4:38:2c:76:06:51:
43:d6:9a:fc:74:27:28:23:98:dc:fb:b3:4e:c7:ee:
ed:83:b3:e2:f2:83:87:62:2e:b7:f4:5a:9d:be:23:
e7:d7:7c:4b:13:9a:15:9f:0f:55:57:a5:a9:2e:9c:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:13:41:60:81:38:80:0F:23:AD:60:31:65:49:52:84:11:AA:94:FB
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/chNBYIE4gA8jrWAxZUlShBGqlPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.48.0-46.186.95.255
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
IPv6:
2a00:bde0::/32
2a02:2a40::/32
Signature Algorithm: sha256WithRSAEncryption
3e:cb:fe:9e:a7:12:f8:53:d9:57:5c:e2:36:f5:b7:17:99:77:
d2:bd:7c:61:bb:30:c9:d3:07:53:8c:df:49:e5:9e:11:6d:55:
10:76:65:27:07:e8:37:b9:2c:b8:82:21:9c:9c:72:af:53:e3:
08:2f:a1:be:87:ff:1b:64:25:72:74:ab:5e:53:f9:38:d7:ea:
d9:a4:91:0c:32:b5:84:3f:0c:fd:97:f2:a6:9f:81:1b:e8:04:
1d:9f:65:39:da:3a:44:55:9b:f6:fb:69:6b:ef:ba:f3:fe:16:
c6:79:00:c1:b1:e4:a0:61:06:18:e3:ff:bc:66:ee:22:ed:89:
21:03:84:e9:3e:32:fc:65:0e:20:39:86:54:fa:b4:20:8f:57:
19:13:38:14:df:8d:69:5d:2d:74:a5:ed:58:05:e0:66:ee:fe:
0f:f1:43:e8:6f:7f:9d:49:82:b5:e1:b1:66:8d:02:e2:a0:70:
22:57:2b:08:60:9a:22:38:8e:6e:ba:0c:c3:f8:91:d5:cf:c8:
e1:9e:73:e6:fb:89:6c:65:1c:db:63:d4:e6:30:29:9f:6e:1d:
50:18:55:26:8c:fe:22:37:10:4a:0d:fb:5e:75:aa:8d:76:d6:
f9:23:93:26:61:a9:73:7f:b0:df:85:6d:34:20:d1:9d:90:5a:
64:8b:81:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:15:52 2026 by rpki-client