Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1if2l0vuSUyA8aKOlZRwZBTqr58.roa
File: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (raw, json)
Hash identifier: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=
Subject key identifier: D6:27:F6:97:4B:EE:49:4C:80:F1:A2:8E:95:94:70:64:14:EA:AF:9F
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019BFF66DE5F409E2FCEB5922637067964AB
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1if2l0vuSUyA8aKOlZRwZBTqr58.roa
Signing time: Tue 27 Jan 2026 12:21:30 +0000
ROA not before: Tue 27 Jan 2026 12:21:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20857
IP address blocks: 5.61.248.0/21 maxlen: 24
31.3.96.0/22 maxlen: 24
31.3.101.0/24 maxlen: 24
31.3.102.0/23 maxlen: 24
31.14.96.0/22 maxlen: 24
37.34.48.0/21 maxlen: 24
37.34.56.0/21 maxlen: 24
37.97.128.0/17 maxlen: 24
37.230.96.0/21 maxlen: 24
77.72.144.0/21 maxlen: 24
79.170.88.0/24 maxlen: 24
79.170.90.0/23 maxlen: 24
79.170.93.0/24 maxlen: 24
79.170.94.0/23 maxlen: 24
80.69.64.0/19 maxlen: 24
84.247.8.0/21 maxlen: 24
85.10.128.0/19 maxlen: 24
85.222.228.0/22 maxlen: 24
86.105.244.0/22 maxlen: 24
87.253.128.0/19 maxlen: 24
89.31.96.0/23 maxlen: 24
89.31.100.0/24 maxlen: 24
89.31.102.0/23 maxlen: 24
89.41.168.0/22 maxlen: 24
91.142.254.0/23 maxlen: 23
93.119.0.0/20 maxlen: 24
93.191.128.0/22 maxlen: 24
93.191.132.0/23 maxlen: 24
95.170.64.0/19 maxlen: 24
136.144.128.0/17 maxlen: 24
141.138.136.0/21 maxlen: 24
141.138.192.0/21 maxlen: 24
141.138.200.0/22 maxlen: 24
141.138.204.0/23 maxlen: 24
141.138.206.0/24 maxlen: 24
149.210.128.0/17 maxlen: 24
157.97.168.0/22 maxlen: 24
178.18.80.0/20 maxlen: 24
185.10.48.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
185.96.4.0/22 maxlen: 24
185.108.112.0/22 maxlen: 24
188.240.52.0/22 maxlen: 22
188.241.148.0/22 maxlen: 22
193.138.204.0/24 maxlen: 24
195.8.195.0/24 maxlen: 24
195.135.195.0/24 maxlen: 24
2a01:7c8::/32 maxlen: 32
2a01:7c8:7000::/36 maxlen: 36
2a01:7c8:d000::/36 maxlen: 36
2a01:7c8:e000::/36 maxlen: 36
2a01:7860::/32 maxlen: 32
2a02:348:3::/48 maxlen: 48
2a02:348:33::/48 maxlen: 48
2a02:348:35::/48 maxlen: 48
2a02:348:36::/48 maxlen: 48
2a02:348:39::/48 maxlen: 48
2a02:348:3a::/48 maxlen: 48
2a02:348:3b::/48 maxlen: 48
2a02:348:40::/42 maxlen: 48
2a02:348:80::/43 maxlen: 48
2a02:348:a0::/45 maxlen: 48
2a02:348:b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:66:de:5f:40:9e:2f:ce:b5:92:26:37:06:79:64:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 27 12:21:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d627f6974bee494c80f1a28e9594706414eaaf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6e:19:c1:1e:5a:4e:c3:5c:7c:e2:19:1d:ea:
c1:ec:bb:a4:39:1b:b9:47:37:56:ba:6a:13:c8:5b:
b2:52:56:83:f5:13:c6:df:a2:f7:4f:53:e1:5b:ea:
c9:70:29:ff:45:43:18:1d:f3:90:75:3a:99:43:58:
d0:e9:38:67:45:6d:98:be:67:89:57:b9:a4:3c:9c:
41:5c:79:24:7e:9e:5e:3c:e4:56:96:4e:ae:08:8d:
ab:1f:8a:dd:87:33:0e:fa:61:96:75:a7:9b:1f:ba:
c0:85:a3:1d:42:1a:00:04:ee:fd:e6:c0:9d:f4:12:
86:82:e8:fd:e9:d2:b7:f5:44:01:52:b4:5c:89:53:
62:66:d0:27:b4:aa:04:94:0a:e3:fc:0f:e5:4b:1b:
1d:81:15:ed:54:81:57:e1:86:ff:eb:89:39:3d:66:
48:2e:c3:ac:24:62:d8:e2:1b:ad:72:01:89:85:a2:
9a:b8:6b:9b:54:07:ad:ed:e4:0c:85:5e:7b:e8:c4:
52:0d:a8:26:76:09:f8:a7:93:28:6b:02:84:4b:f7:
d9:51:6e:26:37:c8:e5:e5:bb:b0:0f:08:b5:db:ba:
e8:9f:67:d3:89:cc:56:52:41:40:7a:4b:ac:26:a5:
d6:72:00:e9:14:bb:f5:ed:d0:63:58:f6:c6:db:b9:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:27:F6:97:4B:EE:49:4C:80:F1:A2:8E:95:94:70:64:14:EA:AF:9F
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1if2l0vuSUyA8aKOlZRwZBTqr58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.248.0/21
31.3.96.0/22
31.3.101.0-31.3.103.255
31.14.96.0/22
37.34.48.0/20
37.97.128.0/17
37.230.96.0/21
77.72.144.0/21
79.170.88.0/24
79.170.90.0/23
79.170.93.0-79.170.95.255
80.69.64.0/19
84.247.8.0/21
85.10.128.0/19
85.222.228.0/22
86.105.244.0/22
87.253.128.0/19
89.31.96.0/23
89.31.100.0/24
89.31.102.0/23
89.41.168.0/22
91.142.254.0/23
93.119.0.0/20
93.191.128.0-93.191.133.255
95.170.64.0/19
136.144.128.0/17
141.138.136.0/21
141.138.192.0-141.138.206.255
149.210.128.0/17
157.97.168.0/22
178.18.80.0/20
185.10.48.0/22
185.21.188.0/22
185.96.4.0/22
185.108.112.0/22
188.240.52.0/22
188.241.148.0/22
193.138.204.0/24
195.8.195.0/24
195.135.195.0/24
IPv6:
2a01:7c8::/32
2a01:7860::/32
2a02:348:3::/48
2a02:348:33::/48
2a02:348:35::-2a02:348:36:ffff:ffff:ffff:ffff:ffff
2a02:348:39::-2a02:348:3b:ffff:ffff:ffff:ffff:ffff
2a02:348:40::-2a02:348:a7:ffff:ffff:ffff:ffff:ffff
2a02:348:b0::/44
Signature Algorithm: sha256WithRSAEncryption
ce:a7:0a:53:1d:b0:f1:06:19:9b:e5:d0:58:c4:5a:91:de:09:
f0:cf:f0:c8:b3:90:08:bd:53:9a:43:09:c5:e8:92:dd:c8:e2:
f7:72:b1:d7:f3:47:98:a4:fe:f8:39:46:d6:3c:15:75:6d:24:
cf:08:1a:71:b3:53:1e:c4:3d:b3:be:1a:7e:c3:02:8f:96:54:
c9:e9:bf:32:16:b7:29:a4:0c:d5:90:b8:95:e8:14:bf:eb:85:
f4:14:1b:52:3b:83:30:92:36:ef:7a:0c:29:0f:ae:89:d3:0d:
ef:4e:43:00:3b:e6:d5:28:8a:d2:33:59:bb:2e:9b:3a:f7:0b:
01:f0:53:21:71:e6:1c:b4:90:04:20:44:4f:cc:b5:b5:6b:f6:
20:d6:f3:87:b1:05:36:72:3d:52:80:b6:1a:bf:fe:9d:9e:97:
1c:e6:84:f6:b9:f6:94:89:22:0f:8d:2d:53:e5:2f:41:b3:2f:
ee:bd:44:05:91:f5:b7:ee:32:52:d5:17:11:17:0b:b4:3d:5a:
7e:a8:08:8f:30:d8:81:d3:58:23:e9:ea:79:35:20:92:b5:16:
69:4e:4a:d0:22:6b:74:34:f1:32:3b:e2:ea:da:2c:22:09:fd:
19:2e:53:5e:4f:81:9c:8c:e7:48:bb:17:70:e5:fc:fa:d4:19:
d8:40:f7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:58:58 2026 by rpki-client