Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/_LP6N6ZaIa26-ZH-hR5mkpx7NSE.roa
File: _LP6N6ZaIa26-ZH-hR5mkpx7NSE.roa (raw, json)
Hash identifier: Ugud4R4xgeTQ8hANZM4eTGGsOoj/8EwSSwfKeJ7wvA4=
Subject key identifier: FC:B3:FA:37:A6:5A:21:AD:BA:F9:91:FE:85:1E:66:92:9C:7B:35:21
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019EBB925C5DD1C66E216E33BA8033BD97AD
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/_LP6N6ZaIa26-ZH-hR5mkpx7NSE.roa
Signing time: Fri 12 Jun 2026 11:23:11 +0000
ROA not before: Fri 12 Jun 2026 11:23:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49685
IP address blocks: 31.3.8.0/21 maxlen: 24
31.223.160.0/20 maxlen: 24
37.17.208.0/20 maxlen: 24
46.226.56.0/21 maxlen: 24
78.108.128.0/20 maxlen: 24
80.84.224.0/19 maxlen: 24
80.246.192.0/20 maxlen: 24
80.255.240.0/20 maxlen: 24
81.4.64.0/20 maxlen: 24
81.4.80.0/22 maxlen: 24
81.4.88.0/21 maxlen: 24
81.4.96.0/22 maxlen: 24
81.4.112.0/21 maxlen: 24
81.21.136.0/21 maxlen: 24
81.30.32.0/20 maxlen: 24
83.96.128.0/18 maxlen: 24
83.96.192.0/21 maxlen: 24
83.96.208.0/22 maxlen: 24
83.96.224.0/21 maxlen: 24
83.96.232.0/22 maxlen: 24
83.96.248.0/22 maxlen: 24
85.10.171.0/24 maxlen: 24
85.10.172.0/22 maxlen: 24
85.158.248.0/22 maxlen: 24
85.158.252.0/23 maxlen: 24
91.142.240.0/21 maxlen: 24
91.142.252.0/23 maxlen: 24
91.189.208.0/22 maxlen: 24
91.205.32.0/22 maxlen: 24
94.142.208.0/21 maxlen: 24
141.255.176.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
171.33.128.0/21 maxlen: 24
176.74.224.0/19 maxlen: 24
185.15.248.0/22 maxlen: 24
185.65.52.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.89.152.0/22 maxlen: 24
185.95.68.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
193.242.119.0/24 maxlen: 24
217.21.240.0/20 maxlen: 24
217.149.128.0/20 maxlen: 24
2001:828::/32 maxlen: 48
2001:4cb8::/29 maxlen: 48
2a00:c080::/32 maxlen: 48
2a03:4f00::/32 maxlen: 48
2a03:5700::/32 maxlen: 48
2a05:2500::/32 maxlen: 48
2a05:a282::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:92:5c:5d:d1:c6:6e:21:6e:33:ba:80:33:bd:97:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jun 12 11:23:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcb3fa37a65a21adbaf991fe851e66929c7b3521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2e:a3:1e:3b:f4:34:6d:33:98:f4:46:32:08:
10:c6:3e:d5:22:9f:a2:17:13:29:40:70:47:ee:8e:
4c:a6:c5:6e:6e:62:b1:b6:a6:a7:15:42:52:26:7f:
7d:b7:f3:63:e3:92:5e:11:6c:5f:c5:7a:2b:78:7a:
7f:61:0e:41:b0:dc:35:b6:49:c8:ea:d5:be:a8:f4:
4d:08:97:1e:6a:0d:9d:e6:1c:a0:2b:9e:c4:39:36:
06:bc:b1:50:4e:46:e0:aa:a1:da:70:7c:8d:22:d2:
6b:7e:43:cd:9c:ed:70:dd:57:7b:e4:91:cb:60:42:
1c:fe:af:13:a1:46:15:2d:2e:84:f8:dc:03:12:d4:
7c:e9:7b:05:08:70:46:af:d2:cd:47:79:33:66:57:
cf:31:7a:31:61:b4:25:78:0a:5f:b3:08:7d:28:05:
1a:cb:c0:50:e6:1a:1e:6d:02:0d:c1:22:19:be:9e:
19:d5:ca:f5:17:38:6c:1c:0d:2e:5b:6a:3c:65:55:
7a:a9:15:40:ee:49:e6:33:f8:bf:2e:cb:87:88:5c:
36:8a:c7:ae:66:8d:a3:a1:86:32:a7:b5:33:5f:17:
52:b3:c4:1b:34:f5:a3:4b:fb:1b:82:e1:db:c4:a1:
f1:5d:2b:9a:48:24:01:1c:10:43:53:02:79:75:35:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:FA:37:A6:5A:21:AD:BA:F9:91:FE:85:1E:66:92:9C:7B:35:21
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/_LP6N6ZaIa26-ZH-hR5mkpx7NSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.8.0/21
31.223.160.0/20
37.17.208.0/20
46.226.56.0/21
78.108.128.0/20
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.83.255
81.4.88.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0-83.96.199.255
83.96.208.0/22
83.96.224.0-83.96.235.255
83.96.248.0/22
85.10.171.0-85.10.175.255
85.158.248.0-85.158.253.255
91.142.240.0/21
91.142.252.0/23
91.189.208.0/22
91.205.32.0/22
94.142.208.0/21
141.255.176.0/21
171.33.128.0/21
176.74.224.0/19
185.15.248.0/22
185.65.52.0/22
185.69.232.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.105.204.0/22
185.105.216.0/22
193.93.172.0/22
193.242.119.0/24
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
bf:44:80:0f:40:ac:d4:f9:6a:bb:04:a7:d3:c0:32:e3:5c:67:
e2:1e:a9:ee:52:a8:a9:b1:89:18:99:32:a0:2e:90:9b:97:c9:
59:9e:c1:9f:b3:88:a4:c4:57:f3:23:e6:59:94:24:54:b4:7d:
99:3e:8c:11:37:41:0c:70:60:05:e3:20:40:12:0e:37:38:92:
90:63:97:67:b6:16:0f:f5:9d:ee:75:f2:79:51:1a:0c:a3:65:
75:45:00:8b:18:68:46:ca:20:93:b3:d1:8b:84:33:da:6e:c8:
08:9d:87:75:00:d4:50:4f:9f:74:4d:cd:30:6a:f0:5d:62:7d:
d7:43:10:01:ba:11:5e:9e:2f:6a:23:6c:28:3e:ad:71:63:34:
a9:cc:65:9a:3f:fc:a1:25:07:46:5e:e7:d4:c2:93:84:54:0a:
76:e5:62:b2:29:74:2c:9d:d4:0d:9c:dd:30:fd:4d:13:6f:7f:
29:c6:2f:51:f2:35:04:ac:5d:57:2b:ca:f7:22:dd:cc:01:9b:
d7:7f:65:bd:df:9d:a4:6f:e6:a3:98:b5:01:42:53:8f:8c:8c:
33:9d:c4:ee:a2:cd:59:2e:ad:c0:e0:4d:d8:49:22:d3:09:ff:
1f:eb:d4:13:33:c8:38:4b:0b:ad:ec:ac:20:c1:58:62:17:cd:
65:c9:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:09 2026 by rpki-client