Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VkUVQ39hpxgmOb0xEcvt0W77unA.roa
File: VkUVQ39hpxgmOb0xEcvt0W77unA.roa (raw, json)
Hash identifier: /oj+3ipb+uXnmcFZ1KySnZmMQC7h1QnK8Mzvo1RGKY0=
Subject key identifier: 56:45:15:43:7F:61:A7:18:26:39:BD:31:11:CB:ED:D1:6E:FB:BA:70
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019D9548A9DF40CCB31A07D7C0FB0E340574
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VkUVQ39hpxgmOb0xEcvt0W77unA.roa
Signing time: Thu 16 Apr 2026 07:54:20 +0000
ROA not before: Thu 16 Apr 2026 07:54:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20632
IP address blocks: 46.47.192.0/18 maxlen: 18
46.151.172.0/24 maxlen: 24
62.16.101.0/24 maxlen: 24
62.16.102.0/24 maxlen: 24
62.16.103.0/24 maxlen: 24
62.16.104.0/24 maxlen: 24
62.16.105.0/24 maxlen: 24
62.16.106.0/24 maxlen: 24
62.16.107.0/24 maxlen: 24
62.16.108.0/24 maxlen: 24
62.16.109.0/24 maxlen: 24
62.16.112.0/24 maxlen: 24
62.16.117.0/24 maxlen: 24
62.16.119.0/24 maxlen: 24
62.182.128.0/21 maxlen: 21
79.171.8.0/21 maxlen: 21
80.247.176.0/20 maxlen: 20
81.3.128.0/18 maxlen: 18
81.24.128.0/20 maxlen: 20
82.140.64.0/18 maxlen: 18
82.140.93.0/24 maxlen: 24
82.196.64.0/19 maxlen: 19
84.204.0.0/17 maxlen: 17
84.204.132.0/22 maxlen: 22
84.204.136.0/24 maxlen: 24
84.204.138.0/24 maxlen: 24
84.204.139.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
84.204.160.0/20 maxlen: 20
84.204.176.0/21 maxlen: 21
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
84.204.230.0/24 maxlen: 24
91.193.212.0/22 maxlen: 22
93.153.128.0/17 maxlen: 17
93.153.144.0/21 maxlen: 21
93.153.158.0/24 maxlen: 24
93.153.161.0/24 maxlen: 24
93.153.162.0/24 maxlen: 24
94.25.248.0/21 maxlen: 21
95.137.0.0/17 maxlen: 17
109.74.112.0/20 maxlen: 20
109.124.64.0/18 maxlen: 18
109.124.108.0/22 maxlen: 22
176.192.126.0/24 maxlen: 24
176.192.127.0/24 maxlen: 24
195.5.128.0/19 maxlen: 19
195.131.14.0/24 maxlen: 24
195.131.38.0/24 maxlen: 24
195.144.224.0/19 maxlen: 19
212.14.160.0/19 maxlen: 19
212.44.64.0/19 maxlen: 19
212.119.160.0/19 maxlen: 19
213.154.160.0/21 maxlen: 21
213.154.168.0/21 maxlen: 21
213.154.176.0/21 maxlen: 21
213.154.184.0/21 maxlen: 21
213.168.32.0/19 maxlen: 19
213.172.0.0/19 maxlen: 19
213.182.160.0/19 maxlen: 19
217.195.64.0/19 maxlen: 19
2a03:d000:9008::/46 maxlen: 46
2a03:d000:9008::/48 maxlen: 48
2a03:d000:9009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:48:a9:df:40:cc:b3:1a:07:d7:c0:fb:0e:34:05:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Apr 16 07:54:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=564515437f61a7182639bd3111cbedd16efbba70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:d2:50:a6:1b:a7:70:fd:25:0c:4e:d4:29:
88:32:d5:2f:d6:94:ce:e4:42:98:01:b6:52:20:e6:
61:a4:ee:52:d2:68:31:9b:8c:fb:84:4d:ed:30:f0:
3f:99:e7:89:7d:bc:8a:f4:0a:7e:17:d4:5e:df:bd:
2f:1b:1f:99:da:3d:55:d8:c9:9b:1e:d7:3f:7c:b3:
52:fc:5a:52:ea:39:31:31:22:bd:0a:05:fa:13:2f:
a5:98:e5:98:1a:d1:6c:99:0a:08:b9:23:2c:63:43:
7e:61:58:e8:04:4d:5d:c1:5f:ed:e2:12:ef:ac:50:
e2:2e:5c:7c:83:11:24:79:ac:e9:5f:73:5b:6e:7d:
b2:ef:62:df:84:e0:68:2e:80:cf:93:d7:c7:5f:d0:
9d:17:f3:84:49:bb:5e:59:b7:9c:21:a6:17:53:6e:
5b:50:88:45:6d:cc:2d:af:55:99:0a:86:dc:69:ef:
5b:24:6d:c3:1a:d1:b8:ac:80:d3:84:8c:eb:42:58:
1d:a6:1b:5c:fa:29:f4:44:e8:2a:98:a5:bf:7f:4b:
bc:3a:7f:97:fc:2f:97:f8:20:e6:cf:ba:ca:6c:10:
72:a5:49:e8:d8:6f:53:9e:05:5a:e2:54:f9:9b:24:
1e:b2:a8:1c:4c:2d:65:7a:52:04:64:0f:ce:8f:2b:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:45:15:43:7F:61:A7:18:26:39:BD:31:11:CB:ED:D1:6E:FB:BA:70
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VkUVQ39hpxgmOb0xEcvt0W77unA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.192.0/18
46.151.172.0/24
62.16.101.0-62.16.109.255
62.16.112.0/24
62.16.117.0/24
62.16.119.0/24
62.182.128.0/21
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
91.193.212.0/22
93.153.128.0/17
94.25.248.0/21
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
176.192.126.0/23
195.5.128.0/19
195.131.14.0/24
195.131.38.0/24
195.144.224.0/19
212.14.160.0/19
212.44.64.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.172.0.0/19
213.182.160.0/19
217.195.64.0/19
IPv6:
2a03:d000:9008::/46
Signature Algorithm: sha256WithRSAEncryption
48:01:28:90:15:6b:9a:01:ef:9c:6d:b8:29:a3:e3:1a:09:34:
08:63:f1:ea:eb:06:50:5d:e8:a9:3a:4f:73:8e:a2:2e:bc:52:
75:6e:c4:60:db:35:b6:57:29:2a:b1:ea:0c:cd:af:6c:8c:b6:
3b:b6:41:81:ab:84:c9:f7:a4:30:2c:25:e5:33:a3:00:59:84:
18:dc:2c:f2:af:fd:9b:91:9b:7e:83:a6:65:93:db:26:ea:c4:
44:b0:af:24:7d:5d:e1:73:c1:51:52:6e:a3:a1:50:ba:b3:0a:
58:46:61:d6:ec:8d:77:71:66:44:84:e5:f4:ef:06:68:50:51:
82:e9:b8:9c:df:c7:be:12:bb:2a:d7:7f:87:a4:34:5f:3c:77:
74:79:88:67:6d:91:57:7a:a4:ba:d1:92:48:9c:03:b0:a9:7a:
e7:41:77:82:76:29:86:8f:fa:4f:09:6c:13:b6:3b:d2:32:69:
f4:48:cf:42:b7:3c:d0:32:2d:da:3f:14:ad:8d:c7:f5:2c:fb:
fc:b2:5f:c0:95:bc:fa:0e:2a:d1:7b:77:c6:25:8d:50:e5:15:
71:fb:df:68:5c:04:df:30:00:97:ee:b0:93:a5:26:f6:da:3d:
78:4f:ba:b8:be:ab:8d:af:42:b1:05:f6:d0:52:65:1a:dd:d2:
77:9d:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:13:13 2026 by rpki-client