Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa
File: X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa (raw, json)
Hash identifier: PQTMyN3Zy2xwNXQnsr/aq1k71EK2wul/fPqvqcPXDIs=
Subject key identifier: 5F:B1:5E:FB:D2:4C:B8:0E:94:83:B4:E2:68:61:C0:8D:42:0B:62:61
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 019D6B9EC390D9D433D682A61714EF36F0D2
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa
Signing time: Wed 08 Apr 2026 05:44:20 +0000
ROA not before: Wed 08 Apr 2026 05:44:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25019
IP address blocks: 159.0.0.0/20 maxlen: 20
159.0.16.0/20 maxlen: 20
159.0.32.0/20 maxlen: 20
159.0.48.0/20 maxlen: 20
159.0.64.0/20 maxlen: 20
159.0.80.0/20 maxlen: 20
159.0.96.0/20 maxlen: 20
159.0.112.0/20 maxlen: 20
159.0.128.0/24 maxlen: 24
159.0.129.0/24 maxlen: 24
159.0.130.0/24 maxlen: 24
159.0.131.0/24 maxlen: 24
159.0.132.0/24 maxlen: 24
159.0.133.0/24 maxlen: 24
159.0.134.0/24 maxlen: 24
159.0.135.0/24 maxlen: 24
159.0.136.0/24 maxlen: 24
159.0.137.0/24 maxlen: 24
159.0.138.0/24 maxlen: 24
159.0.139.0/24 maxlen: 24
159.0.140.0/24 maxlen: 24
159.0.141.0/24 maxlen: 24
159.0.142.0/24 maxlen: 24
159.0.143.0/24 maxlen: 24
159.0.144.0/24 maxlen: 24
159.0.145.0/24 maxlen: 24
159.0.146.0/24 maxlen: 24
159.0.147.0/24 maxlen: 24
159.0.148.0/24 maxlen: 24
159.0.149.0/24 maxlen: 24
159.0.150.0/24 maxlen: 24
159.0.151.0/24 maxlen: 24
159.0.152.0/24 maxlen: 24
159.0.153.0/24 maxlen: 24
159.0.154.0/24 maxlen: 24
159.0.155.0/24 maxlen: 24
159.0.156.0/24 maxlen: 24
159.0.157.0/24 maxlen: 24
159.0.158.0/24 maxlen: 24
159.0.159.0/24 maxlen: 24
159.0.160.0/20 maxlen: 20
159.0.192.0/20 maxlen: 20
159.0.208.0/20 maxlen: 20
159.0.224.0/20 maxlen: 20
159.0.240.0/20 maxlen: 20
185.139.8.0/22 maxlen: 22
212.215.128.0/17 maxlen: 17
212.215.128.0/18 maxlen: 18
212.215.137.0/24 maxlen: 24
212.215.144.0/20 maxlen: 20
212.215.160.0/20 maxlen: 20
212.215.176.0/20 maxlen: 20
212.215.192.0/20 maxlen: 20
212.215.240.0/22 maxlen: 22
212.215.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:9e:c3:90:d9:d4:33:d6:82:a6:17:14:ef:36:f0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Apr 8 05:44:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fb15efbd24cb80e9483b4e26861c08d420b6261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:cc:93:9f:b6:ab:cf:c5:d7:66:c6:74:62:
66:2d:b8:d0:1f:37:5e:a0:5e:9d:e6:9e:c7:d9:c7:
cc:76:35:d7:74:0a:e2:e4:92:df:2d:d0:1a:d3:fd:
97:f5:38:01:b5:f3:1f:ec:b1:0b:ae:c1:b4:22:af:
ae:81:f0:ec:58:44:69:92:1f:9e:62:05:cc:0b:69:
fc:5c:9f:5b:44:b1:53:b4:08:8e:3d:1f:33:79:9b:
27:95:b9:f0:4f:1f:bf:41:5c:69:87:e7:dd:82:f0:
c2:db:a2:c5:01:25:d2:20:5f:9d:bc:d5:6a:c0:b2:
8a:57:01:c4:c4:e4:b2:2c:c0:80:72:a2:f4:c5:46:
c9:fd:3b:b7:a9:9e:a2:fe:b3:a0:31:5b:84:e5:01:
bc:f6:b8:12:a0:c3:15:89:8a:99:03:33:8e:11:82:
6b:81:c9:cd:75:03:51:77:f8:b1:13:e8:fa:34:7f:
45:42:63:d5:00:91:31:33:82:91:26:1f:b9:98:0a:
20:47:bf:3a:9a:eb:87:24:05:51:01:a7:57:77:36:
1b:fa:ea:2f:a2:e3:10:4d:e6:98:46:8a:74:7d:fc:
a2:b0:34:c5:18:e7:e4:52:c0:17:c6:60:ff:d4:2d:
33:40:b9:27:a0:8c:0d:fb:bc:04:2b:70:b7:25:f6:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B1:5E:FB:D2:4C:B8:0E:94:83:B4:E2:68:61:C0:8D:42:0B:62:61
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.0.0.0-159.0.175.255
159.0.192.0/18
185.139.8.0/22
212.215.128.0/17
Signature Algorithm: sha256WithRSAEncryption
16:bc:3e:01:31:c0:c7:d4:69:ea:02:e3:e7:55:22:1b:75:1e:
3b:b9:67:25:95:0c:43:92:81:b5:0d:05:d8:a6:ac:c8:08:22:
94:68:23:11:70:09:80:8e:3e:94:ea:a8:3d:0e:50:48:7c:b6:
5c:0a:2c:74:15:04:18:9f:a0:3e:19:e6:d9:4a:d6:f9:11:79:
ec:36:34:c1:08:ed:a8:4d:fe:c1:63:f1:5d:f9:c7:34:32:05:
95:53:24:d5:38:e3:4d:9e:2d:d1:ee:16:09:7c:74:46:8d:a1:
6b:65:ce:1f:f9:2f:f3:8c:14:71:ed:46:43:f5:e9:ef:3b:a3:
d3:0c:30:67:9d:28:95:0e:ef:bf:88:28:cc:48:41:13:93:43:
b2:16:95:43:8a:85:47:1e:a7:de:1e:f2:4e:60:00:e7:83:b8:
1b:bb:8b:f9:09:77:22:48:89:47:9b:9e:4b:95:0c:fc:b6:80:
89:93:84:8f:10:11:e2:88:82:6d:dc:23:ee:09:d1:76:12:c1:
20:9c:c6:d7:27:9f:e3:1e:41:5e:b7:2c:d7:26:d9:81:d7:e0:
14:13:06:83:22:8e:aa:50:fb:a1:57:f3:0c:fb:56:e4:36:63:
b9:a9:c5:53:71:9a:fc:d8:b7:fe:77:0b:6f:1e:15:0e:f0:81:
8c:db:d9:ac
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ1rnsOQ2dQz1oKmFxTvNvDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2NiYzcwZTE4YjZjNjllNTNlZjUyYTVlOTI1ZTVmNGYw
Y2RjYzEwHhcNMjYwNDA4MDU0NDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmIxNWVmYmQyNGNiODBlOTQ4M2I0ZTI2ODYxYzA4ZDQyMGI2MjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTHMk5+2q8/F12bGdGJmLbjQHzde
oF6d5p7H2cfMdjXXdAri5JLfLdAa0/2X9TgBtfMf7LELrsG0Iq+ugfDsWERpkh+e
YgXMC2n8XJ9bRLFTtAiOPR8zeZsnlbnwTx+/QVxph+fdgvDC26LFASXSIF+dvNVq
wLKKVwHExOSyLMCAcqL0xUbJ/Tu3qZ6i/rOgMVuE5QG89rgSoMMViYqZAzOOEYJr
gcnNdQNRd/ixE+j6NH9FQmPVAJExM4KRJh+5mAogR786muuHJAVRAadXdzYb+uov
ouMQTeaYRop0ffyisDTFGOfkUsAXxmD/1C0zQLknoIwN+7wEK3C3JfZn7wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFF+xXvvSTLgOlIO04mhhwI1CC2JhMB8GA1UdIwQY
MBaAFDvMvHDhi2xp5T71Kl6SXl9PDNzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgt
YmJlNjBlYTIyMmM1LzEvWDdGZS05Sk11QTZVZzdUaWFHSEFqVUlMWW1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgtYmJlNjBlYTIyMmM1
LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeMAoDAgCfAwQE
nwCgAwQGnwDAAwQCuYsIAwQH1NeAMA0GCSqGSIb3DQEBCwUAA4IBAQAWvD4BMcDH
1GnqAuPnVSIbdR47uWcllQxDkoG1DQXYpqzICCKUaCMRcAmAjj6U6qg9DlBIfLZc
Cix0FQQYn6A+GebZStb5EXnsNjTBCO2oTf7BY/Fd+cc0MgWVUyTVOONNni3R7hYJ
fHRGjaFrZc4f+S/zjBRx7UZD9envO6PTDDBnnSiVDu+/iCjMSEETk0OyFpVDioVH
HqfeHvJOYADng7gbu4v5CXciSIlHm55LlQz8toCJk4SPEBHiiIJt3CPuCdF2EsEg
nMbXJ5/jHkFetyzXJtmB1+AUEwaDIo6qUPuhV/MM+1bkNmO5qcVTcZr82Lf+dwtv
HhUO8IGM29ms
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:18 2026 by rpki-client