Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/oT6qaGLEY2PXeVQf5JD39QL3oms.roa
File: oT6qaGLEY2PXeVQf5JD39QL3oms.roa (raw, json)
Hash identifier: jE9/tHML59/9TwNMlho3PGTuiexsMBV6cBmss7rI7lg=
Subject key identifier: A1:3E:AA:68:62:C4:63:63:D7:79:54:1F:E4:90:F7:F5:02:F7:A2:6B
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019FA7B88110834891024FB208954D8C630B
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/oT6qaGLEY2PXeVQf5JD39QL3oms.roa
Signing time: Tue 28 Jul 2026 07:55:14 +0000
ROA not before: Tue 28 Jul 2026 07:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6821
IP address blocks: 37.25.80.0/21 maxlen: 24
37.25.84.0/22 maxlen: 22
46.217.0.0/16 maxlen: 16
46.217.0.0/18 maxlen: 18
46.217.0.0/19 maxlen: 21
46.217.0.0/21 maxlen: 21
46.217.8.0/21 maxlen: 21
46.217.16.0/21 maxlen: 21
46.217.24.0/21 maxlen: 21
46.217.32.0/21 maxlen: 21
46.217.40.0/21 maxlen: 21
46.217.48.0/21 maxlen: 21
46.217.56.0/21 maxlen: 21
46.217.64.0/18 maxlen: 21
46.217.64.0/21 maxlen: 21
46.217.72.0/21 maxlen: 21
46.217.80.0/21 maxlen: 21
46.217.88.0/21 maxlen: 21
46.217.96.0/21 maxlen: 21
46.217.104.0/21 maxlen: 21
46.217.112.0/21 maxlen: 21
46.217.120.0/21 maxlen: 21
46.217.128.0/18 maxlen: 21
46.217.128.0/21 maxlen: 21
46.217.136.0/21 maxlen: 21
46.217.144.0/21 maxlen: 21
46.217.152.0/21 maxlen: 21
46.217.160.0/19 maxlen: 19
46.217.192.0/18 maxlen: 18
46.217.192.0/19 maxlen: 23
46.217.198.0/23 maxlen: 23
46.217.200.0/21 maxlen: 21
46.217.216.0/21 maxlen: 21
46.217.224.0/19 maxlen: 19
46.217.224.0/20 maxlen: 21
46.217.232.0/21 maxlen: 21
46.217.254.0/24 maxlen: 24
62.77.136.0/21 maxlen: 21
62.162.0.0/16 maxlen: 24
62.162.0.0/18 maxlen: 18
62.162.5.0/24 maxlen: 24
62.162.27.0/24 maxlen: 24
62.162.31.0/24 maxlen: 24
62.162.41.0/24 maxlen: 24
62.162.42.0/24 maxlen: 24
62.162.70.0/24 maxlen: 24
62.162.90.0/24 maxlen: 24
62.162.120.0/24 maxlen: 24
62.162.129.0/24 maxlen: 24
62.162.130.0/24 maxlen: 24
62.162.133.0/24 maxlen: 24
62.162.134.0/24 maxlen: 24
62.162.136.0/24 maxlen: 24
62.162.138.0/24 maxlen: 24
62.162.145.0/24 maxlen: 24
62.162.146.0/24 maxlen: 24
62.162.155.0/24 maxlen: 24
62.162.161.0/24 maxlen: 24
62.162.162.0/24 maxlen: 24
62.220.192.0/19 maxlen: 24
62.220.203.0/24 maxlen: 24
62.220.204.0/22 maxlen: 22
77.28.0.0/15 maxlen: 21
77.28.0.0/16 maxlen: 21
77.28.0.0/18 maxlen: 21
77.28.0.0/20 maxlen: 20
77.28.16.0/21 maxlen: 21
77.28.24.0/21 maxlen: 21
77.28.64.0/18 maxlen: 21
77.28.64.0/19 maxlen: 19
77.28.120.0/21 maxlen: 21
77.28.128.0/18 maxlen: 21
77.28.192.0/18 maxlen: 21
77.28.224.0/20 maxlen: 20
77.28.240.0/20 maxlen: 20
77.29.0.0/16 maxlen: 18
77.29.0.0/18 maxlen: 18
77.29.64.0/18 maxlen: 18
77.29.128.0/18 maxlen: 18
77.29.192.0/18 maxlen: 18
79.125.128.0/17 maxlen: 24
79.125.128.0/18 maxlen: 18
79.125.128.0/19 maxlen: 22
79.125.128.0/22 maxlen: 22
79.125.132.0/22 maxlen: 22
79.125.136.0/22 maxlen: 22
79.125.140.0/22 maxlen: 22
79.125.160.0/19 maxlen: 19
79.125.160.0/20 maxlen: 20
79.125.192.0/18 maxlen: 23
79.125.220.0/23 maxlen: 23
79.125.232.0/21 maxlen: 21
79.125.240.0/20 maxlen: 20
95.156.0.0/19 maxlen: 24
95.156.29.0/24 maxlen: 24
95.156.30.0/24 maxlen: 24
95.156.31.0/24 maxlen: 24
95.156.32.0/19 maxlen: 24
95.156.50.0/24 maxlen: 24
95.156.52.0/22 maxlen: 22
195.26.128.0/19 maxlen: 24
195.26.130.0/24 maxlen: 24
195.26.144.0/24 maxlen: 24
195.26.149.0/24 maxlen: 24
2a00:5c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:b8:81:10:83:48:91:02:4f:b2:08:95:4d:8c:63:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Jul 28 07:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a13eaa6862c46363d779541fe490f7f502f7a26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fa:d5:bb:03:0b:e3:dd:12:0a:42:71:3c:00:
50:37:6c:37:75:16:fc:92:51:3d:68:8c:2f:2c:cc:
b0:e2:4d:16:62:84:e7:5a:57:cc:70:1c:42:5a:df:
05:8a:21:df:c5:a1:2b:3e:4c:5b:95:29:72:f7:43:
dc:d5:2c:a6:bf:bd:ee:51:87:ba:7e:b7:07:4f:ec:
19:63:47:ec:8b:f2:cc:9a:14:08:2f:5c:82:d9:3f:
5e:ff:5b:b4:4b:08:40:e3:85:9e:9b:2a:9c:c2:66:
3d:c2:8a:e3:19:5b:ec:de:64:76:9c:9b:ae:4e:62:
e5:b9:c5:74:4b:2b:0b:70:b7:39:96:c8:1d:ad:fa:
93:68:df:20:44:33:b2:b3:85:fe:f3:35:0d:0c:43:
ab:49:cb:33:b3:b9:33:36:27:94:0b:e2:d2:17:ed:
79:40:0c:c5:9a:55:25:d9:a5:50:bb:95:38:81:79:
f0:37:48:ec:a6:f7:05:bc:1d:2b:e0:14:fb:5d:da:
b0:08:ca:0c:b2:a3:23:ef:1b:a9:f6:a2:6e:01:24:
70:3c:7a:9b:e8:80:ed:d4:eb:50:e9:39:dd:e6:af:
49:bd:56:d5:de:ce:4c:f4:6c:73:75:7d:14:af:c1:
2c:11:63:38:88:06:08:51:ad:db:eb:a7:3b:ba:92:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:AA:68:62:C4:63:63:D7:79:54:1F:E4:90:F7:F5:02:F7:A2:6B
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/oT6qaGLEY2PXeVQf5JD39QL3oms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.80.0/21
46.217.0.0/16
62.77.136.0/21
62.162.0.0/16
62.220.192.0/19
77.28.0.0/15
79.125.128.0/17
95.156.0.0/18
195.26.128.0/19
IPv6:
2a00:5c40::/29
Signature Algorithm: sha256WithRSAEncryption
60:76:4d:0a:ec:2e:47:b2:87:d9:77:6c:f8:74:92:dc:6a:7a:
52:74:66:65:4c:36:b2:2a:74:9e:07:38:4c:3a:c6:a8:15:0c:
21:04:0f:66:1c:64:cc:39:85:9e:da:3b:0a:58:da:ff:31:05:
da:58:b1:c7:a3:01:6d:e5:78:27:9c:8b:6c:03:34:1b:e8:fb:
41:a3:cb:f6:c2:84:d3:ed:82:18:32:af:d7:81:d8:0a:aa:3e:
8e:11:4c:5a:75:01:b7:6c:9d:4b:2b:1b:38:55:5b:2d:25:b2:
3f:d9:75:db:58:7e:9d:6b:f0:cc:7b:b5:73:ff:30:f9:48:31:
a7:33:70:81:d3:d2:fc:59:1e:fb:87:1d:0d:65:95:51:79:a6:
d2:10:88:95:4b:bc:6f:ef:b6:35:14:95:f2:f1:c1:da:bb:9e:
8c:48:20:26:a0:aa:b2:64:40:63:87:c6:90:99:6a:0c:d0:69:
ef:40:ee:66:58:36:b8:2b:d2:2d:f0:6e:6d:85:b9:79:28:1f:
e5:11:08:a6:87:3c:10:65:92:7e:e2:88:c9:2d:dd:f4:58:cf:
f4:45:11:ad:64:86:b8:e6:ea:0e:09:81:e4:7d:0b:54:0e:33:
e4:d8:d0:13:65:f9:16:9c:2f:ed:47:68:32:53:fe:6b:24:86:
0f:a4:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:19:59 2026 by rpki-client