Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/nAMFXj2rNW6JcZYHiCVFrmal4gE.roa
File: nAMFXj2rNW6JcZYHiCVFrmal4gE.roa (raw, json)
Hash identifier: KjFSm7B2KJ38AK5RRqVL312Njxb6Vv7zGB6VO3CQXI8=
Subject key identifier: 9C:03:05:5E:3D:AB:35:6E:89:71:96:07:88:25:45:AE:66:A5:E2:01
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019F89B8264592E9225C43D0C31B8D036BAE
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/nAMFXj2rNW6JcZYHiCVFrmal4gE.roa
Signing time: Wed 22 Jul 2026 12:06:14 +0000
ROA not before: Wed 22 Jul 2026 12:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136787
IP address blocks: 186.247.46.0/24 maxlen: 24
186.247.75.0/24 maxlen: 24
186.247.76.0/24 maxlen: 24
186.247.77.0/24 maxlen: 24
186.247.79.0/24 maxlen: 24
186.247.160.0/24 maxlen: 24
186.247.161.0/24 maxlen: 24
186.247.162.0/24 maxlen: 24
186.247.164.0/24 maxlen: 24
186.247.165.0/24 maxlen: 24
186.247.166.0/24 maxlen: 24
186.247.167.0/24 maxlen: 24
186.247.168.0/24 maxlen: 24
186.247.171.0/24 maxlen: 24
186.247.179.0/24 maxlen: 24
186.247.180.0/24 maxlen: 24
186.247.183.0/24 maxlen: 24
186.247.188.0/24 maxlen: 24
187.13.3.0/24 maxlen: 24
187.13.4.0/24 maxlen: 24
187.13.17.0/24 maxlen: 24
187.13.20.0/24 maxlen: 24
187.13.22.0/24 maxlen: 24
187.13.23.0/24 maxlen: 24
187.13.24.0/24 maxlen: 24
187.13.25.0/24 maxlen: 24
187.13.27.0/24 maxlen: 24
187.13.29.0/24 maxlen: 24
187.13.128.0/24 maxlen: 24
187.13.130.0/24 maxlen: 24
187.13.131.0/24 maxlen: 24
187.13.134.0/24 maxlen: 24
187.13.135.0/24 maxlen: 24
187.13.136.0/24 maxlen: 24
187.13.137.0/24 maxlen: 24
187.13.138.0/24 maxlen: 24
187.13.139.0/24 maxlen: 24
187.13.140.0/24 maxlen: 24
187.13.141.0/24 maxlen: 24
187.13.142.0/24 maxlen: 24
187.13.143.0/24 maxlen: 24
187.13.176.0/24 maxlen: 24
187.13.179.0/24 maxlen: 24
187.13.180.0/24 maxlen: 24
187.13.187.0/24 maxlen: 24
187.13.188.0/24 maxlen: 24
187.13.191.0/24 maxlen: 24
187.13.192.0/24 maxlen: 24
187.13.193.0/24 maxlen: 24
187.13.194.0/24 maxlen: 24
187.13.211.0/24 maxlen: 24
187.13.212.0/24 maxlen: 24
187.13.217.0/24 maxlen: 24
187.13.218.0/24 maxlen: 24
187.13.241.0/24 maxlen: 24
187.13.242.0/24 maxlen: 24
187.13.251.0/24 maxlen: 24
187.14.48.0/24 maxlen: 24
187.14.49.0/24 maxlen: 24
187.14.50.0/24 maxlen: 24
187.14.51.0/24 maxlen: 24
187.14.53.0/24 maxlen: 24
187.14.54.0/24 maxlen: 24
187.14.96.0/24 maxlen: 24
187.14.97.0/24 maxlen: 24
187.14.98.0/24 maxlen: 24
187.14.110.0/24 maxlen: 24
187.14.111.0/24 maxlen: 24
187.14.112.0/24 maxlen: 24
187.14.113.0/24 maxlen: 24
187.14.124.0/24 maxlen: 24
187.14.125.0/24 maxlen: 24
187.14.126.0/24 maxlen: 24
187.14.226.0/24 maxlen: 24
187.14.229.0/24 maxlen: 24
187.14.236.0/24 maxlen: 24
187.14.242.0/24 maxlen: 24
187.14.243.0/24 maxlen: 24
187.14.246.0/24 maxlen: 24
187.14.247.0/24 maxlen: 24
187.15.104.0/24 maxlen: 24
187.15.106.0/24 maxlen: 24
187.15.109.0/24 maxlen: 24
187.15.111.0/24 maxlen: 24
187.15.113.0/24 maxlen: 24
187.15.114.0/24 maxlen: 24
187.15.115.0/24 maxlen: 24
187.15.120.0/24 maxlen: 24
187.15.130.0/24 maxlen: 24
187.15.137.0/24 maxlen: 24
187.15.138.0/24 maxlen: 24
187.15.145.0/24 maxlen: 24
187.15.158.0/24 maxlen: 24
187.15.163.0/24 maxlen: 24
187.15.164.0/24 maxlen: 24
187.15.165.0/24 maxlen: 24
187.15.169.0/24 maxlen: 24
187.15.172.0/24 maxlen: 24
187.15.173.0/24 maxlen: 24
187.40.37.0/24 maxlen: 24
187.40.38.0/24 maxlen: 24
187.40.40.0/24 maxlen: 24
187.40.41.0/24 maxlen: 24
187.40.42.0/24 maxlen: 24
187.40.43.0/24 maxlen: 24
187.40.44.0/24 maxlen: 24
187.40.47.0/24 maxlen: 24
187.40.48.0/24 maxlen: 24
187.40.230.0/24 maxlen: 24
187.40.244.0/24 maxlen: 24
187.40.248.0/24 maxlen: 24
187.40.249.0/24 maxlen: 24
187.40.250.0/24 maxlen: 24
187.40.251.0/24 maxlen: 24
187.40.252.0/24 maxlen: 24
187.40.253.0/24 maxlen: 24
187.40.254.0/24 maxlen: 24
187.40.255.0/24 maxlen: 24
2a13:240:100::/40 maxlen: 40
2a13:240:8000::/40 maxlen: 40
2a13:240:8888::/48 maxlen: 48
2a13:240:9999::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:b8:26:45:92:e9:22:5c:43:d0:c3:1b:8d:03:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jul 22 12:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c03055e3dab356e89719607882545ae66a5e201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:94:d6:30:ee:00:05:23:1c:8a:f9:1f:d9:
d6:91:16:c7:f0:d5:05:b2:98:21:58:1a:71:59:0c:
7f:ad:4c:5b:4d:9b:8e:49:d6:a3:34:31:ea:23:08:
e5:f5:38:b9:42:8e:f2:03:25:91:99:15:65:b7:80:
0a:36:0c:cf:34:2d:31:c4:84:0b:70:78:53:e1:ff:
5e:ff:08:9c:a5:1f:34:b3:3b:da:3e:1f:53:fa:47:
10:40:44:0c:d3:3a:2c:89:fd:5d:b6:ae:78:3f:be:
38:b6:53:7d:bb:b1:3f:70:c8:43:ee:42:77:15:01:
bc:f5:92:f4:e1:53:6d:5a:36:ad:95:16:f3:33:cd:
53:23:88:4b:02:c6:cd:2b:05:fa:48:58:9f:4b:4c:
43:54:d0:a0:47:e0:e8:fb:91:e4:b6:20:d8:f9:6d:
63:d7:91:9b:84:fd:01:19:1e:9f:99:e1:1d:56:12:
10:05:2e:aa:4a:a8:2b:b1:85:44:46:8a:66:3f:12:
00:d7:6c:d2:e8:32:e2:b2:09:31:c5:fe:2a:8f:ae:
9c:89:65:d0:a2:37:d8:05:60:d1:01:84:d1:f0:66:
ff:aa:97:14:2d:4f:aa:4d:06:a0:ca:43:06:3a:ea:
98:80:6e:bd:71:3c:77:68:50:0f:b4:36:df:d0:55:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:05:5E:3D:AB:35:6E:89:71:96:07:88:25:45:AE:66:A5:E2:01
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/nAMFXj2rNW6JcZYHiCVFrmal4gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.46.0/24
186.247.75.0-186.247.77.255
186.247.79.0/24
186.247.160.0-186.247.162.255
186.247.164.0-186.247.168.255
186.247.171.0/24
186.247.179.0-186.247.180.255
186.247.183.0/24
186.247.188.0/24
187.13.3.0-187.13.4.255
187.13.17.0/24
187.13.20.0/24
187.13.22.0-187.13.25.255
187.13.27.0/24
187.13.29.0/24
187.13.128.0/24
187.13.130.0/23
187.13.134.0-187.13.143.255
187.13.176.0/24
187.13.179.0-187.13.180.255
187.13.187.0-187.13.188.255
187.13.191.0-187.13.194.255
187.13.211.0-187.13.212.255
187.13.217.0-187.13.218.255
187.13.241.0-187.13.242.255
187.13.251.0/24
187.14.48.0/22
187.14.53.0-187.14.54.255
187.14.96.0-187.14.98.255
187.14.110.0-187.14.113.255
187.14.124.0-187.14.126.255
187.14.226.0/24
187.14.229.0/24
187.14.236.0/24
187.14.242.0/23
187.14.246.0/23
187.15.104.0/24
187.15.106.0/24
187.15.109.0/24
187.15.111.0/24
187.15.113.0-187.15.115.255
187.15.120.0/24
187.15.130.0/24
187.15.137.0-187.15.138.255
187.15.145.0/24
187.15.158.0/24
187.15.163.0-187.15.165.255
187.15.169.0/24
187.15.172.0/23
187.40.37.0-187.40.38.255
187.40.40.0-187.40.44.255
187.40.47.0-187.40.48.255
187.40.230.0/24
187.40.244.0/24
187.40.248.0/21
IPv6:
2a13:240:100::/40
2a13:240:8000::/40
2a13:240:8888::/48
2a13:240:9999::/48
Signature Algorithm: sha256WithRSAEncryption
2b:39:0b:8e:37:36:71:46:7f:a2:f5:7c:23:bb:2f:19:dc:1b:
33:11:38:35:c7:a1:fb:e0:ae:8a:4d:cf:9b:60:49:d7:c1:36:
11:d5:09:1b:17:ea:c1:f2:f2:68:ca:cd:67:eb:a7:78:90:d7:
b3:2e:9e:a6:4f:15:fb:f6:64:45:0d:a0:16:78:f9:7a:40:b3:
03:89:e2:6b:7e:66:8d:65:52:4d:b5:01:f1:24:47:8a:2e:9a:
e6:7c:18:0f:24:ad:57:d3:3d:60:40:e0:8d:f7:e4:5a:c2:93:
ae:8a:d4:1f:35:35:3e:93:0c:a9:62:d7:1d:e8:fb:9d:df:72:
5d:95:d0:fd:dd:71:ad:bf:49:d5:64:86:e0:90:65:0f:a4:96:
5b:59:30:7d:a5:c4:58:df:3b:71:c9:ba:fb:01:a8:ec:eb:59:
fb:c6:5a:6d:7a:8f:6e:44:59:e1:e1:aa:ff:9d:fa:b0:e6:32:
67:54:62:3e:f8:dd:5f:b0:29:9e:b0:b3:a9:6c:9a:8d:61:77:
b1:01:a5:37:1c:c3:62:0f:59:e8:dc:c9:10:bc:00:33:a1:9a:
04:03:d2:5f:b8:64:6c:f2:85:2d:d7:80:99:7a:73:08:8f:1d:
f9:cd:52:ba:c6:b2:2d:79:1e:3a:c8:cc:dd:b9:2b:6f:8d:b7:
9e:69:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:08 2026 by rpki-client