Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/mGCci6Pw4ws1s2CSrvlwPoNX68w.roa
File: mGCci6Pw4ws1s2CSrvlwPoNX68w.roa (raw, json)
Hash identifier: oF16LqvH0BJX/k1mLJ1/7VpPewRXGKd0nGQ5TY/auD0=
Subject key identifier: 98:60:9C:8B:A3:F0:E3:0B:35:B3:60:92:AE:F9:70:3E:83:57:EB:CC
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 01A0C821C324425918D9FFD804F6B37D3CAB
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/mGCci6Pw4ws1s2CSrvlwPoNX68w.roa
Signing time: Tue 22 Sep 2026 08:00:50 +0000
ROA not before: Tue 22 Sep 2026 08:00:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24940
IP address blocks: 2.28.0.0/16 maxlen: 24
2.29.0.0/16 maxlen: 24
2.31.0.0/16 maxlen: 24
5.9.0.0/16 maxlen: 24
5.75.128.0/17 maxlen: 24
5.161.0.0/16 maxlen: 24
23.88.0.0/17 maxlen: 24
37.27.0.0/16 maxlen: 24
46.4.0.0/16 maxlen: 24
46.62.128.0/17 maxlen: 24
46.224.0.0/15 maxlen: 24
49.12.0.0/16 maxlen: 24
49.13.0.0/16 maxlen: 24
62.238.0.0/17 maxlen: 24
65.21.0.0/16 maxlen: 24
65.108.0.0/16 maxlen: 24
65.109.0.0/16 maxlen: 24
77.42.0.0/17 maxlen: 24
78.46.0.0/15 maxlen: 24
85.10.192.0/18 maxlen: 24
88.99.0.0/16 maxlen: 24
88.198.0.0/16 maxlen: 24
89.167.0.0/17 maxlen: 24
91.98.0.0/16 maxlen: 24
91.99.0.0/16 maxlen: 24
91.107.128.0/17 maxlen: 24
94.130.0.0/16 maxlen: 24
95.216.0.0/16 maxlen: 24
95.217.0.0/16 maxlen: 24
116.202.0.0/16 maxlen: 24
116.203.0.0/16 maxlen: 24
128.140.0.0/17 maxlen: 24
135.181.0.0/16 maxlen: 24
138.199.128.0/17 maxlen: 24
142.132.128.0/17 maxlen: 24
157.90.0.0/16 maxlen: 24
157.180.0.0/17 maxlen: 24
159.69.0.0/16 maxlen: 24
162.55.0.0/16 maxlen: 16
167.233.0.0/16 maxlen: 24
167.235.0.0/16 maxlen: 24
168.119.0.0/16 maxlen: 24
176.9.0.0/16 maxlen: 24
178.63.0.0/16 maxlen: 24
178.104.0.0/15 maxlen: 24
185.12.64.0/22 maxlen: 24
188.34.128.0/17 maxlen: 24
188.40.0.0/16 maxlen: 24
188.245.0.0/16 maxlen: 24
195.201.0.0/16 maxlen: 24
204.168.128.0/17 maxlen: 24
213.133.96.0/19 maxlen: 19
213.239.192.0/18 maxlen: 18
2a01:4f8::/32 maxlen: 48
2a01:4f9::/32 maxlen: 48
2a01:4ff:ff01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:c3:24:42:59:18:d9:ff:d8:04:f6:b3:7d:3c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Sep 22 08:00:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98609c8ba3f0e30b35b36092aef9703e8357ebcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:18:85:fb:8f:5e:75:d3:1e:c5:34:0d:da:ea:
4d:82:15:e0:7a:6e:cb:f8:48:0c:60:4f:73:3c:52:
4f:ed:9b:66:bb:e0:3d:2e:64:4a:89:7b:90:d6:f7:
b1:2a:dc:3b:74:31:b7:2b:dc:43:17:2c:28:86:d1:
01:77:d5:a5:c9:c6:c2:b9:e3:34:42:0a:f5:ed:64:
6e:c0:06:ed:01:6f:ae:b9:f4:8a:81:90:d7:08:e0:
68:af:89:cd:40:ad:3e:c6:7a:a0:62:cc:81:79:1e:
c8:61:3a:6d:47:39:87:72:86:31:3e:6c:c7:da:8c:
20:16:e1:03:d0:fe:bf:a4:bd:da:17:b5:8f:3c:c2:
82:8e:93:e3:24:a2:70:46:62:9b:a8:fd:8e:68:be:
a0:01:f5:65:f3:8d:06:0e:d0:86:90:04:a2:e4:71:
b7:96:cf:07:7a:ee:49:bf:ee:74:f8:c2:e1:71:38:
e9:97:fa:c8:1a:1a:87:5a:68:96:e1:cc:3b:99:52:
6a:21:cc:89:a0:c6:af:43:06:3e:16:c0:9d:07:9f:
a1:18:d7:c3:0b:1c:60:3a:e3:72:88:04:99:c7:51:
68:1d:03:76:83:3f:ba:16:85:9e:25:71:b8:06:6b:
88:ff:74:e4:21:7d:d3:95:58:14:1f:a7:77:0e:f1:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:9C:8B:A3:F0:E3:0B:35:B3:60:92:AE:F9:70:3E:83:57:EB:CC
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/mGCci6Pw4ws1s2CSrvlwPoNX68w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.28.0.0/15
2.31.0.0/16
5.9.0.0/16
5.75.128.0/17
5.161.0.0/16
23.88.0.0/17
37.27.0.0/16
46.4.0.0/16
46.62.128.0/17
46.224.0.0/15
49.12.0.0/15
62.238.0.0/17
65.21.0.0/16
65.108.0.0/15
77.42.0.0/17
78.46.0.0/15
85.10.192.0/18
88.99.0.0/16
88.198.0.0/16
89.167.0.0/17
91.98.0.0/15
91.107.128.0/17
94.130.0.0/16
95.216.0.0/15
116.202.0.0/15
128.140.0.0/17
135.181.0.0/16
138.199.128.0/17
142.132.128.0/17
157.90.0.0/16
157.180.0.0/17
159.69.0.0/16
162.55.0.0/16
167.233.0.0/16
167.235.0.0/16
168.119.0.0/16
176.9.0.0/16
178.63.0.0/16
178.104.0.0/15
185.12.64.0/22
188.34.128.0/17
188.40.0.0/16
188.245.0.0/16
195.201.0.0/16
204.168.128.0/17
213.133.96.0/19
213.239.192.0/18
IPv6:
2a01:4f8::/31
2a01:4ff:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
7e:03:89:20:a0:8f:ed:c0:e0:9f:0a:07:93:3a:77:3e:9d:ff:
66:a7:af:08:46:08:43:4b:59:03:22:2b:f1:6d:ff:99:4b:49:
05:47:87:d6:53:f9:88:f2:49:f7:36:50:16:ae:69:d5:27:38:
73:fb:98:44:78:16:36:fc:1e:e0:f5:ae:5e:2b:4f:b2:ab:d5:
5a:1d:c1:34:0d:ce:6f:12:6b:59:49:e7:f7:24:2d:2b:3a:17:
bf:30:f6:3d:9d:af:a9:fa:a1:6f:9a:96:15:6e:95:49:ea:c7:
16:31:f7:c8:60:08:42:ae:31:72:2f:07:1b:e4:ba:24:7e:03:
08:40:8c:b7:a0:02:06:aa:08:ae:c0:c2:cc:82:5e:1f:ce:b7:
82:eb:96:f4:b7:0c:8c:51:17:5c:7e:37:0a:6b:8d:13:61:d0:
ce:e5:10:06:5b:62:c1:43:b5:2a:a0:e4:81:e4:b0:b2:69:d5:
b3:28:b7:21:b2:c5:96:07:3a:48:a6:18:d5:af:0b:93:37:9b:
d3:c3:fa:ec:c8:81:cc:ff:fd:7c:24:7c:2f:09:89:62:ed:92:
fa:f1:95:dd:9e:06:2d:0a:46:ad:bd:a0:06:1c:b2:0f:51:52:
79:f5:74:68:72:a3:b8:6b:d5:66:b2:4a:66:e5:1e:02:22:7c:
2c:0a:3f:7d
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgISAaDIIcMkQlkY2f/YBPazfTyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDZmNTc3MzVhNGU2M2RiZWY4NDhlZTBkOWQxOTllMjE1
ZjgzMDQwHhcNMjYwOTIyMDgwMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODYwOWM4YmEzZjBlMzBiMzViMzYwOTJhZWY5NzAzZTgzNTdlYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RiF+49eddMexTQN2upNghXgem7L
+EgMYE9zPFJP7Ztmu+A9LmRKiXuQ1vexKtw7dDG3K9xDFywohtEBd9WlycbCueM0
Qgr17WRuwAbtAW+uufSKgZDXCOBor4nNQK0+xnqgYsyBeR7IYTptRzmHcoYxPmzH
2owgFuED0P6/pL3aF7WPPMKCjpPjJKJwRmKbqP2OaL6gAfVl840GDtCGkASi5HG3
ls8Heu5Jv+50+MLhcTjpl/rIGhqHWmiW4cw7mVJqIcyJoMavQwY+FsCdB5+hGNfD
CxxgOuNyiASZx1FoHQN2gz+6FoWeJXG4BmuI/3TkIX3TlVgUH6d3DvEiqQIDAQAB
o4IDIDCCAxwwHQYDVR0OBBYEFJhgnIuj8OMLNbNgkq75cD6DV+vMMB8GA1UdIwQY
MBaAFB9G9Xc1pOY9vvhI7g2dGZ4hX4MEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzIt
YTdjOTg5OGVlY2JjLzEvbUdDY2k2UHc0d3MxczJDU3J2bHdQb05YNjh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzItYTdjOTg5OGVlY2Jj
LzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNAYIKwYBBQUHAQcBAf8EggEjMIIBHzCCAQMEAgABMIH8
AwMBAhwDAwACHwMDAAUJAwQHBUuAAwMABaEDBAcXWAADAwAlGwMDAC4EAwQHLj6A
AwMBLuADAwExDAMEBz7uAAMDAEEVAwMBQWwDBAdNKgADAwFOLgMEBlUKwAMDAFhj
AwMAWMYDBAdZpwADAwFbYgMEB1trgAMDAF6CAwMBX9gDAwF0ygMEB4CMAAMDAIe1
AwQHiseAAwQHjoSAAwMAnVoDBAedtAADAwCfRQMDAKI3AwMAp+kDAwCn6wMDAKh3
AwMAsAkDAwCyPwMDAbJoAwQCuQxAAwQHvCKAAwMAvCgDAwC89QMDAMPJAwQHzKiA
AwQF1YVgAwQG1e/AMBYEAgACMBADBQEqAQT4AwcAKgEE//8BMA0GCSqGSIb3DQEB
CwUAA4IBAQB+A4kgoI/twOCfCgeTOnc+nf9mp68IRghDS1kDIivxbf+ZS0kFR4fW
U/mI8kn3NlAWrmnVJzhz+5hEeBY2/B7g9a5eK0+yq9VaHcE0Dc5vEmtZSef3JC0r
Ohe/MPY9na+p+qFvmpYVbpVJ6scWMffIYAhCrjFyLwcb5LokfgMIQIy3oAIGqgiu
wMLMgl4fzreC65b0twyMURdcfjcKa40TYdDO5RAGW2LBQ7UqoOSB5LCyadWzKLch
ssWWBzpIphjVrwuTN5vTw/rsyIHM//18JHwvCYli7ZL68ZXdngYtCkatvaAGHLIP
UVJ59XRocqO4a9Vmskpm5R4CInwsCj99
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:55:54 2026 by rpki-client