Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/K2WJcB75uSp0scLyzOGV-hRGVx0.roa
File: K2WJcB75uSp0scLyzOGV-hRGVx0.roa (raw, json)
Hash identifier: 0K/8ZwJNliiAnSqFCGjlWxfVF9t/JBGHxvMTKKHkee0=
Subject key identifier: 2B:65:89:70:1E:F9:B9:2A:74:B1:C2:F2:CC:E1:95:FA:14:46:57:1D
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01A1C4C91CA3B6B08D582050E09E97AC75B7
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/K2WJcB75uSp0scLyzOGV-hRGVx0.roa
Signing time: Tue 10 Nov 2026 09:27:56 +0000
ROA not before: Tue 10 Nov 2026 09:27:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35104
IP address blocks: 37.228.64.0/24 maxlen: 24
37.228.65.0/24 maxlen: 24
37.228.66.0/24 maxlen: 24
37.228.67.0/24 maxlen: 24
37.228.68.0/24 maxlen: 24
37.228.69.0/24 maxlen: 24
37.228.70.0/24 maxlen: 24
37.228.71.0/24 maxlen: 24
46.235.80.0/24 maxlen: 24
46.235.81.0/24 maxlen: 24
46.235.82.0/24 maxlen: 24
46.235.83.0/24 maxlen: 24
46.235.84.0/24 maxlen: 24
46.235.85.0/24 maxlen: 24
46.235.86.0/24 maxlen: 24
46.235.87.0/24 maxlen: 24
77.245.96.0/24 maxlen: 24
77.245.97.0/24 maxlen: 24
77.245.98.0/24 maxlen: 24
77.245.99.0/24 maxlen: 24
77.245.100.0/24 maxlen: 24
77.245.101.0/24 maxlen: 24
77.245.102.0/24 maxlen: 24
77.245.103.0/24 maxlen: 24
77.245.104.0/22 maxlen: 22
77.245.104.0/24 maxlen: 24
77.245.105.0/24 maxlen: 24
77.245.106.0/24 maxlen: 24
77.245.107.0/24 maxlen: 24
77.245.108.0/23 maxlen: 23
77.245.108.0/24 maxlen: 24
77.245.109.0/24 maxlen: 24
77.245.110.0/24 maxlen: 24
77.245.111.0/24 maxlen: 24
80.242.208.0/24 maxlen: 24
80.242.209.0/24 maxlen: 24
80.242.210.0/24 maxlen: 24
80.242.211.0/24 maxlen: 24
80.242.212.0/24 maxlen: 24
80.242.213.0/24 maxlen: 24
80.242.214.0/24 maxlen: 24
80.242.215.0/24 maxlen: 24
80.242.216.0/24 maxlen: 24
80.242.217.0/24 maxlen: 24
80.242.218.0/24 maxlen: 24
80.242.219.0/24 maxlen: 24
80.242.220.0/24 maxlen: 24
80.242.221.0/24 maxlen: 24
80.242.222.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
89.219.24.0/24 maxlen: 24
89.219.25.0/24 maxlen: 24
89.219.27.0/24 maxlen: 24
93.185.64.0/24 maxlen: 24
93.185.65.0/24 maxlen: 24
93.185.66.0/24 maxlen: 24
93.185.67.0/24 maxlen: 24
93.185.68.0/24 maxlen: 24
93.185.69.0/24 maxlen: 24
93.185.70.0/24 maxlen: 24
93.185.71.0/24 maxlen: 24
93.185.72.0/21 maxlen: 21
93.185.72.0/24 maxlen: 24
93.185.73.0/24 maxlen: 24
93.185.74.0/24 maxlen: 24
93.185.75.0/24 maxlen: 24
93.185.76.0/24 maxlen: 24
93.185.77.0/24 maxlen: 24
93.185.78.0/24 maxlen: 24
93.185.79.0/24 maxlen: 24
95.141.128.0/24 maxlen: 24
95.141.129.0/24 maxlen: 24
95.141.130.0/24 maxlen: 24
95.141.131.0/24 maxlen: 24
95.141.132.0/24 maxlen: 24
95.141.133.0/24 maxlen: 24
95.141.134.0/24 maxlen: 24
95.141.135.0/24 maxlen: 24
95.141.136.0/22 maxlen: 22
95.141.136.0/24 maxlen: 24
95.141.137.0/24 maxlen: 24
95.141.138.0/24 maxlen: 24
95.141.139.0/24 maxlen: 24
95.141.140.0/24 maxlen: 24
95.141.141.0/24 maxlen: 24
95.141.142.0/24 maxlen: 24
95.141.143.0/24 maxlen: 24
185.20.124.0/24 maxlen: 24
185.20.125.0/24 maxlen: 24
185.20.126.0/23 maxlen: 23
185.20.126.0/24 maxlen: 24
185.20.127.0/24 maxlen: 24
188.0.128.0/24 maxlen: 24
188.0.129.0/24 maxlen: 24
188.0.130.0/24 maxlen: 24
188.0.131.0/24 maxlen: 24
188.0.132.0/24 maxlen: 24
188.0.133.0/24 maxlen: 24
188.0.134.0/24 maxlen: 24
188.0.135.0/24 maxlen: 24
188.0.136.0/24 maxlen: 24
188.0.137.0/24 maxlen: 24
188.0.138.0/24 maxlen: 24
188.0.139.0/24 maxlen: 24
188.0.140.0/22 maxlen: 24
188.0.141.0/24 maxlen: 24
188.0.142.0/24 maxlen: 24
188.0.143.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.0.145.0/24 maxlen: 24
188.0.146.0/24 maxlen: 24
188.0.147.0/24 maxlen: 24
188.0.148.0/24 maxlen: 24
188.0.149.0/24 maxlen: 24
188.0.150.0/24 maxlen: 24
188.0.151.0/24 maxlen: 24
188.0.152.0/24 maxlen: 24
188.0.153.0/24 maxlen: 24
188.0.154.0/24 maxlen: 24
188.0.155.0/24 maxlen: 24
188.0.156.0/24 maxlen: 24
188.0.157.0/24 maxlen: 24
188.0.158.0/24 maxlen: 24
188.0.159.0/24 maxlen: 24
188.127.32.0/24 maxlen: 24
188.127.33.0/24 maxlen: 24
188.127.34.0/24 maxlen: 24
188.127.35.0/24 maxlen: 24
188.127.36.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
188.127.38.0/24 maxlen: 24
188.127.39.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
188.127.41.0/24 maxlen: 24
188.127.42.0/24 maxlen: 24
188.127.43.0/24 maxlen: 24
188.127.44.0/24 maxlen: 24
188.127.45.0/24 maxlen: 24
188.127.46.0/24 maxlen: 24
188.127.47.0/24 maxlen: 24
188.127.48.0/24 maxlen: 24
188.127.49.0/24 maxlen: 24
188.127.50.0/24 maxlen: 24
188.127.51.0/24 maxlen: 24
188.127.52.0/24 maxlen: 24
193.29.53.0/24 maxlen: 24
195.189.28.0/24 maxlen: 24
195.189.29.0/24 maxlen: 24
195.189.30.0/24 maxlen: 24
195.189.31.0/24 maxlen: 24
217.196.16.0/24 maxlen: 24
217.196.17.0/24 maxlen: 24
217.196.18.0/24 maxlen: 24
217.196.19.0/24 maxlen: 24
217.196.20.0/24 maxlen: 24
217.196.21.0/24 maxlen: 24
217.196.22.0/24 maxlen: 24
217.196.23.0/24 maxlen: 24
217.196.24.0/24 maxlen: 24
217.196.25.0/24 maxlen: 24
217.196.26.0/23 maxlen: 23
217.196.26.0/24 maxlen: 24
217.196.27.0/24 maxlen: 24
217.196.28.0/24 maxlen: 24
217.196.29.0/24 maxlen: 24
217.196.30.0/24 maxlen: 24
217.196.31.0/24 maxlen: 24
2a03:a300::/32 maxlen: 32
2a03:a300:800::/37 maxlen: 37
2a03:a300:1000::/48 maxlen: 48
2a03:a300:1140::/48 maxlen: 48
2a03:a300:2000::/48 maxlen: 48
2a03:a300:2020::/48 maxlen: 48
2a03:a300:3000::/36 maxlen: 36
2a03:a300:3000::/48 maxlen: 48
2a03:a300:4000::/44 maxlen: 44
2a03:a300:4100::/48 maxlen: 48
2a03:a300:5000::/36 maxlen: 36
2a03:a300:5000::/42 maxlen: 42
2a03:a300:5000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:c9:1c:a3:b6:b0:8d:58:20:50:e0:9e:97:ac:75:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Nov 10 09:27:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b6589701ef9b92a74b1c2f2cce195fa1446571d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ad:ad:3f:72:84:cc:f2:bd:a6:f8:ad:c4:6b:
3e:0b:af:ee:ef:7a:58:b8:64:38:71:96:6d:0e:83:
b8:46:d6:8c:6c:7c:25:7b:a2:66:49:96:10:5a:31:
03:91:63:61:14:c1:ff:57:52:5a:80:dc:8e:37:38:
14:11:83:26:63:7a:f1:d8:9c:07:6e:37:f5:74:9f:
17:96:bd:74:d5:e4:0b:53:20:d8:e0:a0:08:4e:50:
40:7c:dc:ae:83:57:8a:98:e3:60:e8:3f:2a:6f:99:
85:2a:85:d7:9d:ea:cc:56:06:68:db:06:f9:8e:1f:
b6:c4:56:fb:31:f1:ae:91:25:0a:3c:76:d8:60:04:
a6:e6:a0:09:24:eb:88:92:6c:a3:6a:1b:5e:78:0c:
11:c7:19:50:89:77:ff:d0:d2:97:7b:59:94:4c:9c:
df:2f:59:9b:39:ae:c4:35:12:c6:0b:2f:59:7b:0c:
81:41:4f:e0:ce:b0:41:98:f4:0e:88:d3:fc:5f:fe:
60:51:cc:02:ac:01:1e:a6:bf:d0:5c:b8:15:56:16:
93:c5:d3:55:e4:67:f8:77:62:d1:05:46:2b:d2:92:
54:25:76:63:30:53:ed:de:ae:32:64:a5:62:17:dd:
85:95:45:f5:d0:d5:ff:6c:e7:5e:62:d3:bf:f9:6d:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:65:89:70:1E:F9:B9:2A:74:B1:C2:F2:CC:E1:95:FA:14:46:57:1D
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/K2WJcB75uSp0scLyzOGV-hRGVx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.64.0/21
46.235.80.0/21
77.245.96.0/20
80.242.208.0/20
89.219.24.0/23
89.219.27.0/24
93.185.64.0/20
95.141.128.0/20
185.20.124.0/22
188.0.128.0/19
188.127.32.0-188.127.52.255
193.29.53.0/24
195.189.28.0/22
217.196.16.0/20
IPv6:
2a03:a300::/32
Signature Algorithm: sha256WithRSAEncryption
74:9e:f9:1a:1c:a5:bf:a8:6c:b4:15:48:bc:6e:02:91:00:2a:
75:78:a8:38:87:c8:30:ed:32:78:35:49:0c:4b:e0:0f:87:1b:
a9:65:fb:92:cd:3d:93:f6:88:f9:5d:57:dc:68:af:79:f5:e1:
96:38:3d:19:31:05:69:26:9f:23:11:f3:7d:2a:85:5f:f0:68:
57:a2:8a:61:fb:5c:9d:0b:4d:12:50:99:f0:79:71:62:6a:81:
a1:76:38:2d:7b:cc:1f:72:2b:a5:71:ab:12:62:aa:3d:07:3f:
08:16:29:0e:a7:52:ac:a8:c6:91:51:ff:49:d3:f3:f5:16:de:
73:43:a3:d0:e1:9e:f3:88:85:23:c3:ce:d0:6d:d1:ff:d2:ed:
71:9f:05:65:98:d1:d9:56:be:f5:67:f8:57:c6:28:19:da:b2:
76:57:44:e4:db:19:71:25:bf:85:8c:fb:1e:98:10:dd:7e:3d:
70:58:f2:90:e5:e6:ff:9d:42:b5:97:30:3d:f3:9a:f1:c1:9a:
8e:72:d9:3b:b8:18:ab:e5:89:ff:05:21:1e:a6:cf:13:18:8b:
09:ff:29:c8:12:7f:e2:6d:39:2a:08:2d:2f:26:e6:f9:e4:bb:
ee:c2:6b:1b:09:c3:e9:17:d6:a3:67:81:d6:ee:f6:b5:bc:ef:
6f:23:f0:a4
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAaHEyRyjtrCNWCBQ4J6XrHW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh
YmE5ZmEwHhcNMjYxMTEwMDkyNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjY1ODk3MDFlZjliOTJhNzRiMWMyZjJjY2UxOTVmYTE0NDY1NzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA962tP3KEzPK9pvitxGs+C6/u73pY
uGQ4cZZtDoO4RtaMbHwle6JmSZYQWjEDkWNhFMH/V1JagNyONzgUEYMmY3rx2JwH
bjf1dJ8Xlr101eQLUyDY4KAITlBAfNyug1eKmONg6D8qb5mFKoXXnerMVgZo2wb5
jh+2xFb7MfGukSUKPHbYYASm5qAJJOuIkmyjahteeAwRxxlQiXf/0NKXe1mUTJzf
L1mbOa7ENRLGCy9ZewyBQU/gzrBBmPQOiNP8X/5gUcwCrAEepr/QXLgVVhaTxdNV
5Gf4d2LRBUYr0pJUJXZjMFPt3q4yZKViF92FlUX10NX/bOdeYtO/+W0LfQIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFCtliXAe+bkqdLHC8szhlfoURlcdMB8GA1UdIwQY
MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt
NDM4NDNjMmU5NDNiLzEvSzJXSmNCNzV1U3Awc2NMeXpPR1YtaFJHVngwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi
LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAyXkQAME
Ay7rUAMEBE31YAMEBFDy0AMEAVnbGAMEAFnbGwMEBF25QAMEBF+NgAMEArkUfAME
BbwAgDAMAwQFvH8gAwQAvH80AwQAwR01AwQCw70cAwQE2cQQMA0EAgACMAcDBQAq
A6MAMA0GCSqGSIb3DQEBCwUAA4IBAQB0nvkaHKW/qGy0FUi8bgKRACp1eKg4h8gw
7TJ4NUkMS+APhxupZfuSzT2T9oj5XVfcaK959eGWOD0ZMQVpJp8jEfN9KoVf8GhX
ooph+1ydC00SUJnweXFiaoGhdjgte8wfciulcasSYqo9Bz8IFikOp1KsqMaRUf9J
0/P1Ft5zQ6PQ4Z7ziIUjw87QbdH/0u1xnwVlmNHZVr71Z/hXxigZ2rJ2V0Tk2xlx
Jb+FjPsemBDdfj1wWPKQ5eb/nUK1lzA985rxwZqOctk7uBir5Yn/BSEeps8TGIsJ
/ynIEn/ibTkqCC0vJub55LvuwmsbCcPpF9ajZ4HW7va1vO9vI/Ck
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:41:50 2026 by rpki-client