Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ngjOpkBELUZcTljZuEzHrelbDiU.roa
File: ngjOpkBELUZcTljZuEzHrelbDiU.roa (raw, json)
Hash identifier: 52NUtXquw4asJ+50EDShbwpThtGvU/W38K1Hvsghsk0=
Subject key identifier: 9E:08:CE:A6:40:44:2D:46:5C:4E:58:D9:B8:4C:C7:AD:E9:5B:0E:25
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0199EC7649991DED75E65799A68FCF24223D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ngjOpkBELUZcTljZuEzHrelbDiU.roa
Signing time: Thu 16 Oct 2025 09:59:58 +0000
ROA not before: Thu 16 Oct 2025 09:59:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.0.0/21 maxlen: 22
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.8.66.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.90.0/23 maxlen: 23
5.101.92.0/22 maxlen: 22
5.188.10.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
5.189.252.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.240.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:76:49:99:1d:ed:75:e6:57:99:a6:8f:cf:24:22:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 16 09:59:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e08cea640442d465c4e58d9b84cc7ade95b0e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:5f:f6:df:c6:cd:c4:90:8f:5a:86:aa:c0:
d1:b3:8e:94:db:b9:98:1d:fb:90:66:d6:20:a2:c3:
b0:8a:dc:72:ad:ba:8e:2d:47:4d:cc:b1:0f:9a:d1:
ae:dc:76:b6:15:1e:87:34:f5:4c:e9:92:36:e6:b3:
ec:c7:35:61:b2:d3:e5:79:3c:1e:3e:a8:c6:84:65:
9e:cc:1a:ce:7a:cb:da:da:10:62:fa:d3:2a:cd:db:
ef:66:dc:27:1b:d5:63:26:9b:63:87:3d:69:61:53:
a2:44:a9:8d:c2:a5:3a:b2:86:e7:b3:8a:35:87:c6:
2f:a2:a4:17:51:73:49:a0:9d:d9:e2:9a:40:e4:2b:
68:83:5f:d2:55:63:53:d2:3c:81:88:15:97:cb:99:
88:df:82:14:91:05:47:e9:da:8c:20:49:b9:8d:d2:
a6:36:ab:ec:cf:f0:64:ae:67:0c:93:ba:bf:2c:2c:
ba:4c:c5:78:32:ee:ea:7f:7d:6d:73:7e:f5:07:a0:
d0:89:c2:85:ef:9f:54:e4:40:60:a2:0e:da:04:ab:
95:49:8a:45:a5:87:c8:bb:c3:3c:a1:ee:9f:e2:b1:
34:98:04:c9:26:bf:d2:d7:56:ae:b4:99:57:a2:f1:
a5:21:34:68:1c:96:99:ef:59:96:1f:7b:d8:a7:57:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:08:CE:A6:40:44:2D:46:5C:4E:58:D9:B8:4C:C7:AD:E9:5B:0E:25
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ngjOpkBELUZcTljZuEzHrelbDiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.0.0-5.8.16.255
5.8.48.0/21
5.8.60.0/23
5.8.65.0-5.8.67.255
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.90.0-5.101.95.255
5.188.10.0/23
5.188.44.0-5.188.49.255
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0-5.189.252.255
31.44.188.0/22
31.184.192.0/21
31.184.238.0-31.184.241.255
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
b5:a4:30:eb:53:48:62:11:67:09:44:d5:51:7c:50:06:b7:cc:
e3:f3:19:7b:4d:fa:5f:ee:25:86:40:9f:f6:20:3a:8f:79:1b:
b6:d7:30:7c:1e:aa:cc:9b:e8:2d:5f:e7:38:17:4d:2a:29:3c:
cb:1a:5e:d3:47:86:41:b4:a6:25:93:66:db:53:ce:58:af:29:
fa:57:e1:29:33:e3:f4:8f:b4:1b:ea:13:79:7e:30:a2:90:a4:
8e:14:bd:56:82:74:96:e9:d3:a9:ae:47:bc:9d:0c:ca:5e:cf:
20:1d:f0:31:c3:71:ef:cc:37:ef:33:f7:be:f0:42:c9:2b:2a:
a7:11:73:b4:ea:e1:ff:14:6c:e3:ed:93:82:55:50:b5:a0:3a:
9d:07:eb:0a:f9:ca:c7:14:8d:d3:b5:f8:aa:ab:f0:60:dd:7f:
ac:27:82:bc:dc:72:89:9e:83:6e:f3:12:eb:e9:3b:e7:df:b6:
35:e6:6c:0b:2e:a2:02:1b:e7:7e:64:63:3e:fe:6f:c3:21:8a:
26:57:ed:69:20:ca:9b:ce:bb:50:c8:89:b2:52:b2:71:78:62:
fd:1b:05:9f:c5:e0:f0:d8:08:5f:a6:5b:04:c2:ad:1c:29:f9:
d9:42:5e:b8:31:0f:55:bb:1b:52:c7:85:cb:46:04:62:fd:15:
1c:20:f3:81
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISAZnsdkmZHe115leZpo/PJCI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUxMDE2MDk1OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTA4Y2VhNjQwNDQyZDQ2NWM0ZTU4ZDliODRjYzdhZGU5NWIwZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xtf9t/GzcSQj1qGqsDRs46U27mY
HfuQZtYgosOwitxyrbqOLUdNzLEPmtGu3Ha2FR6HNPVM6ZI25rPsxzVhstPleTwe
PqjGhGWezBrOesva2hBi+tMqzdvvZtwnG9VjJptjhz1pYVOiRKmNwqU6sobns4o1
h8YvoqQXUXNJoJ3Z4ppA5Ctog1/SVWNT0jyBiBWXy5mI34IUkQVH6dqMIEm5jdKm
Nqvsz/BkrmcMk7q/LCy6TMV4Mu7qf31tc371B6DQicKF759U5EBgog7aBKuVSYpF
pYfIu8M8oe6f4rE0mATJJr/S11autJlXovGlITRoHJaZ71mWH3vYp1c2gwIDAQAB
o4IDSTCCA0UwHQYDVR0OBBYEFJ4IzqZARC1GXE5Y2bhMx63pWw4lMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvbmdqT3BrQkVMVVpjVGxqWnVFekhyZWxiRGlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXQYIKwYBBQUHAQcBAf8EggFMMIIBSDCCATEEAgABMIIB
KTALAwMDBQgDBAAFCBADBAMFCDADBAEFCDwwDAMEAAUIQQMEAgUIQAMEAwVlAAME
AgVlIAMEAgVlQDAMAwQBBWVaAwQFBWVAAwQBBbwKMAwDBAIFvCwDBAEFvDADBAEF
vMwDBAIFvNADBAAFvN8wDAMEAAW86QMEAgW86DAMAwQDBb34AwQABb38AwQCHyy8
AwQDH7jAMAwDBAEfuO4DBAEfuPADBAAfuPMDBAAlCTADBAAlizUDBAIlizgDBAEu
oQIDBAAuoQgDBAAuoQoDBAEuoQ4DBAIuoRQwDAMEAi6hHAMEAi6hIDAMAwQCLqEs
AwQCLqEwAwQCW/MgMAwDBARb8zADBAFb8zwDBAJf1wAwDAMEAJK53wMEA5K54AME
AryP6AMEAcMC8DARBAIAAjALAwkGKgAdeAEAAcAwDQYJKoZIhvcNAQELBQADggEB
ALWkMOtTSGIRZwlE1VF8UAa3zOPzGXtN+l/uJYZAn/YgOo95G7bXMHweqsyb6C1f
5zgXTSopPMsaXtNHhkG0piWTZttTzlivKfpX4Skz4/SPtBvqE3l+MKKQpI4UvVaC
dJbp06muR7ydDMpezyAd8DHDce/MN+8z977wQskrKqcRc7Tq4f8UbOPtk4JVULWg
Op0H6wr5yscUjdO1+Kqr8GDdf6wngrzccomeg27zEuvpO+fftjXmbAsuogIb535k
Yz7+b8MhiiZX7WkgypvOu1DIibJSsnF4Yv0bBZ/F4PDYCF+mWwTCrRwp+dlCXrgx
D1W7G1LHhctGBGL9FRwg84E=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:19 2025 by rpki-client