Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ALP2B3qF_CbYiF3Zj5C1caJ9VaQ.roa
File: ALP2B3qF_CbYiF3Zj5C1caJ9VaQ.roa (raw, json)
Hash identifier: rGfXJgVQMLoKbsBUGjLWIfQF2f+AZfLjVb+yEM0glNk=
Subject key identifier: 00:B3:F6:07:7A:85:FC:26:D8:88:5D:D9:8F:90:B5:71:A2:7D:55:A4
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019E075E203EF63350C3C9191D3CCDF419AB
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ALP2B3qF_CbYiF3Zj5C1caJ9VaQ.roa
Signing time: Fri 08 May 2026 11:34:29 +0000
ROA not before: Fri 08 May 2026 11:34:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 31.131.12.0/22 maxlen: 22
31.133.24.0/22 maxlen: 22
31.133.192.0/24 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.196.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
31.135.1.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
37.97.122.0/23 maxlen: 23
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.80.0/21 maxlen: 21
77.36.4.0/22 maxlen: 22
77.36.8.0/21 maxlen: 21
77.36.28.0/23 maxlen: 23
77.36.30.0/24 maxlen: 24
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
77.36.38.0/23 maxlen: 23
77.36.40.0/21 maxlen: 21
77.36.48.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
77.36.57.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
77.36.68.0/22 maxlen: 22
77.36.80.0/21 maxlen: 21
77.36.89.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
77.36.92.0/22 maxlen: 22
77.36.96.0/20 maxlen: 20
77.232.192.0/23 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.196.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.204.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
77.232.220.0/22 maxlen: 22
81.161.12.0/22 maxlen: 22
85.204.196.0/23 maxlen: 24
86.104.132.0/23 maxlen: 24
89.34.74.0/23 maxlen: 24
89.42.232.0/23 maxlen: 24
89.44.100.0/23 maxlen: 24
89.45.92.0/23 maxlen: 24
89.46.112.0/23 maxlen: 24
91.218.252.0/23 maxlen: 23
91.218.254.0/23 maxlen: 23
91.223.158.0/24 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.228.119.0/24 maxlen: 24
91.229.6.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
91.231.223.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.226.0/24 maxlen: 24
91.232.16.0/23 maxlen: 23
91.232.254.0/24 maxlen: 24
91.233.2.0/23 maxlen: 23
91.233.202.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
91.234.222.0/23 maxlen: 23
91.236.77.0/24 maxlen: 24
91.236.237.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
91.239.0.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
91.240.156.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
91.246.184.0/22 maxlen: 22
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
93.120.8.0/24 maxlen: 24
93.120.9.0/24 maxlen: 24
93.120.12.0/22 maxlen: 22
93.120.27.0/24 maxlen: 24
93.120.28.0/23 maxlen: 23
93.120.30.0/24 maxlen: 24
93.120.46.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.64.0/21 maxlen: 21
93.120.74.0/24 maxlen: 24
93.120.75.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
93.120.86.0/23 maxlen: 23
93.120.88.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.92.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.120.0/22 maxlen: 22
109.207.140.0/23 maxlen: 23
171.25.223.0/24 maxlen: 24
176.96.48.0/22 maxlen: 22
176.96.56.0/21 maxlen: 21
176.96.93.0/24 maxlen: 24
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
176.107.72.0/21 maxlen: 21
176.110.106.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
176.111.0.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.112.84.0/22 maxlen: 22
176.115.236.0/24 maxlen: 24
176.116.40.0/21 maxlen: 21
176.118.88.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
176.121.96.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
176.124.180.0/22 maxlen: 22
178.159.147.0/24 maxlen: 24
178.159.148.0/22 maxlen: 22
178.159.152.0/21 maxlen: 21
185.9.236.0/22 maxlen: 22
185.9.240.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
188.191.248.0/22 maxlen: 22
188.191.252.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
193.0.190.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:5e:20:3e:f6:33:50:c3:c9:19:1d:3c:cd:f4:19:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 8 11:34:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00b3f6077a85fc26d8885dd98f90b571a27d55a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:c0:83:88:7b:61:4a:d7:7c:13:04:9f:43:
e7:fc:61:63:6d:4e:ab:a3:6f:21:e1:6f:7d:8a:e1:
36:a8:12:6f:c7:83:a9:4e:25:6a:d6:d0:e0:0e:74:
7e:aa:f4:bb:59:dc:9e:7d:5f:03:0f:5d:ce:fe:19:
c1:f6:d2:fa:a6:dd:ba:f7:ae:e6:1c:e9:c2:6c:8f:
76:6f:b4:91:f0:3a:60:f5:8a:3d:5a:5d:3f:c7:54:
a4:19:a8:98:bc:9d:37:8f:ed:72:11:c4:f9:b6:dc:
49:b0:b8:5c:26:35:36:7c:81:e5:d3:c6:27:7b:35:
05:16:c5:40:80:5a:c2:8e:20:6f:46:b3:ae:a2:96:
80:6b:21:74:79:5c:0d:e9:04:9b:c6:5e:a5:0c:a2:
e7:a8:c8:3b:eb:17:3c:11:56:f5:23:8c:0a:cd:a5:
fe:72:06:10:46:40:40:38:8a:91:d2:41:0c:7b:8b:
7e:4d:5a:36:4a:12:41:1f:98:76:05:15:57:b6:2d:
be:42:80:34:8f:86:7f:bf:64:6b:86:f3:b9:21:d2:
e8:14:7a:aa:84:1c:28:9f:dd:e8:e9:3b:9a:dd:ea:
ae:74:c1:2f:ff:98:e6:77:5d:c2:db:0c:54:7c:94:
a8:ec:11:ff:e4:94:7e:30:3a:79:08:a9:49:17:ff:
fd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B3:F6:07:7A:85:FC:26:D8:88:5D:D9:8F:90:B5:71:A2:7D:55:A4
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ALP2B3qF_CbYiF3Zj5C1caJ9VaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.24.0/22
31.133.192.0/21
31.135.1.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.80.0/21
77.36.4.0-77.36.15.255
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
77.36.80.0/21
77.36.89.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.218.252.0/22
91.223.158.0/24
91.225.34.0/23
91.228.119.0/24
91.229.6.0/24
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.232.254.0/24
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.239.0.0/22
91.239.178.0/24
91.239.222.0/23
91.240.156.0/22
91.245.176.0/21
91.246.184.0/21
91.246.196.0/22
93.120.8.0/23
93.120.12.0/22
93.120.27.0-93.120.30.255
93.120.46.0/24
93.120.48.0-93.120.71.255
93.120.74.0-93.120.83.255
93.120.85.0-93.120.90.255
93.120.92.0/22
93.120.120.0/22
109.207.140.0/23
171.25.223.0/24
176.96.48.0/22
176.96.56.0/21
176.96.93.0/24
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/24
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.115.236.0/24
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.147.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/21
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
Signature Algorithm: sha256WithRSAEncryption
23:5c:c3:7c:b3:93:d8:33:13:93:5f:43:14:33:ff:4f:4e:0b:
e6:5d:8e:ee:60:f9:d5:53:d4:a3:d3:ca:52:95:2b:63:21:37:
1f:f2:e9:ae:26:79:67:23:92:ef:66:a6:4c:48:75:f0:29:f8:
60:7e:0a:f8:bf:9a:34:eb:38:ca:e9:3c:3f:f7:3a:c6:63:a4:
80:76:13:89:6b:3f:37:7e:fd:58:85:39:75:1e:59:f0:0e:fb:
4f:60:df:7e:d0:0a:88:73:0d:67:de:db:c2:a0:9c:bd:49:da:
ad:64:e8:3f:67:ee:0a:44:f5:23:01:5f:a7:09:a5:54:24:0d:
58:c2:9e:9c:48:2b:d7:4e:8a:14:bb:9c:c5:d6:1f:38:70:8d:
77:d0:28:5e:f3:92:a7:5b:45:11:f6:d0:42:de:e8:09:d1:12:
2c:ff:0c:63:c4:97:60:75:ea:ef:7e:41:c9:8e:8a:04:99:41:
73:9f:03:17:57:2e:03:21:27:c5:4a:8b:3f:f8:5a:7a:30:16:
9f:f6:75:5a:f7:93:da:a0:8d:a5:b0:4a:57:d7:e4:db:c3:b2:
5d:54:61:9e:9e:e1:a4:a3:6a:95:54:76:1d:e1:22:43:7c:13:
58:75:7e:37:5f:48:b1:b1:9d:44:b8:cd:3f:45:59:fc:15:4d:
c1:98:77:7c
-----BEGIN CERTIFICATE-----
MIIHbTCCBlWgAwIBAgISAZ4HXiA+9jNQw8kZHTzN9BmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjYwNTA4MTEzNDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGIzZjYwNzdhODVmYzI2ZDg4ODVkZDk4ZjkwYjU3MWEyN2Q1NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2DAg4h7YUrXfBMEn0Pn/GFjbU6r
o28h4W99iuE2qBJvx4OpTiVq1tDgDnR+qvS7WdyefV8DD13O/hnB9tL6pt26967m
HOnCbI92b7SR8Dpg9Yo9Wl0/x1SkGaiYvJ03j+1yEcT5ttxJsLhcJjU2fIHl08Yn
ezUFFsVAgFrCjiBvRrOuopaAayF0eVwN6QSbxl6lDKLnqMg76xc8EVb1I4wKzaX+
cgYQRkBAOIqR0kEMe4t+TVo2ShJBH5h2BRVXti2+QoA0j4Z/v2RrhvO5IdLoFHqq
hBwon93o6Tua3equdMEv/5jmd13C2wxUfJSo7BH/5JR+MDp5CKlJF//9JQIDAQAB
o4IEeTCCBHUwHQYDVR0OBBYEFACz9gd6hfwm2Ihd2Y+QtXGifVWkMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvQUxQMkIzcUZfQ2JZaUYzWmo1QzFjYUo5VmFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICjQYIKwYBBQUHAQcBAf8EggJ8MIICeDCCAnQEAgABMIIC
bAMEAh+DDAMEAh+FGAMEAx+FwAMEAB+HAQMEAB+HBwMEASVhejAMAwQBQCtCAwQD
QCtAAwQDQCtQMAwDBAJNJAQDBARNJAAwDAMEAk0kHAMEAE0kHjAMAwQFTSQgAwQB
TSQ0AwQATSQ5AwQATSQ8AwQATSRBAwQCTSREAwQDTSRQMAwDBABNJFkDBARNJGAw
DAMEBk3owAMEA03o0AMEAk3o3AMEAlGhDAMEAVXMxAMEAVZohAMEAVkiSgMEAVkq
6AMEAVksZAMEAVktXAMEAVkucAMEAlva/AMEAFvfngMEAVvhIgMEAFvkdwMEAFvl
BgMEAVvlEAMEAFvlHwMEAlvlnDAMAwQAW+ffAwQAW+fiAwQBW+gQAwQAW+j+AwQB
W+kCAwQBW+nKAwQBW+qWAwQCW+rcAwQAW+xNAwQAW+ztAwQAW+0wAwQCW+8AAwQA
W++yAwQBW+/eAwQCW/CcAwQDW/WwAwQDW/a4AwQCW/bEAwQBXXgIAwQCXXgMMAwD
BABdeBsDBABdeB4DBABdeC4wDAMEBF14MAMEA114QDAMAwQBXXhKAwQCXXhQMAwD
BABdeFUDBABdeFoDBAJdeFwDBAJdeHgDBAFtz4wDBACrGd8DBAKwYDADBAOwYDgD
BACwYF0DBAOwYLADBAOwYZADBAOwYjgDBASwa0ADBACwbmoDBAGwbnIDBAOwbwAD
BAKwcFQDBACwc+wDBAOwdCgDBAOwdlgDBAOweWADBAOwfLAwDAMEALKfkwMEBbKf
gDAMAwQCuQnsAwQCuQnwAwQCuWjEAwQDvL/4AwQAvNXpAwQAwQC+AwQDwSTAMA0G
CSqGSIb3DQEBCwUAA4IBAQAjXMN8s5PYMxOTX0MUM/9PTgvmXY7uYPnVU9Sj08pS
lStjITcf8umuJnlnI5LvZqZMSHXwKfhgfgr4v5o06zjK6Tw/9zrGY6SAdhOJaz83
fv1YhTl1HlnwDvtPYN9+0AqIcw1n3tvCoJy9SdqtZOg/Z+4KRPUjAV+nCaVUJA1Y
wp6cSCvXTooUu5zF1h84cI130Che85KnW0UR9tBC3ugJ0RIs/wxjxJdgdervfkHJ
jooEmUFznwMXVy4DISfFSos/+Fp6MBaf9nVa95PaoI2lsEpX1+Tbw7JdVGGenuGk
o2qVVHYd4SJDfBNYdX43X0ixsZ1EuM0/RVn8FU3BmHd8
-----END CERTIFICATE-----
Generated at Tue May 12 22:17:04 2026 by rpki-client