Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9i9oFlp_2-Kmowxe-0qZLMBp8-k.roa
File: 9i9oFlp_2-Kmowxe-0qZLMBp8-k.roa (raw, json)
Hash identifier: hfEts/enjP2G09inHqZA+JJmlqClmorkPilC/T5qM8M=
Subject key identifier: F6:2F:68:16:5A:7F:DB:E2:A6:A3:0C:5E:FB:4A:99:2C:C0:69:F3:E9
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019E025F3EBA69277A2D010E0A61B6B7C5C6
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9i9oFlp_2-Kmowxe-0qZLMBp8-k.roa
Signing time: Thu 07 May 2026 12:17:36 +0000
ROA not before: Thu 07 May 2026 12:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24589
IP address blocks: 31.42.80.0/20 maxlen: 20
83.243.88.0/21 maxlen: 21
84.38.136.0/21 maxlen: 21
87.99.64.0/19 maxlen: 19
87.99.64.0/24 maxlen: 24
87.99.65.0/24 maxlen: 24
87.99.66.0/24 maxlen: 24
87.99.67.0/24 maxlen: 24
87.99.95.0/24 maxlen: 24
88.135.128.0/20 maxlen: 20
88.135.144.0/21 maxlen: 21
88.135.156.0/22 maxlen: 22
91.90.224.0/19 maxlen: 29
91.90.225.0/24 maxlen: 24
91.90.230.0/24 maxlen: 24
91.90.231.0/24 maxlen: 24
91.90.236.0/24 maxlen: 24
91.90.237.0/25 maxlen: 25
91.90.238.0/24 maxlen: 24
91.90.252.64/29 maxlen: 29
91.90.255.0/24 maxlen: 24
91.233.214.0/23 maxlen: 23
109.197.208.0/21 maxlen: 21
109.197.208.0/24 maxlen: 24
109.229.192.0/20 maxlen: 20
109.229.208.0/21 maxlen: 21
171.25.218.0/23 maxlen: 23
176.103.176.0/22 maxlen: 22
176.103.184.0/24 maxlen: 24
176.106.48.0/20 maxlen: 20
176.106.100.0/23 maxlen: 23
176.106.160.0/20 maxlen: 20
176.106.176.0/21 maxlen: 21
185.47.10.0/24 maxlen: 24
185.47.11.0/24 maxlen: 24
185.220.198.0/23 maxlen: 23
193.111.244.0/22 maxlen: 22
193.238.212.0/22 maxlen: 22
193.238.212.128/25 maxlen: 25
193.238.216.0/21 maxlen: 21
194.9.212.0/22 maxlen: 22
194.9.212.0/24 maxlen: 24
195.69.88.0/22 maxlen: 22
213.110.64.0/23 maxlen: 23
213.110.76.0/22 maxlen: 22
213.110.80.0/20 maxlen: 20
2a01:8ca0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:5f:3e:ba:69:27:7a:2d:01:0e:0a:61:b6:b7:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: May 7 12:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f62f68165a7fdbe2a6a30c5efb4a992cc069f3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:cd:48:60:d7:24:f2:c7:e4:67:dd:3f:b8:
64:93:b0:3f:b3:fb:47:5e:4d:d7:e5:77:e2:53:8f:
d1:77:1d:50:6c:ec:b2:ad:34:66:7d:26:a8:d0:4f:
41:a8:07:d8:2e:5a:8c:a8:09:a4:51:62:1f:00:e0:
ae:81:14:ed:7b:3e:2d:47:5a:5d:48:98:d5:03:33:
1e:e8:82:ca:e9:fa:6e:e6:5c:5a:ba:28:05:b5:35:
9e:1a:f8:23:cc:84:03:e7:85:86:0a:26:41:e2:b4:
3b:f6:e6:52:4d:6e:e1:c2:8f:29:c1:78:31:20:89:
40:06:59:a0:09:63:9f:31:37:74:e4:63:62:9f:04:
4f:38:a4:43:8f:d7:74:b0:85:9c:ce:0b:e8:89:9c:
69:32:c3:74:47:d6:b8:7d:52:07:02:1c:24:2e:aa:
44:3b:8c:a9:25:0d:e0:42:21:c4:dc:24:47:9a:22:
48:e2:66:5b:34:ad:0e:c4:96:0c:0c:8f:80:7e:aa:
d7:04:d4:d4:5d:40:50:65:cc:a3:dc:12:d6:a5:3e:
1d:85:0a:37:61:82:e7:78:00:02:ee:02:23:64:3e:
fc:2a:89:22:46:77:25:7e:73:23:95:4b:b9:f1:27:
21:09:68:d9:82:08:b4:9c:99:fd:be:f2:8e:5d:e4:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2F:68:16:5A:7F:DB:E2:A6:A3:0C:5E:FB:4A:99:2C:C0:69:F3:E9
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/9i9oFlp_2-Kmowxe-0qZLMBp8-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.80.0/20
83.243.88.0/21
84.38.136.0/21
87.99.64.0/19
88.135.128.0-88.135.151.255
88.135.156.0/22
91.90.224.0/19
91.233.214.0/23
109.197.208.0/21
109.229.192.0-109.229.215.255
171.25.218.0/23
176.103.176.0/22
176.103.184.0/24
176.106.48.0/20
176.106.100.0/23
176.106.160.0-176.106.183.255
185.47.10.0/23
185.220.198.0/23
193.111.244.0/22
193.238.212.0-193.238.223.255
194.9.212.0/22
195.69.88.0/22
213.110.64.0/23
213.110.76.0-213.110.95.255
IPv6:
2a01:8ca0::/32
Signature Algorithm: sha256WithRSAEncryption
01:3d:e9:06:c7:b9:4a:6e:48:0b:2d:c2:51:53:24:e8:28:dd:
13:c7:c3:1e:79:ba:e5:34:c5:9f:a1:f4:f5:5f:51:89:32:e7:
c1:8a:de:c1:91:d6:54:93:d4:1f:d0:95:40:d8:e5:42:fd:ef:
b6:f2:eb:09:89:22:1d:ce:a5:4d:f9:f8:46:21:66:13:9c:3e:
67:4a:e2:f8:52:0a:e8:1b:88:bd:1a:6b:ea:c3:65:90:59:44:
e1:fb:a8:54:92:30:29:c3:5f:4d:12:d6:d4:3d:23:42:ce:61:
58:85:46:29:9b:0f:a7:95:6f:96:7b:b9:e8:1d:9d:07:14:fb:
cb:cb:44:58:60:4a:81:28:7e:75:84:b3:62:9a:fc:db:07:a7:
fb:5d:48:a2:fe:39:84:a9:ff:f7:a1:ef:17:a3:57:cb:b6:fd:
bd:38:e0:09:eb:f0:e5:7c:91:b7:f5:fe:f7:33:08:70:6e:de:
0a:73:dc:37:e2:d5:36:74:63:b5:3f:e7:41:81:bf:cf:3b:e8:
a2:ee:0c:af:a0:e6:c9:b5:22:c1:12:e8:1d:71:ed:1e:5d:52:
d6:58:fa:9c:a5:6f:34:41:7e:51:b2:c0:be:4e:60:b2:87:36:
5b:19:50:03:b3:f6:cb:c7:b6:c7:c4:e0:91:45:5b:0f:42:a6:
c0:e9:13:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:49 2026 by rpki-client