Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/P6oyadqlwqP-DrlBJJ2fbfFpmrI.roa
File: P6oyadqlwqP-DrlBJJ2fbfFpmrI.roa (raw, json)
Hash identifier: /L4tGaUMyOsdEgF14XzQHHpAHXijffWwLH5iTMaIx4I=
Subject key identifier: 3F:AA:32:69:DA:A5:C2:A3:FE:0E:B9:41:24:9D:9F:6D:F1:69:9A:B2
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1B200071E6093B2DDFEBC565DF384A574
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/P6oyadqlwqP-DrlBJJ2fbfFpmrI.roa
Signing time: Fri 06 Nov 2026 17:55:08 +0000
ROA not before: Fri 06 Nov 2026 17:55:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 103.147.170.0/24 maxlen: 24
103.148.141.0/24 maxlen: 24
103.149.85.0/24 maxlen: 24
103.152.175.0/24 maxlen: 24
130.49.2.0/24 maxlen: 24
130.49.5.0/24 maxlen: 24
130.49.14.0/24 maxlen: 24
130.49.17.0/24 maxlen: 24
130.49.22.0/24 maxlen: 24
130.49.24.0/24 maxlen: 24
130.49.31.0/24 maxlen: 24
130.49.32.0/24 maxlen: 24
130.49.39.0/24 maxlen: 24
130.49.42.0/24 maxlen: 24
130.49.47.0/24 maxlen: 24
130.49.51.0/24 maxlen: 24
130.49.55.0/24 maxlen: 24
130.49.60.0/24 maxlen: 24
130.49.62.0/24 maxlen: 24
130.49.68.0/24 maxlen: 24
130.49.70.0/24 maxlen: 24
130.49.81.0/24 maxlen: 24
130.49.84.0/24 maxlen: 24
130.49.87.0/24 maxlen: 24
130.49.89.0/24 maxlen: 24
130.49.92.0/24 maxlen: 24
130.49.96.0/24 maxlen: 24
130.49.101.0/24 maxlen: 24
130.49.104.0/24 maxlen: 24
130.49.110.0/24 maxlen: 24
130.49.111.0/24 maxlen: 24
130.49.122.0/24 maxlen: 24
130.49.125.0/24 maxlen: 24
138.249.28.0/24 maxlen: 24
138.249.46.0/24 maxlen: 24
138.249.52.0/24 maxlen: 24
138.249.54.0/24 maxlen: 24
138.249.58.0/24 maxlen: 24
138.249.59.0/24 maxlen: 24
138.249.77.0/24 maxlen: 24
138.249.84.0/24 maxlen: 24
138.249.86.0/24 maxlen: 24
138.249.88.0/24 maxlen: 24
138.249.91.0/24 maxlen: 24
138.249.120.0/24 maxlen: 24
138.249.121.0/24 maxlen: 24
138.249.122.0/24 maxlen: 24
138.249.124.0/24 maxlen: 24
138.249.150.0/24 maxlen: 24
138.249.201.0/24 maxlen: 24
138.249.214.0/24 maxlen: 24
138.249.221.0/24 maxlen: 24
138.249.232.0/24 maxlen: 24
138.249.240.0/24 maxlen: 24
138.249.255.0/24 maxlen: 24
155.212.34.0/24 maxlen: 24
155.212.44.0/24 maxlen: 24
155.212.46.0/24 maxlen: 24
155.212.53.0/24 maxlen: 24
155.212.55.0/24 maxlen: 24
155.212.60.0/24 maxlen: 24
155.212.63.0/24 maxlen: 24
155.212.67.0/24 maxlen: 24
155.212.74.0/24 maxlen: 24
155.212.75.0/24 maxlen: 24
155.212.81.0/24 maxlen: 24
155.212.82.0/24 maxlen: 24
155.212.89.0/24 maxlen: 24
155.212.92.0/24 maxlen: 24
155.212.96.0/24 maxlen: 24
155.212.101.0/24 maxlen: 24
155.212.104.0/24 maxlen: 24
155.212.115.0/24 maxlen: 24
155.212.117.0/24 maxlen: 24
155.212.122.0/24 maxlen: 24
155.212.126.0/24 maxlen: 24
170.168.26.0/24 maxlen: 24
170.168.27.0/24 maxlen: 24
170.168.144.0/24 maxlen: 24
170.168.146.0/24 maxlen: 24
170.168.197.0/24 maxlen: 24
170.168.207.0/24 maxlen: 24
170.168.212.0/24 maxlen: 24
170.168.223.0/24 maxlen: 24
170.168.228.0/24 maxlen: 24
170.168.238.0/24 maxlen: 24
170.168.248.0/24 maxlen: 24
213.178.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b2:00:07:1e:60:93:b2:dd:fe:bc:56:5d:f3:84:a5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 6 17:55:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3faa3269daa5c2a3fe0eb941249d9f6df1699ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:46:9f:a4:26:70:d9:f0:f6:34:6c:c5:0b:
31:61:c3:7f:df:1a:ff:3b:51:69:31:6e:c0:31:a7:
91:57:d9:ee:52:4c:75:0c:ef:64:fc:5e:9d:b1:0c:
31:5f:58:24:92:9f:f4:0d:18:90:e6:e5:e3:fa:ab:
21:c0:28:e0:95:73:81:60:60:e5:5f:c8:08:9c:70:
1b:c1:f5:cd:db:f6:97:c2:21:3c:10:e4:f2:7d:69:
4d:b5:3e:fe:95:38:66:ad:8c:f1:02:d2:67:91:76:
80:59:21:3d:bb:9d:89:1f:87:49:56:9e:83:42:9a:
32:26:60:f1:a1:73:98:5a:53:39:2f:c5:be:64:41:
18:5e:de:83:1f:69:92:e4:9a:ee:9b:f4:d3:11:bd:
ae:ff:47:38:5e:fa:34:1b:b5:0a:15:82:06:fe:01:
17:8a:f7:6b:9a:73:e5:fd:76:0f:a0:ee:e7:46:42:
94:c1:a4:52:b8:bc:77:c0:0a:17:1a:ae:29:7a:e6:
24:e4:49:77:de:60:7d:da:87:76:df:5b:cc:3b:52:
e5:b0:09:c5:e7:25:eb:23:0b:0d:b5:5f:2e:31:44:
6e:83:be:8d:99:70:47:17:7e:38:26:81:9b:ed:b6:
c5:af:39:c9:95:6e:62:50:d4:56:01:d1:4c:b2:4c:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AA:32:69:DA:A5:C2:A3:FE:0E:B9:41:24:9D:9F:6D:F1:69:9A:B2
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/P6oyadqlwqP-DrlBJJ2fbfFpmrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.170.0/24
103.148.141.0/24
103.149.85.0/24
103.152.175.0/24
130.49.2.0/24
130.49.5.0/24
130.49.14.0/24
130.49.17.0/24
130.49.22.0/24
130.49.24.0/24
130.49.31.0-130.49.32.255
130.49.39.0/24
130.49.42.0/24
130.49.47.0/24
130.49.51.0/24
130.49.55.0/24
130.49.60.0/24
130.49.62.0/24
130.49.68.0/24
130.49.70.0/24
130.49.81.0/24
130.49.84.0/24
130.49.87.0/24
130.49.89.0/24
130.49.92.0/24
130.49.96.0/24
130.49.101.0/24
130.49.104.0/24
130.49.110.0/23
130.49.122.0/24
130.49.125.0/24
138.249.28.0/24
138.249.46.0/24
138.249.52.0/24
138.249.54.0/24
138.249.58.0/23
138.249.77.0/24
138.249.84.0/24
138.249.86.0/24
138.249.88.0/24
138.249.91.0/24
138.249.120.0-138.249.122.255
138.249.124.0/24
138.249.150.0/24
138.249.201.0/24
138.249.214.0/24
138.249.221.0/24
138.249.232.0/24
138.249.240.0/24
138.249.255.0/24
155.212.34.0/24
155.212.44.0/24
155.212.46.0/24
155.212.53.0/24
155.212.55.0/24
155.212.60.0/24
155.212.63.0/24
155.212.67.0/24
155.212.74.0/23
155.212.81.0-155.212.82.255
155.212.89.0/24
155.212.92.0/24
155.212.96.0/24
155.212.101.0/24
155.212.104.0/24
155.212.115.0/24
155.212.117.0/24
155.212.122.0/24
155.212.126.0/24
170.168.26.0/23
170.168.144.0/24
170.168.146.0/24
170.168.197.0/24
170.168.207.0/24
170.168.212.0/24
170.168.223.0/24
170.168.228.0/24
170.168.238.0/24
170.168.248.0/24
213.178.152.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c1:f8:19:6a:14:d7:84:94:6a:68:00:0d:3f:d6:45:21:03:
cd:8e:aa:e7:50:d7:e0:1a:d1:33:3b:6f:c0:24:17:23:49:41:
e0:7c:84:b7:06:2d:bf:dd:c1:6a:89:8b:a3:62:90:b7:82:f8:
df:0d:61:8a:ab:f2:8d:65:23:d0:9b:1b:f8:c8:e3:ab:ce:73:
03:7a:34:b2:a8:ff:16:e7:b0:ae:6e:fd:27:32:4d:a0:69:12:
fe:2b:39:1f:94:77:57:0c:2a:ab:20:e7:e6:54:68:d1:02:a4:
bf:43:c1:c7:03:84:84:7b:9d:dc:76:fd:e3:5b:ba:6b:8e:e1:
06:83:72:e5:66:d4:0d:e6:bb:0b:7a:b8:04:97:3f:fc:51:91:
d7:58:49:eb:ef:1c:3d:d7:c2:13:e8:a4:88:58:21:81:22:40:
67:57:41:20:60:cb:00:c3:16:02:83:7a:69:14:cf:1f:2d:ec:
15:e5:27:1b:2b:fb:89:40:b9:4c:0a:b5:97:6d:53:a9:46:44:
ac:21:f3:f0:ad:5a:e2:54:c1:93:18:53:a2:88:40:7a:b1:97:
b6:31:0f:f5:9c:80:6e:4a:bf:e8:29:ba:9b:58:e7:ea:65:51:
89:db:52:42:cf:12:df:9a:ad:fe:17:1b:af:b6:23:1c:98:f9:
72:bc:92:df
-----BEGIN CERTIFICATE-----
MIIG+TCCBeGgAwIBAgISAaGyAAceYJOy3f68Vl3zhKV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYxMTA2MTc1NTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmFhMzI2OWRhYTVjMmEzZmUwZWI5NDEyNDlkOWY2ZGYxNjk5YWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVZGn6QmcNnw9jRsxQsxYcN/3xr/
O1FpMW7AMaeRV9nuUkx1DO9k/F6dsQwxX1gkkp/0DRiQ5uXj+qshwCjglXOBYGDl
X8gInHAbwfXN2/aXwiE8EOTyfWlNtT7+lThmrYzxAtJnkXaAWSE9u52JH4dJVp6D
QpoyJmDxoXOYWlM5L8W+ZEEYXt6DH2mS5Jrum/TTEb2u/0c4Xvo0G7UKFYIG/gEX
ivdrmnPl/XYPoO7nRkKUwaRSuLx3wAoXGq4peuYk5El33mB92od231vMO1LlsAnF
5yXrIwsNtV8uMURug76NmXBHF344JoGb7bbFrznJlW5iUNRWAdFMskyKDwIDAQAB
o4IEBTCCBAEwHQYDVR0OBBYEFD+qMmnapcKj/g65QSSdn23xaZqyMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvUDZveWFkcWx3cVAtRHJsQkpKMmZiZkZwbXJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICGQYIKwYBBQUHAQcBAf8EggIIMIICBDCCAgAEAgABMIIB
+AMEAGeTqgMEAGeUjQMEAGeVVQMEAGeYrwMEAIIxAgMEAIIxBQMEAIIxDgMEAIIx
EQMEAIIxFgMEAIIxGDAMAwQAgjEfAwQAgjEgAwQAgjEnAwQAgjEqAwQAgjEvAwQA
gjEzAwQAgjE3AwQAgjE8AwQAgjE+AwQAgjFEAwQAgjFGAwQAgjFRAwQAgjFUAwQA
gjFXAwQAgjFZAwQAgjFcAwQAgjFgAwQAgjFlAwQAgjFoAwQBgjFuAwQAgjF6AwQA
gjF9AwQAivkcAwQAivkuAwQAivk0AwQAivk2AwQBivk6AwQAivlNAwQAivlUAwQA
ivlWAwQAivlYAwQAivlbMAwDBAOK+XgDBACK+XoDBACK+XwDBACK+ZYDBACK+ckD
BACK+dYDBACK+d0DBACK+egDBACK+fADBACK+f8DBACb1CIDBACb1CwDBACb1C4D
BACb1DUDBACb1DcDBACb1DwDBACb1D8DBACb1EMDBAGb1EowDAMEAJvUUQMEAJvU
UgMEAJvUWQMEAJvUXAMEAJvUYAMEAJvUZQMEAJvUaAMEAJvUcwMEAJvUdQMEAJvU
egMEAJvUfgMEAaqoGgMEAKqokAMEAKqokgMEAKqoxQMEAKqozwMEAKqo1AMEAKqo
3wMEAKqo5AMEAKqo7gMEAKqo+AMEANWymDANBgkqhkiG9w0BAQsFAAOCAQEAUsH4
GWoU14SUamgADT/WRSEDzY6q51DX4BrRMztvwCQXI0lB4HyEtwYtv93BaomLo2KQ
t4L43w1hiqvyjWUj0Jsb+Mjjq85zA3o0sqj/Fuewrm79JzJNoGkS/is5H5R3Vwwq
qyDn5lRo0QKkv0PBxwOEhHud3Hb941u6a47hBoNy5WbUDea7C3q4BJc//FGR11hJ
6+8cPdfCE+ikiFghgSJAZ1dBIGDLAMMWAoN6aRTPHy3sFeUnGyv7iUC5TAq1l21T
qUZErCHz8K1a4lTBkxhToohAerGXtjEP9ZyAbkq/6Cm6m1jn6mVRidtSQs8S35qt
/hcbr7YjHJj5cryS3w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:32:07 2026 by rpki-client