Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IJQao1S77Jn5UCCNcKL7njQkaVI.roa
File: IJQao1S77Jn5UCCNcKL7njQkaVI.roa (raw, json)
Hash identifier: nLh+FUPNQ1a4BJlSVwnmdkvarwe48xsBKAYLpRo+fFk=
Subject key identifier: 20:94:1A:A3:54:BB:EC:99:F9:50:20:8D:70:A2:FB:9E:34:24:69:52
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0C46D88A7755B27ECA6B525711AC55B90
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IJQao1S77Jn5UCCNcKL7njQkaVI.roa
Signing time: Mon 21 Sep 2026 14:45:07 +0000
ROA not before: Mon 21 Sep 2026 14:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 9.247.4.0/24 maxlen: 24
9.247.7.0/24 maxlen: 24
9.247.10.0/24 maxlen: 24
9.247.17.0/24 maxlen: 24
9.247.20.0/24 maxlen: 24
9.247.33.0/24 maxlen: 24
9.247.40.0/24 maxlen: 24
9.247.47.0/24 maxlen: 24
9.247.50.0/24 maxlen: 24
9.247.53.0/24 maxlen: 24
9.247.56.0/24 maxlen: 24
9.247.62.0/24 maxlen: 24
9.247.70.0/24 maxlen: 24
9.247.74.0/24 maxlen: 24
9.247.90.0/24 maxlen: 24
9.247.100.0/24 maxlen: 24
9.247.109.0/24 maxlen: 24
9.247.113.0/24 maxlen: 24
9.247.115.0/24 maxlen: 24
9.247.127.0/24 maxlen: 24
9.247.135.0/24 maxlen: 24
9.247.147.0/24 maxlen: 24
9.247.189.0/24 maxlen: 24
9.247.199.0/24 maxlen: 24
9.247.200.0/24 maxlen: 24
9.247.210.0/24 maxlen: 24
9.247.213.0/24 maxlen: 24
9.247.228.0/24 maxlen: 24
9.247.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:6d:88:a7:75:5b:27:ec:a6:b5:25:71:1a:c5:5b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 21 14:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20941aa354bbec99f950208d70a2fb9e34246952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:f5:df:8d:71:4a:08:c3:2c:03:19:b6:f8:
04:88:e3:66:7f:27:13:cd:3b:be:5f:c9:e1:66:e9:
5c:87:b9:49:74:cc:9c:58:c8:33:78:f4:5f:5e:f9:
b8:57:b6:25:ec:22:0e:cb:1a:32:38:80:c9:c5:e5:
f7:d3:4e:89:f0:7c:c1:22:f9:ee:19:5a:e3:f1:06:
30:b6:ca:47:9f:4d:03:8c:ef:66:ff:ea:ea:18:5f:
db:08:cb:9e:03:31:7c:62:f0:0b:ca:ce:62:a0:02:
6a:26:1b:65:e9:b6:fe:70:da:b8:98:29:ef:24:a6:
98:23:07:13:b1:ac:db:a3:3b:d8:3b:96:f5:ca:d2:
b5:14:d6:d3:2d:2d:37:7d:0e:95:b8:47:17:e7:a0:
06:83:51:28:f9:2d:9e:42:65:41:71:53:0c:6d:e7:
62:af:f3:71:78:91:b9:a5:b5:ac:97:ee:a1:98:62:
8b:12:86:3d:00:47:01:3e:f4:b1:bc:50:00:6f:0b:
69:84:34:0a:fd:f2:e6:ec:8c:1d:4d:da:b0:7b:51:
27:27:ce:2c:2c:1d:47:94:b2:db:73:fd:b8:9b:68:
f7:7f:0e:2b:24:06:03:52:ba:c4:da:27:82:cb:eb:
19:04:75:1a:4f:d6:9e:27:ba:ee:33:3a:79:d8:85:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:94:1A:A3:54:BB:EC:99:F9:50:20:8D:70:A2:FB:9E:34:24:69:52
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IJQao1S77Jn5UCCNcKL7njQkaVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.4.0/24
9.247.7.0/24
9.247.10.0/24
9.247.17.0/24
9.247.20.0/24
9.247.33.0/24
9.247.40.0/24
9.247.47.0/24
9.247.50.0/24
9.247.53.0/24
9.247.56.0/24
9.247.62.0/24
9.247.70.0/24
9.247.74.0/24
9.247.90.0/24
9.247.100.0/24
9.247.109.0/24
9.247.113.0/24
9.247.115.0/24
9.247.127.0/24
9.247.135.0/24
9.247.147.0/24
9.247.189.0/24
9.247.199.0-9.247.200.255
9.247.210.0/24
9.247.213.0/24
9.247.228.0/24
9.247.255.0/24
Signature Algorithm: sha256WithRSAEncryption
60:54:c9:b0:4d:b5:41:28:2d:16:c5:d5:03:70:34:3b:fe:b4:
cb:13:c6:b8:69:b0:7f:68:99:27:e4:4c:3b:5b:72:e6:53:4d:
e1:9c:a0:4d:8a:a1:1c:28:37:95:d2:f7:34:b7:f3:7b:ce:55:
9e:ce:07:08:a6:d4:d0:f9:be:28:53:2c:ad:4d:9b:93:ba:a7:
d2:77:e5:3d:cd:71:63:8b:4a:ba:ae:8d:ee:de:10:2e:4b:22:
90:ec:a0:5f:b4:6d:29:8e:19:07:ac:ed:b9:17:a5:f0:3e:7a:
11:ba:5b:d9:17:1e:89:13:ee:31:6c:9b:87:5a:d8:75:77:44:
49:8c:5c:f4:b9:45:25:53:9d:75:04:1e:ec:70:80:71:fe:72:
ee:a1:85:a5:72:c1:84:e6:ac:e5:0d:bf:29:04:a9:a0:4e:c8:
f3:ab:ca:ce:bf:57:eb:3c:b5:e5:02:a9:35:bd:4e:3d:d2:02:
1e:ec:f8:a1:cb:0b:ff:f1:68:00:bc:69:f9:7a:d1:ec:b4:99:
70:ce:03:13:bf:f4:9d:2e:04:d4:fa:ca:de:5b:b9:04:d2:d2:
15:cf:05:8d:8a:b2:31:7d:be:29:45:93:a3:30:7a:ca:d1:e0:
fd:cb:ec:26:82:c2:85:e5:8f:09:5b:19:df:3f:91:10:aa:69:
47:78:0f:bb
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAaDEbYindVsn7Ka1JXEaxVuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTIxMTQ0NTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDk0MWFhMzU0YmJlYzk5Zjk1MDIwOGQ3MGEyZmI5ZTM0MjQ2OTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAT1341xSgjDLAMZtvgEiONmfycT
zTu+X8nhZulch7lJdMycWMgzePRfXvm4V7Yl7CIOyxoyOIDJxeX3006J8HzBIvnu
GVrj8QYwtspHn00DjO9m/+rqGF/bCMueAzF8YvALys5ioAJqJhtl6bb+cNq4mCnv
JKaYIwcTsazbozvYO5b1ytK1FNbTLS03fQ6VuEcX56AGg1Eo+S2eQmVBcVMMbedi
r/NxeJG5pbWsl+6hmGKLEoY9AEcBPvSxvFAAbwtphDQK/fLm7IwdTdqwe1EnJ84s
LB1HlLLbc/24m2j3fw4rJAYDUrrE2ieCy+sZBHUaT9aeJ7ruMzp52IUeLQIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFCCUGqNUu+yZ+VAgjXCi+540JGlSMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvSUpRYW8xUzc3Sm41VUNDTmNLTDdualFrYVZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAAJ
9wQDBAAJ9wcDBAAJ9woDBAAJ9xEDBAAJ9xQDBAAJ9yEDBAAJ9ygDBAAJ9y8DBAAJ
9zIDBAAJ9zUDBAAJ9zgDBAAJ9z4DBAAJ90YDBAAJ90oDBAAJ91oDBAAJ92QDBAAJ
920DBAAJ93EDBAAJ93MDBAAJ938DBAAJ94cDBAAJ95MDBAAJ970wDAMEAAn3xwME
AAn3yAMEAAn30gMEAAn31QMEAAn35AMEAAn3/zANBgkqhkiG9w0BAQsFAAOCAQEA
YFTJsE21QSgtFsXVA3A0O/60yxPGuGmwf2iZJ+RMO1ty5lNN4ZygTYqhHCg3ldL3
NLfze85Vns4HCKbU0Pm+KFMsrU2bk7qn0nflPc1xY4tKuq6N7t4QLksikOygX7Rt
KY4ZB6ztuRel8D56Ebpb2RceiRPuMWybh1rYdXdESYxc9LlFJVOddQQe7HCAcf5y
7qGFpXLBhOas5Q2/KQSpoE7I86vKzr9X6zy15QKpNb1OPdICHuz4ocsL//FoALxp
+XrR7LSZcM4DE7/0nS4E1PrK3lu5BNLSFc8FjYqyMX2+KUWTozB6ytHg/cvsJoLC
heWPCVsZ3z+REKppR3gPuw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:46:55 2026 by rpki-client