Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/n1FhBfY5N0qxYTDcams24GjzOyw.roa
File: n1FhBfY5N0qxYTDcams24GjzOyw.roa (raw, json)
Hash identifier: uC5J7Du2QgRKMuolabYMQhvNepsnbZaeXNCJCimD9dQ=
Subject key identifier: 9F:51:61:05:F6:39:37:4A:B1:61:30:DC:6A:6B:36:E0:68:F3:3B:2C
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 019DD93E16CCDE26F182749596FD18E168AD
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/n1FhBfY5N0qxYTDcams24GjzOyw.roa
Signing time: Wed 29 Apr 2026 12:36:57 +0000
ROA not before: Wed 29 Apr 2026 12:36:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
46.165.64.0/18 maxlen: 24
62.8.0.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.62.169.0/24 maxlen: 24
62.85.128.0/19 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.84.0.0/16 maxlen: 24
77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.137.224.0/19 maxlen: 24
77.140.0.0/14 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.132.32.0/19 maxlen: 24
79.174.192.0/18 maxlen: 24
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.124.0.0/15 maxlen: 24
80.185.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.185.0.0/16 maxlen: 24
81.220.0.0/16 maxlen: 24
82.151.0.0/19 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
85.68.0.0/15 maxlen: 24
85.117.128.0/19 maxlen: 24
85.168.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
86.63.224.0/19 maxlen: 24
86.64.0.0/12 maxlen: 24
87.100.0.0/17 maxlen: 24
87.231.0.0/16 maxlen: 24
87.255.128.0/19 maxlen: 24
88.136.0.0/13 maxlen: 24
88.219.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
89.170.0.0/16 maxlen: 24
89.185.160.0/19 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
91.91.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
93.191.80.0/21 maxlen: 24
95.136.128.0/17 maxlen: 24
95.157.128.0/18 maxlen: 24
95.157.192.0/18 maxlen: 18
95.168.0.0/19 maxlen: 24
95.171.128.0/19 maxlen: 24
95.174.160.0/19 maxlen: 24
95.175.160.0/19 maxlen: 24
95.181.220.0/22 maxlen: 24
109.0.0.0/11 maxlen: 24
130.0.96.0/19 maxlen: 19
141.170.216.0/21 maxlen: 24
159.20.8.0/21 maxlen: 24
176.52.224.0/20 maxlen: 20
178.18.176.0/20 maxlen: 24
178.19.0.0/20 maxlen: 24
185.39.216.0/22 maxlen: 24
185.147.204.0/22 maxlen: 24
185.147.232.0/22 maxlen: 22
185.150.120.0/22 maxlen: 24
188.7.0.0/16 maxlen: 24
188.141.128.0/17 maxlen: 24
188.224.0.0/17 maxlen: 24
194.6.128.0/19 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.153.97.0/24 maxlen: 24
194.183.192.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.176.192.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.222.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 48
2a00:8d80::/32 maxlen: 48
2a00:9380::/32 maxlen: 32
2a00:a580::/32 maxlen: 48
2a00:b280::/32 maxlen: 48
2a00:ba80::/32 maxlen: 48
2a00:cc80::/32 maxlen: 48
2a00:d780::/32 maxlen: 48
2a00:e880::/32 maxlen: 48
2a00:ec80::/29 maxlen: 48
2a00:ec80::/32 maxlen: 48
2a00:ec81::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
2a04:800::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:3e:16:cc:de:26:f1:82:74:95:96:fd:18:e1:68:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Apr 29 12:36:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f516105f639374ab16130dc6a6b36e068f33b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:81:07:4c:a1:c8:fa:1f:6a:da:1f:1f:5f:6c:
a1:4c:51:00:d8:a5:11:3e:ca:b5:0c:86:e3:52:e0:
c6:68:30:77:1a:41:18:3b:5f:56:94:6c:80:67:08:
b0:e0:c0:22:0d:00:0e:2c:cb:80:51:6b:e2:0f:f7:
d1:77:9a:79:da:ea:d3:0c:5e:9c:47:5c:6c:20:08:
dd:af:f7:50:00:ff:a6:29:40:79:a0:03:f4:31:6f:
ab:68:eb:17:59:09:a4:8d:ed:b8:1f:86:21:7b:ba:
87:0b:11:18:0d:4f:3f:07:f7:c8:7d:e4:9a:c8:4e:
97:b5:78:22:d2:dc:20:5e:34:6d:53:f6:a8:2d:7e:
b7:61:8f:c2:2d:1f:e2:d7:6b:a8:60:41:4f:28:7d:
2a:e7:a0:53:55:29:5f:66:7a:92:ff:64:bb:e4:5d:
b9:1c:df:9d:ac:7e:13:df:4a:c9:20:68:6c:f1:bb:
0e:27:dc:fc:6f:a9:81:88:32:70:41:1a:c7:27:b4:
78:ed:2d:f8:22:4c:e9:1f:7f:70:80:17:1d:83:35:
74:be:a2:27:70:25:a6:29:42:7e:7c:69:af:2d:2b:
a0:29:dc:c3:be:5e:92:fc:19:a4:44:3a:ef:02:5d:
09:12:be:60:4a:8d:8f:29:24:e6:76:f4:42:20:bf:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:51:61:05:F6:39:37:4A:B1:61:30:DC:6A:6B:36:E0:68:F3:3B:2C
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/n1FhBfY5N0qxYTDcams24GjzOyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.136.255.255
77.137.196.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.128.0/17
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
95.181.220.0/22
109.0.0.0/11
130.0.96.0/19
141.170.216.0/21
159.20.8.0/21
176.52.224.0/20
178.18.176.0/20
178.19.0.0/20
185.39.216.0/22
185.147.204.0/22
185.147.232.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8d80::/32
2a00:9380::/32
2a00:a580::/32
2a00:b280::/32
2a00:ba80::/32
2a00:cc80::/32
2a00:d780::/32
2a00:e880::/32
2a00:ec80::/29
2a02:8400::/25
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
9d:21:6b:9b:5b:64:66:6a:84:b6:fb:ff:9e:01:ad:e9:bb:d7:
50:3d:f9:5f:fb:69:e2:05:a9:ec:26:7d:0d:e0:2f:cc:77:5f:
fa:41:4e:b0:d8:aa:57:1b:aa:6c:4c:8c:4c:f9:17:bd:35:68:
7a:40:32:7c:87:90:3a:57:12:cf:7b:cb:be:3c:05:7a:33:19:
00:5b:02:da:7a:76:62:a0:a0:b5:fb:84:53:61:e7:60:79:93:
ec:12:d6:d1:25:55:63:1d:f3:5b:34:43:4b:31:4f:46:00:33:
e9:6b:29:eb:ab:85:ad:4d:a3:a9:c2:ae:d6:7a:cf:02:6c:82:
89:1d:16:48:5e:ac:8e:81:fa:85:11:34:e6:22:f1:5d:02:0c:
fd:45:08:68:76:d7:37:92:9b:0c:0d:17:7c:21:ca:b6:eb:59:
35:1f:13:38:5d:54:86:31:cd:2e:56:8a:d4:93:08:cc:ae:cd:
25:92:20:b5:d4:d1:b7:d3:c4:7c:58:62:23:50:7e:3d:8c:74:
ac:84:e7:95:70:60:ba:41:6a:f9:87:4b:f2:65:db:25:9a:39:
c5:55:87:77:48:91:46:b3:3e:95:4d:75:72:09:8a:fc:37:62:
73:25:48:a2:6f:ee:1c:4a:76:98:63:44:bd:de:c8:c5:7e:9f:
08:7a:79:b5
-----BEGIN CERTIFICATE-----
MIIH8TCCBtmgAwIBAgISAZ3ZPhbM3ibxgnSVlv0Y4WitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjYwNDI5MTIzNjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjUxNjEwNWY2MzkzNzRhYjE2MTMwZGM2YTZiMzZlMDY4ZjMzYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIEHTKHI+h9q2h8fX2yhTFEA2KUR
Psq1DIbjUuDGaDB3GkEYO19WlGyAZwiw4MAiDQAOLMuAUWviD/fRd5p52urTDF6c
R1xsIAjdr/dQAP+mKUB5oAP0MW+raOsXWQmkje24H4Yhe7qHCxEYDU8/B/fIfeSa
yE6XtXgi0twgXjRtU/aoLX63YY/CLR/i12uoYEFPKH0q56BTVSlfZnqS/2S75F25
HN+drH4T30rJIGhs8bsOJ9z8b6mBiDJwQRrHJ7R47S34IkzpH39wgBcdgzV0vqIn
cCWmKUJ+fGmvLSugKdzDvl6S/BmkRDrvAl0JEr5gSo2PKSTmdvRCIL+aEwIDAQAB
o4IE/TCCBPkwHQYDVR0OBBYEFJ9RYQX2OTdKsWEw3GprNuBo8zssMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvbjFGaEJmWTVOMHF4WVREY2FtczI0R2p6T3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDEQYIKwYBBQUHAQcBAf8EggMAMIIC/DCCApUEAgABMIIC
jQMDAyVAAwQFLiMAAwQGLqVAAwQFPggAAwMAPicDBAc+PoADBAU+VYADBAc+aoAD
BAU+gaADBAY+8UADAwBNVDAKAwMHTYADAwBNiDALAwQCTYnEAwMBTYgwCgMDAk2M
AwMFTYADAwRNwAMEBU3pYAMDBE5wAwQFTpuAAwQFTp8AAwMET1ADBAVPhCADBAZP
rsADBARQRiADAwFQdgMDAVB8AwMAULkDBAdQ7AADBAZRAQADAwJRQAMDAFG5AwMA
UdwDBAVSlwADAwBS2AMEB1ONgAMDAlQEAwQGVDeAAwMDVGADBAVUzYADAwFVRAME
BVV1gAMDAlWoAwQGVcDAMAsDBAVWP+ADAwRWQAMEB1dkAAMDAFfnAwQFV/+AAwMD
WIgDAwBY2wMDAVkCAwMCWZwDAwBZqgMEBVm5oAMDAltEAwMAW1gDAwBbWwMEBFuX
cAMDA1xYAwMFXQADBAZdtsADBANdv1ADBAdfiIADBAdfnYADBAVfqAADBAVfq4AD
BAVfrqADBAVfr6ADBAJftdwDAwVtAAMEBYIAYAMEA42q2AMEA58UCAMEBLA04AME
BLISsAMEBLITAAMEArkn2AMEArmTzAMEArmT6AMEArmWeAMDALwHAwQHvI2AAwQH
vOAAAwQFwgaAMAwDBAPCmVgDBADCmVoDBADCmVwDBADCmWEDBAXCt8ADBATC8rAD
BAbDAwADBAXDB2ADBAXDYmADAwDDcwMDAMOEAwQFw5LAAwQF1BegAwQF1B5gAwQF
1CeAAwQF1F6gAwMA1MYDBAXVgCADBAXVkMADBAXVqaADBAXVsMADBAbVy0ADBAbV
3kADAwDV3wMDANX1AwQE2RPAAwQE2UZQAwQE2XDgMGEEAgACMFsDBQMqAGIAAwUA
KgBxgAMFACoAjYADBQAqAJOAAwUAKgClgAMFACoAsoADBQAqALqAAwUAKgDMgAMF
ACoA14ADBQAqAOiAAwUDKgDsgAMFByoChAADBQMqBAgAMA0GCSqGSIb3DQEBCwUA
A4IBAQCdIWubW2RmaoS2+/+eAa3pu9dQPflf+2niBansJn0N4C/Md1/6QU6w2KpX
G6psTIxM+Re9NWh6QDJ8h5A6VxLPe8u+PAV6MxkAWwLaenZioKC1+4RTYedgeZPs
EtbRJVVjHfNbNENLMU9GADPpaynrq4WtTaOpwq7Wes8CbIKJHRZIXqyOgfqFETTm
IvFdAgz9RQhodtc3kpsMDRd8Icq261k1HxM4XVSGMc0uVorUkwjMrs0lkiC11NG3
08R8WGIjUH49jHSshOeVcGC6QWr5h0vyZdslmjnFVYd3SJFGsz6VTXVyCYr8N2Jz
JUiib+4cSnaYY0S93sjFfp8Ienm1
-----END CERTIFICATE-----
Generated at Wed May 13 15:30:31 2026 by rpki-client