Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/rn3Iez6C7j4so7WKJyT-4yuuXZ0.roa
File: rn3Iez6C7j4so7WKJyT-4yuuXZ0.roa (raw, json)
Hash identifier: iu+ivX+8XCyPxCuptXV5zBTZpAMhAwbOFZ7xOGngSiI=
Subject key identifier: AE:7D:C8:7B:3E:82:EE:3E:2C:A3:B5:8A:27:24:FE:E3:2B:AE:5D:9D
Certificate issuer: /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Certificate serial: 01A0B0AC268E29B3603E6F8525EBFAC2EDE2
Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/rn3Iez6C7j4so7WKJyT-4yuuXZ0.roa
Signing time: Thu 17 Sep 2026 18:41:07 +0000
ROA not before: Thu 17 Sep 2026 18:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44444
IP address blocks: 85.115.32.0/24 maxlen: 24
85.115.33.0/24 maxlen: 24
85.115.34.0/24 maxlen: 24
85.115.35.0/24 maxlen: 24
85.115.36.0/24 maxlen: 24
85.115.37.0/24 maxlen: 24
85.115.39.0/24 maxlen: 24
85.115.40.0/24 maxlen: 24
85.115.41.0/24 maxlen: 24
85.115.42.0/24 maxlen: 24
85.115.43.0/24 maxlen: 24
85.115.44.0/24 maxlen: 24
85.115.45.0/24 maxlen: 24
85.115.46.0/24 maxlen: 24
85.115.47.0/24 maxlen: 24
85.115.49.0/24 maxlen: 24
85.115.50.0/24 maxlen: 24
85.115.51.0/24 maxlen: 24
85.115.52.0/24 maxlen: 24
85.115.53.0/24 maxlen: 24
85.115.54.0/24 maxlen: 24
85.115.55.0/24 maxlen: 24
85.115.56.0/24 maxlen: 24
85.115.58.0/24 maxlen: 24
85.115.59.0/24 maxlen: 24
85.115.60.0/24 maxlen: 24
85.115.61.0/24 maxlen: 24
85.115.62.0/24 maxlen: 24
85.115.63.0/24 maxlen: 24
86.111.222.0/24 maxlen: 24
157.167.0.0/24 maxlen: 24
157.167.4.0/24 maxlen: 24
157.167.5.0/24 maxlen: 24
157.167.6.0/24 maxlen: 24
157.167.7.0/24 maxlen: 24
157.167.10.0/24 maxlen: 24
157.167.11.0/24 maxlen: 24
157.167.12.0/24 maxlen: 24
157.167.13.0/24 maxlen: 24
157.167.14.0/24 maxlen: 24
157.167.15.0/24 maxlen: 24
157.167.16.0/24 maxlen: 24
157.167.17.0/24 maxlen: 24
157.167.18.0/24 maxlen: 24
157.167.19.0/24 maxlen: 24
157.167.20.0/24 maxlen: 24
157.167.21.0/24 maxlen: 24
157.167.22.0/24 maxlen: 24
157.167.23.0/24 maxlen: 24
157.167.24.0/24 maxlen: 24
157.167.25.0/24 maxlen: 24
157.167.26.0/24 maxlen: 24
157.167.27.0/24 maxlen: 24
157.167.28.0/24 maxlen: 24
157.167.29.0/24 maxlen: 24
157.167.30.0/24 maxlen: 24
157.167.31.0/24 maxlen: 24
157.167.32.0/24 maxlen: 24
157.167.33.0/24 maxlen: 24
157.167.34.0/24 maxlen: 24
157.167.35.0/24 maxlen: 24
157.167.36.0/24 maxlen: 24
157.167.37.0/24 maxlen: 24
157.167.38.0/24 maxlen: 24
157.167.39.0/24 maxlen: 24
157.167.40.0/24 maxlen: 24
157.167.41.0/24 maxlen: 24
157.167.42.0/24 maxlen: 24
157.167.43.0/24 maxlen: 24
157.167.44.0/24 maxlen: 24
157.167.45.0/24 maxlen: 24
157.167.46.0/24 maxlen: 24
157.167.47.0/24 maxlen: 24
157.167.48.0/24 maxlen: 24
157.167.49.0/24 maxlen: 24
157.167.50.0/24 maxlen: 24
157.167.51.0/24 maxlen: 24
157.167.52.0/24 maxlen: 24
157.167.53.0/24 maxlen: 24
157.167.54.0/24 maxlen: 24
157.167.55.0/24 maxlen: 24
157.167.56.0/24 maxlen: 24
157.167.57.0/24 maxlen: 24
157.167.58.0/24 maxlen: 24
157.167.59.0/24 maxlen: 24
157.167.60.0/24 maxlen: 24
157.167.61.0/24 maxlen: 24
157.167.62.0/24 maxlen: 24
157.167.63.0/24 maxlen: 24
157.167.64.0/24 maxlen: 24
157.167.65.0/24 maxlen: 24
157.167.66.0/24 maxlen: 24
157.167.67.0/24 maxlen: 24
157.167.68.0/24 maxlen: 24
157.167.69.0/24 maxlen: 24
157.167.70.0/24 maxlen: 24
157.167.71.0/24 maxlen: 24
157.167.72.0/24 maxlen: 24
157.167.73.0/24 maxlen: 24
157.167.74.0/24 maxlen: 24
157.167.75.0/24 maxlen: 24
157.167.76.0/24 maxlen: 24
157.167.77.0/24 maxlen: 24
157.167.78.0/24 maxlen: 24
157.167.79.0/24 maxlen: 24
157.167.80.0/24 maxlen: 24
157.167.81.0/24 maxlen: 24
157.167.82.0/24 maxlen: 24
157.167.83.0/24 maxlen: 24
157.167.84.0/24 maxlen: 24
157.167.85.0/24 maxlen: 24
157.167.86.0/24 maxlen: 24
157.167.87.0/24 maxlen: 24
157.167.88.0/24 maxlen: 24
157.167.89.0/24 maxlen: 24
157.167.90.0/24 maxlen: 24
157.167.91.0/24 maxlen: 24
157.167.92.0/24 maxlen: 24
157.167.93.0/24 maxlen: 24
157.167.94.0/24 maxlen: 24
157.167.95.0/24 maxlen: 24
157.167.96.0/24 maxlen: 24
157.167.97.0/24 maxlen: 24
157.167.98.0/24 maxlen: 24
157.167.99.0/24 maxlen: 24
157.167.100.0/24 maxlen: 24
157.167.101.0/24 maxlen: 24
157.167.102.0/24 maxlen: 24
157.167.103.0/24 maxlen: 24
157.167.104.0/24 maxlen: 24
157.167.105.0/24 maxlen: 24
157.167.106.0/24 maxlen: 24
157.167.107.0/24 maxlen: 24
157.167.108.0/24 maxlen: 24
157.167.109.0/24 maxlen: 24
157.167.110.0/24 maxlen: 24
157.167.111.0/24 maxlen: 24
157.167.112.0/24 maxlen: 24
157.167.113.0/24 maxlen: 24
157.167.114.0/24 maxlen: 24
157.167.115.0/24 maxlen: 24
157.167.116.0/24 maxlen: 24
157.167.117.0/24 maxlen: 24
157.167.118.0/24 maxlen: 24
157.167.119.0/24 maxlen: 24
157.167.120.0/24 maxlen: 24
157.167.121.0/24 maxlen: 24
157.167.122.0/24 maxlen: 24
157.167.123.0/24 maxlen: 24
157.167.124.0/24 maxlen: 24
157.167.125.0/24 maxlen: 24
157.167.126.0/24 maxlen: 24
157.167.127.0/24 maxlen: 24
157.167.128.0/24 maxlen: 24
157.167.130.0/24 maxlen: 24
157.167.131.0/24 maxlen: 24
157.167.132.0/24 maxlen: 24
157.167.157.0/24 maxlen: 24
157.167.158.0/24 maxlen: 24
157.167.159.0/24 maxlen: 24
157.167.163.0/24 maxlen: 24
157.167.164.0/24 maxlen: 24
157.167.165.0/24 maxlen: 24
157.167.166.0/24 maxlen: 24
157.167.167.0/24 maxlen: 24
157.167.168.0/24 maxlen: 24
157.167.169.0/24 maxlen: 24
185.4.96.0/24 maxlen: 24
185.4.97.0/24 maxlen: 24
185.4.98.0/24 maxlen: 24
2001:4010::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:ac:26:8e:29:b3:60:3e:6f:85:25:eb:fa:c2:ed:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Validity
Not Before: Sep 17 18:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae7dc87b3e82ee3e2ca3b58a2724fee32bae5d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:34:9b:95:29:74:74:cb:a0:4f:07:3a:a2:
61:0b:6c:03:f2:81:36:dc:75:d6:33:44:88:32:40:
e5:6a:b6:93:73:b1:60:8e:13:98:20:d1:54:f4:76:
82:69:09:65:13:82:9d:58:0f:d7:74:d3:57:f8:70:
7f:18:6b:d3:e9:13:04:9a:93:fa:0a:57:f5:88:da:
4b:de:e4:f5:30:49:4c:13:fb:d1:1c:29:04:16:18:
ba:de:50:ba:58:ba:27:b3:99:5a:01:e8:03:f7:5c:
9b:cd:e8:f8:c3:9a:80:2e:5f:98:d7:51:dc:57:07:
de:ca:e2:b7:09:24:6d:6f:40:f9:28:45:96:c9:d2:
88:3d:de:7c:ec:13:76:ba:bc:af:f7:26:84:76:cd:
3c:44:42:68:cb:89:da:55:86:c4:7e:a4:0d:bf:6b:
44:00:92:05:89:07:29:66:d2:1f:be:52:97:e6:8a:
d1:ad:29:e8:7a:44:ca:bb:12:cc:95:3f:ee:3c:a9:
3b:f2:3e:74:0f:bc:94:57:e6:fa:6b:0d:b0:cf:8f:
9d:70:68:1e:2f:e3:a6:ab:8c:cb:d1:1d:fb:e0:91:
ed:de:b5:04:75:b8:74:f4:52:94:c9:b2:fc:1d:f4:
e7:83:65:83:6e:75:20:db:e7:3a:52:d8:1e:62:7f:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:C8:7B:3E:82:EE:3E:2C:A3:B5:8A:27:24:FE:E3:2B:AE:5D:9D
X509v3 Authority Key Identifier:
keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/rn3Iez6C7j4so7WKJyT-4yuuXZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.32.0-85.115.37.255
85.115.39.0-85.115.47.255
85.115.49.0-85.115.56.255
85.115.58.0-85.115.63.255
86.111.222.0/24
157.167.0.0/24
157.167.4.0/22
157.167.10.0-157.167.128.255
157.167.130.0-157.167.132.255
157.167.157.0-157.167.159.255
157.167.163.0-157.167.169.255
185.4.96.0-185.4.98.255
IPv6:
2001:4010::/32
Signature Algorithm: sha256WithRSAEncryption
0b:23:df:1e:e4:35:52:0e:57:78:cf:ee:80:dd:c2:34:50:74:
68:bc:19:53:96:d1:4b:fe:13:2d:5a:f6:dd:4d:8d:af:36:a4:
88:4f:e3:a8:c0:58:a0:b1:19:4d:47:e6:20:35:eb:07:71:27:
ee:4f:6b:13:fc:fa:83:d7:6a:68:f9:7a:d2:90:b9:fd:44:11:
2a:0e:e6:21:a0:ea:d7:07:61:a4:85:d5:5c:89:a7:6b:d5:a4:
12:08:eb:19:51:27:b0:b2:4c:e7:ce:85:52:0b:67:2b:95:b4:
1f:d5:89:2e:1f:05:93:56:65:42:68:67:67:d5:9b:9b:29:85:
b9:82:86:b8:5b:63:9b:9b:27:aa:a5:d7:58:3b:1e:aa:e1:59:
f5:92:b5:2f:61:6c:2c:ac:52:ff:f9:34:0f:c6:38:6d:81:4a:
26:e8:23:36:60:63:53:59:3a:b4:d6:06:86:5d:33:87:9f:32:
c3:2d:ef:cb:99:b4:bb:f1:ab:82:20:09:b0:2b:37:a1:5f:65:
2e:1a:d2:6a:07:1f:2e:2f:82:9a:65:53:56:61:2f:7c:ad:bc:
40:1d:8d:62:28:84:74:da:97:95:6e:9b:d9:47:84:e4:8b:2d:
e8:98:43:bd:07:62:1c:ed:33:ab:de:dd:03:a8:29:4e:70:e2:
0c:2e:c3:b0
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgISAaCwrCaOKbNgPm+FJev6wu3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNTFhYWQwZTQxNDhhYmUzZjJhOGI4ZDQzMThmMzRiNDU2
YjY1ZjEwHhcNMjYwOTE3MTg0MTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTdkYzg3YjNlODJlZTNlMmNhM2I1OGEyNzI0ZmVlMzJiYWU1ZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC40m5UpdHTLoE8HOqJhC2wD8oE2
3HXWM0SIMkDlaraTc7FgjhOYINFU9HaCaQllE4KdWA/XdNNX+HB/GGvT6RMEmpP6
Clf1iNpL3uT1MElME/vRHCkEFhi63lC6WLons5laAegD91ybzej4w5qALl+Y11Hc
VwfeyuK3CSRtb0D5KEWWydKIPd587BN2uryv9yaEds08REJoy4naVYbEfqQNv2tE
AJIFiQcpZtIfvlKX5orRrSnoekTKuxLMlT/uPKk78j50D7yUV+b6aw2wz4+dcGge
L+Omq4zL0R374JHt3rUEdbh09FKUybL8HfTng2WDbnUg2+c6UtgeYn9oEwIDAQAB
o4ICpzCCAqMwHQYDVR0OBBYEFK59yHs+gu4+LKO1iick/uMrrl2dMB8GA1UdIwQY
MBaAFI9RqtDkFIq+PyqLjUMY80tFa2XxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQt
NzYyZDI3Mjc3NTkxLzEvcm4zSWV6NkM3ajRzbzdXS0p5VC00eXV1WFowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQtNzYyZDI3Mjc3NTkx
LzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTCBlwQCAAEwgZAwDAME
BVVzIAMEAVVzJDAMAwQAVXMnAwQEVXMgMAwDBABVczEDBABVczgwDAMEAVVzOgME
BlVzAAMEAFZv3gMEAJ2nAAMEAp2nBDAMAwQBnacKAwQAnaeAMAwDBAGdp4IDBACd
p4QwDAMEAJ2nnQMEBZ2ngDAMAwQAnaejAwQBnaeoMAwDBAW5BGADBAC5BGIwDQQC
AAIwBwMFACABQBAwDQYJKoZIhvcNAQELBQADggEBAAsj3x7kNVIOV3jP7oDdwjRQ
dGi8GVOW0Uv+Ey1a9t1Nja82pIhP46jAWKCxGU1H5iA16wdxJ+5PaxP8+oPXamj5
etKQuf1EESoO5iGg6tcHYaSF1VyJp2vVpBII6xlRJ7CyTOfOhVILZyuVtB/ViS4f
BZNWZUJoZ2fVm5sphbmChrhbY5ubJ6ql11g7HqrhWfWStS9hbCysUv/5NA/GOG2B
SiboIzZgY1NZOrTWBoZdM4efMsMt78uZtLvxq4IgCbArN6FfZS4a0moHHy4vgppl
U1ZhL3ytvEAdjWIohHTal5Vum9lHhOSLLeiYQ70HYhztM6ve3QOoKU5w4gwuw7A=
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:03:41 2026 by rpki-client