Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Sc1QWh25fZ2WCVxN9P7nXfF4Dbw.roa
File: Sc1QWh25fZ2WCVxN9P7nXfF4Dbw.roa (raw, json)
Hash identifier: AVQZ3170NwpYtqDp6pjYSFTDsaPxlAStWi6EibsrWmc=
Subject key identifier: 49:CD:50:5A:1D:B9:7D:9D:96:09:5C:4D:F4:FE:E7:5D:F1:78:0D:BC
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 01A0B8AC2F72B8FAA0CEF3926F97F2291DF6
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Sc1QWh25fZ2WCVxN9P7nXfF4Dbw.roa
Signing time: Sat 19 Sep 2026 07:58:07 +0000
ROA not before: Sat 19 Sep 2026 07:58:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6871
IP address blocks: 31.185.32.0/19 maxlen: 19
31.185.128.0/17 maxlen: 17
37.152.192.0/18 maxlen: 18
46.208.0.0/16 maxlen: 16
51.6.0.0/15 maxlen: 15
51.9.0.0/16 maxlen: 16
80.189.0.0/16 maxlen: 16
80.229.0.0/16 maxlen: 16
81.174.128.0/17 maxlen: 17
83.216.128.0/19 maxlen: 19
84.51.128.0/18 maxlen: 18
84.92.0.0/15 maxlen: 15
87.112.0.0/14 maxlen: 14
87.112.0.0/16 maxlen: 16
87.113.0.0/16 maxlen: 16
87.114.0.0/16 maxlen: 16
87.115.0.0/16 maxlen: 16
91.125.0.0/16 maxlen: 16
146.66.32.0/19 maxlen: 19
146.90.0.0/16 maxlen: 16
194.75.0.0/19 maxlen: 19
194.75.80.0/20 maxlen: 20
194.75.220.0/22 maxlen: 22
195.99.8.0/21 maxlen: 21
195.99.32.0/19 maxlen: 19
195.99.88.0/21 maxlen: 21
195.99.224.0/20 maxlen: 20
195.166.128.0/19 maxlen: 19
195.213.0.0/16 maxlen: 16
212.56.64.0/18 maxlen: 18
212.140.0.0/19 maxlen: 19
212.140.32.0/20 maxlen: 20
212.140.48.0/21 maxlen: 21
212.159.0.0/17 maxlen: 17
212.159.0.0/19 maxlen: 19
212.159.8.0/23 maxlen: 23
212.159.32.0/19 maxlen: 19
212.159.64.0/18 maxlen: 18
213.31.0.0/16 maxlen: 16
213.162.96.0/19 maxlen: 19
217.32.30.0/23 maxlen: 23
217.32.32.0/20 maxlen: 20
217.32.112.0/22 maxlen: 22
217.32.148.0/22 maxlen: 22
217.32.152.0/21 maxlen: 21
217.32.160.0/22 maxlen: 22
217.32.176.0/22 maxlen: 22
217.39.16.0/20 maxlen: 20
217.39.112.0/20 maxlen: 20
217.45.24.0/21 maxlen: 21
217.45.96.0/20 maxlen: 20
217.46.24.0/22 maxlen: 22
217.46.128.0/20 maxlen: 20
2a02:16c8::/32 maxlen: 32
2a06:7200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:ac:2f:72:b8:fa:a0:ce:f3:92:6f:97:f2:29:1d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Sep 19 07:58:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49cd505a1db97d9d96095c4df4fee75df1780dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:18:00:26:c2:c5:ad:39:24:9e:db:bc:ee:
08:23:2b:af:b1:a9:a1:e4:aa:59:a0:cb:a7:bc:d4:
8e:89:b2:f4:10:a1:3b:75:ce:5c:76:8c:ef:23:1f:
27:47:1b:7f:fd:fb:f9:23:a4:6a:93:c5:94:51:c7:
ae:ca:34:be:15:57:40:a6:43:1f:ad:ec:21:63:cd:
37:a3:fd:42:47:c8:77:70:d8:c3:fd:26:88:13:a8:
96:eb:b4:e2:b0:9d:81:b8:83:cc:8e:5b:71:83:8c:
23:65:85:96:8f:2f:f2:13:ff:91:b8:12:cd:4b:4f:
77:fd:fd:b7:c5:c9:b3:18:be:e2:8d:b0:85:9e:00:
59:f6:eb:90:de:fa:1b:15:f2:90:b2:cc:2c:1a:57:
ab:bb:8b:1a:14:49:a1:bb:7d:39:10:7a:a6:23:0d:
7e:c3:96:5a:e0:65:8b:cf:05:cf:ab:d6:df:60:cc:
20:45:4f:cf:71:13:8d:e7:00:10:a6:aa:3f:0d:bc:
6d:7d:5c:f9:78:e3:5f:a1:1c:74:6b:6c:e3:ca:0b:
cf:a3:3a:fa:9d:4e:97:85:7c:22:70:49:5f:e7:5f:
6e:7a:70:0d:3e:ba:73:21:66:26:5b:2f:2b:b2:93:
8e:75:a5:d5:4f:50:d7:24:79:e4:59:c1:ae:fd:22:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CD:50:5A:1D:B9:7D:9D:96:09:5C:4D:F4:FE:E7:5D:F1:78:0D:BC
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Sc1QWh25fZ2WCVxN9P7nXfF4Dbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.32.0/19
31.185.128.0/17
37.152.192.0/18
46.208.0.0/16
51.6.0.0/15
51.9.0.0/16
80.189.0.0/16
80.229.0.0/16
81.174.128.0/17
83.216.128.0/19
84.51.128.0/18
84.92.0.0/15
87.112.0.0/14
91.125.0.0/16
146.66.32.0/19
146.90.0.0/16
194.75.0.0/19
194.75.80.0/20
194.75.220.0/22
195.99.8.0/21
195.99.32.0/19
195.99.88.0/21
195.99.224.0/20
195.166.128.0/19
195.213.0.0/16
212.56.64.0/18
212.140.0.0-212.140.55.255
212.159.0.0/17
213.31.0.0/16
213.162.96.0/19
217.32.30.0-217.32.47.255
217.32.112.0/22
217.32.148.0-217.32.163.255
217.32.176.0/22
217.39.16.0/20
217.39.112.0/20
217.45.24.0/21
217.45.96.0/20
217.46.24.0/22
217.46.128.0/20
IPv6:
2a02:16c8::/32
2a06:7200::/29
Signature Algorithm: sha256WithRSAEncryption
22:12:67:fb:c0:ae:5a:eb:c2:cc:04:b5:6f:c7:a5:87:ee:a2:
51:3a:5e:1f:00:a5:f7:4d:8d:6b:71:b2:ff:57:74:f8:db:d3:
d7:de:9f:a9:d8:51:ff:c2:f9:36:0e:40:63:99:29:10:6f:73:
85:b7:80:52:3c:c7:75:d8:a4:15:e7:90:9f:79:be:bc:08:9e:
3a:2e:0b:7c:71:0f:63:20:78:2f:5c:85:5e:db:a9:ad:53:f2:
ee:19:bd:da:9a:8f:da:29:ea:ea:87:da:f7:0a:57:47:69:d3:
01:6b:0d:4b:1e:37:bd:2e:00:dc:da:25:8f:f4:c1:ba:e7:ef:
f7:f3:8d:49:f2:89:bd:02:00:5f:93:11:8a:bc:b2:65:17:af:
1f:26:3b:7b:de:4e:b2:90:57:c6:43:ea:2b:db:b8:a5:94:49:
d1:7f:3d:16:ed:a9:70:6e:eb:a8:4b:04:2e:7b:c3:0f:e6:82:
76:6f:fb:58:a8:07:26:74:30:4a:99:1b:e0:13:c1:20:fa:e7:
90:d9:a5:13:22:be:c2:b3:98:dd:0b:1b:12:d5:e7:59:a7:a3:
2d:44:48:80:e0:ef:29:8b:7c:85:26:6d:f6:45:e0:3b:53:07:
15:83:fb:23:b4:91:61:7d:6d:b0:b7:26:83:0b:e1:d3:c8:32:
eb:db:9b:78
-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgISAaC4rC9yuPqgzvOSb5fyKR32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2
ZDE0MTcwHhcNMjYwOTE5MDc1ODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWNkNTA1YTFkYjk3ZDlkOTYwOTVjNGRmNGZlZTc1ZGYxNzgwZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYYYACbCxa05JJ7bvO4IIyuvsamh
5KpZoMunvNSOibL0EKE7dc5cdozvIx8nRxt//fv5I6Rqk8WUUceuyjS+FVdApkMf
rewhY803o/1CR8h3cNjD/SaIE6iW67TisJ2BuIPMjltxg4wjZYWWjy/yE/+RuBLN
S093/f23xcmzGL7ijbCFngBZ9uuQ3vobFfKQsswsGleru4saFEmhu305EHqmIw1+
w5Za4GWLzwXPq9bfYMwgRU/PcRON5wAQpqo/DbxtfVz5eONfoRx0a2zjygvPozr6
nU6XhXwicElf519uenANPrpzIWYmWy8rspOOdaXVT1DXJHnkWcGu/SL0bQIDAQAB
o4IDHjCCAxowHQYDVR0OBBYEFEnNUFoduX2dlglcTfT+513xeA28MB8GA1UdIwQY
MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt
MjIzNzQyZWU0Mzc1LzEvU2MxUVdoMjVmWjJXQ1Z4TjlQN25YZkY0RGJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1
LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMgYIKwYBBQUHAQcBAf8EggEhMIIBHTCCAQMEAgABMIH8
AwQFH7kgAwQHH7mAAwQGJZjAAwMALtADAwEzBgMDADMJAwMAUL0DAwBQ5QMEB1Gu
gAMEBVPYgAMEBlQzgAMDAVRcAwMCV3ADAwBbfQMEBZJCIAMDAJJaAwQFwksAAwQE
wktQAwQCwkvcAwQDw2MIAwQFw2MgAwQDw2NYAwQEw2PgAwQFw6aAAwMAw9UDBAbU
OEAwCwMDAtSMAwQD1IwwAwQH1J8AAwMA1R8DBAXVomAwDAMEAdkgHgMEBNkgIAME
AtkgcDAMAwQC2SCUAwQC2SCgAwQC2SCwAwQE2ScQAwQE2SdwAwQD2S0YAwQE2S1g
AwQC2S4YAwQE2S6AMBQEAgACMA4DBQAqAhbIAwUDKgZyADANBgkqhkiG9w0BAQsF
AAOCAQEAIhJn+8CuWuvCzAS1b8elh+6iUTpeHwCl902Na3Gy/1d0+NvT196fqdhR
/8L5Ng5AY5kpEG9zhbeAUjzHddikFeeQn3m+vAieOi4LfHEPYyB4L1yFXtuprVPy
7hm92pqP2inq6ofa9wpXR2nTAWsNSx43vS4A3Nolj/TBuufv9/ONSfKJvQIAX5MR
iryyZRevHyY7e95OspBXxkPqK9u4pZRJ0X89Fu2pcG7rqEsELnvDD+aCdm/7WKgH
JnQwSpkb4BPBIPrnkNmlEyK+wrOY3QsbEtXnWaejLURIgODvKYt8hSZt9kXgO1MH
FYP7I7SRYX1tsLcmgwvh08gy69ubeA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:11:49 2026 by rpki-client