Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/uoFotumudq3NjyT7As7Fryz5Yd8.roa
File: uoFotumudq3NjyT7As7Fryz5Yd8.roa (raw, json)
Hash identifier: mw63hA5ar4VzWJCYRYvKfOXr/a6G9aeBNTbiDc+XBsY=
Subject key identifier: BA:81:68:B6:E9:AE:76:AD:CD:8F:24:FB:02:CE:C5:AF:2C:F9:61:DF
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01A1C61AF11ED452B760F665D5989288B1B9
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/uoFotumudq3NjyT7As7Fryz5Yd8.roa
Signing time: Tue 10 Nov 2026 15:36:56 +0000
ROA not before: Tue 10 Nov 2026 15:36:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208172
IP address blocks: 72.251.208.0/24 maxlen: 24
72.251.209.0/24 maxlen: 24
72.251.210.0/24 maxlen: 24
72.251.211.0/24 maxlen: 24
72.251.212.0/24 maxlen: 24
72.251.213.0/24 maxlen: 24
72.251.214.0/24 maxlen: 24
72.251.215.0/24 maxlen: 24
72.251.216.0/24 maxlen: 24
72.251.217.0/24 maxlen: 24
72.251.218.0/24 maxlen: 24
72.251.219.0/24 maxlen: 24
72.251.220.0/24 maxlen: 24
72.251.221.0/24 maxlen: 24
72.251.222.0/24 maxlen: 24
80.47.32.0/24 maxlen: 24
80.47.33.0/24 maxlen: 24
80.47.34.0/24 maxlen: 24
80.47.35.0/24 maxlen: 24
80.47.36.0/24 maxlen: 24
80.47.37.0/24 maxlen: 24
80.47.38.0/24 maxlen: 24
80.47.39.0/24 maxlen: 24
80.47.40.0/24 maxlen: 24
80.47.41.0/24 maxlen: 24
80.47.42.0/24 maxlen: 24
80.47.43.0/24 maxlen: 24
80.47.44.0/24 maxlen: 24
80.47.45.0/24 maxlen: 24
80.47.46.0/24 maxlen: 24
80.47.47.0/24 maxlen: 24
80.47.48.0/24 maxlen: 24
80.47.49.0/24 maxlen: 24
80.47.50.0/24 maxlen: 24
80.47.51.0/24 maxlen: 24
81.27.86.0/24 maxlen: 24
134.82.68.0/24 maxlen: 24
134.82.69.0/24 maxlen: 24
134.82.70.0/24 maxlen: 24
134.82.71.0/24 maxlen: 24
134.82.73.0/24 maxlen: 24
134.82.74.0/24 maxlen: 24
134.82.75.0/24 maxlen: 24
134.82.77.0/24 maxlen: 24
134.82.78.0/24 maxlen: 24
134.82.79.0/24 maxlen: 24
153.75.48.0/24 maxlen: 24
153.75.49.0/24 maxlen: 24
153.75.50.0/24 maxlen: 24
153.75.51.0/24 maxlen: 24
153.75.52.0/24 maxlen: 24
153.75.53.0/24 maxlen: 24
153.75.60.0/24 maxlen: 24
153.75.61.0/24 maxlen: 24
159.26.96.0/24 maxlen: 24
159.26.97.0/24 maxlen: 24
159.26.98.0/24 maxlen: 24
159.26.99.0/24 maxlen: 24
159.26.100.0/24 maxlen: 24
159.26.101.0/24 maxlen: 24
159.26.102.0/24 maxlen: 24
159.26.103.0/24 maxlen: 24
159.26.104.0/24 maxlen: 24
159.26.105.0/24 maxlen: 24
159.26.106.0/24 maxlen: 24
159.26.107.0/24 maxlen: 24
159.26.108.0/24 maxlen: 24
159.26.109.0/24 maxlen: 24
159.26.110.0/24 maxlen: 24
159.26.111.0/24 maxlen: 24
159.26.112.0/24 maxlen: 24
159.26.113.0/24 maxlen: 24
159.26.114.0/24 maxlen: 24
159.26.115.0/24 maxlen: 24
159.26.116.0/24 maxlen: 24
159.26.117.0/24 maxlen: 24
159.26.118.0/24 maxlen: 24
159.26.119.0/24 maxlen: 24
159.26.120.0/24 maxlen: 24
159.26.121.0/24 maxlen: 24
159.26.122.0/24 maxlen: 24
159.26.123.0/24 maxlen: 24
159.26.124.0/24 maxlen: 24
159.26.125.0/24 maxlen: 24
159.26.126.0/24 maxlen: 24
159.26.127.0/24 maxlen: 24
205.147.16.0/24 maxlen: 24
205.147.17.0/24 maxlen: 24
205.147.18.0/24 maxlen: 24
205.147.19.0/24 maxlen: 24
205.147.20.0/24 maxlen: 24
205.147.21.0/24 maxlen: 24
205.147.22.0/24 maxlen: 24
205.147.23.0/24 maxlen: 24
205.147.27.0/24 maxlen: 24
205.147.28.0/24 maxlen: 24
205.147.29.0/24 maxlen: 24
205.147.30.0/24 maxlen: 24
205.147.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:1a:f1:1e:d4:52:b7:60:f6:65:d5:98:92:88:b1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Nov 10 15:36:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba8168b6e9ae76adcd8f24fb02cec5af2cf961df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:9f:9d:18:3b:0f:0b:a8:d9:6f:45:7c:60:
ef:31:48:94:cd:93:d8:54:37:e4:3d:42:4b:ef:d9:
d5:f7:9b:17:7d:38:bc:ce:42:44:be:98:a5:f3:d8:
35:16:01:fc:84:06:0d:40:c0:48:a9:a7:ee:4e:36:
12:0c:3e:ad:db:ee:d5:1a:2e:39:0d:a5:76:d6:dc:
7d:5a:6b:e3:ce:d1:90:e5:bf:55:02:ce:14:a0:27:
8e:fa:40:94:b8:de:eb:21:dd:d5:55:eb:60:2d:3f:
94:c1:80:80:80:31:ac:8b:66:4f:26:c0:f7:3f:5d:
36:b6:cf:72:bb:7b:20:f7:f8:5f:eb:6b:2c:6d:de:
05:81:47:ab:34:92:f3:8e:bd:66:f1:d6:b3:0f:73:
16:2a:ff:38:65:c2:0d:7d:e1:78:26:17:9e:3c:5f:
44:d9:b0:64:8c:fe:fe:df:b3:46:8a:78:d6:18:f5:
13:0b:5c:d5:01:c1:aa:93:77:70:f3:8c:81:73:93:
93:34:75:be:11:86:1c:ec:11:d7:6d:07:09:67:51:
a6:d3:d8:50:5c:ab:02:64:b5:f4:fc:0b:5d:7d:0b:
7e:01:98:6c:c7:14:47:01:60:f1:04:35:1e:da:82:
41:d8:cc:d9:b2:1d:29:bb:a3:26:bb:f8:2d:81:de:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:81:68:B6:E9:AE:76:AD:CD:8F:24:FB:02:CE:C5:AF:2C:F9:61:DF
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/uoFotumudq3NjyT7As7Fryz5Yd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.251.208.0-72.251.222.255
80.47.32.0-80.47.51.255
81.27.86.0/24
134.82.68.0/22
134.82.73.0-134.82.75.255
134.82.77.0-134.82.79.255
153.75.48.0-153.75.53.255
153.75.60.0/23
159.26.96.0/19
205.147.16.0/21
205.147.27.0-205.147.31.255
Signature Algorithm: sha256WithRSAEncryption
80:bc:ea:44:20:0d:58:2b:91:67:ab:e6:1a:6d:eb:34:69:6e:
57:b9:89:de:87:42:10:9f:9b:3e:de:77:b0:ce:7b:d6:3d:7f:
e2:51:d7:90:66:49:c8:62:0a:9f:7c:c3:3d:d9:a1:9e:ee:1d:
94:30:d0:18:1e:00:f7:08:7e:4e:51:99:b6:48:61:c5:aa:3b:
64:29:be:ad:66:f2:91:4f:12:6e:46:c2:e0:f5:af:50:a6:5d:
68:ea:da:a1:c8:ac:86:fb:6f:3e:b1:f6:72:b4:1d:70:ef:69:
e5:a7:8d:33:9c:d6:c8:7c:91:1a:ce:f8:54:87:ce:75:35:76:
4d:ba:27:ce:96:68:ea:f5:f8:df:03:5c:19:a4:c5:0e:38:90:
d8:6b:e1:e3:e7:19:a0:65:4c:0f:39:05:40:e6:93:c5:7e:ba:
1d:51:ce:90:5e:89:e9:98:65:a0:7b:78:55:c8:36:18:04:98:
84:18:89:61:0b:77:fc:a1:c8:40:02:6e:36:5a:d3:48:05:e7:
70:0a:27:fe:8d:39:df:e5:41:5a:2a:33:51:98:0c:7d:6e:ab:
c7:76:e4:de:81:5f:d4:33:4c:05:4e:05:e1:7a:4f:f9:04:8a:
ed:53:a4:e2:b8:d0:b1:77:f1:18:d6:12:84:b0:67:6a:9f:81:
06:ef:bb:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:28 2026 by rpki-client