Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ChTenTHJ-p6F3x59TIyZf5I5z_Q.roa
File: ChTenTHJ-p6F3x59TIyZf5I5z_Q.roa (raw, json)
Hash identifier: 2ac2iCvFCE8bnBBk5EE+6u9YW0+7a3aWbLJBU+O3ULc=
Subject key identifier: 0A:14:DE:9D:31:C9:FA:9E:85:DF:1E:7D:4C:8C:99:7F:92:39:CF:F4
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019F6AC694146B3973DFFFFE9F4A6401B3DD
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ChTenTHJ-p6F3x59TIyZf5I5z_Q.roa
Signing time: Thu 16 Jul 2026 11:53:46 +0000
ROA not before: Thu 16 Jul 2026 11:53:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58272
IP address blocks: 37.18.0.0/24 maxlen: 24
37.18.23.0/24 maxlen: 24
37.18.60.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.18.82.0/24 maxlen: 24
37.18.103.0/24 maxlen: 24
37.18.106.0/24 maxlen: 24
37.18.126.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
37.230.132.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.135.0/24 maxlen: 24
37.230.145.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.177.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
37.230.200.0/24 maxlen: 24
37.230.208.0/24 maxlen: 24
37.230.226.0/24 maxlen: 24
37.230.227.0/24 maxlen: 24
37.230.231.0/24 maxlen: 24
37.230.238.0/24 maxlen: 24
37.230.253.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.255.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
46.243.148.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.217.0/24 maxlen: 24
46.243.220.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.239.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.246.0/23 maxlen: 23
46.243.246.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.134.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.136.0/24 maxlen: 24
141.101.143.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.173.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.198.0/24 maxlen: 24
141.101.209.0/24 maxlen: 24
141.101.216.0/24 maxlen: 24
141.101.217.0/24 maxlen: 24
141.101.218.0/24 maxlen: 24
141.101.219.0/24 maxlen: 24
141.101.230.0/24 maxlen: 24
141.101.235.0/24 maxlen: 24
141.101.237.0/24 maxlen: 24
141.101.238.0/24 maxlen: 24
141.101.242.0/24 maxlen: 24
141.101.245.0/24 maxlen: 24
141.101.252.0/24 maxlen: 24
141.101.253.0/24 maxlen: 24
141.101.254.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.138.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.142.0/24 maxlen: 24
178.170.144.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
178.170.187.0/24 maxlen: 24
178.170.188.0/24 maxlen: 24
178.170.189.0/24 maxlen: 24
178.170.244.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.97.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
188.72.101.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
188.72.114.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
188.72.124.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:c6:94:14:6b:39:73:df:ff:fe:9f:4a:64:01:b3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jul 16 11:53:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a14de9d31c9fa9e85df1e7d4c8c997f9239cff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:35:a1:11:09:00:79:38:08:b4:ce:8b:86:
19:d9:f2:5e:fc:a1:aa:23:e2:11:e2:12:fb:17:ce:
17:22:2d:87:b2:d4:38:72:e8:39:17:94:91:bf:b1:
cc:3b:b0:10:5e:e6:7c:e2:b0:aa:64:c0:18:54:d7:
5e:13:67:3c:3c:9b:07:17:1c:50:bc:f7:5c:03:89:
dc:f0:c6:58:23:4c:47:84:0f:44:31:bc:df:de:c9:
74:e8:9f:32:23:4e:e8:e3:32:4c:c5:83:16:da:1a:
eb:6d:87:be:13:11:b2:97:fe:4c:cc:e7:18:9c:47:
dc:15:82:0e:a5:82:27:c4:ae:c5:36:c8:c6:6f:ed:
bc:2d:1c:17:2c:aa:4f:73:6d:ee:10:fc:cf:62:a5:
36:32:44:72:f7:23:5e:97:8a:d5:9d:98:49:c5:aa:
2b:f1:1b:58:d0:46:24:3f:81:a7:bd:2f:ed:2a:7d:
7b:cb:9f:4c:6a:c5:bb:d0:27:df:8e:a4:62:dc:fc:
4c:89:54:5c:5e:37:c0:3d:81:d2:36:b6:9b:ac:f4:
38:ed:c2:83:ee:f8:97:cc:7f:ed:6a:ee:d3:1a:3b:
6a:46:f8:ca:3c:01:87:bf:7f:46:92:57:38:29:cf:
ec:69:f7:83:b1:0d:0f:3e:ec:aa:54:cc:27:a0:cf:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:14:DE:9D:31:C9:FA:9E:85:DF:1E:7D:4C:8C:99:7F:92:39:CF:F4
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ChTenTHJ-p6F3x59TIyZf5I5z_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.23.0/24
37.18.60.0/24
37.18.63.0/24
37.18.78.0/24
37.18.82.0/24
37.18.103.0/24
37.18.106.0/24
37.18.126.0/24
37.230.130.0/24
37.230.132.0/24
37.230.134.0/23
37.230.145.0/24
37.230.151.0/24
37.230.163.0/24
37.230.176.0-37.230.178.255
37.230.182.0/23
37.230.187.0/24
37.230.200.0/24
37.230.208.0/24
37.230.226.0/23
37.230.231.0/24
37.230.238.0/24
37.230.253.0-37.230.255.255
46.243.140.0/24
46.243.148.0/23
46.243.163.0/24
46.243.214.0/23
46.243.217.0/24
46.243.220.0-46.243.225.255
46.243.236.0-46.243.243.255
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0-141.101.136.255
141.101.143.0-141.101.150.255
141.101.153.0-141.101.174.255
141.101.179.0/24
141.101.189.0/24
141.101.191.0/24
141.101.198.0/24
141.101.209.0/24
141.101.216.0/22
141.101.230.0/24
141.101.235.0/24
141.101.237.0-141.101.238.255
141.101.242.0/24
141.101.245.0/24
141.101.252.0/22
178.170.136.0-178.170.142.255
178.170.144.0-178.170.146.255
178.170.172.0/24
178.170.187.0-178.170.189.255
178.170.244.0/24
185.4.148.0/22
188.72.80.0/21
188.72.89.0/24
188.72.95.0/24
188.72.97.0-188.72.98.255
188.72.101.0-188.72.102.255
188.72.114.0-188.72.116.255
188.72.119.0/24
188.72.124.0/23
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
c3:3d:8d:48:c5:74:a1:a1:7e:10:8b:f5:88:47:09:8c:a0:45:
f4:f1:2b:dc:3c:49:ca:64:ff:35:1e:2d:94:c6:50:2e:8a:59:
13:9b:6c:8d:6d:da:bb:47:16:db:dd:c9:76:ac:3d:5a:a0:0e:
33:30:8c:91:90:86:bd:bb:3b:0d:bd:eb:2f:fd:e8:10:a7:49:
cb:bd:a3:a3:b9:57:6d:59:d4:35:e6:b9:46:bf:7c:ee:75:c3:
66:f0:5f:a0:97:ec:22:00:d0:41:09:92:3d:e6:63:77:ea:91:
5d:43:c3:99:c1:d4:11:35:60:10:bc:cf:8d:9e:28:f6:49:29:
3a:03:c4:e1:0f:59:74:d5:0c:22:5e:04:83:4a:35:e6:8c:43:
35:af:66:56:96:73:db:0a:7e:3f:03:55:af:a8:a9:82:15:56:
9a:71:6f:7d:cf:03:22:19:15:1f:e5:d9:1e:73:fb:04:48:de:
36:ad:cc:74:98:b9:b2:8c:3d:ea:19:27:f1:98:b1:43:09:ae:
aa:cf:87:ad:f4:47:f0:65:3c:9d:22:21:e3:30:87:23:f6:50:
d7:b7:e9:1d:94:6c:19:91:8c:9d:0b:fe:47:96:4c:ba:65:f1:
28:5b:e0:c2:6a:13:23:79:7f:85:9d:3f:51:9c:54:9e:84:30:
b0:16:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:47 2026 by rpki-client