Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/2J-n_QRhoR4a65UVIs6pv6asqOw.roa
File: 2J-n_QRhoR4a65UVIs6pv6asqOw.roa (raw, json)
Hash identifier: 9Yh/Vpu5pfQV98+zQR6ofyPenEUhv1rcYnZD7GYtLoA=
Subject key identifier: D8:9F:A7:FD:04:61:A1:1E:1A:EB:95:15:22:CE:A9:BF:A6:AC:A8:EC
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 019EF8D20AC71EBB07010C6CC34EC10CB68B
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/2J-n_QRhoR4a65UVIs6pv6asqOw.roa
Signing time: Wed 24 Jun 2026 08:49:35 +0000
ROA not before: Wed 24 Jun 2026 08:49:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29182
IP address blocks: 5.35.96.0/23 maxlen: 23
5.35.98.0/23 maxlen: 23
31.135.8.0/23 maxlen: 23
31.135.10.0/24 maxlen: 24
31.135.11.0/24 maxlen: 24
31.135.12.0/23 maxlen: 23
31.135.14.0/23 maxlen: 23
37.230.112.0/23 maxlen: 23
37.230.114.0/23 maxlen: 23
37.230.116.0/23 maxlen: 23
37.230.118.0/23 maxlen: 23
62.181.44.0/24 maxlen: 24
62.181.53.0/24 maxlen: 24
62.181.54.0/23 maxlen: 23
78.24.216.0/21 maxlen: 21
79.143.72.0/23 maxlen: 23
79.174.12.0/23 maxlen: 23
79.174.14.0/23 maxlen: 23
83.136.232.0/23 maxlen: 23
83.136.235.0/24 maxlen: 24
86.110.194.0/24 maxlen: 24
86.110.208.0/23 maxlen: 23
86.110.212.0/24 maxlen: 24
86.110.215.0/24 maxlen: 24
86.110.220.0/24 maxlen: 24
89.169.28.0/23 maxlen: 23
89.169.30.0/23 maxlen: 23
91.107.120.0/21 maxlen: 21
91.228.224.0/23 maxlen: 23
92.63.192.0/23 maxlen: 23
92.63.194.0/23 maxlen: 23
94.250.248.0/23 maxlen: 23
94.250.250.0/23 maxlen: 23
94.250.252.0/23 maxlen: 23
94.250.254.0/23 maxlen: 23
109.172.4.0/23 maxlen: 23
109.172.6.0/23 maxlen: 23
109.172.30.0/23 maxlen: 23
109.172.78.0/23 maxlen: 23
109.172.100.0/23 maxlen: 23
109.172.108.0/22 maxlen: 22
109.172.112.0/23 maxlen: 23
109.172.114.0/23 maxlen: 23
109.172.116.0/23 maxlen: 23
141.133.176.0/20 maxlen: 20
149.154.64.0/23 maxlen: 23
149.154.66.0/23 maxlen: 23
149.154.68.0/23 maxlen: 23
149.154.70.0/23 maxlen: 23
155.212.160.0/20 maxlen: 20
157.22.184.0/21 maxlen: 21
157.22.192.0/20 maxlen: 20
176.123.168.0/23 maxlen: 23
176.123.170.0/23 maxlen: 23
176.123.172.0/23 maxlen: 23
176.123.174.0/23 maxlen: 23
178.250.156.0/23 maxlen: 23
178.250.158.0/23 maxlen: 23
185.60.132.0/23 maxlen: 23
185.60.134.0/23 maxlen: 23
185.187.115.0/24 maxlen: 24
188.120.224.0/20 maxlen: 20
188.120.240.0/21 maxlen: 21
188.120.248.0/23 maxlen: 23
188.120.248.0/24 maxlen: 24
188.120.249.0/24 maxlen: 24
188.120.250.0/23 maxlen: 23
188.120.253.0/24 maxlen: 24
188.120.254.0/23 maxlen: 23
212.57.115.0/24 maxlen: 24
212.57.116.0/24 maxlen: 24
212.57.118.0/24 maxlen: 24
212.57.122.0/24 maxlen: 24
212.57.124.0/23 maxlen: 23
212.57.126.0/23 maxlen: 23
217.28.220.0/23 maxlen: 23
217.28.222.0/23 maxlen: 23
2a01:230:1::/48 maxlen: 48
2a01:230:2::/48 maxlen: 48
2a01:230:3::/48 maxlen: 48
2a01:230:4::/48 maxlen: 48
2a01:230:5::/48 maxlen: 48
2a01:230:6::/48 maxlen: 48
2a01:230:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:d2:0a:c7:1e:bb:07:01:0c:6c:c3:4e:c1:0c:b6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Jun 24 08:49:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d89fa7fd0461a11e1aeb951522cea9bfa6aca8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:76:64:09:fb:7b:44:3a:39:91:19:d0:99:
e7:28:82:81:13:ff:34:81:cd:6c:88:35:99:10:61:
a6:32:78:b7:f8:74:c2:24:5a:e3:72:ed:3a:98:3e:
13:89:08:ea:72:69:b6:f2:f2:58:44:b9:f9:24:ec:
3b:55:08:0f:39:f1:76:e6:df:f1:30:d0:a8:3c:d8:
12:19:72:92:9e:49:5d:99:ab:07:1c:46:b9:ff:9e:
07:75:6e:e8:da:86:67:c0:d5:73:b2:5c:66:3c:e6:
cd:c9:37:94:15:2b:83:ea:60:69:76:79:eb:72:19:
b3:09:04:2f:84:c8:88:96:7a:2c:86:5e:8b:b7:cc:
df:e8:5c:7b:9c:a2:75:c1:6d:e7:37:74:b0:1b:7a:
b1:97:03:80:bb:2d:6e:3b:9c:33:42:da:f6:65:90:
30:21:b1:b2:c2:10:75:c2:5f:fb:41:77:06:c8:65:
29:4c:19:b0:73:75:db:c4:83:76:26:48:32:a7:aa:
1b:d2:b4:49:12:46:de:31:15:81:d9:5c:70:43:59:
0b:f1:23:92:bb:a1:62:cc:94:00:78:05:85:e2:39:
b7:66:39:46:ea:10:f7:58:bc:a7:3f:57:27:6c:5a:
62:fa:4e:ee:cc:78:2f:59:4b:16:b7:72:64:7f:1b:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9F:A7:FD:04:61:A1:1E:1A:EB:95:15:22:CE:A9:BF:A6:AC:A8:EC
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/2J-n_QRhoR4a65UVIs6pv6asqOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.96.0/22
31.135.8.0/21
37.230.112.0/21
62.181.44.0/24
62.181.53.0-62.181.55.255
78.24.216.0/21
79.143.72.0/23
79.174.12.0/22
83.136.232.0/23
83.136.235.0/24
86.110.194.0/24
86.110.208.0/23
86.110.212.0/24
86.110.215.0/24
86.110.220.0/24
89.169.28.0/22
91.107.120.0/21
91.228.224.0/23
92.63.192.0/22
94.250.248.0/21
109.172.4.0/22
109.172.30.0/23
109.172.78.0/23
109.172.100.0/23
109.172.108.0-109.172.117.255
141.133.176.0/20
149.154.64.0/21
155.212.160.0/20
157.22.184.0-157.22.207.255
176.123.168.0/21
178.250.156.0/22
185.60.132.0/22
185.187.115.0/24
188.120.224.0-188.120.251.255
188.120.253.0-188.120.255.255
212.57.115.0-212.57.116.255
212.57.118.0/24
212.57.122.0/24
212.57.124.0/22
217.28.220.0/22
IPv6:
2a01:230:1::-2a01:230:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
82:e2:94:c6:7e:e9:09:06:49:43:89:fb:92:02:c9:67:14:73:
87:76:52:05:9f:68:0e:5d:f4:ad:67:ad:b2:da:14:da:a3:7f:
5d:16:63:57:80:70:5b:bd:90:0d:11:7c:51:f0:7a:31:df:b8:
81:31:f6:11:52:01:64:be:62:a3:ea:33:f9:90:47:a7:6d:8b:
0e:23:38:61:07:b9:13:ec:a5:9b:c7:7f:5d:db:bd:39:2a:8a:
98:65:c3:a1:a9:bb:e6:95:e0:38:3b:61:a6:83:a5:e5:fd:17:
92:1f:5f:41:1b:29:4f:96:68:86:65:f8:57:85:72:57:25:dc:
cd:5c:f8:ee:99:16:68:af:df:13:d2:1c:2c:86:2a:03:1f:e9:
42:2f:9d:c2:26:aa:2f:a3:b7:5b:43:31:10:c4:ba:db:ee:30:
f4:00:2c:26:bb:39:c7:90:1a:d8:46:ac:ac:0b:77:0a:df:7c:
be:8c:97:d5:ca:c5:c4:f1:29:30:0f:9e:58:05:42:91:35:0d:
72:43:10:36:b6:ef:94:4c:fa:19:58:cf:af:9d:6d:da:ea:c2:
32:cc:99:8b:d8:42:17:c5:2e:a1:4b:f5:5f:43:f4:26:fe:f9:
84:32:4f:73:6c:71:5e:90:18:08:61:72:75:3f:65:9b:f9:01:
f7:f3:33:5e
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgISAZ740grHHrsHAQxsw07BDLaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTAwYzkwMDIzMjFmMDM5NjQ1ODM3MTBiN2JhYTQ1OTcz
NDEyMTMwHhcNMjYwNjI0MDg0OTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODlmYTdmZDA0NjFhMTFlMWFlYjk1MTUyMmNlYTliZmE2YWNhOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL12ZAn7e0Q6OZEZ0JnnKIKBE/80
gc1siDWZEGGmMni3+HTCJFrjcu06mD4TiQjqcmm28vJYRLn5JOw7VQgPOfF25t/x
MNCoPNgSGXKSnkldmasHHEa5/54HdW7o2oZnwNVzslxmPObNyTeUFSuD6mBpdnnr
chmzCQQvhMiIlnoshl6Lt8zf6Fx7nKJ1wW3nN3SwG3qxlwOAuy1uO5wzQtr2ZZAw
IbGywhB1wl/7QXcGyGUpTBmwc3XbxIN2Jkgyp6ob0rRJEkbeMRWB2VxwQ1kL8SOS
u6FizJQAeAWF4jm3ZjlG6hD3WLynP1cnbFpi+k7uzHgvWUsWt3JkfxstYQIDAQAB
o4IDSDCCA0QwHQYDVR0OBBYEFNifp/0EYaEeGuuVFSLOqb+mrKjsMB8GA1UdIwQY
MBaAFOtQDJACMh8DlkWDcQt7qkWXNBITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYt
NGE2ODU5NjJmM2U4LzEvMkotbl9RUmhvUjRhNjVVVklzNnB2NmFzcU93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYtNGE2ODU5NjJmM2U4
LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXAYIKwYBBQUHAQcBAf8EggFLMIIBRzCCAScEAgABMIIB
HwMEAgUjYAMEAx+HCAMEAyXmcAMEAD61LDAMAwQAPrU1AwQDPrUwAwQDThjYAwQB
T49IAwQCT64MAwQBU4joAwQAU4jrAwQAVm7CAwQBVm7QAwQAVm7UAwQAVm7XAwQA
Vm7cAwQCWakcAwQDW2t4AwQBW+TgAwQCXD/AAwQDXvr4AwQCbawEAwQBbaweAwQB
baxOAwQBbaxkMAwDBAJtrGwDBAFtrHQDBASNhbADBAOVmkADBASb1KAwDAMEA50W
uAMEBJ0WwAMEA7B7qAMEArL6nAMEArk8hAMEALm7czAMAwQFvHjgAwQCvHj4MAsD
BAC8eP0DAwC8eDAMAwQA1DlzAwQA1Dl0AwQA1Dl2AwQA1Dl6AwQC1Dl8AwQC2Rzc
MBoEAgACMBQwEgMHACoBAjAAAQMHAyoBAjAAADANBgkqhkiG9w0BAQsFAAOCAQEA
guKUxn7pCQZJQ4n7kgLJZxRzh3ZSBZ9oDl30rWetstoU2qN/XRZjV4BwW72QDRF8
UfB6Md+4gTH2EVIBZL5io+oz+ZBHp22LDiM4YQe5E+ylm8d/Xdu9OSqKmGXDoam7
5pXgODthpoOl5f0Xkh9fQRspT5ZohmX4V4VyVyXczVz47pkWaK/fE9IcLIYqAx/p
Qi+dwiaqL6O3W0MxEMS62+4w9AAsJrs5x5Aa2EasrAt3Ct98voyX1crFxPEpMA+e
WAVCkTUNckMQNrbvlEz6GVjPr51t2urCMsyZi9hCF8UuoUv1X0P0Jv75hDJPc2xx
XpAYCGFydT9lm/kB9/MzXg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:16 2026 by rpki-client