Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/j8_MQbTPdD8F1CH5hVINed9wBpU.roa
File: j8_MQbTPdD8F1CH5hVINed9wBpU.roa (raw, json)
Hash identifier: SifU5YKVkCEdvhjpYXFOnm3FICmu9O5SR5UCmz+fCvA=
Subject key identifier: 8F:CF:CC:41:B4:CF:74:3F:05:D4:21:F9:85:52:0D:79:DF:70:06:95
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 01A1AFCB60BF5949A2C9B9152D858084F4A3
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/j8_MQbTPdD8F1CH5hVINed9wBpU.roa
Signing time: Fri 06 Nov 2026 07:38:23 +0000
ROA not before: Fri 06 Nov 2026 07:38:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29182
IP address blocks: 5.35.96.0/23 maxlen: 23
5.35.98.0/23 maxlen: 23
31.135.8.0/23 maxlen: 23
31.135.10.0/24 maxlen: 24
31.135.11.0/24 maxlen: 24
31.135.12.0/23 maxlen: 23
31.135.14.0/23 maxlen: 23
37.230.112.0/23 maxlen: 23
37.230.114.0/23 maxlen: 23
37.230.116.0/23 maxlen: 23
37.230.118.0/23 maxlen: 23
62.181.44.0/24 maxlen: 24
62.181.53.0/24 maxlen: 24
62.181.54.0/23 maxlen: 23
78.24.216.0/21 maxlen: 21
79.143.72.0/23 maxlen: 23
79.174.12.0/23 maxlen: 23
79.174.14.0/23 maxlen: 23
83.136.232.0/23 maxlen: 23
83.136.235.0/24 maxlen: 24
86.110.194.0/24 maxlen: 24
86.110.208.0/23 maxlen: 23
86.110.212.0/24 maxlen: 24
86.110.215.0/24 maxlen: 24
86.110.220.0/24 maxlen: 24
89.169.28.0/23 maxlen: 23
89.169.30.0/23 maxlen: 23
91.107.120.0/21 maxlen: 21
91.228.224.0/23 maxlen: 23
92.63.192.0/23 maxlen: 23
92.63.194.0/23 maxlen: 23
94.250.248.0/23 maxlen: 23
94.250.250.0/23 maxlen: 23
94.250.252.0/23 maxlen: 23
94.250.254.0/23 maxlen: 23
109.172.4.0/23 maxlen: 23
109.172.6.0/23 maxlen: 23
109.172.30.0/23 maxlen: 23
109.172.78.0/23 maxlen: 23
109.172.100.0/23 maxlen: 23
109.172.108.0/22 maxlen: 22
109.172.112.0/23 maxlen: 23
109.172.114.0/23 maxlen: 23
109.172.116.0/23 maxlen: 23
141.133.176.0/23 maxlen: 23
141.133.178.0/24 maxlen: 24
141.133.179.0/24 maxlen: 24
141.133.180.0/22 maxlen: 22
141.133.184.0/21 maxlen: 21
149.154.64.0/23 maxlen: 23
149.154.66.0/23 maxlen: 23
149.154.68.0/23 maxlen: 23
149.154.70.0/23 maxlen: 23
155.212.160.0/20 maxlen: 20
157.22.184.0/21 maxlen: 21
157.22.192.0/20 maxlen: 20
168.113.176.0/20 maxlen: 20
168.113.192.0/20 maxlen: 20
176.123.168.0/23 maxlen: 23
176.123.170.0/23 maxlen: 23
176.123.172.0/23 maxlen: 23
176.123.174.0/23 maxlen: 23
178.250.156.0/23 maxlen: 23
178.250.158.0/23 maxlen: 23
185.60.132.0/23 maxlen: 23
185.60.134.0/23 maxlen: 23
185.187.115.0/24 maxlen: 24
188.120.224.0/20 maxlen: 20
188.120.240.0/21 maxlen: 21
188.120.248.0/23 maxlen: 23
188.120.248.0/24 maxlen: 24
188.120.249.0/24 maxlen: 24
188.120.250.0/23 maxlen: 23
188.120.253.0/24 maxlen: 24
188.120.254.0/23 maxlen: 23
212.57.115.0/24 maxlen: 24
212.57.116.0/24 maxlen: 24
212.57.118.0/24 maxlen: 24
212.57.122.0/24 maxlen: 24
212.57.124.0/23 maxlen: 23
212.57.126.0/23 maxlen: 23
217.28.220.0/23 maxlen: 23
217.28.222.0/23 maxlen: 23
2a01:230:1::/48 maxlen: 48
2a01:230:2::/48 maxlen: 48
2a01:230:3::/48 maxlen: 48
2a01:230:4::/48 maxlen: 48
2a01:230:5::/48 maxlen: 48
2a01:230:6::/48 maxlen: 48
2a01:230:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:af:cb:60:bf:59:49:a2:c9:b9:15:2d:85:80:84:f4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Nov 6 07:38:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fcfcc41b4cf743f05d421f985520d79df700695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:6e:2c:64:52:e0:66:bf:61:35:0e:91:6c:
bc:e0:0b:38:6b:ce:30:f2:33:d3:bf:8d:a2:ab:53:
ef:bd:fc:98:1d:a4:f9:11:0f:22:c6:a6:49:2e:b4:
c6:e3:14:05:7b:18:dc:ac:ea:79:e2:c9:18:b2:c0:
1f:ae:0c:88:e9:fe:7f:bf:9f:52:6c:40:36:9c:d3:
0f:47:49:ce:7e:74:2a:60:5e:b5:f3:2e:6f:fc:42:
29:f6:c3:60:9a:2a:f6:85:df:97:fd:0f:79:43:f3:
80:71:b1:97:e2:e5:dc:8f:87:db:17:a7:1e:34:34:
bf:9f:26:e2:1b:ca:d7:3b:d3:73:6b:62:02:d1:2e:
79:f9:5b:cf:2d:33:b1:56:cd:3d:07:d2:fe:ee:c4:
a8:70:c9:7d:b0:c8:87:72:cc:35:8b:b3:fa:25:08:
c8:92:04:97:42:ac:2a:cd:06:0f:88:fa:fd:7d:2a:
84:25:1f:bc:87:b1:69:17:1f:74:ee:8f:29:26:f3:
e9:9f:80:87:66:e0:30:11:8b:0f:e3:4f:fc:c1:48:
b3:db:79:20:f1:dc:52:ba:0b:34:6c:af:ba:26:da:
eb:69:91:e9:a8:1c:da:e7:ec:45:55:f4:0b:fe:7f:
33:c9:7d:39:64:97:51:e3:65:a5:a5:99:a7:d2:7a:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CF:CC:41:B4:CF:74:3F:05:D4:21:F9:85:52:0D:79:DF:70:06:95
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/j8_MQbTPdD8F1CH5hVINed9wBpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.96.0/22
31.135.8.0/21
37.230.112.0/21
62.181.44.0/24
62.181.53.0-62.181.55.255
78.24.216.0/21
79.143.72.0/23
79.174.12.0/22
83.136.232.0/23
83.136.235.0/24
86.110.194.0/24
86.110.208.0/23
86.110.212.0/24
86.110.215.0/24
86.110.220.0/24
89.169.28.0/22
91.107.120.0/21
91.228.224.0/23
92.63.192.0/22
94.250.248.0/21
109.172.4.0/22
109.172.30.0/23
109.172.78.0/23
109.172.100.0/23
109.172.108.0-109.172.117.255
141.133.176.0/20
149.154.64.0/21
155.212.160.0/20
157.22.184.0-157.22.207.255
168.113.176.0-168.113.207.255
176.123.168.0/21
178.250.156.0/22
185.60.132.0/22
185.187.115.0/24
188.120.224.0-188.120.251.255
188.120.253.0-188.120.255.255
212.57.115.0-212.57.116.255
212.57.118.0/24
212.57.122.0/24
212.57.124.0/22
217.28.220.0/22
IPv6:
2a01:230:1::-2a01:230:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:d8:e3:31:70:da:c0:6e:51:46:06:80:00:1a:68:c0:83:1a:
47:9b:d4:4f:38:a4:62:52:bb:d0:ff:ec:12:f5:90:9d:ac:8e:
6c:7e:4c:c1:07:d6:ac:96:f8:36:6c:1c:99:9f:85:31:fd:19:
b5:03:67:c9:df:1b:93:ce:43:eb:89:63:1f:f8:02:00:5e:89:
49:d0:93:2f:51:7a:8e:66:06:e6:fb:f0:f6:83:d8:05:5b:b1:
92:2e:97:87:5d:a8:b3:ed:cc:85:2b:13:35:73:54:a4:b4:72:
ba:e6:98:be:1e:7b:f6:90:9c:5f:de:b6:24:1c:a4:be:67:9d:
88:7b:de:ad:78:24:1a:16:e7:22:44:0f:ee:a0:f2:fa:22:81:
7e:42:ac:8b:aa:16:02:df:1d:34:7d:cf:dd:31:a9:61:57:d6:
9a:31:f5:86:14:53:fa:54:fc:44:95:4c:87:dd:d9:66:b1:af:
ac:c3:bd:f0:ba:19:d0:80:df:1b:c5:0e:24:ab:5f:46:8e:2d:
07:01:5d:6d:ee:cf:d7:e5:23:51:5b:10:7b:6d:05:c5:92:d8:
51:07:57:9e:fc:b0:36:e6:77:ae:20:f0:8b:b0:6a:a2:db:93:
2e:63:a7:5a:53:0d:47:d6:bc:c6:2e:65:a4:b0:68:f3:21:09:
86:3a:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:03:39 2026 by rpki-client