Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/ATW5QVX78zajRacvXNXBk3Aly-g.roa
File: ATW5QVX78zajRacvXNXBk3Aly-g.roa (raw, json)
Hash identifier: Tr/C5en3rO3/GmpPwhKz36QysVFer0FW+e0wXsc+bew=
Subject key identifier: 01:35:B9:41:55:FB:F3:36:A3:45:A7:2F:5C:D5:C1:93:70:25:CB:E8
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019F8F22407CFA3FB272DD9B3CCF36C38332
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/ATW5QVX78zajRacvXNXBk3Aly-g.roa
Signing time: Thu 23 Jul 2026 13:20:14 +0000
ROA not before: Thu 23 Jul 2026 13:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42926
IP address blocks: 31.210.64.0/18 maxlen: 24
31.210.96.0/24 maxlen: 24
31.210.97.0/24 maxlen: 24
31.210.98.0/24 maxlen: 24
31.210.99.0/24 maxlen: 24
31.210.100.0/24 maxlen: 24
31.210.101.0/24 maxlen: 24
31.210.102.0/24 maxlen: 24
31.210.103.0/24 maxlen: 24
31.210.104.0/24 maxlen: 24
31.210.105.0/24 maxlen: 24
31.210.106.0/24 maxlen: 24
31.210.107.0/24 maxlen: 24
31.210.108.0/24 maxlen: 24
31.210.109.0/24 maxlen: 24
31.210.110.0/24 maxlen: 24
31.210.111.0/24 maxlen: 24
31.210.112.0/24 maxlen: 24
31.210.113.0/24 maxlen: 24
31.210.114.0/24 maxlen: 24
31.210.115.0/24 maxlen: 24
31.210.116.0/24 maxlen: 24
31.210.117.0/24 maxlen: 24
31.210.118.0/24 maxlen: 24
31.210.119.0/24 maxlen: 24
46.45.128.0/18 maxlen: 24
46.45.185.0/24 maxlen: 24
46.45.186.0/24 maxlen: 24
46.45.187.0/24 maxlen: 24
46.45.188.0/24 maxlen: 24
77.75.32.0/21 maxlen: 24
79.98.128.0/21 maxlen: 24
94.101.80.0/20 maxlen: 24
94.101.90.0/24 maxlen: 24
176.53.0.0/17 maxlen: 24
176.53.0.0/24 maxlen: 24
176.53.1.0/24 maxlen: 24
176.53.2.0/24 maxlen: 24
176.53.3.0/24 maxlen: 24
176.53.5.0/24 maxlen: 24
176.53.6.0/24 maxlen: 24
176.53.8.0/24 maxlen: 24
176.53.9.0/24 maxlen: 24
176.53.10.0/24 maxlen: 24
176.53.11.0/24 maxlen: 24
176.53.12.0/24 maxlen: 24
176.53.13.0/24 maxlen: 24
176.53.14.0/24 maxlen: 24
176.53.15.0/24 maxlen: 24
176.53.18.0/24 maxlen: 24
176.53.19.0/24 maxlen: 24
176.53.20.0/24 maxlen: 24
176.53.32.0/24 maxlen: 24
176.53.34.0/24 maxlen: 24
176.53.36.0/24 maxlen: 24
176.53.37.0/24 maxlen: 24
176.53.38.0/24 maxlen: 24
176.53.39.0/24 maxlen: 24
176.53.40.0/24 maxlen: 24
176.53.41.0/24 maxlen: 24
176.53.42.0/24 maxlen: 24
176.53.43.0/24 maxlen: 24
176.53.44.0/24 maxlen: 24
176.53.45.0/24 maxlen: 24
176.53.46.0/24 maxlen: 24
176.53.47.0/24 maxlen: 24
176.53.48.0/24 maxlen: 24
176.53.49.0/24 maxlen: 24
176.53.51.0/24 maxlen: 24
176.53.55.0/24 maxlen: 24
176.53.57.0/24 maxlen: 24
176.53.59.0/24 maxlen: 24
176.53.61.0/24 maxlen: 24
176.53.66.0/24 maxlen: 24
176.53.67.0/24 maxlen: 24
176.53.70.0/24 maxlen: 24
176.53.71.0/24 maxlen: 24
176.53.72.0/24 maxlen: 24
176.53.73.0/24 maxlen: 24
176.53.74.0/24 maxlen: 24
176.53.77.0/24 maxlen: 24
176.53.78.0/24 maxlen: 24
176.53.79.0/24 maxlen: 24
176.53.80.0/24 maxlen: 24
176.53.81.0/24 maxlen: 24
176.53.83.0/24 maxlen: 24
176.53.84.0/24 maxlen: 24
176.53.85.0/24 maxlen: 24
176.53.86.0/24 maxlen: 24
176.53.87.0/24 maxlen: 24
176.53.88.0/24 maxlen: 24
176.53.89.0/24 maxlen: 24
176.53.90.0/24 maxlen: 24
176.53.91.0/24 maxlen: 24
176.53.92.0/24 maxlen: 24
176.53.93.0/24 maxlen: 24
176.53.94.0/24 maxlen: 24
176.53.95.0/24 maxlen: 24
176.53.96.0/24 maxlen: 24
176.53.99.0/24 maxlen: 24
176.53.100.0/24 maxlen: 24
176.53.101.0/24 maxlen: 24
176.53.102.0/24 maxlen: 24
176.53.104.0/24 maxlen: 24
176.53.105.0/24 maxlen: 24
176.53.106.0/24 maxlen: 24
176.53.107.0/24 maxlen: 24
176.53.112.0/24 maxlen: 24
176.53.125.0/24 maxlen: 24
176.53.126.0/24 maxlen: 24
176.53.127.0/24 maxlen: 24
178.211.32.0/19 maxlen: 24
178.211.61.0/24 maxlen: 24
185.25.100.0/22 maxlen: 22
185.25.100.0/24 maxlen: 24
185.25.101.0/24 maxlen: 24
185.25.102.0/24 maxlen: 24
185.25.103.0/24 maxlen: 24
185.157.40.0/24 maxlen: 24
185.157.41.0/24 maxlen: 24
185.157.42.0/24 maxlen: 24
185.157.43.0/24 maxlen: 24
185.184.208.0/22 maxlen: 24
213.128.64.0/24 maxlen: 24
213.128.65.0/24 maxlen: 24
213.128.66.0/24 maxlen: 24
213.128.67.0/24 maxlen: 24
213.128.68.0/24 maxlen: 24
213.128.69.0/24 maxlen: 24
213.128.70.0/24 maxlen: 24
213.128.71.0/24 maxlen: 24
213.128.72.0/24 maxlen: 24
213.128.73.0/24 maxlen: 24
213.128.74.0/24 maxlen: 24
213.128.75.0/24 maxlen: 24
213.128.76.0/24 maxlen: 24
213.128.77.0/24 maxlen: 24
213.128.78.0/24 maxlen: 24
213.128.79.0/24 maxlen: 24
213.128.80.0/24 maxlen: 24
213.128.81.0/24 maxlen: 24
213.128.82.0/24 maxlen: 24
213.128.83.0/24 maxlen: 24
213.128.84.0/24 maxlen: 24
213.128.85.0/24 maxlen: 24
213.128.86.0/24 maxlen: 24
213.128.87.0/24 maxlen: 24
213.128.88.0/24 maxlen: 24
213.128.89.0/24 maxlen: 24
213.128.90.0/24 maxlen: 24
213.128.93.0/24 maxlen: 24
213.128.94.0/24 maxlen: 24
213.128.95.0/24 maxlen: 24
2a00:56a0::/32 maxlen: 48
2a01:790::/32 maxlen: 48
2a0b:5f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:22:40:7c:fa:3f:b2:72:dd:9b:3c:cf:36:c3:83:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Jul 23 13:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0135b94155fbf336a345a72f5cd5c1937025cbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:9e:b7:12:05:1a:5e:2f:ac:b6:fd:30:41:
fa:bf:c6:cb:b7:d1:98:f8:cf:42:58:14:c4:7f:b6:
6e:97:3f:b4:5c:b1:7f:e4:9a:cc:0e:3b:b5:bc:86:
93:9e:6a:e4:67:ca:a6:db:7a:a7:6a:bf:5c:48:3f:
32:a1:e2:10:2b:cc:9e:7a:e7:f9:c8:2c:b9:ed:3a:
e6:82:f5:56:04:b1:06:17:b3:72:bf:d8:5f:d2:53:
70:03:9e:eb:fa:f9:ac:ea:32:ee:36:50:16:65:2c:
5a:8c:96:9d:06:92:f1:47:d9:ea:df:e5:e5:25:11:
d4:33:5f:b9:01:8f:24:31:5e:af:10:b8:36:f5:6b:
97:55:34:b3:c3:66:55:c9:5a:78:06:06:98:62:93:
39:6b:20:59:b4:c8:45:78:da:a9:e2:bd:f7:62:30:
ab:6a:c8:36:f0:f5:82:b5:b6:fa:e5:00:fc:5d:35:
a8:ec:15:9d:6b:1d:72:e6:73:74:46:a9:72:30:e7:
c1:9e:47:bc:e5:fc:0a:66:f0:44:56:ff:e9:68:59:
92:4e:96:f2:ea:fe:91:9c:20:30:1e:c5:ce:4f:55:
27:6a:ff:17:bb:e1:70:c6:24:05:ad:29:64:db:c5:
aa:f7:3d:e0:37:94:f3:0b:28:19:82:96:c5:4e:04:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:35:B9:41:55:FB:F3:36:A3:45:A7:2F:5C:D5:C1:93:70:25:CB:E8
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/ATW5QVX78zajRacvXNXBk3Aly-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.64.0/18
46.45.128.0/18
77.75.32.0/21
79.98.128.0/21
94.101.80.0/20
176.53.0.0/17
178.211.32.0/19
185.25.100.0/22
185.157.40.0/22
185.184.208.0/22
213.128.64.0-213.128.90.255
213.128.93.0-213.128.95.255
IPv6:
2a00:56a0::/32
2a01:790::/32
2a0b:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
a7:1c:62:bb:ee:44:95:02:8a:f3:74:24:cf:aa:cc:04:c1:18:
83:8c:38:eb:40:08:5a:84:f9:18:dc:7d:93:81:90:fb:04:5e:
fa:79:0f:e8:15:5e:a7:a0:10:8a:37:44:6e:c0:d4:2b:d5:72:
18:59:ad:c7:df:32:9f:3d:a4:d9:c4:3a:ca:a8:ef:d5:c0:e3:
94:6c:8b:0d:ca:10:ca:86:8e:21:70:c5:27:95:74:0f:fc:70:
01:90:9a:28:ae:3b:7a:ef:57:17:9d:96:dc:a1:f1:94:de:8b:
af:f2:fc:dd:69:2f:83:20:e1:35:e8:aa:88:3e:ee:84:b1:e4:
31:31:a0:e3:39:f9:c1:58:e4:e4:ed:85:b2:9d:cd:d5:52:c1:
92:94:44:f7:9d:45:f0:e4:7b:a8:3f:42:64:62:a0:d6:d7:10:
13:5d:41:1a:8f:dd:92:1d:f3:8a:09:9f:aa:2a:96:e9:b7:9d:
2f:0d:e2:72:3f:8f:7b:1b:a7:51:00:a2:80:9c:6a:76:c1:86:
78:d2:7a:24:72:f8:ef:b7:12:27:33:54:19:3e:ed:64:94:01:
d2:cc:69:c1:33:99:19:96:c0:89:69:f5:6e:d0:45:e1:f9:b5:
4f:bd:be:63:5c:33:19:71:3b:91:7d:50:54:28:dd:43:48:13:
f7:db:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:56 2026 by rpki-client