Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/prhlrnq-LB53AyBm0ADcbTFUMEk.roa
File: prhlrnq-LB53AyBm0ADcbTFUMEk.roa (raw, json)
Hash identifier: 8LNNBgJIwsPJhYieYOurl3ZAj3dRtFr28IjwNlo+rVY=
Subject key identifier: A6:B8:65:AE:7A:BE:2C:1E:77:03:20:66:D0:00:DC:6D:31:54:30:49
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01A1AF720C536AD78A4340ABE0490AB4BFBE
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/prhlrnq-LB53AyBm0ADcbTFUMEk.roa
Signing time: Fri 06 Nov 2026 06:00:49 +0000
ROA not before: Fri 06 Nov 2026 06:00:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 31.11.48.0/24 maxlen: 24
31.11.49.0/24 maxlen: 24
31.11.50.0/24 maxlen: 24
31.11.51.0/24 maxlen: 24
31.11.52.0/24 maxlen: 24
31.11.53.0/24 maxlen: 24
31.11.54.0/24 maxlen: 24
31.11.55.0/24 maxlen: 24
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.166.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
87.61.195.0/24 maxlen: 24
87.61.196.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.14.209.0/24 maxlen: 24
103.14.210.0/24 maxlen: 24
103.14.211.0/24 maxlen: 24
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
185.247.88.0/24 maxlen: 24
185.247.89.0/24 maxlen: 24
185.247.90.0/24 maxlen: 24
185.247.91.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:59::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:99::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:af:72:0c:53:6a:d7:8a:43:40:ab:e0:49:0a:b4:bf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Nov 6 06:00:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6b865ae7abe2c1e77032066d000dc6d31543049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:24:ba:39:7f:16:9d:14:15:bd:53:07:15:
51:a0:96:da:ae:58:f9:f3:dc:63:6d:f1:68:51:47:
1f:f1:e1:00:75:7a:df:01:44:ef:d5:5f:96:e5:a9:
17:90:24:0c:a8:dd:87:0a:5d:16:57:fc:9a:05:7f:
56:a9:df:99:6d:d6:07:a9:e2:78:68:1f:26:44:03:
b6:4f:fd:5d:58:cb:5e:0b:76:4d:ec:e6:3a:72:e7:
ae:ff:a9:70:56:cf:65:99:b7:58:c6:a5:ac:1a:2c:
f6:31:73:40:f4:a5:d6:1c:4d:27:4c:80:d3:a5:3e:
16:67:f7:c5:77:48:99:41:de:8b:26:64:04:13:c2:
87:70:7c:bf:d1:2a:65:a9:7d:12:a4:5a:34:25:84:
a7:5a:27:b2:e9:84:1a:bd:95:86:a4:8c:08:c4:7f:
eb:56:45:58:7f:39:ad:cc:6d:d5:f7:6f:80:3d:8c:
b1:d3:98:f3:3a:fb:36:76:c6:04:69:6e:f6:40:d4:
c1:ed:02:43:42:29:1b:f0:63:4f:4d:2b:2e:0c:48:
46:a1:9e:70:a0:42:e5:4d:1c:ef:e3:53:63:19:20:
8a:00:93:fb:0d:08:7c:d3:b9:7c:a0:c1:bf:fe:e2:
a1:96:9c:9e:4e:35:3c:0a:83:10:12:98:97:56:17:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B8:65:AE:7A:BE:2C:1E:77:03:20:66:D0:00:DC:6D:31:54:30:49
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/prhlrnq-LB53AyBm0ADcbTFUMEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
87.61.195.0-87.61.196.255
103.14.208.0/22
103.17.0.0/22
103.23.124.0/22
103.199.88.0/22
103.225.72.0/22
185.247.88.0/22
212.70.96.0/21
212.70.105.0-212.70.127.255
IPv6:
2a04:7f80:2::-2a04:7f80:5:ffff:ffff:ffff:ffff:ffff
2a04:7f80:10::/45
2a04:7f80:19::-2a04:7f80:1f:ffff:ffff:ffff:ffff:ffff
2a04:7f80:50::/44
2a04:7f80:99::/48
Signature Algorithm: sha256WithRSAEncryption
72:49:be:61:d1:0d:c5:04:06:3e:2b:55:32:fe:5e:89:e6:05:
42:ae:2e:b5:cd:5e:e4:3f:49:e2:64:a6:7a:80:4e:c3:e4:de:
9d:3e:22:73:7e:47:68:18:af:48:92:67:1c:bc:ca:3a:80:b1:
fd:59:c0:84:fe:6d:68:53:bd:82:c2:c5:32:c8:bc:f7:c5:96:
95:ea:8e:9b:b6:68:12:63:30:78:e6:23:fa:e1:d3:ac:97:8e:
63:31:bd:6a:d5:98:23:51:80:3f:cb:7a:bf:74:b4:21:15:7c:
4c:08:7e:0b:03:74:0c:f3:cb:09:b9:a7:21:3b:04:9d:4e:ff:
c6:c5:d0:8d:fa:39:06:5b:d9:81:89:37:fb:e9:b1:39:82:96:
1e:f4:00:9c:7e:47:4b:2e:72:21:16:39:64:74:6a:f4:09:10:
f3:49:71:6d:f1:7b:df:50:d0:e9:34:84:4b:f1:33:00:3c:73:
ce:49:64:17:52:5f:c2:19:14:6e:40:99:e3:64:c4:dd:b3:e3:
12:20:40:82:ee:8d:62:ef:ac:c7:8e:82:4b:12:01:33:f6:a4:
27:2c:8b:aa:d9:96:42:07:be:09:0c:e3:ef:a9:00:e5:06:98:
4b:68:84:46:4a:63:7b:6b:1b:0e:65:95:cf:06:9a:b3:c1:e3:
b1:57:b2:59
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgISAaGvcgxTateKQ0Cr4EkKtL++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjYxMTA2MDYwMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmI4NjVhZTdhYmUyYzFlNzcwMzIwNjZkMDAwZGM2ZDMxNTQzMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X4kujl/Fp0UFb1TBxVRoJbarlj5
89xjbfFoUUcf8eEAdXrfAUTv1V+W5akXkCQMqN2HCl0WV/yaBX9Wqd+ZbdYHqeJ4
aB8mRAO2T/1dWMteC3ZN7OY6cueu/6lwVs9lmbdYxqWsGiz2MXNA9KXWHE0nTIDT
pT4WZ/fFd0iZQd6LJmQEE8KHcHy/0SplqX0SpFo0JYSnWiey6YQavZWGpIwIxH/r
VkVYfzmtzG3V92+APYyx05jzOvs2dsYEaW72QNTB7QJDQikb8GNPTSsuDEhGoZ5w
oELlTRzv41NjGSCKAJP7DQh807l8oMG//uKhlpyeTjU8CoMQEpiXVheXCwIDAQAB
o4ICqTCCAqUwHQYDVR0OBBYEFKa4Za56viwedwMgZtAA3G0xVDBJMB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvcHJobHJucS1MQjUzQXlCbTBBRGNiVEZVTUVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG+BggrBgEFBQcBBwEB/wSBrjCBqzBeBAIAATBYAwQDHwsw
AwQFJbogAwQEUEygMAwDBABXPcMDBABXPcQDBAJnDtADBAJnEQADBAJnF3wDBAJn
x1gDBAJn4UgDBAK591gDBAPURmAwDAMEANRGaQMEB9RGADBJBAIAAjBDMBIDBwEq
BH+AAAIDBwEqBH+AAAQDBwMqBH+AABAwEgMHACoEf4AAGQMHBSoEf4AAAAMHBCoE
f4AAUAMHACoEf4AAmTANBgkqhkiG9w0BAQsFAAOCAQEAckm+YdENxQQGPitVMv5e
ieYFQq4utc1e5D9J4mSmeoBOw+TenT4ic35HaBivSJJnHLzKOoCx/VnAhP5taFO9
gsLFMsi898WWleqOm7ZoEmMweOYj+uHTrJeOYzG9atWYI1GAP8t6v3S0IRV8TAh+
CwN0DPPLCbmnITsEnU7/xsXQjfo5BlvZgYk3++mxOYKWHvQAnH5HSy5yIRY5ZHRq
9AkQ80lxbfF731DQ6TSES/EzADxzzklkF1JfwhkUbkCZ42TE3bPjEiBAgu6NYu+s
x46CSxIBM/akJyyLqtmWQge+CQzj76kA5QaYS2iERkpje2sbDmWVzwaas8HjsVey
WQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:26 2026 by rpki-client