Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/9QKBHd_XuPJw3-NHIxnHJFVHZNs.roa
File: 9QKBHd_XuPJw3-NHIxnHJFVHZNs.roa (raw, json)
Hash identifier: rZotzcjQad5Wc42Cxm6dHXnrc8v4lq9vQewLzidPFGQ=
Subject key identifier: F5:02:81:1D:DF:D7:B8:F2:70:DF:E3:47:23:19:C7:24:55:47:64:DB
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 01A1A152A418D566FCC1F2B550A54068DD5D
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/9QKBHd_XuPJw3-NHIxnHJFVHZNs.roa
Signing time: Tue 03 Nov 2026 12:11:50 +0000
ROA not before: Tue 03 Nov 2026 12:11:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50597
IP address blocks: 37.98.224.0/21 maxlen: 21
37.98.224.0/24 maxlen: 24
37.98.225.0/24 maxlen: 24
37.98.226.0/24 maxlen: 24
37.98.227.0/24 maxlen: 24
37.98.228.0/24 maxlen: 24
37.98.229.0/24 maxlen: 24
37.98.230.0/24 maxlen: 24
37.98.231.0/24 maxlen: 24
85.113.90.0/23 maxlen: 23
85.113.90.0/24 maxlen: 24
85.113.91.0/24 maxlen: 24
85.194.196.0/22 maxlen: 22
85.194.196.0/24 maxlen: 24
85.194.197.0/24 maxlen: 24
85.194.198.0/24 maxlen: 24
85.194.199.0/24 maxlen: 24
109.205.112.0/21 maxlen: 24
167.160.5.0/24 maxlen: 24
176.28.75.0/24 maxlen: 24
176.28.76.0/24 maxlen: 24
185.58.12.0/24 maxlen: 24
185.58.13.0/24 maxlen: 24
185.58.14.0/24 maxlen: 24
185.76.32.0/22 maxlen: 22
185.76.32.0/24 maxlen: 24
185.76.33.0/24 maxlen: 24
185.76.34.0/24 maxlen: 24
185.76.35.0/24 maxlen: 24
185.181.52.0/22 maxlen: 24
185.181.54.0/24 maxlen: 24
185.181.55.0/24 maxlen: 24
192.161.6.0/23 maxlen: 24
192.161.6.0/24 maxlen: 24
192.161.7.0/24 maxlen: 24
2a05:55c0::/29 maxlen: 29
2a05:55c1:1::/48 maxlen: 48
2a05:55c1:2::/48 maxlen: 48
2a05:55c1:3::/48 maxlen: 48
2a05:55c1:4::/48 maxlen: 48
2a05:55c1:5::/48 maxlen: 48
2a05:55c1:6::/48 maxlen: 48
2a05:55c1:7::/48 maxlen: 48
2a05:55c1:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:52:a4:18:d5:66:fc:c1:f2:b5:50:a5:40:68:dd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Nov 3 12:11:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f502811ddfd7b8f270dfe3472319c724554764db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:24:82:45:50:4b:a7:cf:b6:e9:d4:c1:d2:
a3:bd:7c:93:73:9b:e5:b3:08:db:d6:6d:6b:08:6a:
91:3f:68:2e:49:b1:59:ae:62:d4:8e:50:51:92:d1:
d6:4a:64:a2:b7:f4:25:d7:7c:68:e1:e8:75:79:c7:
02:41:71:26:9b:17:0e:02:b6:14:19:a6:d8:93:e7:
16:2c:af:0b:cd:c1:aa:e0:a5:d6:d3:7c:a3:91:61:
ee:f2:be:d9:c7:96:28:be:fa:6a:0c:c8:02:c2:16:
e0:13:03:03:ee:71:eb:bf:f6:65:5f:6a:ee:16:18:
ad:81:cf:fa:81:97:67:a9:64:86:6c:32:76:82:39:
85:0f:71:9e:55:42:83:2e:41:84:ec:1d:b1:a4:4c:
60:64:63:47:2e:00:5d:c8:1f:89:61:5a:03:5c:b4:
de:b2:18:e1:07:14:d4:b5:96:8e:16:76:88:89:ef:
c7:79:f0:00:29:70:35:64:7e:59:1f:f2:38:d9:2b:
56:ff:3b:d9:0c:27:62:18:c7:e4:49:b6:31:47:b5:
71:d1:b6:84:7c:a8:0f:f2:8d:cd:86:50:0f:03:be:
f5:0a:04:c2:9b:1c:8f:67:86:90:4a:05:89:a3:01:
b6:d9:10:5d:9a:c3:ea:d6:e1:43:2d:be:15:e4:7d:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:02:81:1D:DF:D7:B8:F2:70:DF:E3:47:23:19:C7:24:55:47:64:DB
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/9QKBHd_XuPJw3-NHIxnHJFVHZNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.224.0/21
85.113.90.0/23
85.194.196.0/22
109.205.112.0/21
167.160.5.0/24
176.28.75.0-176.28.76.255
185.58.12.0-185.58.14.255
185.76.32.0/22
185.181.52.0/22
192.161.6.0/23
IPv6:
2a05:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:bc:37:ce:42:35:ca:f2:81:0a:b1:7c:42:ef:00:ef:83:47:
36:73:82:bc:e1:8b:46:90:89:44:69:a0:bc:56:1f:c0:fc:0b:
bb:23:66:90:d3:2a:ea:fe:0b:a7:ef:e2:a2:9e:5d:c1:65:b2:
94:d4:3b:4e:f5:f8:42:99:44:28:de:1c:84:6c:d2:d4:90:6d:
4a:04:cb:d6:2c:ec:d9:42:1a:f3:af:23:18:85:34:67:ed:45:
f5:36:52:51:d5:bc:b5:f6:f4:18:fc:61:60:95:62:ac:b0:7b:
ff:74:0c:3d:19:9b:2d:6f:d2:4f:d8:ef:6a:68:68:d0:e2:06:
d5:fb:75:4e:6d:07:2b:54:61:01:a2:db:5f:71:15:b7:04:4c:
21:92:c0:3c:da:ba:1a:1e:49:58:53:94:da:5a:88:b5:a5:b8:
fe:75:47:7b:18:1d:6a:41:2d:9c:d2:f8:07:76:2d:ef:6b:45:
bd:ed:19:77:be:e7:52:0f:22:54:98:86:18:aa:7c:d9:32:e0:
01:c5:87:66:28:74:64:0f:b9:62:16:ba:54:1f:55:a9:6f:64:
4d:ec:66:46:98:57:bb:07:0f:62:d3:8b:5d:5e:93:6d:a7:f6:
f7:70:25:57:14:7f:7d:ad:01:de:83:cf:93:cf:ed:81:6b:55:
aa:1a:5a:1b
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAaGhUqQY1Wb8wfK1UKVAaN1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjc2MGMwNTc3M2MxNWQ3MzY3NjQ1MDM0NDY2OGZlZmI3
MjM0NDcwHhcNMjYxMTAzMTIxMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTAyODExZGRmZDdiOGYyNzBkZmUzNDcyMzE5YzcyNDU1NDc2NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16kkgkVQS6fPtunUwdKjvXyTc5vl
swjb1m1rCGqRP2guSbFZrmLUjlBRktHWSmSit/Ql13xo4eh1eccCQXEmmxcOArYU
GabYk+cWLK8LzcGq4KXW03yjkWHu8r7Zx5YovvpqDMgCwhbgEwMD7nHrv/ZlX2ru
Fhitgc/6gZdnqWSGbDJ2gjmFD3GeVUKDLkGE7B2xpExgZGNHLgBdyB+JYVoDXLTe
shjhBxTUtZaOFnaIie/HefAAKXA1ZH5ZH/I42StW/zvZDCdiGMfkSbYxR7Vx0baE
fKgP8o3NhlAPA771CgTCmxyPZ4aQSgWJowG22RBdmsPq1uFDLb4V5H0RHQIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFPUCgR3f17jycN/jRyMZxyRVR2TbMB8GA1UdIwQY
MBaAFOv3YMBXc8Fdc2dkUDRGaP77cjRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYt
NDkwOTg4OTdlZTRhLzEvOVFLQkhkX1h1UEp3My1OSEl4bkhKRlZIWk5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYtNDkwOTg4OTdlZTRh
LzEvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMAwQDJWLgAwQB
VXFaAwQCVcLEAwQDbc1wAwQAp6AFMAwDBACwHEsDBACwHEwwDAMEArk6DAMEALk6
DgMEArlMIAMEArm1NAMEAcChBjANBAIAAjAHAwUDKgVVwDANBgkqhkiG9w0BAQsF
AAOCAQEAqrw3zkI1yvKBCrF8Qu8A74NHNnOCvOGLRpCJRGmgvFYfwPwLuyNmkNMq
6v4Lp+/iop5dwWWylNQ7TvX4QplEKN4chGzS1JBtSgTL1izs2UIa868jGIU0Z+1F
9TZSUdW8tfb0GPxhYJVirLB7/3QMPRmbLW/ST9jvamho0OIG1ft1Tm0HK1RhAaLb
X3EVtwRMIZLAPNq6Gh5JWFOU2lqItaW4/nVHexgdakEtnNL4B3Yt72tFve0Zd77n
Ug8iVJiGGKp82TLgAcWHZih0ZA+5Yha6VB9VqW9kTexmRphXuwcPYtOLXV6Tbaf2
93AlVxR/fa0B3oPPk8/tgWtVqhpaGw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:22:08 2026 by rpki-client