Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/35wDpRsfaq8aq0FjZJRW12A2SwI.roa
File: 35wDpRsfaq8aq0FjZJRW12A2SwI.roa (raw, json)
Hash identifier: S32iSai/D3+xMYiGNdr33Lz5mjsLhdP2ds6sS7Zu5bY=
Subject key identifier: DF:9C:03:A5:1B:1F:6A:AF:1A:AB:41:63:64:94:56:D7:60:36:4B:02
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019F5A15C4A138643DED720159956939A7A9
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/35wDpRsfaq8aq0FjZJRW12A2SwI.roa
Signing time: Mon 13 Jul 2026 06:06:43 +0000
ROA not before: Mon 13 Jul 2026 06:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15704
IP address blocks: 31.222.80.0/20 maxlen: 20
31.222.88.0/24 maxlen: 24
31.222.89.0/24 maxlen: 24
31.222.90.0/24 maxlen: 24
66.81.160.0/21 maxlen: 21
66.81.168.0/21 maxlen: 21
66.81.176.0/21 maxlen: 21
66.81.184.0/21 maxlen: 21
67.218.224.0/21 maxlen: 21
67.218.232.0/21 maxlen: 21
67.218.240.0/21 maxlen: 21
67.218.248.0/21 maxlen: 21
77.241.48.0/20 maxlen: 20
78.30.0.0/18 maxlen: 21
81.0.0.0/18 maxlen: 20
82.213.192.0/20 maxlen: 20
82.213.208.0/20 maxlen: 20
82.213.224.0/19 maxlen: 19
83.138.40.0/21 maxlen: 21
84.39.176.0/21 maxlen: 21
85.31.128.0/22 maxlen: 22
85.31.132.0/22 maxlen: 22
85.187.52.0/22 maxlen: 22
85.235.68.0/22 maxlen: 22
85.239.128.0/22 maxlen: 22
85.239.132.0/22 maxlen: 22
85.239.136.0/22 maxlen: 22
85.239.140.0/22 maxlen: 22
87.124.128.0/18 maxlen: 18
87.124.176.0/20 maxlen: 20
89.35.62.0/23 maxlen: 23
89.39.32.0/19 maxlen: 19
89.39.52.0/24 maxlen: 24
91.106.16.0/21 maxlen: 21
91.194.62.0/23 maxlen: 23
91.242.152.0/21 maxlen: 21
93.115.37.0/24 maxlen: 24
93.115.128.0/22 maxlen: 22
93.115.132.0/22 maxlen: 22
93.115.152.0/24 maxlen: 24
93.115.202.0/24 maxlen: 24
93.115.242.0/24 maxlen: 24
93.176.128.0/18 maxlen: 21
93.177.120.0/22 maxlen: 23
94.73.32.0/19 maxlen: 19
119.12.224.0/22 maxlen: 22
119.12.228.0/22 maxlen: 22
119.12.228.0/23 maxlen: 23
119.12.230.0/23 maxlen: 23
119.12.232.0/23 maxlen: 23
119.12.234.0/23 maxlen: 23
119.12.236.0/22 maxlen: 22
119.12.240.0/23 maxlen: 23
119.12.242.0/23 maxlen: 23
119.12.244.0/22 maxlen: 22
119.12.248.0/22 maxlen: 22
119.12.252.0/23 maxlen: 23
119.12.254.0/23 maxlen: 23
137.59.58.0/24 maxlen: 24
139.47.0.0/17 maxlen: 17
139.47.8.0/21 maxlen: 21
139.47.16.0/21 maxlen: 21
139.47.24.0/21 maxlen: 21
139.47.32.0/21 maxlen: 21
139.47.40.0/21 maxlen: 21
139.47.48.0/21 maxlen: 21
139.47.56.0/21 maxlen: 21
139.47.96.0/21 maxlen: 21
139.47.104.0/21 maxlen: 21
139.47.112.0/21 maxlen: 21
139.47.120.0/21 maxlen: 21
139.47.128.0/19 maxlen: 19
144.178.128.0/18 maxlen: 18
144.178.128.0/21 maxlen: 21
144.178.136.0/21 maxlen: 21
170.253.0.0/20 maxlen: 20
170.253.16.0/20 maxlen: 20
170.253.32.0/20 maxlen: 20
170.253.48.0/20 maxlen: 20
176.222.64.0/19 maxlen: 19
176.222.75.0/24 maxlen: 24
176.222.82.0/24 maxlen: 24
178.218.194.0/24 maxlen: 24
181.41.128.0/21 maxlen: 21
185.79.20.0/22 maxlen: 22
185.145.64.0/22 maxlen: 22
185.146.56.0/22 maxlen: 22
185.153.164.0/23 maxlen: 23
185.153.166.0/23 maxlen: 23
185.176.4.0/22 maxlen: 22
185.197.240.0/22 maxlen: 22
185.227.212.0/23 maxlen: 23
185.227.214.0/23 maxlen: 23
185.228.152.0/22 maxlen: 22
185.252.12.0/22 maxlen: 22
188.65.88.0/21 maxlen: 21
188.208.219.0/24 maxlen: 24
188.212.23.0/24 maxlen: 24
193.17.66.0/24 maxlen: 24
193.53.160.0/22 maxlen: 22
193.177.208.0/22 maxlen: 22
195.160.224.0/22 maxlen: 22
206.204.128.0/23 maxlen: 23
206.204.130.0/23 maxlen: 23
206.204.132.0/23 maxlen: 23
206.204.134.0/24 maxlen: 24
206.204.135.0/24 maxlen: 24
206.204.136.0/23 maxlen: 23
206.204.138.0/23 maxlen: 23
206.204.140.0/22 maxlen: 22
206.204.148.0/23 maxlen: 23
206.204.150.0/23 maxlen: 23
206.204.152.0/22 maxlen: 22
206.204.156.0/22 maxlen: 22
207.188.128.0/21 maxlen: 21
207.188.136.0/21 maxlen: 21
207.188.144.0/21 maxlen: 21
207.188.152.0/21 maxlen: 21
207.188.160.0/21 maxlen: 21
207.188.168.0/21 maxlen: 21
207.188.176.0/21 maxlen: 21
207.188.184.0/21 maxlen: 21
212.7.32.0/20 maxlen: 20
212.7.63.0/24 maxlen: 24
212.14.96.0/19 maxlen: 23
212.14.96.0/22 maxlen: 22
212.14.100.0/22 maxlen: 22
212.14.104.0/23 maxlen: 23
212.14.108.0/22 maxlen: 22
212.14.118.0/23 maxlen: 23
212.166.66.0/24 maxlen: 24
212.166.67.0/24 maxlen: 24
212.166.68.0/24 maxlen: 24
212.166.69.0/24 maxlen: 24
212.166.70.0/24 maxlen: 24
212.166.71.0/24 maxlen: 24
212.166.74.0/24 maxlen: 24
212.166.76.0/24 maxlen: 24
212.230.0.0/15 maxlen: 15
212.230.22.0/24 maxlen: 24
212.230.136.0/24 maxlen: 24
212.230.156.0/24 maxlen: 24
212.230.157.0/24 maxlen: 24
212.230.159.0/24 maxlen: 24
212.230.178.0/24 maxlen: 24
212.230.233.0/24 maxlen: 24
212.231.112.0/21 maxlen: 21
212.231.120.0/22 maxlen: 22
212.231.124.0/22 maxlen: 22
213.94.0.0/18 maxlen: 23
213.94.0.0/21 maxlen: 21
213.94.16.0/22 maxlen: 22
213.94.40.0/22 maxlen: 22
213.177.192.0/19 maxlen: 21
213.177.208.0/21 maxlen: 21
217.113.240.0/20 maxlen: 22
2a00:d100::/29 maxlen: 37
2a01:8480::/32 maxlen: 32
2a01:8480:2001::/48 maxlen: 48
2a01:8480:2002::/48 maxlen: 48
2a01:8480:2003::/48 maxlen: 48
2a01:8480:2004::/48 maxlen: 48
2a01:8480:2008::/47 maxlen: 47
2a01:8480:200a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:15:c4:a1:38:64:3d:ed:72:01:59:95:69:39:a7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jul 13 06:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df9c03a51b1f6aaf1aab4163649456d760364b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:ce:df:2b:48:4e:6d:63:ec:53:e3:74:9b:
8f:03:d4:29:ae:06:79:fb:96:ec:18:de:40:d6:61:
fb:62:49:62:51:55:46:53:c7:ff:22:b8:0b:6a:ab:
a0:f4:0d:b8:4b:03:ce:26:ca:db:a2:b9:3a:9a:d5:
ab:e4:2a:0f:cb:6e:96:8b:f0:10:b8:35:c2:ed:29:
86:a3:ca:a7:f4:cc:db:f5:d0:ac:cc:78:89:ee:d3:
c1:c8:07:aa:5b:5f:35:9f:8a:2d:e1:13:a3:7e:84:
fb:e5:0e:7b:8e:86:24:1d:dc:64:19:82:50:6e:89:
3e:b4:16:53:2d:76:11:b0:ad:59:b0:0f:92:e4:27:
2a:2b:71:bf:f2:38:ee:b1:ca:ff:e8:fd:b2:b1:30:
9c:fc:8b:d9:b3:08:60:82:a1:b0:8d:4f:5d:02:ed:
3e:14:cc:66:30:07:54:19:d3:28:3f:31:43:7f:e7:
63:d8:8b:a8:96:18:7d:5d:4a:49:f3:ff:0d:ae:98:
e6:2a:43:26:ae:7c:dc:c8:38:f0:eb:e1:5b:5e:ec:
92:59:12:dc:4f:1c:4f:f3:ee:56:e4:f0:a0:a7:55:
d9:d8:66:84:46:d0:93:55:67:06:31:4f:a4:29:34:
43:c3:a9:d6:4d:a5:d5:a6:35:bd:c7:e3:22:65:b0:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9C:03:A5:1B:1F:6A:AF:1A:AB:41:63:64:94:56:D7:60:36:4B:02
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/35wDpRsfaq8aq0FjZJRW12A2SwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.80.0/20
66.81.160.0/19
67.218.224.0/19
77.241.48.0/20
78.30.0.0/18
81.0.0.0/18
82.213.192.0/18
83.138.40.0/21
84.39.176.0/21
85.31.128.0/21
85.187.52.0/22
85.235.68.0/22
85.239.128.0/20
87.124.128.0/18
89.35.62.0/23
89.39.32.0/19
91.106.16.0/21
91.194.62.0/23
91.242.152.0/21
93.115.37.0/24
93.115.128.0/21
93.115.152.0/24
93.115.202.0/24
93.115.242.0/24
93.176.128.0/18
93.177.120.0/22
94.73.32.0/19
119.12.224.0/19
137.59.58.0/24
139.47.0.0-139.47.159.255
144.178.128.0/18
170.253.0.0/18
176.222.64.0/19
178.218.194.0/24
181.41.128.0/21
185.79.20.0/22
185.145.64.0/22
185.146.56.0/22
185.153.164.0/22
185.176.4.0/22
185.197.240.0/22
185.227.212.0/22
185.228.152.0/22
185.252.12.0/22
188.65.88.0/21
188.208.219.0/24
188.212.23.0/24
193.17.66.0/24
193.53.160.0/22
193.177.208.0/22
195.160.224.0/22
206.204.128.0/20
206.204.148.0-206.204.159.255
207.188.128.0/18
212.7.32.0/20
212.7.63.0/24
212.14.96.0/19
212.166.66.0-212.166.71.255
212.166.74.0/24
212.166.76.0/24
212.230.0.0/15
213.94.0.0/18
213.177.192.0/19
217.113.240.0/20
IPv6:
2a00:d100::/29
2a01:8480::/32
Signature Algorithm: sha256WithRSAEncryption
52:9a:6a:67:dd:10:e3:24:c9:50:22:26:5f:f3:9f:23:1c:4f:
3f:44:60:eb:b4:dd:d1:84:40:10:fe:a5:ce:96:30:1e:20:46:
b9:6d:b5:2c:03:b8:2c:78:8d:6b:6e:b5:15:b4:8b:97:98:25:
9c:85:48:16:49:0c:88:e9:c5:99:26:0f:b9:e3:a1:bb:f2:6f:
e7:75:84:24:02:17:c7:ec:92:54:08:1a:bb:56:92:ff:d3:cc:
e6:e5:fe:cc:3e:1a:14:bc:0b:11:18:b8:82:be:26:1f:51:0e:
f4:12:d0:32:17:f9:34:66:cb:b6:4f:ab:7e:de:9f:6f:76:4e:
b4:02:6b:5d:03:a7:99:d3:03:9c:66:88:65:39:27:8d:7b:5e:
70:2f:fc:8a:68:20:11:4e:07:88:67:b4:5a:65:42:6c:38:93:
61:51:17:7b:fe:a2:e7:9c:4b:3a:ee:cb:a9:07:7c:de:e8:9c:
8c:d3:86:5e:b8:22:27:e4:23:ab:88:2f:46:80:5e:61:87:48:
82:4e:56:b8:e8:ee:f9:df:1f:1f:6e:29:70:47:50:b0:6d:ed:
d0:bb:2e:a2:bf:3e:36:6a:3b:40:23:92:d5:8f:61:ec:e9:5d:
20:b0:1d:13:37:bf:5f:cd:c8:a0:c5:22:8e:8a:cd:fd:bf:cc:
32:61:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:33:26 2026 by rpki-client