Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/o1AmIopz9q4zRTmrcoM47cDuCHY.roa
File: o1AmIopz9q4zRTmrcoM47cDuCHY.roa (raw, json)
Hash identifier: LYe2LtBXErpEaI3qCk1VoxCUPxgfpnC7P/suMsnuTlY=
Subject key identifier: A3:50:26:22:8A:73:F6:AE:33:45:39:AB:72:83:38:ED:C0:EE:08:76
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 019F3CDA3E6A8BE8A117DF4DFAF1D2AB2B79
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/o1AmIopz9q4zRTmrcoM47cDuCHY.roa
Signing time: Tue 07 Jul 2026 13:52:43 +0000
ROA not before: Tue 07 Jul 2026 13:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33915
IP address blocks: 31.136.0.0/14 maxlen: 14
37.235.8.0/21 maxlen: 21
62.72.192.0/19 maxlen: 19
62.140.128.0/20 maxlen: 20
62.140.140.0/23 maxlen: 23
62.140.156.0/23 maxlen: 23
62.145.192.0/18 maxlen: 18
62.145.192.0/19 maxlen: 19
62.145.224.0/19 maxlen: 19
80.112.0.0/17 maxlen: 17
80.112.0.0/18 maxlen: 18
80.112.64.0/18 maxlen: 18
80.112.128.0/18 maxlen: 18
80.112.128.0/19 maxlen: 19
80.112.160.0/19 maxlen: 19
80.112.192.0/18 maxlen: 18
80.114.0.0/17 maxlen: 17
80.114.0.0/18 maxlen: 18
80.114.64.0/18 maxlen: 18
80.114.128.0/18 maxlen: 18
80.114.128.0/19 maxlen: 19
80.114.160.0/19 maxlen: 19
80.114.192.0/18 maxlen: 18
80.114.192.0/19 maxlen: 19
80.114.224.0/19 maxlen: 19
80.115.0.0/17 maxlen: 17
80.115.0.0/18 maxlen: 18
80.115.64.0/18 maxlen: 18
80.115.128.0/18 maxlen: 18
80.115.128.0/19 maxlen: 19
80.115.160.0/19 maxlen: 19
80.115.224.0/19 maxlen: 19
80.115.224.0/20 maxlen: 20
80.115.240.0/20 maxlen: 20
80.242.224.0/19 maxlen: 19
80.242.224.0/20 maxlen: 20
80.242.240.0/20 maxlen: 20
82.72.0.0/14 maxlen: 14
82.72.0.0/15 maxlen: 15
82.74.0.0/15 maxlen: 15
82.101.192.0/18 maxlen: 18
82.101.192.0/19 maxlen: 19
82.101.224.0/19 maxlen: 19
82.151.160.0/19 maxlen: 19
82.151.160.0/20 maxlen: 20
82.151.176.0/20 maxlen: 20
82.217.0.0/16 maxlen: 16
82.217.0.0/17 maxlen: 17
82.217.128.0/17 maxlen: 17
83.80.0.0/13 maxlen: 13
83.80.0.0/14 maxlen: 14
83.84.0.0/14 maxlen: 14
83.137.136.0/21 maxlen: 21
83.167.192.0/19 maxlen: 19
84.24.0.0/13 maxlen: 13
84.24.0.0/14 maxlen: 14
84.28.0.0/14 maxlen: 14
84.104.0.0/14 maxlen: 14
84.104.0.0/15 maxlen: 15
84.106.0.0/15 maxlen: 15
85.88.96.0/19 maxlen: 19
85.146.192.0/18 maxlen: 18
85.147.0.0/16 maxlen: 16
85.147.0.0/17 maxlen: 17
85.147.128.0/17 maxlen: 17
89.220.128.0/17 maxlen: 17
89.220.128.0/18 maxlen: 18
89.220.192.0/18 maxlen: 18
91.221.96.0/23 maxlen: 23
93.117.192.0/18 maxlen: 18
94.208.0.0/13 maxlen: 13
94.208.0.0/14 maxlen: 14
94.212.0.0/14 maxlen: 14
109.32.0.0/13 maxlen: 13
159.100.64.0/18 maxlen: 18
185.130.168.0/22 maxlen: 22
185.130.174.0/23 maxlen: 23
195.35.128.0/17 maxlen: 17
195.35.128.0/18 maxlen: 18
195.35.192.0/18 maxlen: 18
195.85.128.0/18 maxlen: 18
195.85.128.0/19 maxlen: 19
195.85.160.0/19 maxlen: 19
212.54.32.0/19 maxlen: 19
212.54.32.0/20 maxlen: 20
212.54.48.0/20 maxlen: 20
212.78.192.0/19 maxlen: 19
212.120.64.0/18 maxlen: 18
212.120.64.0/19 maxlen: 19
212.120.96.0/19 maxlen: 19
212.127.128.0/17 maxlen: 17
212.127.128.0/18 maxlen: 18
212.127.192.0/18 maxlen: 18
212.178.64.0/18 maxlen: 18
212.178.64.0/19 maxlen: 19
212.178.96.0/19 maxlen: 19
212.178.128.0/19 maxlen: 19
212.178.128.0/20 maxlen: 20
212.178.144.0/20 maxlen: 20
212.178.192.0/19 maxlen: 19
212.178.192.0/20 maxlen: 20
212.178.208.0/20 maxlen: 20
212.203.0.0/19 maxlen: 19
212.203.0.0/20 maxlen: 20
212.203.16.0/20 maxlen: 20
212.204.128.0/18 maxlen: 18
212.204.128.0/19 maxlen: 19
212.204.160.0/19 maxlen: 19
213.34.64.0/19 maxlen: 19
213.34.64.0/20 maxlen: 20
213.34.80.0/20 maxlen: 20
213.34.96.0/19 maxlen: 19
213.34.96.0/20 maxlen: 20
213.34.112.0/20 maxlen: 20
213.34.128.0/19 maxlen: 19
213.34.160.0/19 maxlen: 19
213.34.160.0/20 maxlen: 20
213.34.176.0/20 maxlen: 20
213.51.0.0/16 maxlen: 16
213.73.128.0/17 maxlen: 17
213.73.128.0/18 maxlen: 18
213.73.192.0/18 maxlen: 18
213.124.0.0/17 maxlen: 17
213.124.0.0/18 maxlen: 18
213.124.64.0/18 maxlen: 18
213.124.128.0/19 maxlen: 19
213.124.128.0/20 maxlen: 20
213.124.144.0/20 maxlen: 20
213.125.0.0/16 maxlen: 16
213.125.0.0/17 maxlen: 17
213.125.128.0/17 maxlen: 17
213.126.0.0/17 maxlen: 17
213.126.0.0/18 maxlen: 18
213.126.64.0/18 maxlen: 18
213.132.160.0/19 maxlen: 19
213.132.160.0/20 maxlen: 20
213.132.176.0/20 maxlen: 20
217.62.0.0/16 maxlen: 16
217.62.0.0/17 maxlen: 17
217.62.128.0/17 maxlen: 17
217.63.0.0/18 maxlen: 18
217.63.0.0/19 maxlen: 19
217.63.32.0/19 maxlen: 19
217.63.192.0/18 maxlen: 18
217.63.192.0/19 maxlen: 19
217.63.224.0/19 maxlen: 19
217.100.0.0/16 maxlen: 16
217.100.0.0/17 maxlen: 17
217.100.128.0/17 maxlen: 17
217.101.0.0/16 maxlen: 16
217.101.0.0/17 maxlen: 17
217.101.128.0/17 maxlen: 17
217.102.128.0/18 maxlen: 18
217.102.128.0/19 maxlen: 19
217.102.160.0/19 maxlen: 19
217.102.192.0/19 maxlen: 19
217.102.192.0/20 maxlen: 20
217.102.208.0/20 maxlen: 20
217.102.224.0/21 maxlen: 21
217.102.224.0/22 maxlen: 22
217.102.228.0/22 maxlen: 22
217.104.0.0/17 maxlen: 17
217.104.0.0/18 maxlen: 18
217.104.64.0/18 maxlen: 18
217.105.64.0/18 maxlen: 18
217.105.64.0/19 maxlen: 19
217.105.96.0/19 maxlen: 19
217.105.128.0/18 maxlen: 18
217.105.128.0/19 maxlen: 19
217.105.160.0/19 maxlen: 19
217.105.192.0/19 maxlen: 19
217.105.192.0/20 maxlen: 20
217.105.208.0/20 maxlen: 20
217.120.0.0/14 maxlen: 14
217.120.0.0/15 maxlen: 15
217.122.0.0/15 maxlen: 15
2001:b88::/33 maxlen: 33
2001:1c00::/23 maxlen: 23
2001:1c00::/24 maxlen: 24
2001:1d00::/24 maxlen: 24
2001:41f0::/29 maxlen: 29
2a00:18c8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:da:3e:6a:8b:e8:a1:17:df:4d:fa:f1:d2:ab:2b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: Jul 7 13:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a35026228a73f6ae334539ab728338edc0ee0876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:ec:b3:63:5f:00:d4:99:f5:a6:97:84:a5:
3e:5e:ac:88:5c:53:a4:9f:94:85:df:fb:52:dc:cf:
fc:57:c6:96:de:2f:2b:36:88:c7:b3:ec:f9:74:f7:
cc:ca:69:e5:fa:b7:5e:ec:3d:e7:1b:13:e4:09:86:
15:8a:2b:c6:94:b3:b4:96:21:df:37:83:03:fc:b8:
69:9e:c8:55:55:4d:ed:1d:6e:ab:de:55:54:f9:64:
1c:51:a0:d7:fc:44:dc:a3:50:19:c9:52:09:90:4d:
18:1c:0a:18:e5:06:e6:44:30:85:b4:65:bb:cd:64:
9c:85:23:77:51:bd:14:c4:d4:ba:53:38:12:4c:5a:
e7:09:5e:0d:06:20:15:12:c2:b2:1c:e9:84:e8:fd:
30:b3:5e:2c:54:71:a0:63:11:b5:bf:b0:2f:02:28:
42:91:3f:e2:76:89:b5:04:87:e3:64:0f:e5:92:9f:
dd:dc:f9:9b:9e:42:11:f3:76:15:62:b9:bd:e5:ff:
19:04:86:47:55:93:72:c1:83:ff:7b:be:d9:c2:8a:
38:a8:b7:d5:f6:a9:2a:2c:b8:af:04:d5:c0:ab:52:
0d:b9:7e:c7:51:b3:fa:7d:4c:c7:04:76:60:b2:0c:
49:ba:a0:1e:32:04:83:3b:b1:00:bd:49:6d:60:c9:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:50:26:22:8A:73:F6:AE:33:45:39:AB:72:83:38:ED:C0:EE:08:76
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/o1AmIopz9q4zRTmrcoM47cDuCHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.136.0.0/14
37.235.8.0/21
62.72.192.0/19
62.140.128.0/20
62.140.156.0/23
62.145.192.0/18
80.112.0.0/16
80.114.0.0-80.115.191.255
80.115.224.0/19
80.242.224.0/19
82.72.0.0/14
82.101.192.0/18
82.151.160.0/19
82.217.0.0/16
83.80.0.0/13
83.137.136.0/21
83.167.192.0/19
84.24.0.0/13
84.104.0.0/14
85.88.96.0/19
85.146.192.0-85.147.255.255
89.220.128.0/17
91.221.96.0/23
93.117.192.0/18
94.208.0.0/13
109.32.0.0/13
159.100.64.0/18
185.130.168.0/22
185.130.174.0/23
195.35.128.0/17
195.85.128.0/18
212.54.32.0/19
212.78.192.0/19
212.120.64.0/18
212.127.128.0/17
212.178.64.0-212.178.159.255
212.178.192.0/19
212.203.0.0/19
212.204.128.0/18
213.34.64.0-213.34.191.255
213.51.0.0/16
213.73.128.0/17
213.124.0.0-213.124.159.255
213.125.0.0-213.126.127.255
213.132.160.0/19
217.62.0.0-217.63.63.255
217.63.192.0/18
217.100.0.0/15
217.102.128.0-217.102.231.255
217.104.0.0/17
217.105.64.0-217.105.223.255
217.120.0.0/14
IPv6:
2001:b88::/33
2001:1c00::/23
2001:41f0::/29
2a00:18c8::/29
Signature Algorithm: sha256WithRSAEncryption
21:2a:9c:fc:53:aa:11:30:74:69:a2:3f:0a:55:db:44:3a:19:
28:cb:2a:74:05:4a:04:c8:4f:6c:80:48:b4:57:b7:09:32:31:
3c:5e:63:e1:83:0c:6d:b4:e2:27:6c:44:00:7b:11:e1:16:c1:
e4:65:28:29:90:83:fd:c5:b1:f7:df:36:cd:7c:26:45:68:28:
15:6f:37:31:e0:be:07:36:7b:9c:e0:ca:f2:96:fb:75:ff:51:
66:57:94:ae:a1:58:4a:36:cd:28:04:9a:36:20:d4:a1:82:eb:
d7:51:d0:b6:19:96:89:72:99:2f:a2:ac:55:e2:19:52:4c:f6:
8c:b8:41:29:88:03:8b:8a:de:1d:37:31:90:1e:ee:48:a3:ed:
1c:80:bf:42:a2:8b:de:69:8b:2c:ed:21:00:c6:a7:5d:a6:9d:
a0:99:79:75:9c:4d:6b:20:52:c8:df:c5:4a:6a:4b:ce:c1:57:
04:bf:14:f7:ea:72:3e:0a:7d:74:f8:09:e5:bd:3d:a1:52:00:
e6:24:70:c0:39:ff:4d:26:e7:59:28:be:64:b0:c6:8d:33:d5:
c4:9c:dd:65:e5:2f:5f:99:10:75:aa:5e:d5:58:0c:b3:0c:bb:
6f:4b:bc:8e:d3:f2:11:8e:e6:7c:87:02:d2:f2:9a:7b:2f:86:
70:0c:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:14 2026 by rpki-client