Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/NE9VFTWYc9DNgnMGhTxjwBMSUrk.roa
File: NE9VFTWYc9DNgnMGhTxjwBMSUrk.roa (raw, json)
Hash identifier: ivoaeSyLGXJ2Gfsefafme20MQECC/nXRC5EkGaugvds=
Subject key identifier: 34:4F:55:15:35:98:73:D0:CD:82:73:06:85:3C:63:C0:13:12:52:B9
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01A19C1B68CC7EC4CD819F7AF4D97675F3B9
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/NE9VFTWYc9DNgnMGhTxjwBMSUrk.roa
Signing time: Mon 02 Nov 2026 11:53:24 +0000
ROA not before: Mon 02 Nov 2026 11:53:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49100
IP address blocks: 5.202.0.0/16 maxlen: 24
5.202.16.0/23 maxlen: 23
5.202.22.0/23 maxlen: 23
5.202.57.0/24 maxlen: 24
5.202.76.0/24 maxlen: 24
5.202.82.0/24 maxlen: 24
5.202.100.0/24 maxlen: 24
5.202.110.0/24 maxlen: 24
5.202.166.0/23 maxlen: 23
5.202.168.0/23 maxlen: 23
5.202.208.0/20 maxlen: 20
5.202.240.0/21 maxlen: 21
77.237.160.0/19 maxlen: 19
85.9.64.0/18 maxlen: 18
85.9.68.0/24 maxlen: 24
85.9.76.0/24 maxlen: 24
91.209.242.0/24 maxlen: 24
95.215.160.0/22 maxlen: 22
109.125.160.0/19 maxlen: 19
109.125.160.0/23 maxlen: 23
109.125.162.0/23 maxlen: 23
109.125.164.0/23 maxlen: 23
109.125.168.0/21 maxlen: 21
109.125.176.0/22 maxlen: 22
109.125.182.0/23 maxlen: 23
109.125.184.0/22 maxlen: 22
109.125.184.0/24 maxlen: 24
109.125.185.0/24 maxlen: 24
109.125.186.0/24 maxlen: 24
109.125.187.0/24 maxlen: 24
109.125.188.0/24 maxlen: 24
109.125.189.0/24 maxlen: 24
109.125.190.0/24 maxlen: 24
109.125.191.0/24 maxlen: 24
109.232.0.0/21 maxlen: 21
109.232.5.0/24 maxlen: 24
109.232.6.0/24 maxlen: 24
109.232.7.0/24 maxlen: 24
185.72.24.0/22 maxlen: 22
185.72.27.0/24 maxlen: 24
185.83.88.0/22 maxlen: 22
185.83.88.0/24 maxlen: 24
185.83.89.0/24 maxlen: 24
185.83.90.0/23 maxlen: 23
185.103.128.0/22 maxlen: 22
185.125.244.0/22 maxlen: 22
185.125.248.0/21 maxlen: 21
185.125.255.0/24 maxlen: 24
185.126.0.0/20 maxlen: 20
185.126.16.0/22 maxlen: 22
185.126.16.0/23 maxlen: 23
185.126.40.0/22 maxlen: 22
185.131.28.0/22 maxlen: 22
185.131.30.0/23 maxlen: 23
185.155.8.0/21 maxlen: 21
185.169.20.0/22 maxlen: 22
185.169.36.0/22 maxlen: 22
185.169.37.0/24 maxlen: 24
185.177.232.0/22 maxlen: 22
185.180.52.0/22 maxlen: 22
188.253.32.0/19 maxlen: 24
188.253.64.0/19 maxlen: 24
193.32.80.0/23 maxlen: 23
194.33.122.0/23 maxlen: 23
2001:4c88::/32 maxlen: 32
2a02:cd80::/29 maxlen: 29
2a07:8f00::/29 maxlen: 29
2a07:8f40::/29 maxlen: 29
2a0a:4e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:1b:68:cc:7e:c4:cd:81:9f:7a:f4:d9:76:75:f3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Nov 2 11:53:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=344f5515359873d0cd827306853c63c0131252b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:88:4c:9a:ba:87:30:12:e6:dc:d6:50:d6:
79:0d:5b:02:05:38:1f:41:75:ce:91:29:3e:28:72:
4c:63:79:a6:6e:63:a3:90:5b:c3:3b:27:26:05:cd:
39:4f:98:9c:38:c2:24:a1:83:7e:bc:a1:9e:1a:69:
36:27:02:9d:36:97:9a:6a:2f:c6:e4:a7:2d:0a:c6:
a1:1d:25:78:b3:c9:13:65:ba:10:01:a5:98:ce:a7:
c5:47:26:d3:18:e9:dd:11:e0:fa:34:4a:7d:e5:9d:
fc:28:ee:0d:7a:1c:44:70:12:f1:b9:64:8e:be:24:
6a:03:d1:2f:76:44:4c:9b:62:f4:0a:0d:2c:9b:31:
ca:5e:bf:56:1b:c4:4e:c9:01:45:b7:be:59:e7:24:
fe:01:1d:fe:fc:e5:a5:f6:89:20:4b:09:0d:e8:ae:
07:be:78:e6:36:cf:84:49:25:a3:df:de:1e:c6:6e:
3c:3a:7e:2f:03:8b:47:67:2c:6e:89:3a:b0:7d:ec:
2f:2f:fc:a4:fa:41:10:30:47:84:10:b1:8b:0f:5a:
2d:ae:6f:8e:b4:40:32:c7:75:d1:b1:0a:0d:d2:2e:
e6:07:f9:04:24:d1:45:9a:15:fa:b7:2e:93:d1:b2:
5c:00:cc:67:ba:a3:63:62:ee:34:e9:13:c9:03:aa:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:55:15:35:98:73:D0:CD:82:73:06:85:3C:63:C0:13:12:52:B9
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/NE9VFTWYc9DNgnMGhTxjwBMSUrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.0.0/16
77.237.160.0/19
85.9.64.0/18
91.209.242.0/24
95.215.160.0/22
109.125.160.0/19
109.232.0.0/21
185.72.24.0/22
185.83.88.0/22
185.103.128.0/22
185.125.244.0-185.126.19.255
185.126.40.0/22
185.131.28.0/22
185.155.8.0/21
185.169.20.0/22
185.169.36.0/22
185.177.232.0/22
185.180.52.0/22
188.253.32.0-188.253.95.255
193.32.80.0/23
194.33.122.0/23
IPv6:
2001:4c88::/32
2a02:cd80::/29
2a07:8f00::/29
2a07:8f40::/29
2a0a:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
4a:a1:c8:9b:f3:a4:14:a4:6f:b2:5a:97:67:03:64:a6:09:69:
8a:c2:90:8b:f1:ec:5b:54:56:87:6c:50:e1:e8:0e:af:41:ee:
16:18:6c:4b:af:9b:82:0c:18:10:4f:27:eb:47:04:b0:d0:7b:
84:5a:60:4e:8f:e5:31:73:59:8a:e6:9d:50:5d:6e:ef:69:6d:
b1:fd:2f:19:94:2d:42:13:66:dc:57:bb:3e:ee:cf:f1:77:ca:
4a:9a:57:d6:29:60:26:82:88:1e:da:4f:0d:a9:a5:0e:ae:bc:
75:c5:dd:e0:da:f3:4e:ec:90:d0:74:9c:4b:d1:a6:b1:63:27:
6d:dc:48:be:50:34:1f:87:ee:8c:76:e6:f0:c7:f2:9d:c3:6d:
0f:9e:18:ae:69:34:a3:27:b9:b4:6f:88:80:07:0d:55:f6:42:
43:64:2f:9f:1f:0b:bc:4e:99:1e:d7:ab:1e:49:5b:54:57:5b:
0d:20:3d:cd:8f:76:92:29:41:97:f7:26:2e:bf:ff:ae:37:92:
6b:7d:73:f1:83:31:04:3d:f1:f7:5b:3d:99:ab:08:6c:30:1b:
b2:95:e1:a1:ec:b0:6d:d2:58:83:76:7a:2f:17:cd:d0:72:e5:
6a:f0:56:89:00:97:19:8f:79:ed:a4:51:cf:d6:e8:b2:3c:79:
5f:d7:d4:fe
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAaGcG2jMfsTNgZ969Nl2dfO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjYxMTAyMTE1MzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDRmNTUxNTM1OTg3M2QwY2Q4MjczMDY4NTNjNjNjMDEzMTI1MmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiWITJq6hzAS5tzWUNZ5DVsCBTgf
QXXOkSk+KHJMY3mmbmOjkFvDOycmBc05T5icOMIkoYN+vKGeGmk2JwKdNpeaai/G
5KctCsahHSV4s8kTZboQAaWYzqfFRybTGOndEeD6NEp95Z38KO4NehxEcBLxuWSO
viRqA9EvdkRMm2L0Cg0smzHKXr9WG8ROyQFFt75Z5yT+AR3+/OWl9okgSwkN6K4H
vnjmNs+ESSWj394exm48On4vA4tHZyxuiTqwfewvL/yk+kEQMEeEELGLD1otrm+O
tEAyx3XRsQoN0i7mB/kEJNFFmhX6ty6T0bJcAMxnuqNjYu406RPJA6rYUwIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFDRPVRU1mHPQzYJzBoU8Y8ATElK5MB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvTkU5VkZUV1ljOUROZ25NR2hUeGp3Qk1TVXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHVBggrBgEFBQcBBwEB/wSBxTCBwjCBlAQCAAEwgY0DAwAF
ygMEBU3toAMEBlUJQAMEAFvR8gMEAl/XoAMEBW19oAMEA23oAAMEArlIGAMEArlT
WAMEArlngDAMAwQCuX30AwQCuX4QAwQCuX4oAwQCuYMcAwQDuZsIAwQCuakUAwQC
uakkAwQCubHoAwQCubQ0MAwDBAW8/SADBAW8/UADBAHBIFADBAHCIXowKQQCAAIw
IwMFACABTIgDBQMqAs2AAwUDKgePAAMFAyoHj0ADBQMqCk4AMA0GCSqGSIb3DQEB
CwUAA4IBAQBKocib86QUpG+yWpdnA2SmCWmKwpCL8exbVFaHbFDh6A6vQe4WGGxL
r5uCDBgQTyfrRwSw0HuEWmBOj+Uxc1mK5p1QXW7vaW2x/S8ZlC1CE2bcV7s+7s/x
d8pKmlfWKWAmgoge2k8NqaUOrrx1xd3g2vNO7JDQdJxL0aaxYydt3Ei+UDQfh+6M
dubwx/Kdw20PnhiuaTSjJ7m0b4iABw1V9kJDZC+fHwu8Tpke16seSVtUV1sNID3N
j3aSKUGX9yYuv/+uN5JrfXPxgzEEPfH3Wz2ZqwhsMBuyleGh7LBt0liDdnovF83Q
cuVq8FaJAJcZj3ntpFHP1uiyPHlf19T+
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:57 2026 by rpki-client