Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/9qw7otosSIxdL3aCqQeP90SREjU.roa
File: 9qw7otosSIxdL3aCqQeP90SREjU.roa (raw, json)
Hash identifier: 9xNU7kC0RTtahLdPXxnLWSDGxTvK4fW3RYlWbOy4Y7U=
Subject key identifier: F6:AC:3B:A2:DA:2C:48:8C:5D:2F:76:82:A9:07:8F:F7:44:91:12:35
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019CC348FFFF6DF0732EABADFEB45A8FF49B
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/9qw7otosSIxdL3aCqQeP90SREjU.roa
Signing time: Fri 06 Mar 2026 13:14:27 +0000
ROA not before: Fri 06 Mar 2026 13:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8400
IP address blocks: 5.134.104.0/21 maxlen: 21
5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
37.153.175.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.148.64.0/18 maxlen: 18
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.234.0/23 maxlen: 23
92.60.236.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.250.0/24 maxlen: 24
93.113.251.0/24 maxlen: 24
94.228.224.0/22 maxlen: 22
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.232.0/23 maxlen: 23
94.228.234.0/24 maxlen: 24
94.228.235.0/24 maxlen: 24
94.228.236.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.238.0/23 maxlen: 23
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/19 maxlen: 19
176.67.192.0/21 maxlen: 21
176.67.200.0/23 maxlen: 23
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.208.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/23 maxlen: 23
176.67.214.0/24 maxlen: 24
176.67.215.0/24 maxlen: 24
176.67.216.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.222.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.16.0/21 maxlen: 21
178.17.24.0/22 maxlen: 22
178.17.28.0/23 maxlen: 23
178.17.30.0/24 maxlen: 24
178.17.31.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.79.16.0/23 maxlen: 23
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.27.129.0/24 maxlen: 24
185.27.130.0/23 maxlen: 23
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
195.252.82.0/24 maxlen: 24
195.252.88.0/24 maxlen: 24
195.252.92.0/22 maxlen: 22
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a00:8720::/32 maxlen: 32
2a01:b800::/32 maxlen: 32
2a02:61a0::/32 maxlen: 32
2a03:fc40::/32 maxlen: 32
2a04:1dc0::/29 maxlen: 29
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:48:ff:ff:6d:f0:73:2e:ab:ad:fe:b4:5a:8f:f4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Mar 6 13:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6ac3ba2da2c488c5d2f7682a9078ff744911235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:d2:fe:02:32:27:d9:3d:cd:bb:b8:fc:a9:
33:0a:a6:8b:69:2d:70:97:3e:5e:24:8e:53:fc:18:
ca:73:c4:ec:a5:66:b0:fa:e5:35:16:fb:e5:b5:ef:
7e:15:5c:ae:0d:47:1a:72:9a:bf:b5:50:5f:6e:ef:
d5:3d:2f:e7:fc:85:73:40:3d:c6:ca:ae:de:e1:ea:
a1:35:90:50:d7:13:1f:a2:27:30:f4:a0:42:72:a0:
e9:8d:0f:02:80:69:0c:91:31:f1:14:e7:7c:09:e2:
77:2b:e3:f5:d6:73:0b:a5:81:3c:de:6e:b8:ac:61:
ad:28:2d:3a:c9:28:bc:bc:fe:f9:51:0b:94:15:6b:
83:e5:0e:8a:ed:3a:a8:47:49:6b:9d:41:39:90:56:
f8:76:59:cb:68:e6:2e:57:51:b4:54:a7:54:66:64:
d7:89:5e:45:a0:ab:7e:0c:f7:fb:74:33:ec:be:1c:
28:7a:f0:92:d9:40:25:d5:a9:88:a3:fe:3d:d4:34:
ca:4e:96:72:43:b2:90:03:b8:e7:de:40:09:11:85:
35:32:88:2c:b0:0c:81:2c:a6:38:de:1c:ac:2c:a9:
7f:39:98:81:95:a9:3e:8f:64:1a:af:a8:0c:e9:83:
52:b1:49:27:89:e3:89:4e:f4:d8:9b:50:27:7d:cd:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AC:3B:A2:DA:2C:48:8C:5D:2F:76:82:A9:07:8F:F7:44:91:12:35
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/9qw7otosSIxdL3aCqQeP90SREjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.104.0/21
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.148.64.0/18
91.150.64.0/18
92.60.224.0/20
92.244.128.0/19
93.86.0.0/15
93.113.250.0/23
94.228.224.0/22
94.228.229.0-94.228.239.255
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/19
178.17.16.0/20
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
195.178.32.0/19
195.252.82.0/24
195.252.88.0/24
195.252.92.0/22
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a00:8720::/32
2a01:b800::/32
2a02:61a0::/32
2a03:fc40::/32
2a04:1dc0::/29
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:a0:ba:5f:bf:c8:aa:a4:56:7c:f5:ee:02:af:55:f0:bb:13:
b8:17:90:82:27:74:7f:98:a5:be:9d:78:65:bb:6b:a8:18:ef:
ee:73:09:3d:f9:34:d9:c1:36:21:f3:a6:00:02:7d:ef:9b:9e:
6d:91:a1:59:03:14:20:75:bd:ca:71:49:a3:78:99:6d:b0:db:
99:92:4f:b6:a0:f4:70:9d:0d:29:23:aa:82:a0:a8:1a:a9:a7:
ac:54:fa:bb:7a:30:94:ed:d0:84:34:c7:9e:49:74:a7:e9:3d:
34:bb:8f:34:06:0a:ff:df:9d:47:67:15:12:f7:62:ba:b0:62:
60:6b:82:70:47:4e:99:be:3c:c3:f3:23:f2:b0:b6:7d:d3:14:
58:0d:a6:34:f1:71:08:1e:12:65:35:e5:6a:ff:e1:9c:4d:b9:
bf:40:59:b6:20:48:0a:bc:12:61:55:48:41:b3:53:da:c8:37:
e2:22:b9:97:f9:14:fc:b5:6c:a6:44:87:a5:7a:13:45:5b:b5:
14:2f:cc:99:d7:d6:80:62:83:81:07:06:c3:e2:51:71:1a:a0:
38:3e:0f:23:49:2a:42:79:ca:f9:05:c9:72:1c:9b:bc:69:cf:
32:67:04:32:80:8d:4d:0c:97:37:74:2e:5c:44:c5:b2:31:cd:
56:d2:ca:57
-----BEGIN CERTIFICATE-----
MIIGpDCCBYygAwIBAgISAZzDSP//bfBzLqut/rRaj/SbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi
NmJkZjcwHhcNMjYwMzA2MTMxNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmFjM2JhMmRhMmM0ODhjNWQyZjc2ODJhOTA3OGZmNzQ0OTExMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvfS/gIyJ9k9zbu4/KkzCqaLaS1w
lz5eJI5T/BjKc8TspWaw+uU1Fvvlte9+FVyuDUcacpq/tVBfbu/VPS/n/IVzQD3G
yq7e4eqhNZBQ1xMfoicw9KBCcqDpjQ8CgGkMkTHxFOd8CeJ3K+P11nMLpYE83m64
rGGtKC06ySi8vP75UQuUFWuD5Q6K7TqoR0lrnUE5kFb4dlnLaOYuV1G0VKdUZmTX
iV5FoKt+DPf7dDPsvhwoevCS2UAl1amIo/491DTKTpZyQ7KQA7jn3kAJEYU1Mogs
sAyBLKY43hysLKl/OZiBlak+j2Qar6gM6YNSsUknieOJTvTYm1Anfc2rUwIDAQAB
o4IDsDCCA6wwHQYDVR0OBBYEFPasO6LaLEiMXS92gqkHj/dEkRI1MB8GA1UdIwQY
MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt
ZDNlMjgwMGJkNjQwLzEvOXF3N290b3NTSXhkTDNhQ3FRZVA5MFNSRWpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw
LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBxAYIKwYBBQUHAQcBAf8EggGzMIIBrzCCAWsEAgABMIIB
YwMEAwWGaAMEAAWa4QMEAB8OIQMEASWZrgMEAy4ReAMEAy7rYAMEBD5lgAMEAz7w
GAMEB00ugAMDAE9lAwQFV/ogAwQAWSICAwQBWSeQAwQAWSoMAwQBWS5+AwQBWS8o
AwQGW5RAAwQGW5ZAAwQEXDzgAwQFXPSAAwMBXVYDBAFdcfoDBAJe5OAwDAMEAF7k
5QMEBF7k4AMEBG1IMAMDAW1cMAwDBAJtXuQDBARtXuADBAZtekADBAVtxgADBAWw
Q8ADBASyERADBAayTwAwCwMDArLcAwQFst/AAwQEsu3QAwQDsvqIAwQCuQqMAwQC
uRqsAwQCuRuAAwQCuSJcAwQAuST/AwQCuUdYAwQCuWeIAwQCuXAUAwQCuZ1oAwQC
ubOIAwQCub6YAwQAvNceAwQAvPBYAwQBvPDIAwQFw7IgAwQAw/xSAwQAw/xYAwQC
w/xcAwQA1D47AwMA1MgDBATVxGAwPgQCAAIwOAMFACoADpADBQAqAIcgAwUAKgG4
AAMFACoCYaADBQAqA/xAAwUDKgQdwAMFAyoGWwADBQMqBmPAMA0GCSqGSIb3DQEB
CwUAA4IBAQCloLpfv8iqpFZ89e4Cr1XwuxO4F5CCJ3R/mKW+nXhlu2uoGO/ucwk9
+TTZwTYh86YAAn3vm55tkaFZAxQgdb3KcUmjeJltsNuZkk+2oPRwnQ0pI6qCoKga
qaesVPq7ejCU7dCENMeeSXSn6T00u480Bgr/351HZxUS92K6sGJga4JwR06ZvjzD
8yPysLZ90xRYDaY08XEIHhJlNeVq/+GcTbm/QFm2IEgKvBJhVUhBs1PayDfiIrmX
+RT8tWymRIelehNFW7UUL8yZ19aAYoOBBwbD4lFxGqA4Pg8jSSpCecr5BclyHJu8
ac8yZwQygI1NDJc3dC5cRMWyMc1W0spX
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:46:44 2026 by rpki-client