Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/q9Zp1XA085cjbF1qil6d0lcwNDI.roa
File: q9Zp1XA085cjbF1qil6d0lcwNDI.roa (raw, json)
Hash identifier: lfgfGCfGIMPsC0n3HD7PZhQDX8Vx/d+HoTT/m1BMaF4=
Subject key identifier: AB:D6:69:D5:70:34:F3:97:23:6C:5D:6A:8A:5E:9D:D2:57:30:34:32
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 01A0CE4E42A9783ED9B1139D59A2ADC64ABF
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/q9Zp1XA085cjbF1qil6d0lcwNDI.roa
Signing time: Wed 23 Sep 2026 12:47:10 +0000
ROA not before: Wed 23 Sep 2026 12:47:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2116
IP address blocks: 31.185.24.0/21 maxlen: 21
37.191.128.0/17 maxlen: 17
62.63.0.0/18 maxlen: 18
62.101.192.0/18 maxlen: 18
64.28.0.0/19 maxlen: 19
77.40.128.0/17 maxlen: 17
77.88.64.0/18 maxlen: 18
77.234.48.0/21 maxlen: 21
77.241.96.0/20 maxlen: 20
78.24.144.0/21 maxlen: 21
79.135.0.0/19 maxlen: 19
80.64.192.0/20 maxlen: 20
80.241.80.0/20 maxlen: 20
81.0.128.0/18 maxlen: 18
81.175.0.0/20 maxlen: 20
81.175.20.0/22 maxlen: 22
81.175.24.0/21 maxlen: 21
81.175.32.0/19 maxlen: 19
81.191.0.0/16 maxlen: 16
82.196.192.0/19 maxlen: 19
84.20.96.0/19 maxlen: 19
85.112.128.0/19 maxlen: 19
85.196.64.0/18 maxlen: 18
85.221.0.0/17 maxlen: 17
85.252.0.0/16 maxlen: 16
86.62.128.0/18 maxlen: 18
87.118.0.0/18 maxlen: 18
88.84.160.0/19 maxlen: 19
89.191.0.0/19 maxlen: 19
91.135.32.0/20 maxlen: 20
91.135.34.0/24 maxlen: 24
91.202.80.0/22 maxlen: 22
109.199.192.0/19 maxlen: 19
178.74.0.0/18 maxlen: 18
185.8.16.0/22 maxlen: 22
185.35.80.0/22 maxlen: 22
185.67.116.0/22 maxlen: 22
185.67.116.0/24 maxlen: 24
185.129.156.0/22 maxlen: 22
193.69.0.0/16 maxlen: 16
193.71.0.0/16 maxlen: 16
193.75.0.0/17 maxlen: 17
193.90.0.0/16 maxlen: 16
193.91.128.0/17 maxlen: 17
194.19.0.0/17 maxlen: 17
194.29.200.0/22 maxlen: 22
194.54.96.0/19 maxlen: 19
195.0.128.0/17 maxlen: 17
195.1.0.0/16 maxlen: 16
195.18.128.0/17 maxlen: 17
195.139.0.0/16 maxlen: 16
195.159.0.0/16 maxlen: 16
195.204.0.0/16 maxlen: 16
212.62.224.0/19 maxlen: 19
212.71.64.0/19 maxlen: 19
213.52.0.0/17 maxlen: 17
213.151.128.0/19 maxlen: 19
213.158.224.0/19 maxlen: 19
213.160.224.0/20 maxlen: 20
213.160.240.0/21 maxlen: 21
213.172.192.0/19 maxlen: 19
213.239.64.0/18 maxlen: 18
217.8.128.0/19 maxlen: 19
217.14.0.0/20 maxlen: 20
217.77.32.0/20 maxlen: 20
217.118.32.0/19 maxlen: 19
217.144.224.0/19 maxlen: 19
2001:840::/29 maxlen: 29
2001:8c0::/29 maxlen: 29
2001:8c0:3403::/48 maxlen: 48
2001:8c0:3403::/64 maxlen: 64
2001:8c0:a906::/48 maxlen: 48
2001:4dd8::/29 maxlen: 29
2a00:c440::/29 maxlen: 29
2a01:520::/29 maxlen: 29
2a02:270::/29 maxlen: 29
2a03:c000::/29 maxlen: 29
2a04:6340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:4e:42:a9:78:3e:d9:b1:13:9d:59:a2:ad:c6:4a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Sep 23 12:47:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abd669d57034f397236c5d6a8a5e9dd257303432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:92:5d:6a:27:03:09:64:65:08:4c:c1:ff:
7e:2b:aa:67:cb:4e:a5:eb:54:26:e5:ca:c2:8d:9d:
4a:c8:f5:0e:15:c2:46:8a:c9:49:cc:51:55:2a:28:
0b:09:d8:04:fc:ff:71:3e:3e:a0:69:40:16:12:de:
dd:c1:4a:b7:68:3d:64:98:74:d3:95:a1:51:25:e6:
a2:74:2f:c6:cd:c8:4d:a9:bc:a5:31:b0:59:81:1b:
d8:9e:48:3c:5f:7e:33:6f:c2:ad:ab:d6:59:20:fa:
82:1f:af:70:9f:a1:d4:e7:d2:3c:79:a3:38:dc:cc:
e5:e6:b7:7a:40:4d:f6:a7:d7:d8:8f:01:84:52:60:
35:10:34:ea:38:9a:b8:27:56:96:31:55:25:5d:32:
27:c6:d7:b4:bc:f2:2c:0c:c8:4b:ce:d7:60:9c:58:
26:47:78:f4:82:cf:b2:c9:86:7f:3c:78:8d:64:36:
87:5d:5b:b1:fa:1d:9d:2b:02:f6:56:90:97:56:ce:
ce:e8:69:0c:a0:dc:05:d5:02:d6:b8:fb:1e:f5:b5:
a1:3f:5b:08:58:86:7a:64:23:8a:8c:ff:9c:83:73:
03:13:bf:7a:2c:42:60:fe:24:19:9a:e0:ac:3b:a8:
69:d7:d5:10:9c:35:a7:95:dd:1a:82:25:6b:3f:39:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D6:69:D5:70:34:F3:97:23:6C:5D:6A:8A:5E:9D:D2:57:30:34:32
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/q9Zp1XA085cjbF1qil6d0lcwNDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.24.0/21
37.191.128.0/17
62.63.0.0/18
62.101.192.0/18
64.28.0.0/19
77.40.128.0/17
77.88.64.0/18
77.234.48.0/21
77.241.96.0/20
78.24.144.0/21
79.135.0.0/19
80.64.192.0/20
80.241.80.0/20
81.0.128.0/18
81.175.0.0/20
81.175.20.0-81.175.63.255
81.191.0.0/16
82.196.192.0/19
84.20.96.0/19
85.112.128.0/19
85.196.64.0/18
85.221.0.0/17
85.252.0.0/16
86.62.128.0/18
87.118.0.0/18
88.84.160.0/19
89.191.0.0/19
91.135.32.0/20
91.202.80.0/22
109.199.192.0/19
178.74.0.0/18
185.8.16.0/22
185.35.80.0/22
185.67.116.0/22
185.129.156.0/22
193.69.0.0/16
193.71.0.0/16
193.75.0.0/17
193.90.0.0/16
193.91.128.0/17
194.19.0.0/17
194.29.200.0/22
194.54.96.0/19
195.0.128.0-195.1.255.255
195.18.128.0/17
195.139.0.0/16
195.159.0.0/16
195.204.0.0/16
212.62.224.0/19
212.71.64.0/19
213.52.0.0/17
213.151.128.0/19
213.158.224.0/19
213.160.224.0-213.160.247.255
213.172.192.0/19
213.239.64.0/18
217.8.128.0/19
217.14.0.0/20
217.77.32.0/20
217.118.32.0/19
217.144.224.0/19
IPv6:
2001:840::/29
2001:8c0::/29
2001:4dd8::/29
2a00:c440::/29
2a01:520::/29
2a02:270::/29
2a03:c000::/29
2a04:6340::/29
Signature Algorithm: sha256WithRSAEncryption
a0:91:91:5c:50:a3:be:42:af:99:df:5f:3f:8c:e4:5d:ca:20:
cd:5e:b9:94:e9:3e:f6:fe:45:06:6d:78:85:a3:8b:44:55:03:
76:09:47:aa:66:70:90:0c:03:9d:68:8f:52:ab:be:14:ea:4a:
4c:b1:0a:7f:ae:ef:ef:94:dc:31:0c:e8:ec:b0:96:c4:6a:38:
2f:7d:08:a6:b1:e3:e3:5a:74:fd:84:05:52:c4:f0:87:d0:df:
e4:78:fb:f3:8f:de:59:79:36:fd:84:4b:a6:4d:7f:91:85:fa:
e3:2a:8d:74:13:bb:e2:cb:ea:c3:e4:61:2c:de:05:57:55:ef:
02:82:a1:18:9b:de:b8:e9:01:71:55:6f:03:bd:6e:00:77:7b:
9b:e6:1f:ec:91:bb:bd:7c:b9:a5:9e:c5:89:58:f2:e5:3a:6f:
41:77:7e:f7:c6:31:d8:6b:01:68:39:3f:3c:ef:ac:ab:df:d5:
51:44:83:50:5a:ac:16:5d:32:3a:3b:9e:0a:c1:83:35:86:48:
86:91:e2:56:ab:11:4a:dd:ff:07:33:c7:fd:c8:88:e2:72:aa:
b6:8a:e3:6b:35:11:65:40:93:ff:49:8a:43:47:68:cc:04:f5:
ac:7d:cd:6d:0a:7e:06:fe:da:f3:b0:46:49:1a:05:c1:04:18:
fb:b2:d2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:13:20 2026 by rpki-client