Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/yK1xGhHjYq20srsKk-V1Fp0UCfM.roa
File: yK1xGhHjYq20srsKk-V1Fp0UCfM.roa (raw, json)
Hash identifier: e/mHS+VHuogPTbpQsUdbxbwiDJ0d02zHVkGZtZUlfh4=
Subject key identifier: C8:AD:71:1A:11:E3:62:AD:B4:B2:BB:0A:93:E5:75:16:9D:14:09:F3
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0C86C2AD8DD8A10F9AFA2AB280A9B4DED
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/yK1xGhHjYq20srsKk-V1Fp0UCfM.roa
Signing time: Tue 22 Sep 2026 09:22:07 +0000
ROA not before: Tue 22 Sep 2026 09:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 142.228.16.0/22 maxlen: 22
142.228.80.0/22 maxlen: 22
142.228.96.0/21 maxlen: 21
142.228.104.0/22 maxlen: 22
142.228.108.0/23 maxlen: 23
142.228.111.0/24 maxlen: 24
142.228.131.0/24 maxlen: 24
142.228.134.0/24 maxlen: 24
142.228.136.0/22 maxlen: 22
142.228.140.0/22 maxlen: 22
142.228.152.0/24 maxlen: 24
142.228.160.0/22 maxlen: 22
142.228.164.0/22 maxlen: 22
142.228.172.0/22 maxlen: 22
142.228.184.0/22 maxlen: 22
142.228.188.0/22 maxlen: 22
142.228.192.0/22 maxlen: 22
142.228.200.0/23 maxlen: 23
142.228.202.0/23 maxlen: 23
142.228.204.0/23 maxlen: 23
142.228.206.0/23 maxlen: 23
142.228.208.0/23 maxlen: 23
142.228.210.0/23 maxlen: 23
142.228.212.0/23 maxlen: 23
142.228.214.0/23 maxlen: 23
142.228.216.0/23 maxlen: 23
142.228.218.0/23 maxlen: 23
142.228.220.0/23 maxlen: 23
142.228.222.0/23 maxlen: 23
142.228.224.0/23 maxlen: 23
142.228.226.0/23 maxlen: 23
142.228.228.0/23 maxlen: 23
142.228.230.0/23 maxlen: 23
142.228.232.0/23 maxlen: 23
142.228.240.0/23 maxlen: 23
142.228.242.0/23 maxlen: 23
198.33.16.0/23 maxlen: 23
198.33.24.0/23 maxlen: 23
198.33.38.0/23 maxlen: 23
198.33.64.0/23 maxlen: 23
198.33.85.0/24 maxlen: 24
198.33.88.0/24 maxlen: 24
198.33.89.0/24 maxlen: 24
198.33.91.0/24 maxlen: 24
198.33.92.0/24 maxlen: 24
198.33.94.0/23 maxlen: 23
198.33.140.0/23 maxlen: 23
198.33.142.0/24 maxlen: 24
198.33.147.0/24 maxlen: 24
198.33.151.0/24 maxlen: 24
198.33.177.0/24 maxlen: 24
198.33.178.0/24 maxlen: 24
198.33.179.0/24 maxlen: 24
198.33.180.0/24 maxlen: 24
198.33.181.0/24 maxlen: 24
198.33.183.0/24 maxlen: 24
198.33.188.0/22 maxlen: 22
198.33.212.0/22 maxlen: 22
198.33.216.0/24 maxlen: 24
198.33.217.0/24 maxlen: 24
198.33.218.0/24 maxlen: 24
198.33.220.0/24 maxlen: 24
198.33.221.0/24 maxlen: 24
198.33.223.0/24 maxlen: 24
198.33.224.0/24 maxlen: 24
198.33.226.0/24 maxlen: 24
198.33.229.0/24 maxlen: 24
198.33.230.0/24 maxlen: 24
198.33.232.0/24 maxlen: 24
198.33.233.0/24 maxlen: 24
198.33.234.0/24 maxlen: 24
198.33.235.0/24 maxlen: 24
198.33.236.0/24 maxlen: 24
198.33.238.0/24 maxlen: 24
198.33.248.0/24 maxlen: 24
198.33.251.0/24 maxlen: 24
198.33.252.0/24 maxlen: 24
198.33.253.0/24 maxlen: 24
198.33.255.0/24 maxlen: 24
198.34.72.0/24 maxlen: 24
198.34.74.0/23 maxlen: 23
198.34.78.0/24 maxlen: 24
198.34.81.0/24 maxlen: 24
198.34.83.0/24 maxlen: 24
198.34.84.0/24 maxlen: 24
198.34.85.0/24 maxlen: 24
198.34.86.0/24 maxlen: 24
198.34.87.0/24 maxlen: 24
198.34.88.0/24 maxlen: 24
198.34.89.0/24 maxlen: 24
198.34.90.0/24 maxlen: 24
198.34.91.0/24 maxlen: 24
198.34.92.0/24 maxlen: 24
198.34.93.0/24 maxlen: 24
198.34.95.0/24 maxlen: 24
198.34.112.0/24 maxlen: 24
198.34.114.0/24 maxlen: 24
198.34.115.0/24 maxlen: 24
198.34.116.0/24 maxlen: 24
198.34.117.0/24 maxlen: 24
198.34.118.0/24 maxlen: 24
198.34.119.0/24 maxlen: 24
198.34.176.0/24 maxlen: 24
198.34.177.0/24 maxlen: 24
198.34.178.0/24 maxlen: 24
198.34.179.0/24 maxlen: 24
198.34.180.0/24 maxlen: 24
198.34.181.0/24 maxlen: 24
198.34.182.0/24 maxlen: 24
198.34.183.0/24 maxlen: 24
198.34.188.0/22 maxlen: 22
198.34.200.0/22 maxlen: 22
198.34.216.0/24 maxlen: 24
198.34.217.0/24 maxlen: 24
198.34.219.0/24 maxlen: 24
198.34.220.0/24 maxlen: 24
198.34.221.0/24 maxlen: 24
198.34.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:6c:2a:d8:dd:8a:10:f9:af:a2:ab:28:0a:9b:4d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 22 09:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8ad711a11e362adb4b2bb0a93e575169d1409f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:fe:5b:68:cb:8f:62:01:01:ce:b1:8a:fd:
4d:40:2a:d5:16:61:6c:62:c1:cf:1c:2a:78:7e:17:
69:6c:5d:42:1e:37:a6:c4:d9:29:91:c0:f5:18:3f:
73:93:1d:14:9c:e7:dd:62:cf:f0:ac:72:65:0a:f1:
bb:bc:c9:5d:16:2c:27:90:25:cf:95:92:10:ae:2a:
05:f0:ad:c2:ee:5f:7c:c2:8f:95:71:51:62:f1:e0:
74:93:95:51:af:63:b5:8d:ca:76:dc:c2:9c:4d:4d:
aa:c9:4e:cd:2a:26:00:86:c6:1c:4d:43:c6:df:b3:
84:ba:50:2c:96:7f:e9:a1:b6:84:d8:d8:b3:ca:9b:
4b:9c:db:0c:7f:d5:10:98:a8:05:a7:51:c0:f0:32:
f4:56:1d:d4:8f:67:6e:99:bf:c3:b3:21:15:09:34:
c0:89:89:c0:fb:ff:49:98:b3:bc:7c:5b:c1:fc:a8:
a4:30:b5:03:8a:69:69:d0:63:6b:5a:bb:4c:f6:61:
aa:b3:91:1c:10:9a:4b:5c:a2:c2:8c:b6:cb:f7:76:
bb:75:a0:c3:0a:6c:5c:b3:89:4b:94:24:fb:16:2b:
92:07:fa:35:a5:9b:9c:ee:b3:89:1d:e3:f4:bf:c7:
e3:62:cc:bf:ca:00:0e:a9:7a:3b:20:ee:d5:da:c0:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AD:71:1A:11:E3:62:AD:B4:B2:BB:0A:93:E5:75:16:9D:14:09:F3
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/yK1xGhHjYq20srsKk-V1Fp0UCfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.16.0/22
142.228.80.0/22
142.228.96.0-142.228.109.255
142.228.111.0/24
142.228.131.0/24
142.228.134.0/24
142.228.136.0/21
142.228.152.0/24
142.228.160.0/21
142.228.172.0/22
142.228.184.0-142.228.195.255
142.228.200.0-142.228.233.255
142.228.240.0/22
198.33.16.0/23
198.33.24.0/23
198.33.38.0/23
198.33.64.0/23
198.33.85.0/24
198.33.88.0/23
198.33.91.0-198.33.92.255
198.33.94.0/23
198.33.140.0-198.33.142.255
198.33.147.0/24
198.33.151.0/24
198.33.177.0-198.33.181.255
198.33.183.0/24
198.33.188.0/22
198.33.212.0-198.33.218.255
198.33.220.0/23
198.33.223.0-198.33.224.255
198.33.226.0/24
198.33.229.0-198.33.230.255
198.33.232.0-198.33.236.255
198.33.238.0/24
198.33.248.0/24
198.33.251.0-198.33.253.255
198.33.255.0/24
198.34.72.0/24
198.34.74.0/23
198.34.78.0/24
198.34.81.0/24
198.34.83.0-198.34.93.255
198.34.95.0/24
198.34.112.0/24
198.34.114.0-198.34.119.255
198.34.176.0/21
198.34.188.0/22
198.34.200.0/22
198.34.216.0/23
198.34.219.0-198.34.221.255
198.34.223.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1d:e7:60:46:8f:e4:28:7a:b8:f9:55:36:1b:7d:4f:7a:5b:
23:96:9d:c9:37:fb:ca:02:dd:0a:c9:9a:69:ec:d7:ee:9b:5e:
87:66:f4:e5:53:c9:61:f2:ab:4a:ec:aa:5d:e8:23:c7:01:f6:
ec:9b:72:36:20:1c:8a:4e:24:b8:8c:c8:5d:41:62:45:6e:24:
24:ee:72:61:04:5f:72:d2:f3:9c:59:7e:01:87:b6:03:97:e7:
79:a2:66:a5:01:11:7e:6a:4a:50:42:2e:a8:c3:b3:19:00:a5:
b0:4f:b6:ac:65:9c:90:51:e7:0c:30:d0:96:c2:c7:2c:96:17:
a6:75:c1:24:26:64:a1:1a:30:81:68:bd:8f:40:5c:12:26:25:
8e:c2:f9:64:a9:89:c2:11:bb:38:21:0f:22:35:5b:ad:9f:70:
4a:42:01:35:5c:a2:35:ba:bb:24:d2:e6:b9:09:41:61:e5:8f:
77:08:f1:9a:e6:6e:c5:6a:92:ac:2d:51:58:fb:a6:da:aa:89:
2d:cc:a8:b7:22:df:a3:a9:b3:fd:7f:29:5f:5f:0c:02:71:83:
ca:aa:1c:a8:97:3b:48:11:90:fe:b6:a1:2a:e2:94:37:96:8d:
64:b3:21:28:da:bd:cf:14:13:d1:32:d0:37:60:55:97:59:46:
bf:23:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:19:15 2026 by rpki-client