Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Z791839m53XNRuRerPXFnx_mGZ0.roa
File: Z791839m53XNRuRerPXFnx_mGZ0.roa (raw, json)
Hash identifier: 8q0wPQ9bEvLfi3oi1ten4qb/6lS1ZqrefxTS++baSZM=
Subject key identifier: 67:BF:75:F3:7F:66:E7:75:CD:46:E4:5E:AC:F5:C5:9F:1F:E6:19:9D
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 01A092292DA53B31AE65850CC73B3C78E5CF
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Z791839m53XNRuRerPXFnx_mGZ0.roa
Signing time: Fri 11 Sep 2026 20:29:27 +0000
ROA not before: Fri 11 Sep 2026 20:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16003
IP address blocks: 31.172.74.0/24 maxlen: 24
31.172.78.0/24 maxlen: 24
79.132.137.0/24 maxlen: 24
79.132.139.0/24 maxlen: 24
81.85.76.0/24 maxlen: 24
89.127.195.0/24 maxlen: 24
89.127.202.0/24 maxlen: 24
89.127.205.0/24 maxlen: 24
89.127.206.0/24 maxlen: 24
89.127.211.0/24 maxlen: 24
89.127.214.0/24 maxlen: 24
89.127.216.0/24 maxlen: 24
89.127.219.0/24 maxlen: 24
89.127.221.0/24 maxlen: 24
89.127.223.0/24 maxlen: 24
103.75.125.0/24 maxlen: 24
103.75.126.0/24 maxlen: 24
130.17.5.0/24 maxlen: 24
130.17.7.0/24 maxlen: 24
130.17.9.0/24 maxlen: 24
130.17.18.0/24 maxlen: 24
130.17.19.0/24 maxlen: 24
130.17.23.0/24 maxlen: 24
130.17.26.0/24 maxlen: 24
162.248.161.0/24 maxlen: 24
185.18.52.0/22 maxlen: 22
185.18.52.0/24 maxlen: 24
185.21.9.0/24 maxlen: 24
185.21.10.0/24 maxlen: 24
185.134.202.0/24 maxlen: 24
194.154.26.0/24 maxlen: 24
213.193.199.0/24 maxlen: 24
213.239.157.0/24 maxlen: 24
213.239.159.0/24 maxlen: 24
217.177.11.0/24 maxlen: 24
217.177.73.0/24 maxlen: 24
217.194.148.0/24 maxlen: 24
2a02:6b40:8002::/48 maxlen: 48
2a02:6b40:8003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:29:2d:a5:3b:31:ae:65:85:0c:c7:3b:3c:78:e5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Sep 11 20:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67bf75f37f66e775cd46e45eacf5c59f1fe6199d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:2e:d9:ca:af:8f:6a:36:64:97:93:68:ab:
77:d0:9a:1b:7e:8d:c4:14:4d:b7:d0:5f:8f:6f:61:
39:a1:e2:d4:26:1c:97:66:be:ce:77:35:c1:e9:3f:
ec:be:2e:94:9f:23:68:e7:72:de:de:ce:31:c5:59:
7d:ba:d3:96:89:48:fb:86:ed:07:c7:3a:d1:33:2f:
3b:26:2d:68:07:0f:9e:71:b4:4b:09:64:f0:28:af:
91:3c:80:fc:25:ea:73:de:45:bb:ad:66:ef:1f:2c:
88:63:64:38:c3:4e:4b:60:53:e8:8f:9a:c2:47:cb:
ea:11:a7:c8:13:86:b2:b4:0e:4e:fa:f4:d7:cf:45:
56:45:f2:ff:03:28:4e:c8:ee:0b:dd:24:fe:f1:b9:
c2:e3:45:86:89:0a:0c:e0:cb:77:93:c2:2e:10:91:
8c:93:b1:d1:ee:66:0c:3e:6e:79:5a:07:3a:60:36:
9e:ba:89:c7:cd:e2:6e:eb:63:27:bd:39:5f:e4:22:
2b:1d:e2:de:f2:2f:64:c7:e2:98:4e:21:a4:9c:c5:
5d:e7:80:d0:72:7d:67:dc:0d:b9:99:a7:d7:ec:dd:
9c:34:d0:79:cc:33:2b:65:1b:27:fc:84:b9:bc:29:
1a:59:61:89:e9:2c:50:b3:de:de:a0:b3:44:9d:09:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:75:F3:7F:66:E7:75:CD:46:E4:5E:AC:F5:C5:9F:1F:E6:19:9D
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Z791839m53XNRuRerPXFnx_mGZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.74.0/24
31.172.78.0/24
79.132.137.0/24
79.132.139.0/24
81.85.76.0/24
89.127.195.0/24
89.127.202.0/24
89.127.205.0-89.127.206.255
89.127.211.0/24
89.127.214.0/24
89.127.216.0/24
89.127.219.0/24
89.127.221.0/24
89.127.223.0/24
103.75.125.0-103.75.126.255
130.17.5.0/24
130.17.7.0/24
130.17.9.0/24
130.17.18.0/23
130.17.23.0/24
130.17.26.0/24
162.248.161.0/24
185.18.52.0/22
185.21.9.0-185.21.10.255
185.134.202.0/24
194.154.26.0/24
213.193.199.0/24
213.239.157.0/24
213.239.159.0/24
217.177.11.0/24
217.177.73.0/24
217.194.148.0/24
IPv6:
2a02:6b40:8002::/47
Signature Algorithm: sha256WithRSAEncryption
9b:1e:94:75:cf:5e:88:14:78:87:4f:cd:95:b2:60:86:00:34:
4e:29:5f:d9:cc:19:58:64:d4:f1:bf:e3:ef:88:99:26:64:84:
a8:1c:6f:73:64:fb:88:64:b0:ee:6e:6a:54:c3:5e:3f:b8:1d:
c3:c3:e8:88:39:0a:62:3d:40:bd:ac:bf:33:b3:00:e2:31:d2:
0c:74:31:ff:29:dc:e4:20:ed:8e:8e:37:a7:c4:99:71:00:64:
22:ce:40:4a:19:3c:c4:81:31:33:e1:0c:c8:2b:70:5b:8f:15:
c6:cd:22:60:92:d9:37:c6:fc:58:ed:2d:21:d0:d9:44:8d:32:
a6:4b:72:c3:ce:dc:20:0d:8a:8b:bc:1d:0d:4b:f4:07:ba:4c:
7c:31:1a:ed:ac:d6:f2:0e:4e:de:ab:6f:9c:0e:6b:20:58:b4:
48:bc:11:f5:fe:78:36:4e:78:2f:28:61:34:50:86:0a:42:9d:
0f:92:32:40:3f:01:95:b7:83:89:e6:d1:aa:81:91:e9:f8:d9:
6f:9e:5e:bc:8a:6f:73:39:de:b5:c0:92:f1:a6:3d:e1:81:4a:
b3:46:bc:6f:cd:05:1b:40:6a:37:2c:b5:f2:24:ca:cc:42:5c:
e1:72:83:fa:76:97:17:53:0f:b6:0d:84:6f:7a:03:4a:ff:f5:
01:90:e6:64
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgISAaCSKS2lOzGuZYUMxzs8eOXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYwOTExMjAyOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2JmNzVmMzdmNjZlNzc1Y2Q0NmU0NWVhY2Y1YzU5ZjFmZTYxOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtku2cqvj2o2ZJeTaKt30Jobfo3E
FE230F+Pb2E5oeLUJhyXZr7OdzXB6T/svi6UnyNo53Le3s4xxVl9utOWiUj7hu0H
xzrRMy87Ji1oBw+ecbRLCWTwKK+RPID8Jepz3kW7rWbvHyyIY2Q4w05LYFPoj5rC
R8vqEafIE4aytA5O+vTXz0VWRfL/AyhOyO4L3ST+8bnC40WGiQoM4Mt3k8IuEJGM
k7HR7mYMPm55Wgc6YDaeuonHzeJu62MnvTlf5CIrHeLe8i9kx+KYTiGknMVd54DQ
cn1n3A25mafX7N2cNNB5zDMrZRsn/IS5vCkaWWGJ6SxQs97eoLNEnQn6bwIDAQAB
o4IC8jCCAu4wHQYDVR0OBBYEFGe/dfN/Zud1zUbkXqz1xZ8f5hmdMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvWjc5MTgzOW01M1hOUnVSZXJQWEZueF9tR1owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBgYIKwYBBQUHAQcBAf8EgfYwgfMwgd8EAgABMIHYAwQA
H6xKAwQAH6xOAwQAT4SJAwQAT4SLAwQAUVVMAwQAWX/DAwQAWX/KMAwDBABZf80D
BABZf84DBABZf9MDBABZf9YDBABZf9gDBABZf9sDBABZf90DBABZf98wDAMEAGdL
fQMEAGdLfgMEAIIRBQMEAIIRBwMEAIIRCQMEAYIREgMEAIIRFwMEAIIRGgMEAKL4
oQMEArkSNDAMAwQAuRUJAwQAuRUKAwQAuYbKAwQAwpoaAwQA1cHHAwQA1e+dAwQA
1e+fAwQA2bELAwQA2bFJAwQA2cKUMA8EAgACMAkDBwEqAmtAgAIwDQYJKoZIhvcN
AQELBQADggEBAJselHXPXogUeIdPzZWyYIYANE4pX9nMGVhk1PG/4++ImSZkhKgc
b3Nk+4hksO5ualTDXj+4HcPD6Ig5CmI9QL2svzOzAOIx0gx0Mf8p3OQg7Y6ON6fE
mXEAZCLOQEoZPMSBMTPhDMgrcFuPFcbNImCS2TfG/FjtLSHQ2USNMqZLcsPO3CAN
iou8HQ1L9Ae6THwxGu2s1vIOTt6rb5wOayBYtEi8EfX+eDZOeC8oYTRQhgpCnQ+S
MkA/AZW3g4nm0aqBken42W+eXryKb3M53rXAkvGmPeGBSrNGvG/NBRtAajcstfIk
ysxCXOFyg/p2lxdTD7YNhG96A0r/9QGQ5mQ=
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:46:08 2026 by rpki-client