Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/PjFMEAMN046NMpzBfiyNN8yjdm0.roa
File: PjFMEAMN046NMpzBfiyNN8yjdm0.roa (raw, json)
Hash identifier: Whh7oGBU8ez0qOcGw3H29bTvnY4RX3Rk5yKQaymKBS0=
Subject key identifier: 3E:31:4C:10:03:0D:D3:8E:8D:32:9C:C1:7E:2C:8D:37:CC:A3:76:6D
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 019D24DA97B9FEB74D88816C8A5974DCB496
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/PjFMEAMN046NMpzBfiyNN8yjdm0.roa
Signing time: Wed 25 Mar 2026 11:56:38 +0000
ROA not before: Wed 25 Mar 2026 11:56:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
31.70.0.0/16 maxlen: 24
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.165.65.0/24 maxlen: 24
213.165.69.0/24 maxlen: 24
213.165.70.0/23 maxlen: 23
213.165.70.0/24 maxlen: 24
213.165.71.0/24 maxlen: 24
213.165.74.0/24 maxlen: 24
213.165.79.0/24 maxlen: 24
213.165.80.0/23 maxlen: 23
213.165.80.0/24 maxlen: 24
213.165.81.0/24 maxlen: 24
213.165.82.0/23 maxlen: 23
213.165.84.0/24 maxlen: 24
213.165.85.0/24 maxlen: 24
213.165.86.0/23 maxlen: 23
213.165.88.0/22 maxlen: 22
213.165.92.0/24 maxlen: 24
213.165.93.0/24 maxlen: 24
213.165.94.0/23 maxlen: 23
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.24.0/24 maxlen: 24
217.154.26.0/23 maxlen: 23
217.154.32.0/22 maxlen: 22
217.154.36.0/23 maxlen: 23
217.154.38.0/24 maxlen: 24
217.154.40.0/22 maxlen: 22
217.154.44.0/23 maxlen: 23
217.154.47.0/24 maxlen: 24
217.154.48.0/24 maxlen: 24
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.154.92.0/22 maxlen: 24
217.154.97.0/24 maxlen: 24
217.154.98.0/23 maxlen: 23
217.154.100.0/23 maxlen: 23
217.154.102.0/24 maxlen: 24
217.154.105.0/24 maxlen: 24
217.154.106.0/23 maxlen: 23
217.154.108.0/24 maxlen: 24
217.154.112.0/21 maxlen: 21
217.154.120.0/23 maxlen: 23
217.154.124.0/23 maxlen: 23
217.154.126.0/24 maxlen: 24
217.154.142.0/23 maxlen: 24
217.154.144.0/22 maxlen: 24
217.154.148.0/23 maxlen: 24
217.154.150.0/24 maxlen: 24
217.154.152.0/22 maxlen: 24
217.154.156.0/24 maxlen: 24
217.154.159.0/24 maxlen: 24
217.154.160.0/20 maxlen: 20
217.154.177.0/24 maxlen: 24
217.154.178.0/23 maxlen: 24
217.154.180.0/22 maxlen: 24
217.154.184.0/23 maxlen: 24
217.154.186.0/24 maxlen: 24
217.154.188.0/22 maxlen: 24
217.154.192.0/20 maxlen: 20
217.154.208.0/24 maxlen: 24
217.154.210.0/23 maxlen: 23
217.154.212.0/22 maxlen: 22
217.154.216.0/23 maxlen: 23
217.154.218.0/24 maxlen: 24
217.154.220.0/24 maxlen: 24
217.154.222.0/23 maxlen: 23
217.154.224.0/22 maxlen: 22
217.154.228.0/23 maxlen: 23
217.154.231.0/24 maxlen: 24
217.154.232.0/22 maxlen: 22
217.154.237.0/24 maxlen: 24
217.154.238.0/23 maxlen: 23
217.154.240.0/22 maxlen: 24
217.154.244.0/23 maxlen: 24
217.154.247.0/24 maxlen: 24
217.154.248.0/21 maxlen: 24
217.154.248.0/24 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/29 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:da:97:b9:fe:b7:4d:88:81:6c:8a:59:74:dc:b4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Mar 25 11:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e314c10030dd38e8d329cc17e2c8d37cca3766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:92:2b:ba:0d:e6:3a:10:fc:5e:7f:c0:bf:
71:8a:b7:52:0c:3c:cd:c7:62:92:c3:58:85:3e:b3:
cc:30:4a:7c:69:60:31:06:4e:d8:4f:ba:3b:d5:27:
e8:95:f7:fe:f2:63:c9:c8:56:e1:70:8d:e0:a1:ac:
e5:43:c7:5f:d9:19:1b:df:88:1f:e8:d8:35:fd:01:
ed:e3:97:14:5a:22:29:6e:f3:34:82:aa:bb:e8:3d:
8c:d8:a3:2d:35:05:f2:24:70:ad:85:fe:69:b1:df:
72:9a:87:e1:81:bf:2d:98:0d:dd:ab:b0:ab:89:32:
46:71:92:8b:c0:81:37:7f:ed:56:09:d3:59:36:71:
e8:cd:8f:d5:ae:22:39:60:2b:9a:1d:4c:e0:22:ff:
9f:c5:d0:10:3d:ca:0f:af:04:20:41:ec:c5:00:6b:
30:02:d2:fb:d2:b8:2e:bf:f6:57:d9:da:fe:16:8a:
a7:68:9c:52:77:72:2c:f0:83:25:a3:0a:38:9e:7f:
41:d7:8c:bd:4b:8d:e9:b8:b9:63:4d:d4:bb:ee:c9:
1f:ee:e8:f2:c9:0e:b3:10:7a:4e:ed:a4:13:dc:a0:
1f:fc:5b:a7:b9:53:65:5b:6e:5a:d2:d6:9a:d7:d9:
2e:18:6e:b9:eb:b5:ab:fd:42:86:3e:c9:80:1e:79:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:31:4C:10:03:0D:D3:8E:8D:32:9C:C1:7E:2C:8D:37:CC:A3:76:6D
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/PjFMEAMN046NMpzBfiyNN8yjdm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
31.70.0.0/16
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.24.255
217.154.26.0/23
217.154.32.0-217.154.38.255
217.154.40.0-217.154.45.255
217.154.47.0-217.154.48.255
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0-217.154.95.255
217.154.97.0-217.154.102.255
217.154.105.0-217.154.108.255
217.154.112.0-217.154.121.255
217.154.124.0-217.154.126.255
217.154.142.0-217.154.150.255
217.154.152.0-217.154.156.255
217.154.159.0-217.154.175.255
217.154.177.0-217.154.186.255
217.154.188.0-217.154.208.255
217.154.210.0-217.154.218.255
217.154.220.0/24
217.154.222.0-217.154.229.255
217.154.231.0-217.154.235.255
217.154.237.0-217.154.245.255
217.154.247.0-217.154.255.255
217.160.0.0/16
IPv6:
2001:8d8::/29
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
3b:a4:dc:d4:14:dd:6e:ba:14:76:cd:d3:87:c8:ec:3b:3e:75:
62:b0:c0:be:e0:f9:9b:05:f4:00:dc:48:e0:78:1b:00:e2:0b:
70:69:91:57:0e:c0:bd:6e:ba:df:2c:6d:63:e0:c6:f8:e3:b9:
62:c0:25:10:b6:b0:49:71:09:1f:e1:43:fe:eb:03:f1:5b:1e:
0f:0c:2e:dc:2c:79:25:8b:9e:c7:d2:0f:02:21:c2:e0:53:e1:
f6:f6:92:f9:74:87:42:93:e6:d2:23:e9:5e:07:d2:0c:67:95:
35:d0:6e:73:63:30:e1:65:ac:29:d3:09:a0:7c:08:8e:01:d5:
67:09:96:54:65:f3:ff:aa:e9:bc:0a:b9:eb:f1:42:de:86:96:
08:21:d6:ce:c4:a8:f2:9f:8d:46:31:4f:53:79:83:ce:14:5c:
5e:2c:54:88:f1:6d:df:a0:91:53:50:5d:09:e5:cc:49:3f:df:
2e:ba:ca:43:5b:20:82:02:a8:9f:b6:74:70:ae:2e:68:2c:8e:
42:9a:7d:d8:56:99:ec:3a:16:9f:3f:fb:23:8e:df:f1:37:f1:
41:e1:29:0e:90:71:f1:80:d7:cb:1a:c5:dd:35:0e:6f:4f:d2:
ef:cb:9a:6f:4e:fa:22:e1:cf:31:25:ff:ad:65:f6:82:c9:09:
3c:81:94:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:45:31 2026 by rpki-client