Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/uxdK1EvS7BqRKSYycQdpX8X9Vv0.roa
File: uxdK1EvS7BqRKSYycQdpX8X9Vv0.roa (raw, json)
Hash identifier: 1pY0UVjOURrd7egSRrUJP2o8BrAYQcgccoW1p3ha2H4=
Subject key identifier: BB:17:4A:D4:4B:D2:EC:1A:91:29:26:32:71:07:69:5F:C5:FD:56:FD
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 019E030234CFE729FE2123F9C9911F52FA74
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/uxdK1EvS7BqRKSYycQdpX8X9Vv0.roa
Signing time: Thu 07 May 2026 15:15:36 +0000
ROA not before: Thu 07 May 2026 15:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208677
IP address blocks: 31.40.248.0/23 maxlen: 23
37.18.8.0/23 maxlen: 23
37.18.10.0/24 maxlen: 24
37.18.22.0/24 maxlen: 24
37.18.72.0/23 maxlen: 23
37.18.100.0/23 maxlen: 23
37.18.102.0/24 maxlen: 24
37.18.107.0/24 maxlen: 24
37.18.108.0/22 maxlen: 22
37.18.112.0/23 maxlen: 23
37.18.114.0/24 maxlen: 24
37.18.115.0/24 maxlen: 24
37.18.116.0/22 maxlen: 22
37.18.120.0/23 maxlen: 23
37.18.122.0/24 maxlen: 24
37.44.196.0/23 maxlen: 23
37.44.198.0/24 maxlen: 24
37.230.139.0/24 maxlen: 24
37.230.179.0/24 maxlen: 24
37.230.180.0/23 maxlen: 23
37.230.180.0/24 maxlen: 24
37.230.184.0/23 maxlen: 23
37.230.186.0/24 maxlen: 24
37.230.192.0/21 maxlen: 21
37.230.224.0/24 maxlen: 24
37.230.233.0/24 maxlen: 24
45.9.24.0/22 maxlen: 22
45.89.224.0/22 maxlen: 22
45.132.176.0/22 maxlen: 22
45.136.146.0/23 maxlen: 23
45.151.30.0/23 maxlen: 23
45.155.204.0/23 maxlen: 23
46.16.36.0/24 maxlen: 24
46.243.141.0/24 maxlen: 24
46.243.142.0/23 maxlen: 23
46.243.172.0/24 maxlen: 24
46.243.201.0/24 maxlen: 24
46.243.205.0/24 maxlen: 24
46.243.206.0/24 maxlen: 24
46.243.226.0/23 maxlen: 23
46.243.244.0/23 maxlen: 23
46.253.132.0/24 maxlen: 24
62.233.43.0/24 maxlen: 24
82.202.136.0/21 maxlen: 21
82.202.156.0/22 maxlen: 22
84.54.56.0/22 maxlen: 22
85.208.85.0/24 maxlen: 24
85.208.86.0/23 maxlen: 23
85.208.209.0/24 maxlen: 24
85.208.210.0/23 maxlen: 23
85.209.149.0/24 maxlen: 24
85.209.150.0/23 maxlen: 23
85.235.82.0/23 maxlen: 24
85.235.83.0/24 maxlen: 24
87.242.84.0/22 maxlen: 22
87.242.88.0/21 maxlen: 21
87.242.100.0/22 maxlen: 22
87.242.116.0/22 maxlen: 22
87.242.120.0/21 maxlen: 21
88.218.65.0/24 maxlen: 24
88.218.66.0/23 maxlen: 23
89.232.160.0/21 maxlen: 21
89.232.168.0/22 maxlen: 22
89.232.176.0/22 maxlen: 22
91.214.120.0/23 maxlen: 23
91.224.86.0/23 maxlen: 23
94.139.252.0/22 maxlen: 22
94.158.22.0/23 maxlen: 23
95.174.88.0/21 maxlen: 21
131.222.134.0/23 maxlen: 24
141.101.151.0/24 maxlen: 24
141.101.152.0/24 maxlen: 24
141.101.201.0/24 maxlen: 24
152.89.196.0/24 maxlen: 24
168.222.176.0/22 maxlen: 24
168.222.176.0/24 maxlen: 24
168.222.177.0/24 maxlen: 24
176.108.240.0/20 maxlen: 20
176.109.96.0/20 maxlen: 24
176.123.160.0/21 maxlen: 21
178.170.191.0/24 maxlen: 24
178.170.192.0/22 maxlen: 22
178.170.196.0/23 maxlen: 23
178.170.242.0/24 maxlen: 24
185.50.200.0/22 maxlen: 22
185.234.11.0/24 maxlen: 24
185.241.57.0/24 maxlen: 24
188.72.96.0/24 maxlen: 24
188.72.106.0/23 maxlen: 23
188.72.108.0/23 maxlen: 23
188.72.117.0/24 maxlen: 24
188.72.118.0/24 maxlen: 24
192.144.12.0/22 maxlen: 22
192.144.28.0/24 maxlen: 24
193.42.116.0/23 maxlen: 23
193.105.4.0/24 maxlen: 24
193.163.94.0/24 maxlen: 24
193.201.8.0/24 maxlen: 24
194.5.92.0/23 maxlen: 23
194.26.228.0/24 maxlen: 24
194.50.72.0/24 maxlen: 24
194.113.34.0/23 maxlen: 23
195.128.152.0/24 maxlen: 24
213.171.24.0/21 maxlen: 21
213.178.153.0/24 maxlen: 24
213.178.154.0/24 maxlen: 24
2a0c:2b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:02:34:cf:e7:29:fe:21:23:f9:c9:91:1f:52:fa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: May 7 15:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb174ad44bd2ec1a912926327107695fc5fd56fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:78:9f:e3:26:e0:6d:65:e5:07:0d:e9:06:
96:19:25:46:8c:83:4f:b4:fd:5b:f8:75:1c:da:31:
e1:b9:91:b5:e8:fa:8f:d8:d8:e6:6e:f9:be:7d:ff:
13:63:5c:ad:04:92:0d:c1:7c:9c:bb:1f:04:bb:ad:
69:21:d8:9c:4c:1e:e8:fd:df:50:bd:e0:3f:41:1d:
00:ce:22:d9:55:0b:9c:36:7c:db:8e:89:a8:ae:03:
46:a1:56:5c:81:6e:c9:5a:cb:a2:3a:aa:ab:eb:38:
5a:6b:da:f5:f3:73:9a:7d:cd:3d:33:84:62:d1:0b:
47:d2:49:8b:88:bb:9d:fc:f4:b1:4b:b8:0d:20:93:
c2:6a:b8:96:01:cc:25:19:ad:6e:81:30:1d:dc:e7:
b8:1d:26:4c:4d:ec:b1:5a:8f:53:45:9e:6b:77:91:
22:29:cb:7a:ac:c4:9e:6c:c7:07:9f:ca:2a:99:7e:
f1:39:41:7e:51:14:4b:f1:63:bb:a2:0e:35:81:9c:
96:12:ab:9a:03:2c:a4:2f:5c:9d:c7:da:1a:28:35:
e0:2c:e3:71:0f:c7:ce:de:78:c1:37:ff:e2:42:6d:
7c:43:81:da:f5:90:8b:68:64:11:f3:44:fb:14:d7:
a4:8b:c6:59:f3:24:cb:cb:15:a1:ea:af:fe:c8:b5:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:4A:D4:4B:D2:EC:1A:91:29:26:32:71:07:69:5F:C5:FD:56:FD
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/uxdK1EvS7BqRKSYycQdpX8X9Vv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.248.0/23
37.18.8.0-37.18.10.255
37.18.22.0/24
37.18.72.0/23
37.18.100.0-37.18.102.255
37.18.107.0-37.18.122.255
37.44.196.0-37.44.198.255
37.230.139.0/24
37.230.179.0-37.230.181.255
37.230.184.0-37.230.186.255
37.230.192.0/21
37.230.224.0/24
37.230.233.0/24
45.9.24.0/22
45.89.224.0/22
45.132.176.0/22
45.136.146.0/23
45.151.30.0/23
45.155.204.0/23
46.16.36.0/24
46.243.141.0-46.243.143.255
46.243.172.0/24
46.243.201.0/24
46.243.205.0-46.243.206.255
46.243.226.0/23
46.243.244.0/23
46.253.132.0/24
62.233.43.0/24
82.202.136.0/21
82.202.156.0/22
84.54.56.0/22
85.208.85.0-85.208.87.255
85.208.209.0-85.208.211.255
85.209.149.0-85.209.151.255
85.235.82.0/23
87.242.84.0-87.242.95.255
87.242.100.0/22
87.242.116.0-87.242.127.255
88.218.65.0-88.218.67.255
89.232.160.0-89.232.171.255
89.232.176.0/22
91.214.120.0/23
91.224.86.0/23
94.139.252.0/22
94.158.22.0/23
95.174.88.0/21
131.222.134.0/23
141.101.151.0-141.101.152.255
141.101.201.0/24
152.89.196.0/24
168.222.176.0/22
176.108.240.0/20
176.109.96.0/20
176.123.160.0/21
178.170.191.0-178.170.197.255
178.170.242.0/24
185.50.200.0/22
185.234.11.0/24
185.241.57.0/24
188.72.96.0/24
188.72.106.0-188.72.109.255
188.72.117.0-188.72.118.255
192.144.12.0/22
192.144.28.0/24
193.42.116.0/23
193.105.4.0/24
193.163.94.0/24
193.201.8.0/24
194.5.92.0/23
194.26.228.0/24
194.50.72.0/24
194.113.34.0/23
195.128.152.0/24
213.171.24.0/21
213.178.153.0-213.178.154.255
IPv6:
2a0c:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
0d:66:2b:2d:b2:41:1e:2a:76:e0:29:20:87:27:51:5e:cc:b4:
91:28:34:08:94:37:8c:e1:e7:99:b5:3f:e4:d0:e5:f4:bc:c1:
20:1a:71:43:6d:d7:f2:5e:3a:a3:5f:84:7d:6a:81:c8:03:8f:
71:39:9d:8e:8b:69:a8:f1:1a:c0:8c:f1:66:71:d8:73:26:5d:
96:06:3d:14:27:9a:47:4d:15:8b:0e:04:a2:9d:78:0d:81:47:
f6:a8:57:a2:2d:59:de:aa:08:77:c0:a7:cd:51:52:f5:81:71:
74:f0:c8:db:7b:5e:31:90:b4:51:f7:22:b9:06:74:9b:84:5c:
f3:ef:d2:4b:be:8a:3e:97:1b:bc:16:13:1b:ff:4a:64:bd:c7:
d5:aa:73:81:b3:05:b1:ac:64:b7:7f:2f:fe:b0:0d:12:7c:4f:
95:31:d0:a1:33:08:36:fa:a6:39:aa:00:13:6a:2a:c5:1e:10:
50:df:e7:f0:89:af:4a:c8:ed:04:5e:a9:b5:1c:4d:ae:f0:fe:
5a:52:8f:aa:46:39:2b:a3:75:03:dc:15:f0:7c:f0:15:09:01:
ea:2a:97:40:43:bf:dd:1f:02:7a:81:1f:b7:5f:83:2a:f8:0a:
c0:72:13:8c:0f:5d:f9:d8:42:b0:b0:25:b0:1f:0b:5c:6f:d2:
d4:22:08:fc
-----BEGIN CERTIFICATE-----
MIIHdDCCBlygAwIBAgISAZ4DAjTP5yn+ISP5yZEfUvp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTllMWYzZmU2OWI0ZWJkZmYwMmE5YTg1N2U3YzZjMmIy
NTMwMWEwHhcNMjYwNTA3MTUxNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjE3NGFkNDRiZDJlYzFhOTEyOTI2MzI3MTA3Njk1ZmM1ZmQ1NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOJ4n+Mm4G1l5QcN6QaWGSVGjINP
tP1b+HUc2jHhuZG16PqP2Njmbvm+ff8TY1ytBJINwXycux8Eu61pIdicTB7o/d9Q
veA/QR0AziLZVQucNnzbjomorgNGoVZcgW7JWsuiOqqr6zhaa9r183Oafc09M4Ri
0QtH0kmLiLud/PSxS7gNIJPCariWAcwlGa1ugTAd3Oe4HSZMTeyxWo9TRZ5rd5Ei
Kct6rMSebMcHn8oqmX7xOUF+URRL8WO7og41gZyWEquaAyykL1ydx9oaKDXgLONx
D8fO3njBN//iQm18Q4Ha9ZCLaGQR80T7FNeki8ZZ8yTLyxWh6q/+yLUtfQIDAQAB
o4IEgDCCBHwwHQYDVR0OBBYEFLsXStRL0uwakSkmMnEHaV/F/Vb9MB8GA1UdIwQY
MBaAFPkZ4fP+abTr3/AqmoV+fGwrJTAaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Sbmg4XzVwdE92ZjhDcWFoWDU4YkNzbE1Cby5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAz
LWRhZDA0MjBiODVkMy8xL3V4ZEsxRXZTN0JxUktTWXljUWRwWDhYOVZ2MC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAzLWRhZDA0MjBiODVk
My8xLzEtUm5oOF81cHRPdmY4Q3FhaFg1OGJDc2xNQm8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwggKSBggrBgEFBQcBBwEB/wSCAoEwggJ9MIICagQCAAEw
ggJiAwQBHyj4MAwDBAMlEggDBAAlEgoDBAAlEhYDBAElEkgwDAMEAiUSZAMEACUS
ZjAMAwQAJRJrAwQAJRJ6MAwDBAIlLMQDBAAlLMYDBAAl5oswDAMEACXmswMEASXm
tDAMAwQDJea4AwQAJea6AwQDJebAAwQAJebgAwQAJebpAwQCLQkYAwQCLVngAwQC
LYSwAwQBLYiSAwQBLZceAwQBLZvMAwQALhAkMAwDBAAu840DBAQu84ADBAAu86wD
BAAu88kwDAMEAC7zzQMEAC7zzgMEAS7z4gMEAS7z9AMEAC79hAMEAD7pKwMEA1LK
iAMEAlLKnAMEAlQ2ODAMAwQAVdBVAwQDVdBQMAwDBABV0NEDBAJV0NAwDAMEAFXR
lQMEA1XRkAMEAVXrUjAMAwQCV/JUAwQFV/JAAwQCV/JkMAwDBAJX8nQDBAdX8gAw
DAMEAFjaQQMEAljaQDAMAwQFWeigAwQCWeioAwQCWeiwAwQBW9Z4AwQBW+BWAwQC
Xov8AwQBXp4WAwQDX65YAwQBg96GMAwDBACNZZcDBACNZZgDBACNZckDBACYWcQD
BAKo3rADBASwbPADBASwbWADBAOwe6AwDAMEALKqvwMEAbKqxAMEALKq8gMEArky
yAMEALnqCwMEALnxOQMEALxIYDAMAwQBvEhqAwQBvEhsMAwDBAC8SHUDBAC8SHYD
BALAkAwDBADAkBwDBAHBKnQDBADBaQQDBADBo14DBADByQgDBAHCBVwDBADCGuQD
BADCMkgDBAHCcSIDBADDgJgDBAPVqxgwDAMEANWymQMEANWymjANBAIAAjAHAwUD
KgwrgDANBgkqhkiG9w0BAQsFAAOCAQEADWYrLbJBHip24CkghydRXsy0kSg0CJQ3
jOHnmbU/5NDl9LzBIBpxQ23X8l46o1+EfWqByAOPcTmdjotpqPEawIzxZnHYcyZd
lgY9FCeaR00Viw4Eop14DYFH9qhXoi1Z3qoId8CnzVFS9YFxdPDI23teMZC0Ufci
uQZ0m4Rc8+/SS76KPpcbvBYTG/9KZL3H1apzgbMFsaxkt38v/rANEnxPlTHQoTMI
NvqmOaoAE2oqxR4QUN/n8ImvSsjtBF6ptRxNrvD+WlKPqkY5K6N1A9wV8HzwFQkB
6iqXQEO/3R8CeoEft1+DKvgKwHITjA9d+dhCsLAlsB8LXG/S1CII/A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:32:34 2026 by rpki-client