Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/xIF2UGZRRTWnw2cURV0PZKTBa6w.roa
File: xIF2UGZRRTWnw2cURV0PZKTBa6w.roa (raw, json)
Hash identifier: jOXJYZwibplzOq9OM0jJw8XY3WOY1xhVWRMp1xB8JX0=
Subject key identifier: C4:81:76:50:66:51:45:35:A7:C3:67:14:45:5D:0F:64:A4:C1:6B:AC
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 01A1C634936D6B79D4B9769150E97D7B657F
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/xIF2UGZRRTWnw2cURV0PZKTBa6w.roa
Signing time: Tue 10 Nov 2026 16:04:56 +0000
ROA not before: Tue 10 Nov 2026 16:04:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208677
IP address blocks: 31.40.248.0/23 maxlen: 23
37.18.8.0/23 maxlen: 23
37.18.10.0/24 maxlen: 24
37.18.22.0/24 maxlen: 24
37.18.72.0/23 maxlen: 23
37.18.100.0/23 maxlen: 23
37.18.102.0/24 maxlen: 24
37.18.107.0/24 maxlen: 24
37.18.108.0/22 maxlen: 22
37.18.112.0/23 maxlen: 23
37.18.114.0/24 maxlen: 24
37.18.115.0/24 maxlen: 24
37.18.116.0/22 maxlen: 22
37.18.120.0/23 maxlen: 23
37.18.122.0/24 maxlen: 24
37.44.196.0/23 maxlen: 23
37.44.198.0/24 maxlen: 24
37.230.139.0/24 maxlen: 24
37.230.179.0/24 maxlen: 24
37.230.180.0/23 maxlen: 23
37.230.180.0/24 maxlen: 24
37.230.184.0/23 maxlen: 23
37.230.186.0/24 maxlen: 24
37.230.192.0/21 maxlen: 21
37.230.224.0/24 maxlen: 24
37.230.233.0/24 maxlen: 24
45.9.24.0/22 maxlen: 22
45.89.224.0/22 maxlen: 22
45.132.176.0/22 maxlen: 22
45.136.146.0/23 maxlen: 23
45.151.30.0/23 maxlen: 23
45.155.204.0/23 maxlen: 23
46.16.36.0/24 maxlen: 24
46.243.141.0/24 maxlen: 24
46.243.142.0/23 maxlen: 23
46.243.172.0/24 maxlen: 24
46.243.201.0/24 maxlen: 24
46.243.205.0/24 maxlen: 24
46.243.206.0/24 maxlen: 24
46.243.226.0/23 maxlen: 23
46.243.244.0/23 maxlen: 23
46.253.132.0/24 maxlen: 24
62.233.43.0/24 maxlen: 24
82.202.136.0/21 maxlen: 21
82.202.156.0/22 maxlen: 22
84.54.56.0/22 maxlen: 22
85.208.85.0/24 maxlen: 24
85.208.86.0/23 maxlen: 23
85.208.209.0/24 maxlen: 24
85.208.210.0/23 maxlen: 23
85.209.149.0/24 maxlen: 24
85.209.150.0/23 maxlen: 23
85.235.82.0/23 maxlen: 24
85.235.82.0/24 maxlen: 24
85.235.83.0/24 maxlen: 24
87.242.84.0/22 maxlen: 22
87.242.88.0/21 maxlen: 21
87.242.100.0/22 maxlen: 22
87.242.116.0/22 maxlen: 22
87.242.120.0/21 maxlen: 21
88.218.65.0/24 maxlen: 24
88.218.66.0/23 maxlen: 23
89.232.160.0/21 maxlen: 21
89.232.168.0/22 maxlen: 22
89.232.176.0/22 maxlen: 22
91.214.120.0/23 maxlen: 23
91.224.86.0/23 maxlen: 23
94.139.252.0/22 maxlen: 22
94.158.22.0/23 maxlen: 23
95.174.88.0/21 maxlen: 21
129.101.84.0/24 maxlen: 24
129.101.88.0/22 maxlen: 22
131.222.134.0/23 maxlen: 24
141.101.151.0/24 maxlen: 24
141.101.152.0/24 maxlen: 24
141.101.201.0/24 maxlen: 24
152.89.196.0/24 maxlen: 24
159.200.128.0/18 maxlen: 18
168.113.252.0/22 maxlen: 24
168.222.176.0/22 maxlen: 24
168.222.176.0/24 maxlen: 24
168.222.177.0/24 maxlen: 24
168.222.178.0/24 maxlen: 24
168.222.179.0/24 maxlen: 24
176.108.240.0/20 maxlen: 20
176.109.96.0/20 maxlen: 24
176.123.160.0/21 maxlen: 21
178.170.191.0/24 maxlen: 24
178.170.192.0/22 maxlen: 22
178.170.196.0/23 maxlen: 23
178.170.242.0/24 maxlen: 24
185.50.200.0/22 maxlen: 22
185.234.11.0/24 maxlen: 24
185.241.57.0/24 maxlen: 24
188.72.96.0/24 maxlen: 24
188.72.106.0/23 maxlen: 23
188.72.108.0/23 maxlen: 23
188.72.117.0/24 maxlen: 24
188.72.118.0/24 maxlen: 24
192.144.12.0/22 maxlen: 22
192.144.28.0/24 maxlen: 24
193.42.116.0/23 maxlen: 23
193.105.4.0/24 maxlen: 24
193.163.94.0/24 maxlen: 24
193.201.8.0/24 maxlen: 24
194.5.92.0/23 maxlen: 23
194.26.228.0/24 maxlen: 24
194.50.72.0/24 maxlen: 24
194.113.34.0/23 maxlen: 23
195.128.152.0/24 maxlen: 24
213.171.24.0/21 maxlen: 21
213.178.153.0/24 maxlen: 24
213.178.154.0/24 maxlen: 24
2a0c:2b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:34:93:6d:6b:79:d4:b9:76:91:50:e9:7d:7b:65:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Nov 10 16:04:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c481765066514535a7c36714455d0f64a4c16bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:53:16:4c:94:00:ac:22:81:5c:76:66:d2:
8c:fb:a5:6e:58:d4:68:9c:06:80:11:a2:94:01:aa:
1d:f3:9b:68:97:ca:96:9f:f6:9f:f7:e2:db:b7:1c:
c3:a6:e5:6a:be:31:44:81:39:6e:09:55:3a:1a:f6:
e2:af:f9:c8:9a:bf:66:75:09:75:9e:ec:fc:9e:06:
f3:fa:cf:37:e5:43:55:aa:c1:ed:8b:bc:7b:9c:33:
f1:09:89:d0:ac:d1:e3:9b:af:c8:3b:36:e6:74:90:
28:2e:f7:69:9a:c2:b1:ef:f5:28:53:65:95:30:57:
1b:d6:29:33:4c:ae:27:09:b4:21:2d:3a:9c:c8:8e:
19:5a:16:ac:be:40:f6:94:7f:2c:9f:6e:e4:d9:f3:
f5:1b:01:3a:97:a3:c9:d9:74:ec:c4:75:12:5e:4d:
ec:e7:3f:54:09:e5:de:f3:a7:7e:28:68:45:ea:97:
12:d3:f4:eb:8f:97:55:7c:a2:bb:0a:0b:71:6d:b3:
e1:e9:a6:37:e2:85:da:f5:1f:f4:fb:15:df:51:f7:
ff:21:88:c9:2b:da:ef:ad:e6:e6:91:67:42:dd:f3:
cb:65:39:93:2d:78:8e:08:b9:2c:2b:6c:06:7d:4f:
26:13:a4:51:27:e5:86:c8:6a:5b:e8:92:41:83:ba:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:81:76:50:66:51:45:35:A7:C3:67:14:45:5D:0F:64:A4:C1:6B:AC
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/xIF2UGZRRTWnw2cURV0PZKTBa6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.248.0/23
37.18.8.0-37.18.10.255
37.18.22.0/24
37.18.72.0/23
37.18.100.0-37.18.102.255
37.18.107.0-37.18.122.255
37.44.196.0-37.44.198.255
37.230.139.0/24
37.230.179.0-37.230.181.255
37.230.184.0-37.230.186.255
37.230.192.0/21
37.230.224.0/24
37.230.233.0/24
45.9.24.0/22
45.89.224.0/22
45.132.176.0/22
45.136.146.0/23
45.151.30.0/23
45.155.204.0/23
46.16.36.0/24
46.243.141.0-46.243.143.255
46.243.172.0/24
46.243.201.0/24
46.243.205.0-46.243.206.255
46.243.226.0/23
46.243.244.0/23
46.253.132.0/24
62.233.43.0/24
82.202.136.0/21
82.202.156.0/22
84.54.56.0/22
85.208.85.0-85.208.87.255
85.208.209.0-85.208.211.255
85.209.149.0-85.209.151.255
85.235.82.0/23
87.242.84.0-87.242.95.255
87.242.100.0/22
87.242.116.0-87.242.127.255
88.218.65.0-88.218.67.255
89.232.160.0-89.232.171.255
89.232.176.0/22
91.214.120.0/23
91.224.86.0/23
94.139.252.0/22
94.158.22.0/23
95.174.88.0/21
129.101.84.0/24
129.101.88.0/22
131.222.134.0/23
141.101.151.0-141.101.152.255
141.101.201.0/24
152.89.196.0/24
159.200.128.0/18
168.113.252.0/22
168.222.176.0/22
176.108.240.0/20
176.109.96.0/20
176.123.160.0/21
178.170.191.0-178.170.197.255
178.170.242.0/24
185.50.200.0/22
185.234.11.0/24
185.241.57.0/24
188.72.96.0/24
188.72.106.0-188.72.109.255
188.72.117.0-188.72.118.255
192.144.12.0/22
192.144.28.0/24
193.42.116.0/23
193.105.4.0/24
193.163.94.0/24
193.201.8.0/24
194.5.92.0/23
194.26.228.0/24
194.50.72.0/24
194.113.34.0/23
195.128.152.0/24
213.171.24.0/21
213.178.153.0-213.178.154.255
IPv6:
2a0c:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
4a:bb:21:67:33:a6:ed:1f:7b:42:3c:e7:f0:77:ac:5d:95:13:
ff:d3:2b:a4:72:42:ab:41:55:04:0d:ea:22:4f:c2:2c:00:03:
9b:7d:ce:58:59:af:a3:a4:41:1f:52:bc:70:87:d3:38:08:19:
21:dc:bc:0f:d2:14:cf:8b:ba:ba:57:c7:05:a3:59:9c:ca:42:
4f:bd:62:26:8a:6f:dd:35:47:47:17:a7:d1:55:65:51:d6:4a:
e4:cc:1d:f5:e1:32:88:cf:0d:b6:90:c8:f5:58:d8:cf:e1:67:
33:60:3b:41:de:02:9c:47:5e:23:3d:19:22:95:06:14:38:52:
49:a8:4f:95:03:1c:ca:5f:98:fb:2d:5d:ac:3d:aa:44:c7:0b:
15:d7:93:b1:8e:19:02:6a:60:67:67:55:ae:52:65:c5:7e:bf:
93:da:f9:3b:ec:9c:92:1d:5e:bf:e0:5a:03:21:0b:9a:d2:b5:
53:35:b3:82:06:6e:be:50:b9:9f:9d:00:e1:48:29:13:79:65:
2d:ba:5e:56:38:ad:d5:fd:3e:1f:b9:66:cf:db:33:0a:18:b1:
47:75:9a:f3:0c:0f:75:2e:4e:eb:97:e3:8e:4e:13:d1:d4:3d:
f0:28:cd:3a:65:02:34:2f:3c:59:af:80:ed:d5:dd:0c:29:30:
12:6a:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:37:06 2026 by rpki-client