Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/8rSnAtIKokfxR9O7pSCEpCLR77Q.roa
File: 8rSnAtIKokfxR9O7pSCEpCLR77Q.roa (raw, json)
Hash identifier: 0EqyZuGL9/yW7108BCN29egtc4YOgFLZwgBef2fmKnk=
Subject key identifier: F2:B4:A7:02:D2:0A:A2:47:F1:47:D3:BB:A5:20:84:A4:22:D1:EF:B4
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01A19BD4E8FBBFE7B181610B46CEA0375211
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/8rSnAtIKokfxR9O7pSCEpCLR77Q.roa
Signing time: Mon 02 Nov 2026 10:36:24 +0000
ROA not before: Mon 02 Nov 2026 10:36:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35104
IP address blocks: 37.228.64.0/24 maxlen: 24
37.228.65.0/24 maxlen: 24
37.228.66.0/24 maxlen: 24
37.228.67.0/24 maxlen: 24
37.228.68.0/24 maxlen: 24
37.228.69.0/24 maxlen: 24
37.228.70.0/24 maxlen: 24
37.228.71.0/24 maxlen: 24
46.235.80.0/24 maxlen: 24
46.235.81.0/24 maxlen: 24
46.235.82.0/24 maxlen: 24
46.235.83.0/24 maxlen: 24
46.235.84.0/24 maxlen: 24
46.235.85.0/24 maxlen: 24
46.235.86.0/24 maxlen: 24
46.235.87.0/24 maxlen: 24
77.245.96.0/24 maxlen: 24
77.245.97.0/24 maxlen: 24
77.245.98.0/24 maxlen: 24
77.245.99.0/24 maxlen: 24
77.245.100.0/24 maxlen: 24
77.245.101.0/24 maxlen: 24
77.245.102.0/24 maxlen: 24
77.245.103.0/24 maxlen: 24
77.245.104.0/22 maxlen: 22
77.245.104.0/24 maxlen: 24
77.245.105.0/24 maxlen: 24
77.245.106.0/24 maxlen: 24
77.245.107.0/24 maxlen: 24
77.245.108.0/23 maxlen: 23
77.245.108.0/24 maxlen: 24
77.245.109.0/24 maxlen: 24
77.245.110.0/24 maxlen: 24
77.245.111.0/24 maxlen: 24
80.242.208.0/24 maxlen: 24
80.242.209.0/24 maxlen: 24
80.242.210.0/24 maxlen: 24
80.242.211.0/24 maxlen: 24
80.242.212.0/24 maxlen: 24
80.242.213.0/24 maxlen: 24
80.242.214.0/24 maxlen: 24
80.242.215.0/24 maxlen: 24
80.242.216.0/24 maxlen: 24
80.242.217.0/24 maxlen: 24
80.242.218.0/24 maxlen: 24
80.242.219.0/24 maxlen: 24
80.242.220.0/24 maxlen: 24
80.242.221.0/24 maxlen: 24
80.242.222.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
89.219.24.0/24 maxlen: 24
89.219.25.0/24 maxlen: 24
89.219.27.0/24 maxlen: 24
93.185.64.0/24 maxlen: 24
93.185.65.0/24 maxlen: 24
93.185.66.0/24 maxlen: 24
93.185.67.0/24 maxlen: 24
93.185.68.0/24 maxlen: 24
93.185.69.0/24 maxlen: 24
93.185.70.0/24 maxlen: 24
93.185.71.0/24 maxlen: 24
93.185.72.0/21 maxlen: 21
93.185.72.0/24 maxlen: 24
93.185.73.0/24 maxlen: 24
93.185.74.0/24 maxlen: 24
93.185.75.0/24 maxlen: 24
93.185.76.0/24 maxlen: 24
93.185.77.0/24 maxlen: 24
93.185.78.0/24 maxlen: 24
93.185.79.0/24 maxlen: 24
95.141.128.0/24 maxlen: 24
95.141.129.0/24 maxlen: 24
95.141.130.0/24 maxlen: 24
95.141.131.0/24 maxlen: 24
95.141.132.0/24 maxlen: 24
95.141.133.0/24 maxlen: 24
95.141.134.0/24 maxlen: 24
95.141.135.0/24 maxlen: 24
95.141.136.0/22 maxlen: 22
95.141.136.0/24 maxlen: 24
95.141.137.0/24 maxlen: 24
95.141.138.0/24 maxlen: 24
95.141.139.0/24 maxlen: 24
95.141.140.0/24 maxlen: 24
95.141.141.0/24 maxlen: 24
95.141.142.0/24 maxlen: 24
95.141.143.0/24 maxlen: 24
185.20.124.0/24 maxlen: 24
185.20.125.0/24 maxlen: 24
185.20.126.0/23 maxlen: 23
185.20.126.0/24 maxlen: 24
185.20.127.0/24 maxlen: 24
188.0.128.0/24 maxlen: 24
188.0.129.0/24 maxlen: 24
188.0.130.0/24 maxlen: 24
188.0.131.0/24 maxlen: 24
188.0.132.0/24 maxlen: 24
188.0.133.0/24 maxlen: 24
188.0.134.0/24 maxlen: 24
188.0.135.0/24 maxlen: 24
188.0.136.0/24 maxlen: 24
188.0.137.0/24 maxlen: 24
188.0.138.0/24 maxlen: 24
188.0.139.0/24 maxlen: 24
188.0.140.0/22 maxlen: 24
188.0.141.0/24 maxlen: 24
188.0.142.0/24 maxlen: 24
188.0.143.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.0.145.0/24 maxlen: 24
188.0.146.0/24 maxlen: 24
188.0.147.0/24 maxlen: 24
188.0.148.0/24 maxlen: 24
188.0.149.0/24 maxlen: 24
188.0.150.0/24 maxlen: 24
188.0.151.0/24 maxlen: 24
188.0.152.0/24 maxlen: 24
188.0.153.0/24 maxlen: 24
188.0.154.0/24 maxlen: 24
188.0.155.0/24 maxlen: 24
188.0.156.0/24 maxlen: 24
188.0.157.0/24 maxlen: 24
188.0.158.0/24 maxlen: 24
188.0.159.0/24 maxlen: 24
188.127.32.0/24 maxlen: 24
188.127.33.0/24 maxlen: 24
188.127.34.0/24 maxlen: 24
188.127.35.0/24 maxlen: 24
188.127.36.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
188.127.38.0/24 maxlen: 24
188.127.39.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
188.127.41.0/24 maxlen: 24
188.127.42.0/24 maxlen: 24
188.127.43.0/24 maxlen: 24
188.127.44.0/24 maxlen: 24
188.127.45.0/24 maxlen: 24
188.127.46.0/24 maxlen: 24
188.127.47.0/24 maxlen: 24
188.127.48.0/24 maxlen: 24
188.127.49.0/24 maxlen: 24
188.127.50.0/24 maxlen: 24
188.127.51.0/24 maxlen: 24
188.127.52.0/24 maxlen: 24
193.29.53.0/24 maxlen: 24
195.189.28.0/24 maxlen: 24
195.189.29.0/24 maxlen: 24
195.189.30.0/24 maxlen: 24
195.189.31.0/24 maxlen: 24
217.196.16.0/24 maxlen: 24
217.196.17.0/24 maxlen: 24
217.196.18.0/24 maxlen: 24
217.196.19.0/24 maxlen: 24
217.196.20.0/24 maxlen: 24
217.196.21.0/24 maxlen: 24
217.196.22.0/24 maxlen: 24
217.196.23.0/24 maxlen: 24
217.196.24.0/24 maxlen: 24
217.196.25.0/24 maxlen: 24
217.196.26.0/23 maxlen: 23
217.196.26.0/24 maxlen: 24
217.196.27.0/24 maxlen: 24
217.196.28.0/24 maxlen: 24
217.196.29.0/24 maxlen: 24
217.196.30.0/24 maxlen: 24
217.196.31.0/24 maxlen: 24
2a03:a300::/32 maxlen: 32
2a03:a300:800::/37 maxlen: 37
2a03:a300:1000::/48 maxlen: 48
2a03:a300:1140::/48 maxlen: 48
2a03:a300:2000::/48 maxlen: 48
2a03:a300:2020::/48 maxlen: 48
2a03:a300:3000::/48 maxlen: 48
2a03:a300:4000::/44 maxlen: 44
2a03:a300:4100::/48 maxlen: 48
2a03:a300:5000::/36 maxlen: 36
2a03:a300:5000::/42 maxlen: 42
2a03:a300:5000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:d4:e8:fb:bf:e7:b1:81:61:0b:46:ce:a0:37:52:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Nov 2 10:36:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2b4a702d20aa247f147d3bba52084a422d1efb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:7a:08:b1:46:6c:0f:a3:a2:bb:b1:8a:73:
b6:2c:69:ec:b6:c8:f0:d7:99:cb:c4:08:b2:47:ef:
c7:a6:58:6f:d6:9d:ff:cc:a6:1d:91:1b:b4:3c:f0:
94:27:de:aa:32:69:a4:69:4c:2a:b1:2c:de:eb:82:
76:e3:31:74:14:c5:89:7b:7f:53:08:e7:19:34:bc:
b0:7e:7f:d3:50:d4:3b:20:88:b9:e4:bb:74:69:39:
d7:7e:a4:0a:cf:96:4e:66:49:48:bc:50:3e:6a:bc:
f2:eb:3d:a5:11:a4:db:91:27:ae:b3:f3:3d:6b:8b:
73:f2:a0:f4:71:86:7f:f4:0b:de:70:00:63:57:45:
ae:39:bf:82:90:47:47:9f:0c:20:c8:48:b3:f5:a8:
83:eb:7c:db:af:32:8f:73:1d:77:c2:74:d3:83:a3:
2c:9b:6f:a3:75:4b:1a:82:ff:45:17:a0:f9:86:19:
30:37:67:ad:03:b7:ad:ac:89:8f:24:21:62:76:4f:
eb:00:e6:bc:cc:c9:10:b1:66:88:2a:0b:97:af:f8:
f1:d6:96:9f:cb:c5:25:0c:32:67:15:db:b5:c8:92:
5a:d9:4a:45:49:68:cb:e3:ce:02:a0:3b:79:1f:f4:
12:8f:78:bf:19:9d:71:0b:7c:44:21:65:b6:66:92:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:A7:02:D2:0A:A2:47:F1:47:D3:BB:A5:20:84:A4:22:D1:EF:B4
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/8rSnAtIKokfxR9O7pSCEpCLR77Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.64.0/21
46.235.80.0/21
77.245.96.0/20
80.242.208.0/20
89.219.24.0/23
89.219.27.0/24
93.185.64.0/20
95.141.128.0/20
185.20.124.0/22
188.0.128.0/19
188.127.32.0-188.127.52.255
193.29.53.0/24
195.189.28.0/22
217.196.16.0/20
IPv6:
2a03:a300::/32
Signature Algorithm: sha256WithRSAEncryption
6c:64:8a:b9:af:8b:bf:16:a9:5a:83:1b:1c:cb:1e:5a:c7:c6:
76:be:18:1c:f9:62:cc:eb:ad:47:b7:48:ce:e0:65:af:00:19:
40:f4:48:bf:61:5e:e5:3e:6e:94:16:4b:7c:64:e3:70:95:fb:
40:71:24:61:07:90:e7:d3:7b:62:7e:e5:4a:6a:6c:75:74:0e:
b1:23:7d:0a:44:59:ee:f4:78:db:87:2f:8f:fb:d6:23:41:dd:
26:73:c8:99:44:9a:e9:53:94:11:83:6e:4a:53:bd:70:c7:46:
47:3f:8a:57:87:fc:91:ab:7f:5c:57:9d:d3:b9:df:ce:c5:41:
2d:fc:a1:36:9e:ee:96:4b:00:ac:a1:eb:ae:8e:3b:e6:3b:4c:
fe:ad:90:82:5f:6a:bf:55:27:5e:8d:4e:0e:21:8a:fa:f1:39:
46:02:a7:8b:f8:78:06:3a:43:3c:87:31:38:a0:44:05:25:14:
8e:78:cb:a8:3b:a4:30:63:55:af:70:02:4b:3e:74:a3:0c:f9:
06:01:9a:8e:b2:e1:e4:07:b2:15:e8:dc:b8:df:49:1b:23:52:
23:d9:b2:d2:05:26:ab:56:06:b2:5f:f7:7e:fd:ae:75:9a:21:
50:90:68:a9:94:2b:b2:7f:7e:b2:dc:09:4a:12:61:70:e6:b0:
4d:3d:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:41:05 2026 by rpki-client