Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Z8PTvk5i7fahdtjBZrY3o1Ya43E.roa
File: Z8PTvk5i7fahdtjBZrY3o1Ya43E.roa (raw, json)
Hash identifier: XmLLIj4R+CL6T6WuqQ1KY/uOJlU3Nkya0ysqnzEWr58=
Subject key identifier: 67:C3:D3:BE:4E:62:ED:F6:A1:76:D8:C1:66:B6:37:A3:56:1A:E3:71
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A11B5C274DE7013B38A633E0F853F2B040
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Z8PTvk5i7fahdtjBZrY3o1Ya43E.roa
Signing time: Thu 08 Oct 2026 11:53:06 +0000
ROA not before: Thu 08 Oct 2026 11:53:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 9.247.22.0/24 maxlen: 24
9.247.51.0/24 maxlen: 24
9.247.52.0/24 maxlen: 24
9.247.63.0/24 maxlen: 24
9.247.64.0/24 maxlen: 24
9.247.65.0/24 maxlen: 24
9.247.67.0/24 maxlen: 24
9.247.79.0/24 maxlen: 24
9.247.82.0/24 maxlen: 24
9.247.83.0/24 maxlen: 24
9.247.84.0/24 maxlen: 24
9.247.86.0/24 maxlen: 24
9.247.89.0/24 maxlen: 24
9.247.91.0/24 maxlen: 24
9.247.92.0/24 maxlen: 24
9.247.96.0/24 maxlen: 24
9.247.102.0/24 maxlen: 24
9.247.103.0/24 maxlen: 24
9.247.104.0/24 maxlen: 24
9.247.110.0/24 maxlen: 24
9.247.111.0/24 maxlen: 24
9.247.118.0/24 maxlen: 24
9.247.119.0/24 maxlen: 24
9.247.121.0/24 maxlen: 24
9.247.122.0/24 maxlen: 24
9.247.124.0/24 maxlen: 24
9.247.126.0/24 maxlen: 24
9.247.132.0/24 maxlen: 24
9.247.133.0/24 maxlen: 24
9.247.134.0/24 maxlen: 24
9.247.138.0/24 maxlen: 24
9.247.141.0/24 maxlen: 24
9.247.145.0/24 maxlen: 24
9.247.148.0/24 maxlen: 24
9.247.149.0/24 maxlen: 24
9.247.150.0/24 maxlen: 24
9.247.168.0/24 maxlen: 24
9.247.171.0/24 maxlen: 24
9.247.172.0/24 maxlen: 24
9.247.175.0/24 maxlen: 24
9.247.177.0/24 maxlen: 24
9.247.180.0/24 maxlen: 24
9.247.181.0/24 maxlen: 24
9.247.183.0/24 maxlen: 24
9.247.184.0/24 maxlen: 24
9.247.185.0/24 maxlen: 24
9.247.187.0/24 maxlen: 24
9.247.188.0/24 maxlen: 24
9.247.191.0/24 maxlen: 24
9.247.193.0/24 maxlen: 24
9.247.196.0/24 maxlen: 24
9.247.202.0/24 maxlen: 24
9.247.206.0/24 maxlen: 24
9.247.212.0/24 maxlen: 24
9.247.218.0/24 maxlen: 24
9.247.222.0/24 maxlen: 24
9.247.223.0/24 maxlen: 24
9.247.224.0/24 maxlen: 24
9.247.227.0/24 maxlen: 24
9.247.229.0/24 maxlen: 24
9.247.230.0/24 maxlen: 24
9.247.231.0/24 maxlen: 24
9.247.233.0/24 maxlen: 24
9.247.234.0/24 maxlen: 24
9.247.235.0/24 maxlen: 24
9.247.237.0/24 maxlen: 24
9.247.238.0/24 maxlen: 24
9.247.240.0/24 maxlen: 24
9.247.243.0/24 maxlen: 24
9.247.244.0/24 maxlen: 24
9.247.246.0/24 maxlen: 24
9.247.249.0/24 maxlen: 24
9.247.250.0/24 maxlen: 24
9.247.251.0/24 maxlen: 24
9.247.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:5c:27:4d:e7:01:3b:38:a6:33:e0:f8:53:f2:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 8 11:53:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67c3d3be4e62edf6a176d8c166b637a3561ae371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:7d:fa:22:0b:0d:89:3a:89:ef:14:79:a9:
5f:f1:7a:1c:91:96:7b:60:78:8b:73:85:4a:8b:65:
1a:95:1c:d6:7f:bf:f6:83:78:9b:3c:aa:32:01:92:
f3:da:44:2c:e1:2f:c2:36:5f:e9:f2:25:27:e1:2b:
49:d6:3d:cd:66:22:0e:ce:59:88:ce:2f:da:b4:6e:
fe:90:ed:c3:9e:92:e9:da:0d:84:f2:ab:83:41:ce:
0e:08:16:0e:34:31:06:e7:3f:4d:b2:93:41:54:83:
8a:14:d1:2e:b6:a3:34:d3:78:bf:9a:95:c0:46:85:
c1:c8:f7:4d:e2:49:85:30:d7:51:49:da:39:28:4f:
bd:18:ad:3b:07:d4:a6:fe:46:72:7c:9f:67:04:ee:
3c:65:86:57:11:a3:53:a1:86:a9:c3:e5:84:39:9b:
5f:73:76:15:47:11:16:55:7a:e3:01:88:0a:3b:80:
8e:79:a0:64:b4:e9:b8:c4:02:b1:24:f1:a5:88:08:
04:c2:67:83:d0:cf:b5:af:89:f1:fd:69:1a:65:f2:
b7:30:9c:ac:f3:5c:d0:f9:ab:c5:29:7d:67:c9:ea:
11:2d:a1:dd:83:e8:54:b4:6f:5a:72:48:89:fe:ad:
c7:a1:19:18:16:0b:44:36:12:4e:79:bb:8f:81:c1:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C3:D3:BE:4E:62:ED:F6:A1:76:D8:C1:66:B6:37:A3:56:1A:E3:71
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Z8PTvk5i7fahdtjBZrY3o1Ya43E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.22.0/24
9.247.51.0-9.247.52.255
9.247.63.0-9.247.65.255
9.247.67.0/24
9.247.79.0/24
9.247.82.0-9.247.84.255
9.247.86.0/24
9.247.89.0/24
9.247.91.0-9.247.92.255
9.247.96.0/24
9.247.102.0-9.247.104.255
9.247.110.0/23
9.247.118.0/23
9.247.121.0-9.247.122.255
9.247.124.0/24
9.247.126.0/24
9.247.132.0-9.247.134.255
9.247.138.0/24
9.247.141.0/24
9.247.145.0/24
9.247.148.0-9.247.150.255
9.247.168.0/24
9.247.171.0-9.247.172.255
9.247.175.0/24
9.247.177.0/24
9.247.180.0/23
9.247.183.0-9.247.185.255
9.247.187.0-9.247.188.255
9.247.191.0/24
9.247.193.0/24
9.247.196.0/24
9.247.202.0/24
9.247.206.0/24
9.247.212.0/24
9.247.218.0/24
9.247.222.0-9.247.224.255
9.247.227.0/24
9.247.229.0-9.247.231.255
9.247.233.0-9.247.235.255
9.247.237.0-9.247.238.255
9.247.240.0/24
9.247.243.0-9.247.244.255
9.247.246.0/24
9.247.249.0-9.247.252.255
Signature Algorithm: sha256WithRSAEncryption
03:99:db:08:55:5b:80:4a:8d:14:09:ce:dd:7f:14:31:f5:56:
5d:88:dd:ce:24:08:4c:ab:f6:5e:ed:8b:dd:c9:82:14:07:5f:
79:10:e7:22:13:35:5b:3e:7a:7d:b0:b5:40:ca:e8:5b:2c:ff:
8c:7f:df:f1:9b:42:88:e5:1b:28:de:b6:18:09:42:be:00:f3:
f3:79:19:0b:cb:d5:ca:2e:6e:75:dd:18:46:67:63:e0:91:6b:
7a:1e:70:78:a1:4e:77:b3:59:20:ec:f6:64:92:fe:18:49:6b:
42:13:0b:0d:89:1e:eb:0e:18:cb:c0:e6:5c:a2:f3:2f:ec:02:
1c:7a:09:87:15:08:ff:27:37:ec:df:49:5c:f9:1a:03:3a:8f:
06:34:9d:26:be:7f:4e:83:d3:d7:37:5a:f8:8f:3a:11:6d:7b:
d8:04:7d:6a:a9:4c:4f:1d:c3:3d:f2:09:96:ad:2d:1c:bf:6b:
77:9a:d0:8d:33:11:d8:3e:65:3b:44:0d:18:89:da:73:49:a0:
ee:08:34:95:bf:f8:02:db:2a:cf:29:f4:b6:82:7b:c8:49:54:
6f:27:d8:a9:5a:f2:43:ee:cb:24:d9:ef:43:f9:98:7d:65:1e:
04:a2:6e:cd:18:83:5b:da:7d:4c:81:f5:2f:67:16:b4:23:15:
e2:93:73:6e
-----BEGIN CERTIFICATE-----
MIIGkTCCBXmgAwIBAgISAaEbXCdN5wE7OKYz4PhT8rBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMDA4MTE1MzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2MzZDNiZTRlNjJlZGY2YTE3NmQ4YzE2NmI2MzdhMzU2MWFlMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmN9+iILDYk6ie8Uealf8XockZZ7
YHiLc4VKi2UalRzWf7/2g3ibPKoyAZLz2kQs4S/CNl/p8iUn4StJ1j3NZiIOzlmI
zi/atG7+kO3DnpLp2g2E8quDQc4OCBYONDEG5z9NspNBVIOKFNEutqM003i/mpXA
RoXByPdN4kmFMNdRSdo5KE+9GK07B9Sm/kZyfJ9nBO48ZYZXEaNToYapw+WEOZtf
c3YVRxEWVXrjAYgKO4COeaBktOm4xAKxJPGliAgEwmeD0M+1r4nx/WkaZfK3MJys
81zQ+avFKX1nyeoRLaHdg+hUtG9ackiJ/q3HoRkYFgtENhJOebuPgcF/cQIDAQAB
o4IDnTCCA5kwHQYDVR0OBBYEFGfD075OYu32oXbYwWa2N6NWGuNxMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvWjhQVHZrNWk3ZmFoZHRqQlpyWTNvMVlhNDNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBsQYIKwYBBQUHAQcBAf8EggGgMIIBnDCCAZgEAgABMIIB
kAMEAAn3FjAMAwQACfczAwQACfc0MAwDBAAJ9z8DBAEJ90ADBAAJ90MDBAAJ908w
DAMEAQn3UgMEAAn3VAMEAAn3VgMEAAn3WTAMAwQACfdbAwQACfdcAwQACfdgMAwD
BAEJ92YDBAAJ92gDBAEJ924DBAEJ93YwDAMEAAn3eQMEAAn3egMEAAn3fAMEAAn3
fjAMAwQCCfeEAwQACfeGAwQACfeKAwQACfeNAwQACfeRMAwDBAIJ95QDBAAJ95YD
BAAJ96gwDAMEAAn3qwMEAAn3rAMEAAn3rwMEAAn3sQMEAQn3tDAMAwQACfe3AwQB
Cfe4MAwDBAAJ97sDBAAJ97wDBAAJ978DBAAJ98EDBAAJ98QDBAAJ98oDBAAJ984D
BAAJ99QDBAAJ99owDAMEAQn33gMEAAn34AMEAAn34zAMAwQACfflAwQDCffgMAwD
BAAJ9+kDBAIJ9+gwDAMEAAn37QMEAAn37gMEAAn38DAMAwQACffzAwQACff0AwQA
Cff2MAwDBAAJ9/kDBAAJ9/wwDQYJKoZIhvcNAQELBQADggEBAAOZ2whVW4BKjRQJ
zt1/FDH1Vl2I3c4kCEyr9l7ti93JghQHX3kQ5yITNVs+en2wtUDK6Fss/4x/3/Gb
QojlGyjethgJQr4A8/N5GQvL1coubnXdGEZnY+CRa3oecHihTnezWSDs9mSS/hhJ
a0ITCw2JHusOGMvA5lyi8y/sAhx6CYcVCP8nN+zfSVz5GgM6jwY0nSa+f06D09c3
WviPOhFte9gEfWqpTE8dwz3yCZatLRy/a3ea0I0zEdg+ZTtEDRiJ2nNJoO4INJW/
+ALbKs8p9LaCe8hJVG8n2Kla8kPuyyTZ70P5mH1lHgSibs0Yg1vafUyB9S9nFrQj
FeKTc24=
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:30 2026 by rpki-client