Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/X72oY2zJ35rXp5JlphFb3hgWegw.roa
File: X72oY2zJ35rXp5JlphFb3hgWegw.roa (raw, json)
Hash identifier: Ts2HSx4LI6yiOBP5PRf0QkoRfSOzSfma+1N3fvw7kMc=
Subject key identifier: 5F:BD:A8:63:6C:C9:DF:9A:D7:A7:92:65:A6:11:5B:DE:18:16:7A:0C
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019CAEB9A0E57A76641732D194D7317A663F
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/X72oY2zJ35rXp5JlphFb3hgWegw.roa
Signing time: Mon 02 Mar 2026 13:25:26 +0000
ROA not before: Mon 02 Mar 2026 13:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47583
IP address blocks: 31.97.0.0/23 maxlen: 24
31.97.2.0/24 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.4.0/22 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.76.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.216.0/23 maxlen: 24
31.97.218.0/23 maxlen: 24
31.97.220.0/22 maxlen: 24
31.97.224.0/20 maxlen: 24
31.97.240.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
72.60.0.0/20 maxlen: 24
72.60.16.0/22 maxlen: 24
72.60.20.0/22 maxlen: 24
72.60.24.0/21 maxlen: 24
72.60.32.0/21 maxlen: 24
72.60.40.0/22 maxlen: 24
72.60.44.0/22 maxlen: 24
72.60.48.0/20 maxlen: 24
72.60.64.0/21 maxlen: 24
72.60.72.0/21 maxlen: 24
72.60.80.0/21 maxlen: 24
72.60.88.0/21 maxlen: 24
72.60.96.0/21 maxlen: 24
72.60.104.0/21 maxlen: 24
72.60.112.0/20 maxlen: 24
72.60.128.0/24 maxlen: 24
72.60.129.0/24 maxlen: 24
72.60.130.0/23 maxlen: 24
72.60.132.0/23 maxlen: 24
72.60.134.0/23 maxlen: 24
72.60.136.0/21 maxlen: 24
72.60.144.0/20 maxlen: 24
72.60.160.0/20 maxlen: 24
72.60.176.0/21 maxlen: 24
72.60.184.0/21 maxlen: 24
72.60.192.0/21 maxlen: 24
72.60.200.0/21 maxlen: 24
72.60.208.0/22 maxlen: 24
72.60.212.0/22 maxlen: 24
72.60.216.0/21 maxlen: 24
72.60.224.0/21 maxlen: 24
72.60.232.0/21 maxlen: 24
72.60.240.0/20 maxlen: 24
72.61.0.0/20 maxlen: 24
72.61.16.0/22 maxlen: 24
72.61.20.0/22 maxlen: 24
72.61.24.0/21 maxlen: 24
72.61.32.0/19 maxlen: 24
72.61.64.0/20 maxlen: 24
72.61.80.0/20 maxlen: 24
72.61.96.0/20 maxlen: 24
72.61.112.0/20 maxlen: 24
72.61.128.0/21 maxlen: 24
72.61.136.0/22 maxlen: 24
72.61.140.0/22 maxlen: 24
72.61.144.0/22 maxlen: 24
72.61.148.0/22 maxlen: 24
72.61.152.0/21 maxlen: 24
72.61.160.0/21 maxlen: 24
72.61.168.0/21 maxlen: 24
72.61.176.0/20 maxlen: 24
72.61.192.0/21 maxlen: 24
72.61.200.0/21 maxlen: 24
72.61.208.0/21 maxlen: 24
72.61.216.0/21 maxlen: 24
72.61.224.0/19 maxlen: 24
72.62.0.0/22 maxlen: 24
72.62.4.0/22 maxlen: 24
72.62.4.0/23 maxlen: 24
72.62.8.0/21 maxlen: 24
72.62.16.0/20 maxlen: 24
72.62.32.0/19 maxlen: 24
72.62.64.0/20 maxlen: 24
72.62.80.0/21 maxlen: 24
72.62.88.0/21 maxlen: 24
72.62.96.0/21 maxlen: 24
72.62.104.0/21 maxlen: 24
72.62.112.0/21 maxlen: 24
72.62.120.0/21 maxlen: 24
72.62.128.0/22 maxlen: 24
72.62.132.0/22 maxlen: 24
72.62.136.0/21 maxlen: 24
72.62.144.0/20 maxlen: 24
72.62.160.0/20 maxlen: 24
72.62.176.0/20 maxlen: 24
72.62.192.0/21 maxlen: 24
72.62.200.0/21 maxlen: 24
72.62.208.0/23 maxlen: 24
72.62.210.0/23 maxlen: 24
72.62.212.0/22 maxlen: 24
72.62.216.0/21 maxlen: 24
72.62.224.0/21 maxlen: 24
72.62.232.0/21 maxlen: 24
72.62.240.0/20 maxlen: 24
76.13.0.0/20 maxlen: 24
76.13.16.0/21 maxlen: 24
76.13.24.0/21 maxlen: 24
76.13.32.0/19 maxlen: 24
76.13.64.0/21 maxlen: 24
76.13.72.0/22 maxlen: 24
76.13.76.0/22 maxlen: 24
76.13.80.0/20 maxlen: 24
76.13.96.0/19 maxlen: 24
76.13.128.0/19 maxlen: 24
76.13.160.0/20 maxlen: 24
76.13.176.0/20 maxlen: 24
76.13.192.0/21 maxlen: 24
76.13.200.0/21 maxlen: 24
76.13.208.0/20 maxlen: 24
76.13.224.0/20 maxlen: 24
76.13.240.0/21 maxlen: 24
76.13.248.0/22 maxlen: 24
76.13.252.0/22 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
148.230.64.0/22 maxlen: 24
148.230.66.0/23 maxlen: 24
148.230.68.0/23 maxlen: 24
148.230.70.0/23 maxlen: 24
148.230.72.0/21 maxlen: 24
148.230.80.0/20 maxlen: 24
148.230.96.0/22 maxlen: 24
148.230.100.0/22 maxlen: 24
148.230.104.0/21 maxlen: 24
148.230.112.0/21 maxlen: 24
148.230.120.0/22 maxlen: 24
148.230.124.0/22 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
187.77.0.0/19 maxlen: 24
187.77.32.0/19 maxlen: 24
187.77.64.0/19 maxlen: 24
187.77.96.0/21 maxlen: 24
187.77.104.0/22 maxlen: 24
187.77.108.0/22 maxlen: 24
187.77.112.0/20 maxlen: 24
187.77.128.0/19 maxlen: 24
187.77.160.0/20 maxlen: 24
187.77.176.0/21 maxlen: 24
187.77.184.0/21 maxlen: 24
187.77.192.0/19 maxlen: 24
187.77.224.0/19 maxlen: 24
187.124.0.0/19 maxlen: 24
187.124.32.0/19 maxlen: 24
187.124.64.0/19 maxlen: 24
187.124.96.0/20 maxlen: 24
187.124.112.0/21 maxlen: 24
187.124.120.0/23 maxlen: 24
187.124.128.0/21 maxlen: 24
187.124.136.0/21 maxlen: 24
187.124.144.0/20 maxlen: 24
187.124.160.0/19 maxlen: 24
187.124.192.0/20 maxlen: 24
187.124.208.0/21 maxlen: 24
187.124.216.0/21 maxlen: 24
187.124.224.0/19 maxlen: 24
187.127.0.0/18 maxlen: 24
187.127.64.0/19 maxlen: 24
187.127.96.0/19 maxlen: 24
187.127.128.0/18 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:b9:a0:e5:7a:76:64:17:32:d1:94:d7:31:7a:66:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Mar 2 13:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fbda8636cc9df9ad7a79265a6115bde18167a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:1f:cb:bf:11:bf:53:eb:34:f8:ed:30:16:
e2:99:1e:3f:d5:dc:a3:b0:99:cc:78:3f:05:ef:5e:
0c:06:db:8a:83:9c:59:85:62:6f:43:ce:49:7e:44:
80:f8:db:ee:be:93:eb:ee:36:b1:2b:ae:be:b8:f2:
41:78:ad:ab:13:50:c6:67:d7:ea:af:70:8c:2a:37:
0e:94:01:c6:81:ac:5e:ee:a4:07:49:64:94:13:ff:
6c:b5:42:9e:96:3b:a7:83:bc:6f:d0:6c:02:11:b2:
71:21:e8:e0:10:a0:c1:03:c8:e5:71:e1:19:4c:21:
be:3e:a3:ce:bb:07:12:85:2e:3b:d1:2d:4f:6e:a1:
99:c7:3c:1c:63:da:7d:75:42:36:73:e6:b4:f2:8e:
c7:ae:e3:23:1b:8c:1f:2e:42:87:64:f3:72:56:5d:
96:30:4e:79:92:8f:dd:1a:36:b5:e9:33:b8:db:d2:
5f:25:ff:17:f5:af:0d:f0:a4:f2:3a:b5:30:3b:ea:
e9:30:2d:23:f3:6c:d5:6f:dd:6b:79:c2:ff:9b:35:
9d:a8:10:34:29:df:ac:d7:bb:38:f5:9e:1f:4c:fb:
06:8a:a1:75:ea:de:d3:10:32:0f:2b:69:cc:94:30:
bc:0f:96:c9:33:ec:9f:49:7f:d7:a4:bf:e2:7a:cd:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BD:A8:63:6C:C9:DF:9A:D7:A7:92:65:A6:11:5B:DE:18:16:7A:0C
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/X72oY2zJ35rXp5JlphFb3hgWegw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.97.0.0/16
69.62.64.0/18
72.60.0.0-72.62.255.255
76.13.0.0/16
103.199.184.0/22
148.222.52.0/22
148.230.64.0/18
168.231.64.0/18
187.77.0.0/16
187.124.0.0-187.124.121.255
187.124.128.0/17
187.127.0.0-187.127.191.255
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
58:2c:97:46:e9:29:12:1b:c4:ec:54:aa:39:da:84:64:b4:15:
b4:54:d9:c5:74:54:da:10:06:fc:a4:68:3e:0e:59:8b:76:3a:
c5:aa:37:69:47:63:38:34:de:6a:53:13:0c:c0:dc:ac:b6:fb:
58:94:b4:e0:ad:99:5a:f3:11:af:76:3f:89:de:29:46:2d:c3:
26:9b:d9:f6:f6:61:a2:e2:2d:6b:94:56:96:37:80:2a:dd:e4:
80:d5:a8:05:b8:45:13:3d:5d:f3:e8:7b:f4:c8:0b:57:65:e3:
5b:c0:d4:97:2e:a5:07:19:6b:51:45:ff:33:5f:50:67:76:25:
6f:66:d3:85:17:0d:59:6c:f7:03:a2:f0:2f:3e:04:94:1b:7c:
58:f3:a2:fc:c9:ea:e0:b2:ed:1e:4c:17:2d:2a:b6:1c:78:8f:
55:fc:07:91:1b:a2:9c:67:4d:8b:c2:25:37:15:38:10:84:c9:
67:7b:ca:6c:ea:25:ba:d2:78:cb:46:90:c3:6c:97:93:87:f5:
7e:00:ef:d9:11:b3:9a:e1:48:5d:f2:67:b8:0e:af:0b:16:0e:
d9:0e:be:c8:0f:3c:0a:c1:f6:05:38:95:93:bb:f0:62:c1:aa:
01:4d:5f:3c:94:2d:6f:86:78:20:d6:92:f4:c3:59:08:9d:aa:
03:f7:60:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:17:22 2026 by rpki-client