Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/9UFCjwvnlJJjG68JGethucPJGLw.roa
File: 9UFCjwvnlJJjG68JGethucPJGLw.roa (raw, json)
Hash identifier: vdtUoC1PPT+CDy9qYM2cqMsseZadFfvPSe7mqhYFl4U=
Subject key identifier: F5:41:42:8F:0B:E7:94:92:63:1B:AF:09:19:EB:61:B9:C3:C9:18:BC
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01A1789D6BDC8A6E29E91C40F34A3E5D45B9
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/9UFCjwvnlJJjG68JGethucPJGLw.roa
Signing time: Mon 26 Oct 2026 14:29:05 +0000
ROA not before: Mon 26 Oct 2026 14:29:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207137
IP address blocks: 186.247.75.0/24 maxlen: 24
186.247.163.0/24 maxlen: 24
186.247.191.0/24 maxlen: 24
187.13.0.0/24 maxlen: 24
187.13.1.0/24 maxlen: 24
187.13.7.0/24 maxlen: 24
187.13.8.0/24 maxlen: 24
187.13.9.0/24 maxlen: 24
187.13.132.0/24 maxlen: 24
187.13.133.0/24 maxlen: 24
187.13.184.0/24 maxlen: 24
187.13.185.0/24 maxlen: 24
187.14.81.0/24 maxlen: 24
187.14.82.0/24 maxlen: 24
187.14.83.0/24 maxlen: 24
187.14.84.0/24 maxlen: 24
187.14.85.0/24 maxlen: 24
187.14.99.0/24 maxlen: 24
187.14.100.0/24 maxlen: 24
187.14.101.0/24 maxlen: 24
187.15.123.0/24 maxlen: 24
187.15.126.0/24 maxlen: 24
187.40.20.0/24 maxlen: 24
187.40.49.0/24 maxlen: 24
187.40.53.0/24 maxlen: 24
187.40.54.0/24 maxlen: 24
187.40.55.0/24 maxlen: 24
187.40.56.0/24 maxlen: 24
187.40.57.0/24 maxlen: 24
187.40.58.0/24 maxlen: 24
187.40.61.0/24 maxlen: 24
187.40.62.0/24 maxlen: 24
187.40.63.0/24 maxlen: 24
2a13:240::/48 maxlen: 48
2a13:240:1::/48 maxlen: 48
2a13:240:2::/48 maxlen: 48
2a13:240:3::/48 maxlen: 48
2a13:240:4::/48 maxlen: 48
2a13:240:5::/48 maxlen: 48
2a13:240:6::/48 maxlen: 48
2a13:240:7::/48 maxlen: 48
2a13:240:8::/48 maxlen: 48
2a13:240:9::/48 maxlen: 48
2a13:240:a::/48 maxlen: 48
2a13:240:b::/48 maxlen: 48
2a13:240:c::/48 maxlen: 48
2a13:240:d::/48 maxlen: 48
2a13:240:e::/48 maxlen: 48
2a13:240:f::/48 maxlen: 48
2a13:240:10::/48 maxlen: 48
2a13:240:1b00::/40 maxlen: 40
2a13:240:1c00::/40 maxlen: 40
2a13:240:2400::/40 maxlen: 40
2a13:240:2600::/40 maxlen: 40
2a13:240:2b00::/40 maxlen: 40
2a13:240:3000::/40 maxlen: 40
2a13:240:3500::/40 maxlen: 40
2a13:240:3700::/40 maxlen: 40
2a13:240:3d00::/40 maxlen: 40
2a13:240:4200::/40 maxlen: 40
2a13:240:4300::/40 maxlen: 40
2a13:240:4400::/40 maxlen: 40
2a13:240:4500::/40 maxlen: 40
2a13:240:4700::/40 maxlen: 40
2a13:240:4800::/40 maxlen: 40
2a13:240:4900::/40 maxlen: 40
2a13:240:4a00::/40 maxlen: 40
2a13:240:4b00::/40 maxlen: 40
2a13:240:4c00::/40 maxlen: 40
2a13:240:5000::/40 maxlen: 40
2a13:240:5c00::/40 maxlen: 40
2a13:240:6900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9d:6b:dc:8a:6e:29:e9:1c:40:f3:4a:3e:5d:45:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Oct 26 14:29:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f541428f0be79492631baf0919eb61b9c3c918bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:14:fe:1f:89:4f:2d:9d:f7:85:68:a0:12:
6a:b6:16:f6:93:f9:62:db:20:4f:bd:aa:ac:52:a8:
7d:cb:d1:d5:0c:d9:df:17:d4:25:c9:e3:29:1a:9a:
ec:45:78:7a:1a:e4:8b:d9:b2:c4:30:06:3e:9f:85:
23:9d:ac:eb:c1:29:7c:4f:22:a1:6c:e7:fb:91:f9:
54:48:7a:02:9d:39:2f:2d:f5:82:dc:f6:22:de:16:
25:f3:08:09:b2:45:6c:ef:8b:18:b3:3b:60:c6:2d:
79:33:59:23:b8:35:c2:e3:0c:24:76:bc:df:a8:a1:
d7:8b:31:90:68:3b:b5:d5:b3:6c:3b:ee:f3:6d:a5:
5e:0f:9e:8e:f9:3d:60:2f:31:14:a4:d4:ad:45:47:
e6:52:5e:6d:ff:d4:ae:7d:91:47:4b:c1:19:5e:bd:
d6:fe:a0:f0:37:5f:46:f5:1c:fb:01:e8:b3:9b:3d:
0b:a6:19:50:6a:d3:d5:68:7a:4b:ff:f9:93:c8:97:
02:d5:1c:b3:43:36:89:80:6e:a8:2d:13:29:5f:41:
95:3d:84:30:8d:f8:b7:fd:dd:7a:a8:a2:51:11:14:
1f:9a:f4:62:73:59:3a:08:7f:0e:5f:25:f5:b6:dd:
ff:a1:98:b6:ec:fb:ad:43:af:3f:0b:dd:db:3c:cc:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:42:8F:0B:E7:94:92:63:1B:AF:09:19:EB:61:B9:C3:C9:18:BC
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/9UFCjwvnlJJjG68JGethucPJGLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.75.0/24
186.247.163.0/24
186.247.191.0/24
187.13.0.0/23
187.13.7.0-187.13.9.255
187.13.132.0/23
187.13.184.0/23
187.14.81.0-187.14.85.255
187.14.99.0-187.14.101.255
187.15.123.0/24
187.15.126.0/24
187.40.20.0/24
187.40.49.0/24
187.40.53.0-187.40.58.255
187.40.61.0-187.40.63.255
IPv6:
2a13:240::-2a13:240:10:ffff:ffff:ffff:ffff:ffff
2a13:240:1b00::-2a13:240:1cff:ffff:ffff:ffff:ffff:ffff
2a13:240:2400::/40
2a13:240:2600::/40
2a13:240:2b00::/40
2a13:240:3000::/40
2a13:240:3500::/40
2a13:240:3700::/40
2a13:240:3d00::/40
2a13:240:4200::-2a13:240:45ff:ffff:ffff:ffff:ffff:ffff
2a13:240:4700::-2a13:240:4cff:ffff:ffff:ffff:ffff:ffff
2a13:240:5000::/40
2a13:240:5c00::/40
2a13:240:6900::/40
Signature Algorithm: sha256WithRSAEncryption
88:79:91:f0:69:f9:d3:03:b5:fc:2e:ff:1d:32:38:3f:20:14:
2e:4f:ca:b7:46:aa:51:e0:fc:8a:d7:cc:59:f7:d2:19:26:70:
d9:b4:8e:3d:5c:02:2c:51:45:7d:07:4b:75:5b:f9:3c:4f:90:
af:81:7f:aa:e2:61:82:6a:9b:8f:2f:c2:0c:e7:1a:fd:30:09:
6b:01:41:bc:81:41:bc:a1:d9:8f:d9:e5:fe:9f:27:c1:9d:21:
36:96:b9:11:bd:de:4b:2c:ad:f2:6b:e6:94:fd:e8:c1:9b:36:
22:2e:b1:a7:b1:ea:60:25:78:65:63:88:37:50:fe:93:45:98:
90:75:cf:aa:85:eb:67:12:39:2c:1a:4d:bc:19:fb:28:ed:43:
e6:a1:26:0a:6b:c3:24:f7:bf:3b:0a:87:1c:ca:36:9c:65:9a:
a3:f3:fb:29:57:c1:a2:ef:78:16:85:6b:2d:ca:87:ac:67:03:
5a:b0:f7:f5:cc:18:a2:07:15:cf:c4:6a:70:13:d1:1e:d9:bd:
d9:90:7b:bb:67:bf:50:b4:3a:f7:29:dd:ef:1c:4f:79:28:c9:
f0:66:7d:0c:2d:21:9f:58:c8:11:a3:bf:9e:d7:05:26:2c:00:
e0:9d:2a:c2:74:1d:f9:c4:cb:b1:2c:f2:a6:9a:b6:ba:58:93:
05:ec:1e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:19 2026 by rpki-client