Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/YmVY7oo1H3sGG9FmLOkQQeIk6Dk.roa
File: YmVY7oo1H3sGG9FmLOkQQeIk6Dk.roa (raw, json)
Hash identifier: Xyc9Bn1xcz5Vwdiy76RPK2cwcVQdXnxhuij3Z9jTrnw=
Subject key identifier: 62:65:58:EE:8A:35:1F:7B:06:1B:D1:66:2C:E9:10:41:E2:24:E8:39
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01A06C0F5965FF100951BE1CE32FD9D618BF
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/YmVY7oo1H3sGG9FmLOkQQeIk6Dk.roa
Signing time: Fri 04 Sep 2026 10:55:40 +0000
ROA not before: Fri 04 Sep 2026 10:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147049
IP address blocks: 185.135.45.0/24 maxlen: 24
186.247.37.0/24 maxlen: 24
186.247.38.0/24 maxlen: 24
186.247.39.0/24 maxlen: 24
186.247.40.0/24 maxlen: 24
186.247.41.0/24 maxlen: 24
186.247.47.0/24 maxlen: 24
186.247.175.0/24 maxlen: 24
187.13.6.0/24 maxlen: 24
187.13.10.0/24 maxlen: 24
187.13.243.0/24 maxlen: 24
187.13.244.0/24 maxlen: 24
187.13.252.0/24 maxlen: 24
187.13.253.0/24 maxlen: 24
187.14.57.0/24 maxlen: 24
187.14.60.0/24 maxlen: 24
187.14.61.0/24 maxlen: 24
187.14.62.0/24 maxlen: 24
187.14.63.0/24 maxlen: 24
187.14.87.0/24 maxlen: 24
187.14.88.0/24 maxlen: 24
187.14.248.0/24 maxlen: 24
187.14.249.0/24 maxlen: 24
187.15.92.0/24 maxlen: 24
187.15.93.0/24 maxlen: 24
187.15.94.0/24 maxlen: 24
187.15.95.0/24 maxlen: 24
187.15.96.0/24 maxlen: 24
187.15.98.0/24 maxlen: 24
187.15.99.0/24 maxlen: 24
187.15.103.0/24 maxlen: 24
187.15.107.0/24 maxlen: 24
187.15.108.0/24 maxlen: 24
187.15.121.0/24 maxlen: 24
187.15.122.0/24 maxlen: 24
187.15.141.0/24 maxlen: 24
187.15.142.0/24 maxlen: 24
187.15.153.0/24 maxlen: 24
187.15.154.0/24 maxlen: 24
187.15.155.0/24 maxlen: 24
187.40.227.0/24 maxlen: 24
187.40.232.0/24 maxlen: 24
187.40.234.0/24 maxlen: 24
187.40.235.0/24 maxlen: 24
187.40.240.0/24 maxlen: 24
2a13:240::/48 maxlen: 48
2a13:240:1500::/40 maxlen: 40
2a13:240:1600::/40 maxlen: 40
2a13:240:1700::/40 maxlen: 40
2a13:240:2100::/40 maxlen: 40
2a13:240:2900::/40 maxlen: 40
2a13:240:2c00::/40 maxlen: 40
2a13:240:3100::/40 maxlen: 40
2a13:240:3300::/40 maxlen: 40
2a13:240:3800::/40 maxlen: 40
2a13:240:4000::/40 maxlen: 40
2a13:240:5800::/40 maxlen: 40
2a13:240:5b00::/40 maxlen: 40
2a13:240:6300::/40 maxlen: 40
2a13:240:6e00::/40 maxlen: 40
2a13:240:7100::/40 maxlen: 40
2a13:240:7200::/40 maxlen: 40
2a13:240:7a00::/40 maxlen: 40
2a13:240:7c00::/40 maxlen: 40
2a13:240:8700::/40 maxlen: 40
2a13:240:8c00::/40 maxlen: 40
2a13:240:8d00::/40 maxlen: 40
2a13:240:9100::/40 maxlen: 40
2a13:240:9200::/40 maxlen: 40
2a13:240:9300::/40 maxlen: 40
2a13:240:b600::/40 maxlen: 40
2a13:240:b700::/40 maxlen: 40
2a13:240:b800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:0f:59:65:ff:10:09:51:be:1c:e3:2f:d9:d6:18:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Sep 4 10:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=626558ee8a351f7b061bd1662ce91041e224e839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:23:d9:e0:bb:cd:24:32:69:ff:e7:59:72:
8c:21:d4:fe:fe:27:87:a1:ea:fa:7e:5e:4e:6b:b1:
58:5f:2b:0d:2d:4b:94:da:73:fe:33:99:2b:76:93:
4f:af:c1:ac:b5:8e:ed:cd:ea:4a:f8:38:91:7b:01:
a4:53:ec:06:f9:ad:66:a9:ac:4a:02:2a:79:38:82:
20:50:56:92:a9:ba:1f:5c:45:ec:b0:fe:e8:93:4e:
be:0e:fa:d0:d2:e7:aa:79:ff:a2:14:6d:66:0a:54:
4c:68:0e:cb:7a:20:c0:e1:0b:19:53:9f:8d:b2:2a:
61:d9:0d:34:3b:6f:0b:57:93:06:1a:d8:b1:80:37:
cf:96:32:1b:3d:54:9a:7e:6e:cb:aa:48:5a:fa:f2:
41:05:8b:00:c0:0d:ea:19:ee:fa:35:38:1c:fd:1c:
04:84:88:7c:51:f7:02:0c:74:14:17:13:1f:2e:c7:
9a:3b:a1:1a:9d:58:cc:2e:93:ca:35:aa:7e:06:85:
0b:18:00:77:b8:5d:7a:aa:3a:e6:4a:48:7d:a1:17:
b6:5f:a6:01:d4:22:c5:d0:49:f7:5a:3a:e2:19:54:
a2:0c:51:56:bf:bb:59:0a:e5:dd:61:7d:9e:1e:ae:
14:ff:00:ab:74:24:e7:85:2b:11:e1:bc:14:45:b6:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:65:58:EE:8A:35:1F:7B:06:1B:D1:66:2C:E9:10:41:E2:24:E8:39
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/YmVY7oo1H3sGG9FmLOkQQeIk6Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.45.0/24
186.247.37.0-186.247.41.255
186.247.47.0/24
186.247.175.0/24
187.13.6.0/24
187.13.10.0/24
187.13.243.0-187.13.244.255
187.13.252.0/23
187.14.57.0/24
187.14.60.0/22
187.14.87.0-187.14.88.255
187.14.248.0/23
187.15.92.0-187.15.96.255
187.15.98.0/23
187.15.103.0/24
187.15.107.0-187.15.108.255
187.15.121.0-187.15.122.255
187.15.141.0-187.15.142.255
187.15.153.0-187.15.155.255
187.40.227.0/24
187.40.232.0/24
187.40.234.0/23
187.40.240.0/24
IPv6:
2a13:240::/48
2a13:240:1500::-2a13:240:17ff:ffff:ffff:ffff:ffff:ffff
2a13:240:2100::/40
2a13:240:2900::/40
2a13:240:2c00::/40
2a13:240:3100::/40
2a13:240:3300::/40
2a13:240:3800::/40
2a13:240:4000::/40
2a13:240:5800::/40
2a13:240:5b00::/40
2a13:240:6300::/40
2a13:240:6e00::/40
2a13:240:7100::-2a13:240:72ff:ffff:ffff:ffff:ffff:ffff
2a13:240:7a00::/40
2a13:240:7c00::/40
2a13:240:8700::/40
2a13:240:8c00::/39
2a13:240:9100::-2a13:240:93ff:ffff:ffff:ffff:ffff:ffff
2a13:240:b600::-2a13:240:b8ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
38:8f:49:ec:62:de:c8:c9:e5:fb:e9:1b:cd:30:90:a2:64:44:
41:0d:bf:77:5f:d6:df:5d:35:16:95:6f:7d:00:eb:33:ad:a1:
ed:8b:8b:6c:b0:ac:4f:37:24:ad:f2:8a:b6:46:55:e9:eb:8d:
d2:23:49:49:76:69:14:c4:2c:10:a7:c5:bc:f4:06:83:79:77:
ad:14:6d:5b:23:d7:ac:05:85:2b:0d:57:ac:62:fb:25:44:bc:
b1:64:eb:11:a0:a2:41:67:ab:b7:df:f8:e7:2e:2b:8d:b9:35:
75:a3:10:11:39:dc:72:5c:84:9e:99:08:38:6b:70:76:22:f7:
1f:84:4e:b6:79:8a:eb:ac:3e:55:3f:71:43:97:fe:8c:f8:bf:
35:17:24:7d:9d:34:5d:8b:1e:46:93:f4:61:8e:62:75:a5:55:
ea:0e:92:78:a0:43:af:49:1d:7a:2f:c5:cc:15:65:0b:c8:c1:
1e:d2:6f:23:81:be:88:ba:06:92:d9:7b:12:60:ff:37:4f:e5:
7e:eb:d9:62:12:89:d2:cb:fc:f2:3a:a8:bc:11:6a:62:a7:64:
1d:1a:03:17:7c:db:58:93:e0:44:8d:ed:5b:80:09:e2:7a:1a:
fc:36:02:d4:69:58:9d:5b:01:8f:f7:6c:76:e2:52:5a:1b:02:
ea:d1:18:95
-----BEGIN CERTIFICATE-----
MIIGnDCCBYSgAwIBAgISAaBsD1ll/xAJUb4c4y/Z1hi/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYwOTA0MTA1NTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjY1NThlZThhMzUxZjdiMDYxYmQxNjYyY2U5MTA0MWUyMjRlODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMQj2eC7zSQyaf/nWXKMIdT+/ieH
oer6fl5Oa7FYXysNLUuU2nP+M5krdpNPr8GstY7tzepK+DiRewGkU+wG+a1mqaxK
Aip5OIIgUFaSqbofXEXssP7ok06+DvrQ0ueqef+iFG1mClRMaA7LeiDA4QsZU5+N
siph2Q00O28LV5MGGtixgDfPljIbPVSafm7Lqkha+vJBBYsAwA3qGe76NTgc/RwE
hIh8UfcCDHQUFxMfLseaO6EanVjMLpPKNap+BoULGAB3uF16qjrmSkh9oRe2X6YB
1CLF0En3WjriGVSiDFFWv7tZCuXdYX2eHq4U/wCrdCTnhSsR4bwURbYzBwIDAQAB
o4IDqDCCA6QwHQYDVR0OBBYEFGJlWO6KNR97BhvRZizpEEHiJOg5MB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvWW1WWTdvbzFIM3NHRzlGbUxPa1FRZUlrNkRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBvAYIKwYBBQUHAQcBAf8EggGrMIIBpzCB0QQCAAEwgcoD
BAC5hy0wDAMEALr3JQMEAbr3KAMEALr3LwMEALr3rwMEALsNBgMEALsNCjAMAwQA
uw3zAwQAuw30AwQBuw38AwQAuw45AwQCuw48MAwDBAC7DlcDBAC7DlgDBAG7Dvgw
DAMEArsPXAMEALsPYAMEAbsPYgMEALsPZzAMAwQAuw9rAwQAuw9sMAwDBAC7D3kD
BAC7D3owDAMEALsPjQMEALsPjjAMAwQAuw+ZAwQCuw+YAwQAuyjjAwQAuyjoAwQB
uyjqAwQAuyjwMIHQBAIAAjCByQMHACoTAkAAADAQAwYAKhMCQBUDBgMqEwJAEAMG
ACoTAkAhAwYAKhMCQCkDBgAqEwJALAMGACoTAkAxAwYAKhMCQDMDBgAqEwJAOAMG
ACoTAkBAAwYAKhMCQFgDBgAqEwJAWwMGACoTAkBjAwYAKhMCQG4wEAMGACoTAkBx
AwYAKhMCQHIDBgAqEwJAegMGACoTAkB8AwYAKhMCQIcDBgEqEwJAjDAQAwYAKhMC
QJEDBgIqEwJAkDAQAwYBKhMCQLYDBgAqEwJAuDANBgkqhkiG9w0BAQsFAAOCAQEA
OI9J7GLeyMnl++kbzTCQomREQQ2/d1/W3101FpVvfQDrM62h7YuLbLCsTzckrfKK
tkZV6euN0iNJSXZpFMQsEKfFvPQGg3l3rRRtWyPXrAWFKw1XrGL7JUS8sWTrEaCi
QWert9/45y4rjbk1daMQETncclyEnpkIOGtwdiL3H4ROtnmK66w+VT9xQ5f+jPi/
NRckfZ00XYseRpP0YY5idaVV6g6SeKBDr0kdei/FzBVlC8jBHtJvI4G+iLoGktl7
EmD/N0/lfuvZYhKJ0sv88jqovBFqYqdkHRoDF3zbWJPgRI3tW4AJ4noa/DYC1GlY
nVsBj/dsduJSWhsC6tEYlQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:37 2026 by rpki-client