Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/wsrq6fWnAqeku8A_GZwiLZf-5K4.roa
File: wsrq6fWnAqeku8A_GZwiLZf-5K4.roa (raw, json)
Hash identifier: J+LxxVoqWb4DhzDjDoPAH244InAa96sW5M272Q6W0+c=
Subject key identifier: C2:CA:EA:E9:F5:A7:02:A7:A4:BB:C0:3F:19:9C:22:2D:97:FE:E4:AE
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01A06C0F59E680D50A822BADABB4015EB706
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/wsrq6fWnAqeku8A_GZwiLZf-5K4.roa
Signing time: Fri 04 Sep 2026 10:55:40 +0000
ROA not before: Fri 04 Sep 2026 10:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207137
IP address blocks: 186.247.163.0/24 maxlen: 24
186.247.191.0/24 maxlen: 24
187.13.0.0/24 maxlen: 24
187.13.1.0/24 maxlen: 24
187.13.7.0/24 maxlen: 24
187.13.8.0/24 maxlen: 24
187.13.9.0/24 maxlen: 24
187.13.132.0/24 maxlen: 24
187.13.133.0/24 maxlen: 24
187.13.184.0/24 maxlen: 24
187.13.185.0/24 maxlen: 24
187.14.81.0/24 maxlen: 24
187.14.82.0/24 maxlen: 24
187.14.83.0/24 maxlen: 24
187.14.84.0/24 maxlen: 24
187.14.85.0/24 maxlen: 24
187.14.99.0/24 maxlen: 24
187.14.100.0/24 maxlen: 24
187.14.101.0/24 maxlen: 24
187.15.123.0/24 maxlen: 24
187.15.126.0/24 maxlen: 24
187.40.49.0/24 maxlen: 24
187.40.53.0/24 maxlen: 24
187.40.54.0/24 maxlen: 24
187.40.55.0/24 maxlen: 24
187.40.56.0/24 maxlen: 24
187.40.57.0/24 maxlen: 24
187.40.58.0/24 maxlen: 24
187.40.61.0/24 maxlen: 24
187.40.62.0/24 maxlen: 24
187.40.63.0/24 maxlen: 24
2a13:240::/48 maxlen: 48
2a13:240:1::/48 maxlen: 48
2a13:240:2::/48 maxlen: 48
2a13:240:3::/48 maxlen: 48
2a13:240:4::/48 maxlen: 48
2a13:240:5::/48 maxlen: 48
2a13:240:6::/48 maxlen: 48
2a13:240:7::/48 maxlen: 48
2a13:240:8::/48 maxlen: 48
2a13:240:9::/48 maxlen: 48
2a13:240:a::/48 maxlen: 48
2a13:240:b::/48 maxlen: 48
2a13:240:c::/48 maxlen: 48
2a13:240:d::/48 maxlen: 48
2a13:240:e::/48 maxlen: 48
2a13:240:f::/48 maxlen: 48
2a13:240:10::/48 maxlen: 48
2a13:240:1b00::/40 maxlen: 40
2a13:240:1c00::/40 maxlen: 40
2a13:240:2400::/40 maxlen: 40
2a13:240:2600::/40 maxlen: 40
2a13:240:2b00::/40 maxlen: 40
2a13:240:3000::/40 maxlen: 40
2a13:240:3500::/40 maxlen: 40
2a13:240:3700::/40 maxlen: 40
2a13:240:3d00::/40 maxlen: 40
2a13:240:4200::/40 maxlen: 40
2a13:240:4300::/40 maxlen: 40
2a13:240:4400::/40 maxlen: 40
2a13:240:4500::/40 maxlen: 40
2a13:240:4700::/40 maxlen: 40
2a13:240:4800::/40 maxlen: 40
2a13:240:4900::/40 maxlen: 40
2a13:240:4a00::/40 maxlen: 40
2a13:240:4b00::/40 maxlen: 40
2a13:240:4c00::/40 maxlen: 40
2a13:240:5000::/40 maxlen: 40
2a13:240:5c00::/40 maxlen: 40
2a13:240:6900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:0f:59:e6:80:d5:0a:82:2b:ad:ab:b4:01:5e:b7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Sep 4 10:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2caeae9f5a702a7a4bbc03f199c222d97fee4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:8d:8e:ad:2c:1c:58:46:5b:49:89:57:99:
d5:a2:68:8a:41:f8:86:78:35:ea:dd:99:28:fe:2c:
34:13:af:49:6c:14:db:86:68:bf:80:1b:1f:5f:bb:
e8:d2:27:6e:f4:e7:ad:eb:d0:e8:74:f1:d5:73:b4:
a8:ee:bb:f2:15:0b:60:f2:11:20:1d:a0:9d:d1:60:
e0:ee:c6:20:55:e3:6d:35:4e:ab:4b:f5:53:32:dc:
37:fd:f9:1a:f9:94:1c:bc:a9:13:d9:80:80:2d:ac:
1e:5e:78:1a:af:99:fe:56:f0:2e:29:c5:ce:35:18:
a8:56:e8:9a:78:1b:36:a0:7d:94:05:6a:21:98:30:
a8:05:55:19:76:b1:a9:38:54:0f:ce:6e:1b:36:ca:
e1:8f:84:e4:f7:9a:e8:b8:6b:4f:ba:79:ef:f0:fd:
eb:64:29:c7:a2:f1:9e:7f:49:5c:73:4a:b7:0e:e6:
6f:dc:a6:37:d2:42:57:5b:e0:86:20:5e:f2:64:df:
90:b9:7e:70:1b:5d:8d:e9:2d:6c:3a:d9:e7:6f:df:
b6:92:65:79:4e:4f:63:2b:df:9b:c1:16:60:16:d9:
7e:c2:c0:3c:19:e9:d6:e3:21:e1:52:ce:ec:28:a3:
4e:b3:51:53:10:e1:47:06:6b:3f:9f:3e:ab:13:ef:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CA:EA:E9:F5:A7:02:A7:A4:BB:C0:3F:19:9C:22:2D:97:FE:E4:AE
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/wsrq6fWnAqeku8A_GZwiLZf-5K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.163.0/24
186.247.191.0/24
187.13.0.0/23
187.13.7.0-187.13.9.255
187.13.132.0/23
187.13.184.0/23
187.14.81.0-187.14.85.255
187.14.99.0-187.14.101.255
187.15.123.0/24
187.15.126.0/24
187.40.49.0/24
187.40.53.0-187.40.58.255
187.40.61.0-187.40.63.255
IPv6:
2a13:240::-2a13:240:10:ffff:ffff:ffff:ffff:ffff
2a13:240:1b00::-2a13:240:1cff:ffff:ffff:ffff:ffff:ffff
2a13:240:2400::/40
2a13:240:2600::/40
2a13:240:2b00::/40
2a13:240:3000::/40
2a13:240:3500::/40
2a13:240:3700::/40
2a13:240:3d00::/40
2a13:240:4200::-2a13:240:45ff:ffff:ffff:ffff:ffff:ffff
2a13:240:4700::-2a13:240:4cff:ffff:ffff:ffff:ffff:ffff
2a13:240:5000::/40
2a13:240:5c00::/40
2a13:240:6900::/40
Signature Algorithm: sha256WithRSAEncryption
0a:99:38:a2:31:ee:5a:18:6e:50:af:aa:ca:71:3f:e3:56:b4:
bb:2d:96:2e:a1:21:e1:1b:5f:4d:91:50:bd:fa:72:4e:be:ef:
c2:ff:d2:63:08:e4:d9:50:b4:26:e2:3a:69:63:a1:87:ec:45:
8e:f6:8e:f7:a1:d4:80:aa:2e:f9:c3:0d:2b:c8:ea:c1:e0:72:
70:e6:0d:d6:73:97:e1:7d:f4:40:c4:5e:5f:97:49:e2:2d:95:
5d:af:d7:64:34:bf:48:80:06:35:16:59:e8:ff:ab:ce:59:f9:
a5:cc:e0:05:13:b7:03:7e:47:4a:1d:ca:fa:5c:90:ac:aa:53:
ce:5a:75:0e:b0:50:3f:19:2f:21:fa:b8:bf:47:f1:3d:7b:c0:
e2:e4:9d:32:8b:d9:10:85:62:4e:19:17:31:fd:fd:e4:6f:ba:
81:6a:2b:a9:18:46:dc:55:b7:a7:e4:97:4b:df:70:5a:65:dd:
dd:ae:38:49:27:92:2c:60:a3:f1:d1:4e:a7:2c:95:ef:c4:f3:
fb:72:05:14:01:2e:00:a7:de:20:6b:9a:2c:c0:49:fe:65:52:
55:34:4e:13:e8:31:14:58:eb:90:d2:97:72:75:a4:8f:87:c9:
ca:cb:1b:57:84:7b:53:3f:89:05:dc:f7:cc:d7:0d:45:a3:f6:
66:49:72:7d
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISAaBsD1nmgNUKgiutq7QBXrcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYwOTA0MTA1NTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmNhZWFlOWY1YTcwMmE3YTRiYmMwM2YxOTljMjIyZDk3ZmVlNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptWNjq0sHFhGW0mJV5nVomiKQfiG
eDXq3Zko/iw0E69JbBTbhmi/gBsfX7vo0idu9Oet69DodPHVc7So7rvyFQtg8hEg
HaCd0WDg7sYgVeNtNU6rS/VTMtw3/fka+ZQcvKkT2YCALaweXngar5n+VvAuKcXO
NRioVuiaeBs2oH2UBWohmDCoBVUZdrGpOFQPzm4bNsrhj4Tk95rouGtPunnv8P3r
ZCnHovGef0lcc0q3DuZv3KY30kJXW+CGIF7yZN+QuX5wG12N6S1sOtnnb9+2kmV5
Tk9jK9+bwRZgFtl+wsA8GenW4yHhUs7sKKNOs1FTEOFHBms/nz6rE+8NTQIDAQAB
o4IDITCCAx0wHQYDVR0OBBYEFMLK6un1pwKnpLvAPxmcIi2X/uSuMB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvd3NycTZmV25BcWVrdThBX0dad2lMWmYtNUs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDB8BAIAATB2AwQA
uvejAwQAuve/AwQBuw0AMAwDBAC7DQcDBAG7DQgDBAG7DYQDBAG7DbgwDAMEALsO
UQMEAbsOVDAMAwQAuw5jAwQBuw5kAwQAuw97AwQAuw9+AwQAuygxMAwDBAC7KDUD
BAC7KDowDAMEALsoPQMEBrsoADCBnwQCAAIwgZgwEAMFBioTAkADBwAqEwJAABAw
EAMGACoTAkAbAwYAKhMCQBwDBgAqEwJAJAMGACoTAkAmAwYAKhMCQCsDBgAqEwJA
MAMGACoTAkA1AwYAKhMCQDcDBgAqEwJAPTAQAwYBKhMCQEIDBgEqEwJARDAQAwYA
KhMCQEcDBgAqEwJATAMGACoTAkBQAwYAKhMCQFwDBgAqEwJAaTANBgkqhkiG9w0B
AQsFAAOCAQEACpk4ojHuWhhuUK+qynE/41a0uy2WLqEh4RtfTZFQvfpyTr7vwv/S
Ywjk2VC0JuI6aWOhh+xFjvaO96HUgKou+cMNK8jqweBycOYN1nOX4X30QMReX5dJ
4i2VXa/XZDS/SIAGNRZZ6P+rzln5pczgBRO3A35HSh3K+lyQrKpTzlp1DrBQPxkv
Ifq4v0fxPXvA4uSdMovZEIViThkXMf395G+6gWorqRhG3FW3p+SXS99wWmXd3a44
SSeSLGCj8dFOpyyV78Tz+3IFFAEuAKfeIGuaLMBJ/mVSVTROE+gxFFjrkNKXcnWk
j4fJyssbV4R7Uz+JBdz3zNcNRaP2ZklyfQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:58:13 2026 by rpki-client